Merge "Add FIPS enabled scenario jobs"

zuul.d/project.yaml

@@ -68,6 +68,12 @@
       jobs:
         - neutron-functional-with-uwsgi-fips
         - neutron-fullstack-with-uwsgi-fips
+        # NOTE(slaweq): those two FIPS jobs will fail until paramiko module will
+        # not be fixed to work properly with FIPS enabled. See
+        # https://review.opendev.org/c/openstack/tempest/+/810809
+        # for details
+        - neutron-ovs-tempest-fips
+        - neutron-ovn-tempest-ovs-release-fips
         - neutron-ovn-grenade-multinode
         - neutron-ovn-tempest-with-uwsgi-loki
         - neutron-ovn-tempest-full-multinode-ovs-master

zuul.d/tempest-singlenode.yaml

@@ -581,3 +581,37 @@
         '{{ devstack_base_dir }}/data/ovn': 'logs'
         '{{ devstack_log_dir }}/ovsdb-server-nb.log': 'logs'
         '{{ devstack_log_dir }}/ovsdb-server-sb.log': 'logs'
+
+- job:
+    name: neutron-ovs-tempest-fips
+    parent: neutron-ovs-tempest-base
+    nodeset: devstack-single-node-centos-8-stream
+    description: |
+      Scenario testing for a FIPS enabled Centos 8 system
+    pre-run: playbooks/enable-fips.yaml
+    vars:
+      configure_swap_size: 4096
+      devstack_services:
+        br-ex-tcpdump: true
+        br-int-flows: true
+      devstack_local_conf:
+        test-config:
+          "$TEMPEST_CONFIG":
+            validation:
+              ssh_key_type: 'ecdsa'
+
+
+- job:
+    name: neutron-ovn-tempest-ovs-release-fips
+    parent: neutron-ovn-tempest-ovs-release
+    nodeset: devstack-single-node-centos-8-stream
+    description: |
+      Scenario testing for a FIPS enabled Centos 8 system
+    pre-run: playbooks/enable-fips.yaml
+    vars:
+      configure_swap_size: 4096
+      devstack_local_conf:
+        test-config:
+          "$TEMPEST_CONFIG":
+            validation:
+              ssh_key_type: 'ecdsa'