Add FIPS testing job
Adds a new check job to test FIPS compatibility with Manila
upstream CI. We currently only have means to enable FIPS on CentOS
systems. Ubuntu support will come in a later effort.
Starting from CentOS 8, there is no candidate for a quagga package
installation. Our IPv6 setup currently depends on quagga. If we
keep IPv6 enabled, the job won't even start. For now, the job will
only set up IPv4 and run the tests for this specific IP version.
Co-authored-by: Ashley Rodriguez <ashrod98@gmail.com>
Co-authored-by: Vida Haririan <vhariria@redhat.com>
Change-Id: Ica6445c582ceae4c5b9bbce48702c74710e6056f
diff --git a/zuul.d/manila-tempest-jobs.yaml b/zuul.d/manila-tempest-jobs.yaml
index f150a2b..ebd444a 100644
--- a/zuul.d/manila-tempest-jobs.yaml
+++ b/zuul.d/manila-tempest-jobs.yaml
@@ -620,6 +620,34 @@
# read-only access rules not supported
enable_ro_access_level_for_protocols: ""
+- job:
+ name: manila-tempest-plugin-lvm-fips-base
+ parent: manila-tempest-plugin-lvm-base
+ nodeset: devstack-single-node-centos-9-stream
+ description: |
+ Run LVM DHSS false tests for manila project using FIPS.
+ pre-run:
+ - playbooks/enable-fips.yaml
+ vars:
+ nslookup_target: 'opendev.org'
+ devstack_localrc:
+ MANILA_SETUP_IPV6: false
+ NEUTRON_CREATE_INITIAL_NETWORKS: true
+ IP_VERSION: 4
+ configure_swap_size: 4096
+ devstack_local_conf:
+ test-config:
+ "$TEMPEST_CONFIG":
+ validation:
+ ssh_key_type: 'ecdsa'
+ share:
+ run_ipv6_tests: false
+
+- job:
+ name: manila-tempest-plugin-lvm-fips
+ parent: manila-tempest-plugin-lvm-fips-base
+ branches: ^(?!stable/(yoga|xena|wallaby|victoria|ussuri)).*$
+
- project-template:
name: manila-tempest-plugin-jobs-using-service-image
description: |