Add integrated job to test the Nova RBAC old defaults
Nova has enabled the scope checks and new defaults in antelope release and now devstack is switching the testing to new defaults by default (depends-on). With that all the jobs will run the the new defaults. As old defaults are still supported (as deprecated), we should test those at least in a single integrated job. Adding new job tempest-integrated-compute-rbac-old-defaults to test those old defaults. Keeping existing job enabling the new defaults because other services have not switched to new defaults yet to this job enable new defaults for those service and test Nova against that. Depends-On: https://review.opendev.org/c/openstack/devstack/+/883601 Change-Id: Ifc3d0abe3e4caab701b695d3781f20ab3dba267d
This commit is contained in:
committed by
Ghanshyam
parent
2dde4538bc
commit
aeddcd61fd
+15
-2
@@ -684,11 +684,20 @@
|
||||
# they need keystone to continue working with project scope. Until
|
||||
# Keystone policies are changed to work for project scoped also, we
|
||||
# need to keep scope check disable for keystone.
|
||||
NOVA_ENFORCE_SCOPE: true
|
||||
# Nova and Glance scope and new defaults are enabled by default in
|
||||
# Devstack so we do not need to explicitly set that to True.
|
||||
CINDER_ENFORCE_SCOPE: true
|
||||
GLANCE_ENFORCE_SCOPE: true
|
||||
NEUTRON_ENFORCE_SCOPE: true
|
||||
|
||||
- job:
|
||||
name: tempest-integrated-compute-rbac-old-defaults
|
||||
parent: tempest-integrated-compute
|
||||
description: |
|
||||
This job runs the Tempest tests with Nova RBAC old defaults
|
||||
vars:
|
||||
devstack_localrc:
|
||||
NOVA_ENFORCE_SCOPE: false
|
||||
|
||||
- project:
|
||||
# Please try to keep the list of job names sorted alphabetically.
|
||||
templates:
|
||||
@@ -747,6 +756,8 @@
|
||||
- ^tox.ini$
|
||||
- tempest-integrated-compute-enforce-scope-new-defaults:
|
||||
irrelevant-files: *policies-irrelevant-files
|
||||
- tempest-integrated-compute-rbac-old-defaults:
|
||||
irrelevant-files: *policies-irrelevant-files
|
||||
- grenade-skip-level-always:
|
||||
irrelevant-files: *policies-irrelevant-files
|
||||
- nova-grenade-multinode:
|
||||
@@ -782,6 +793,8 @@
|
||||
irrelevant-files: *policies-irrelevant-files
|
||||
- tempest-integrated-compute-enforce-scope-new-defaults:
|
||||
irrelevant-files: *policies-irrelevant-files
|
||||
- tempest-integrated-compute-rbac-old-defaults:
|
||||
irrelevant-files: *policies-irrelevant-files
|
||||
- grenade-skip-level-always:
|
||||
irrelevant-files: *policies-irrelevant-files
|
||||
- nova-grenade-multinode:
|
||||
|
||||
Reference in New Issue
Block a user