Add FIPS testing job

Code Issues Proposed changes

Adds a new check job to test FIPS compatibility with Manila
upstream CI. We currently only have means to enable FIPS on CentOS
systems. Ubuntu support will come in a later effort.
Starting from CentOS 8, there is no candidate for a quagga package
installation. Our IPv6 setup currently depends on quagga. If we
keep IPv6 enabled, the job won't even start. For now, the job will
only set up IPv4 and run the tests for this specific IP version.
Co-authored-by: Ashley Rodriguez <ashrod98@gmail.com>
Co-authored-by: Vida Haririan <vhariria@redhat.com>
Change-Id: Ica6445c582ceae4c5b9bbce48702c74710e6056f

This commit is contained in:

silvacarloss

2022年06月29日 15:46:45 -03:00

parent b52f1abc70

commit e21dbfd23d

3 changed files with 37 additions and 0 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download Patch File Download Diff File Expand all files Collapse all files

28
zuul.d/manila-tempest-jobs.yaml

View File

@@ -620,6 +620,34 @@

# read-only access rules not supported

enable_ro_access_level_for_protocols:""

- job:

name:manila-tempest-plugin-lvm-fips-base

parent:manila-tempest-plugin-lvm-base

nodeset:devstack-single-node-centos-9-stream

description:|

Run LVM DHSS false tests for manila project using FIPS.

pre-run:

- playbooks/enable-fips.yaml

vars:

nslookup_target:'opendev.org'

devstack_localrc:

MANILA_SETUP_IPV6:false

NEUTRON_CREATE_INITIAL_NETWORKS:true

IP_VERSION:4

configure_swap_size:4096

devstack_local_conf:

test-config:

"$TEMPEST_CONFIG":

validation:

ssh_key_type:'ecdsa'

share:

run_ipv6_tests:false

- job:

name:manila-tempest-plugin-lvm-fips

parent:manila-tempest-plugin-lvm-fips-base

branches:^(?!stable/(yoga|xena|wallaby|victoria|ussuri)).*$

- project-template:

name:manila-tempest-plugin-jobs-using-service-image

description:|

6
zuul.d/manila-tempest-stable-jobs.yaml

View File

@@ -62,6 +62,12 @@

branches:*manila_tempest_image_pinned_branches

vars:*manila_tempest_image_pinned_vars

- job:

name:manila-tempest-plugin-lvm-fips-stable

parent:manila-tempest-plugin-lvm-fips-base

branches:^(stable/(yoga|xena|wallaby)).*$

vars:*manila_tempest_image_pinned_vars

- job:

name:manila-tempest-plugin-lvm-yoga

parent:manila-tempest-plugin-lvm-stable