Add S-RBAC tests for manila
The tests validate policy share actions for admin,member
and reader users in a project scope.
This patch adds tests for the following resources/features:
- share
- share snapshot
- share type
- share network
- scheduler stats
Below settings were used for ease of code development
and testing:
1. DHHS = False
2. Dummy driver as it supports all features
3. Manila-tempest-plugin as a base repo to test the changes
Depends-On: https://review.opendev.org/c/openstack/manila/+/858761
Change-Id: I53bb9851445038f81032485817389ec31e2b7341
diff --git a/zuul.d/manila-tempest-jobs.yaml b/zuul.d/manila-tempest-jobs.yaml
index c7318af..748ddd3 100644
--- a/zuul.d/manila-tempest-jobs.yaml
+++ b/zuul.d/manila-tempest-jobs.yaml
@@ -639,6 +639,22 @@
enable_ro_access_level_for_protocols: ""
- job:
+ name: manila-tempest-plugin-dummy-no-dhss-rbac
+ parent: manila-tempest-plugin-dummy-no-dhss
+ description: |
+ This job runs the devstack with scope checks enabled,
+ on the Dummy driver with DHSS=False.
+ vars:
+ tempest_test_regex: 'manila_tempest_tests.tests.rbac'
+ devstack_localrc:
+ MANILA_ENFORCE_SCOPE: true
+ devstack_local_conf:
+ test-config:
+ "$TEMPEST_CONFIG":
+ share:
+ default_share_type_name: default
+
+- job:
name: manila-tempest-plugin-lvm-fips-base
parent: manila-tempest-plugin-lvm-base
nodeset: devstack-single-node-centos-9-stream