From a1a895a6e56c3e261f9e98b2a0e0896442185d07 Mon Sep 17 00:00:00 2001 From: Ade Lee Date: Tue, 22 Jun 2021 15:43:27 -0400 Subject: [PATCH] Add FIPS enabled scenario jobs Add ML2/OVS and ML2/OVN tempest jobs with FIPS enabled. Right now, the FIPS jobs run on Centos 8 stream. For now those jobs are added to the experimental queue but we should think about adding them to periodic maybe. Co-Authored-By: Slawek Kaplonski Depends-On: https://review.opendev.org/c/openstack/tempest/+/822560 Change-Id: I974c7d04d13a87bbbd4de6164578724a2cfd85cc --- zuul.d/project.yaml | 6 ++++++ zuul.d/tempest-singlenode.yaml | 34 ++++++++++++++++++++++++++++++++++ 2 files changed, 40 insertions(+) diff --git a/zuul.d/project.yaml b/zuul.d/project.yaml index 59c69b0f759..e474cebca5d 100644 --- a/zuul.d/project.yaml +++ b/zuul.d/project.yaml @@ -71,6 +71,12 @@ jobs: - neutron-functional-with-uwsgi-fips - neutron-fullstack-with-uwsgi-fips + # NOTE(slaweq): those two FIPS jobs will fail until paramiko module will + # not be fixed to work properly with FIPS enabled. See + # https://review.opendev.org/c/openstack/tempest/+/810809 + # for details + - neutron-ovs-tempest-fips + - neutron-ovn-tempest-ovs-release-fips - neutron-ovn-grenade-multinode - neutron-ovn-tempest-with-uwsgi-loki - neutron-ovn-tempest-full-multinode-ovs-master diff --git a/zuul.d/tempest-singlenode.yaml b/zuul.d/tempest-singlenode.yaml index 6778ace5002..dc206b3dcb4 100644 --- a/zuul.d/tempest-singlenode.yaml +++ b/zuul.d/tempest-singlenode.yaml @@ -552,3 +552,37 @@ '{{ devstack_base_dir }}/data/ovn': 'logs' '{{ devstack_log_dir }}/ovsdb-server-nb.log': 'logs' '{{ devstack_log_dir }}/ovsdb-server-sb.log': 'logs' + +- job: + name: neutron-ovs-tempest-fips + parent: neutron-ovs-tempest-base + nodeset: devstack-single-node-centos-8-stream + description: | + Scenario testing for a FIPS enabled Centos 8 system + pre-run: playbooks/enable-fips.yaml + vars: + configure_swap_size: 4096 + devstack_services: + br-ex-tcpdump: true + br-int-flows: true + devstack_local_conf: + test-config: + "$TEMPEST_CONFIG": + validation: + ssh_key_type: 'ecdsa' + + +- job: + name: neutron-ovn-tempest-ovs-release-fips + parent: neutron-ovn-tempest-ovs-release + nodeset: devstack-single-node-centos-8-stream + description: | + Scenario testing for a FIPS enabled Centos 8 system + pre-run: playbooks/enable-fips.yaml + vars: + configure_swap_size: 4096 + devstack_local_conf: + test-config: + "$TEMPEST_CONFIG": + validation: + ssh_key_type: 'ecdsa'