Add integrated job to test the Nova RBAC old defaults

Code Issues Proposed changes

Nova has enabled the scope checks and new defaults in
antelope release and now devstack is switching the testing
to new defaults by default (depends-on). With that all the
jobs will run the the new defaults.
As old defaults are still supported (as deprecated), we should
test those at least in a single integrated job. Adding
new job tempest-integrated-compute-rbac-old-defaults to test those
old defaults.
Keeping existing job enabling the new defaults because other services
have not switched to new defaults yet to this job enable new defaults
for those service and test Nova against that.
Depends-On: https://review.opendev.org/c/openstack/devstack/+/883601
Change-Id: Ifc3d0abe3e4caab701b695d3781f20ab3dba267d

This commit is contained in:

Ghanshyam Mann

2023年05月18日 12:59:32 -05:00

committed by Ghanshyam

parent 2dde4538bc

commit aeddcd61fd

1 changed files with 15 additions and 2 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download Patch File Download Diff File Expand all files Collapse all files

17
.zuul.yaml

View File

@@ -684,11 +684,20 @@

# they need keystone to continue working with project scope. Until

# Keystone policies are changed to work for project scoped also, we

# need to keep scope check disable for keystone.

NOVA_ENFORCE_SCOPE:true

# Nova and Glance scope and new defaults are enabled by default in

# Devstack so we do not need to explicitly set that to True.

CINDER_ENFORCE_SCOPE:true

GLANCE_ENFORCE_SCOPE:true

NEUTRON_ENFORCE_SCOPE:true

- job:

name:tempest-integrated-compute-rbac-old-defaults

parent:tempest-integrated-compute

description:|

This job runs the Tempest tests with Nova RBAC old defaults

vars:

devstack_localrc:

NOVA_ENFORCE_SCOPE:false

- project:

# Please try to keep the list of job names sorted alphabetically.

templates:

@@ -747,6 +756,8 @@

- ^tox.ini$

- tempest-integrated-compute-enforce-scope-new-defaults: