CI: Add RBAC specific tempest jobs for main branch exec

Adds configs for Zed, 2023.1, but only runs the job on master
branch for now, while we sort out a policy fix needing to be
backported in ironic.

Gives us some initial feedback and forced testing while we fix
the other issues.

Change-Id: Ic435368a5840aae8dab26a843bd79e0ae2546639
diff --git a/zuul.d/project.yaml b/zuul.d/project.yaml
index ab38566..a6e8c5a 100644
--- a/zuul.d/project.yaml
+++ b/zuul.d/project.yaml
@@ -20,6 +20,11 @@
             voting: false
         - ironic-tempest-functional-python3-xena:
             voting: false
+        - ironic-tempest-functional-rbac-scope-enforced
+        # Enable these *once* we have the policy fix backported
+        # for making own node changes.
+        # - ironic-tempest-functional-rbac-scope-enforced-2023.1
+        # - ironic-tempest-functional-rbac-scope-enforced-zed
         - ironic-inspector-tempest
         - ironic-inspector-tempest-2023.1
         - ironic-inspector-tempest-zed
@@ -63,9 +68,11 @@
         - ironic-tempest-functional-python3
         - ironic-tempest-functional-python3-2023.1
         - ironic-tempest-functional-python3-zed
+        - ironic-tempest-functional-rbac-scope-enforced
         - ironic-inspector-tempest
         - ironic-inspector-tempest-2023.1
         - ironic-inspector-tempest-zed
+        - ironic-inspector-tempest-rbac-scope-enforced
         - ironic-standalone-redfish
         - ironic-standalone-redfish-2023.1
         - ironic-inspector-tempest-discovery
diff --git a/zuul.d/stable-jobs.yaml b/zuul.d/stable-jobs.yaml
index 570b262..fed604b 100644
--- a/zuul.d/stable-jobs.yaml
+++ b/zuul.d/stable-jobs.yaml
@@ -134,6 +134,16 @@
     override-checkout: stable/train
 
 - job:
+    name: ironic-tempest-functional-rbac-scope-enforced-2023.1
+    parent: ironic-tempest-functional-rbac-scope-enforced
+    override-checkout: stable/2023.1
+
+- job:
+    name: ironic-tempest-functional-rbac-scope-enforced-zed
+    parent: ironic-tempest-functional-rbac-scope-enforced
+    override-checkout: stable/zed
+
+- job:
     name: ironic-tempest-ipa-wholedisk-direct-tinyipa-multinode-zed
     parent: ironic-tempest-ipa-wholedisk-direct-tinyipa-multinode
     override-checkout: stable/zed
@@ -229,6 +239,16 @@
         USE_PYTHON3: True
 
 - job:
+    name: ironic-inspector-tempest-rbac-scope-enforced-2023.1
+    parent: ironic-inspector-tempest-rbac-scope-enforced
+    override-checkout: stable/2023.1
+
+- job:
+    name: ironic-inspector-tempest-rbac-scope-enforced-zed
+    parent: ironic-inspector-tempest-rbac-scope-enforced
+    override-checkout: stable/zed
+
+- job:
     name: ironic-inspector-tempest-discovery-2023.1
     parent: ironic-inspector-tempest-discovery
     override-checkout: stable/2023.1