Keystone has particular ordering requirements for setting up
multiple instances and distributing fernet keys.
Run the infra jobs for the os_keystone role as these test
three keystone containers simultaneously.
Change-Id: Ia454d95a48dff1fa1856137df74a548d9c7d8a11
These jobs simply switched the webserver from nginx to apache using
a tox environment with keystone_web_server=apache. The integrated
tests now only support apache as the keystone web server so these
jobs are now redundant and are not providing any additional value.
Change-Id: I125bfc478a644ae03fc32be2609198f425132356
We've created integrated linters check job a while back and it's successfully
working for several releases. At the moment we experience difficulties
with future maintenance of the linters check from the openstack-ansible-tests
repo. So instead of fixing current one, we replace it with modern version of
the test.
Change-Id: I22c4f987aedba049a953c955395b06803de37c27
Since we copy all release notes to the integrated repo there is not need
in publishing release notes for each repository. We should only verify their
validity and linting.
Change-Id: Ic9fc2de8ca4cd8a3dc89ce8b9f4eda4bf30594ae
Add noqa where requried http://paste.openstack.org/show/798685/
Also remove centos-7 jobs as these are not supported for Victoria and
are blocking further patches merging.
Change-Id: I92f9131daf23f5cd38054a0b7c385344994a2aa0
uw_apache test was runned against xenial, which is not currrently
supported, due to which job was updated to run on bionic nodeset.
We also need to enable proxy_uwsgi for debian based distros.
Co-Authored-By: Guilherme Steinmuller Pimentel <gsteinmuller@vexxhost.com>
Co-Authored-By: Marc Gariépy <gariepy.marc@gmail.com>
Change-Id: Ibff3aa2a1ac1bbf2493aaf2419ee1e4dd763934c
In order to do a more complete verification of any patches,
we add a full uncontainerised OpenStack deployment to the
functional testing using the integrated repo. This replaces
the previous role functional test mechanism.
Any additional role tests are left as-is. They will require
some extra implementation in the integrated build before they
can be transferred.
Depends-On: https://review.openstack.org/647840
Depends-On: https://review.openstack.org/648502
Depends-On: https://review.openstack.org/648551
Change-Id: I6889cb789568fd7d60623cc0be70a6b3375bcece
Roles are self contained so we know if a job should be passing or not.
The distro package jobs are fairly straightforward so it's good to know
that everything is working as it should and not ignore problems because
a job is non-voting.
Change-Id: Id8d1fbfd0f5cd1c51d183c20810db17a5e8ae8a7
Now that we're using the general templates, we can slim down
the role test definitions. We can also remove tests which are
not being watched, or which are fundamentally broken. With
this we can also remove unused scripts/plays.
We do the following:
1. We remove the 'ssl' job, given that the person working on
that is no longer doing so, and no-one else has picked up
the work.
2. We remove the 'upgrade' job, given that it's been broken
all cycle due to the way the job executes and we need to
regroup to figure out another way to do it.
3. We promote the distro_install jobs, given that they are
all now working.
4. We promote the centos apache/uwsgi functional test, given
that it is working consistently.
Change-Id: I67e0d8f4ab52449a80adb5c479faefbc83617025
This is a mechanically generated patch to switch the documentation
jobs to use the new PTI versions of the jobs as part of the
python3-first goal.
See the python3-first goal document for details:
https://governance.openstack.org/tc/goals/stein/python3-first.html
Change-Id: I90e3ef7ade9dbb10161214a108d07349250b05ab
Story: #2002586
Task: #24319
This is a mechanically generated patch to complete step 1 of moving
the zuul job settings out of project-config and into each project
repository.
Because there will be a separate patch on each branch, the branch
specifiers for branch-specific jobs have been removed.
Because this patch is generated by a script, there may be some
cosmetic changes to the layout of the YAML file(s) as the contents are
normalized.
See the python3-first goal document for details:
https://governance.openstack.org/tc/goals/stein/python3-first.html
Change-Id: If404f74264f79135bef426896bb240497f864b89
Story: #2002586
Task: #24319
Given that Xenial is not providing packages for Rocky, we should prepare
for replacing Xenial distribution jobs with Bionic.
Change-Id: Ie28d2ebd9abdfb6eabc8b5ff389f399cc60e4a31
Depends-On: https://review.openstack.org/#/c/591966/
In order to have more centralized configuration, switch the role
to use the project-template instead.
Depends-On: I2608fc5a0230436cebb0e6c579deae7bd4d7c209
Change-Id: Ib71415eb3476437d406c8eabc602d7049c54f3d7
The extra jobs that we have are not something that is needed, we simply can
set the jobs to non-voting in the project definition and avoid having non
voting jobs.
Change-Id: I0ecdfe438c94eed6d47ac1d73f6f648899980c69
Distributions provide packages for the OpenStack services so we add
support for using these instead of the pip ones.
Depends-On: I5a78e2120e596d36629b4ba978b2b5df76b149b0
Depends-On: Ib64dcbc960df7d369d202ce8cf7bdc29b3ee0e0a
Depends-On: Id9dd2dea146709414ab9ce8d439f1587e6776fd4
Depends-On: I2ba89e25c0010c9a5b515a3d0c9c731b30876e74
Depends-On: I0442b0aa94c3d0882d1118ad0c824d123bd21c88
Change-Id: I26848678dd07a409ef3e159cffb4ba6f0a228ab4
Implements: blueprint openstack-distribution-packages
There isn't a need to run non-voting jobs in gate, as it ends up just
wasting CI resources. Results can be obtained from the check pipeline
results.
Change-Id: Id24b1c6b5f3f8c26e4bbbf155f196029bed4141e
Signed-off-by: Paul Belanger <pabelanger@redhat.com>
Zuul no longer requires the project-name for in-repo configuration.
Omitting it makes forking or renaming projects easier.
Change-Id: Id53fc5405238e2c51988d4e233017efae9edaea6
When 'keystone_galera_use_ssl' is True, use an encrypted connection to
the database using either a self-signed or user-provided CA certificate.
A new non-voting test has been added to verify that the role remains
functional when enabling SSL features.
Partial-Bug: 1667789
Change-Id: I0f8c62412e088ebb9b0ed21f7ce707b14f69d62a
Depends-On: I95cc994df5118fce7ce588fc0bff979bc283a6f3
Nginx with uWSGI has been the default keystone deployment since Pike.
The uw_nginx jobs should be no different than the functional jobs at
this point, but they have been incorrectly using the uw_apache tox
environment anyway.
Change-Id: I73c01b9899819da96f51744d5fba12a05bb7ec2c
Initially the intent for adding this was to better test
any patches for roles together before they merge, but it
has had the unintended side-effect of causing patches to
take much longer to merge (because they all get lined up
in a single queue, rather than independent queues) and
a lot more infra resources are used (because a patch
that fails at the top of the queue will result in all
subsequent patches restarting all their tests).
As discussed in the channel, we'd prefer to revert back
to the previous independent queue method of testing. It
has served us well.
Change-Id: I87a9303a9f55d8089b4ec2737abd786db3a35995
Currently the linters test is in the project-config
repository, but those are meant to be used for standard
jobs which do not require any repository other than the
one given. Our lint tests use the 'openstack-ansible-tests'
repository, so we should rather use our own job definition.
Change-Id: Id6753fb3471d66f792555db2b1555e60c9500248
Depends-On: I0391ec310c4eede436011a48490e3c524c8ddf4d
This patch implements an initial set of jobs intended to match
the current job execution method. It does not intend to improve
how the jobs are executed - only to replicate what is currently
in openstack-infra/openstack-zuul-jobs and provide the platform
to iterate on.
Change-Id: Ic04b7e658e7755c8e66e47a84442a5f3c791fa78
Jonathan Rosser