summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorZuul <zuul@review.opendev.org>2022-12-07 01:05:23 +0000
committerGerrit Code Review <review@openstack.org>2022-12-07 01:05:23 +0000
commit96af1d0e40bc3d42a18c565ebeab857e5fe9078c (patch)
treec8afccad8cbed7905d811c7301c635ebeee5daa4
parent96cd444cac4a0d2d1db619365f645a60c3de73a5 (diff)
parent7ab45a9be8ee6fd4c8ded8d76e3237c14fa8727a (diff)
downloadtempest-96af1d0e40bc3d42a18c565ebeab857e5fe9078c.tar.gz
Merge "Add new tempest job enable the rbac scope checks and new defaults"
-rw-r--r--zuul.d/integrated-gate.yaml24
-rw-r--r--zuul.d/project.yaml4
2 files changed, 28 insertions, 0 deletions
diff --git a/zuul.d/integrated-gate.yaml b/zuul.d/integrated-gate.yaml
index 121e04dfa..7d0246b51 100644
--- a/zuul.d/integrated-gate.yaml
+++ b/zuul.d/integrated-gate.yaml
@@ -344,6 +344,30 @@
# ENABLE_FILE_INJECTION: true
DATABASE_TYPE: postgresql
+- job:
+ name: tempest-full-enforce-scope-new-defaults
+ parent: tempest-full-py3
+ description: |
+ This job runs the Tempest tests with scope and new defaults enabled.
+ # TODO: remove this once https://review.opendev.org/c/openstack/neutron-lib/+/864213
+ # fix is released in neutron-lib
+ required-projects:
+ - openstack/neutron-lib
+ - openstack/neutron
+ vars:
+ devstack_localrc:
+ # Enabeling the scope and new defaults for services.
+ # NOTE: (gmann) We need to keep keystone scope check disable as
+ # services (except ironic) does not support the system scope and
+ # they need keystone to continue working with project scope. Until
+ # Keystone policies are changed to work for both system as well as
+ # for project scoped, we need to keep scope check disable for
+ # keystone.
+ NOVA_ENFORCE_SCOPE: true
+ CINDER_ENFORCE_SCOPE: true
+ GLANCE_ENFORCE_SCOPE: true
+ NEUTRON_ENFORCE_SCOPE: true
+
- project-template:
name: integrated-gate-networking
description: |
diff --git a/zuul.d/project.yaml b/zuul.d/project.yaml
index 6412e78db..46c0d8d88 100644
--- a/zuul.d/project.yaml
+++ b/zuul.d/project.yaml
@@ -103,6 +103,8 @@
irrelevant-files: *tempest-irrelevant-files
- nova-live-migration:
irrelevant-files: *tempest-irrelevant-files
+ - tempest-full-enforce-scope-new-defaults:
+ irrelevant-files: *tempest-irrelevant-files
- devstack-plugin-ceph-tempest-py3:
# TODO(kopecmartin): make it voting once the below bug is fixed
# https://bugs.launchpad.net/devstack-plugin-ceph/+bug/1975648
@@ -150,6 +152,8 @@
irrelevant-files: *tempest-irrelevant-files-3
- tempest-multinode-full-py3:
irrelevant-files: *tempest-irrelevant-files
+ - tempest-full-enforce-scope-new-defaults:
+ irrelevant-files: *tempest-irrelevant-files
#- devstack-plugin-ceph-tempest-py3:
# irrelevant-files: *tempest-irrelevant-files
#- tempest-full-centos-9-stream: