Cleanup RBAC jobs in check/gate pipeline

This commit does the following changes in gate testing:

- Test tempest-integrated-compute-rbac-old-defaults (Test the
  RBAC old defaults which are deprecated but still supported)
  in periodic weekly pipeline instead of check/gate pipeline.

  Reason: Old defaults are deprecated and it will be rare to
  have any changes in those. These should be ok to run weekly
  to know if anything is broken for old defaults.

- Remove tempest-integrated-compute-enforce-scope-new-defaults
  This test the new defaults which are enabled by default and
  tested in every job.

  Reason: We kept this job for cinder because their new defaults
  are not enabled by default. To test nova new defaults combination
  with cinder new defaults, we have Tempest job running in tempest
  gate (tempest-full-enforce-scope-new-defaults).

Change-Id: I3a1634ff71b39c722401dea8e77092228f9cc064
This commit is contained in:
Ghanshyam Mann
2025-02-04 11:19:29 -08:00
committed by Ghanshyam
parent d267ede98f
commit bb8ee15106
+9 -46
View File
@@ -735,16 +735,15 @@
image_conversion:
output_format: raw
# TODO(gmann): Remove this jobs once all the required services for intergrate
# compute gate (Cinder, Glance, Neutron) by default enable scope and new
# defaults which means all the nova jobs will be tested with new RBAC in
# integrated way and we do not need this separate job.
- job:
name: tempest-integrated-compute-enforce-scope-new-defaults
name: tempest-integrated-compute-rbac-old-defaults
parent: tempest-integrated-compute
# TODO(gmann): As per the 2025.1 testing runtime, we need to run at least
# one job on jammy. This job can be moved to Noble in the next cycle
# (2025.2).
nodeset: openstack-single-node-jammy
description: |
This job runs the Tempest tests with scope and new defaults enabled
for Nova, Neutron, Glance, and Cinder services.
This job runs the Tempest tests with Nova RBAC old defaults
irrelevant-files: &policies-irrelevant-files
- ^api-.*$
- ^(test-|)requirements.txt$
@@ -760,37 +759,6 @@
- ^setup.cfg$
- ^tools/.*$
- ^tox.ini$
# TODO (gmann): There were few fixes in neutron and neutron-lib for the
# RBAC but they are not yet released so we need to add both projcts as
# the required-projects. Those can be removed once new version of neutron
# and neutron-lib is released.
required-projects:
- openstack/neutron
- openstack/neutron-lib
vars:
devstack_services:
openstack-cli-server: true
devstack_localrc:
# Enabeling the scope and new defaults for services implemented it.
# NOTE (gmann): We need to keep keystone scope check disable as
# services (except ironic) does not support the system scope and
# they need keystone to continue working with project scope. Until
# Keystone policies are changed to work for project scoped also, we
# need to keep scope check disable for keystone.
# Nova and Glance scope and new defaults are enabled by default in
# Devstack so we do not need to explicitly set that to True.
CINDER_ENFORCE_SCOPE: true
NEUTRON_ENFORCE_SCOPE: true
- job:
name: tempest-integrated-compute-rbac-old-defaults
parent: tempest-integrated-compute
# TODO(gmann): As per the 2025.1 testing runtime, we need to run at least
# one job on jammy. This job can be moved to Noble in the next cycle
# (2025.2).
nodeset: openstack-single-node-jammy
description: |
This job runs the Tempest tests with Nova RBAC old defaults
vars:
devstack_services:
openstack-cli-server: true
@@ -843,10 +811,6 @@
# common jobs will be enough along with nova functional
# and unit tests.
irrelevant-files: *policies-irrelevant-files
- tempest-integrated-compute-enforce-scope-new-defaults:
irrelevant-files: *policies-irrelevant-files
- tempest-integrated-compute-rbac-old-defaults:
irrelevant-files: *policies-irrelevant-files
- grenade-skip-level-always:
irrelevant-files: *policies-irrelevant-files
- nova-grenade-multinode:
@@ -881,10 +845,6 @@
- nova/virt/libvirt/vif.py
- tempest-integrated-compute:
irrelevant-files: *policies-irrelevant-files
- tempest-integrated-compute-enforce-scope-new-defaults:
irrelevant-files: *policies-irrelevant-files
- tempest-integrated-compute-rbac-old-defaults:
irrelevant-files: *policies-irrelevant-files
- grenade-skip-level-always:
irrelevant-files: *policies-irrelevant-files
- nova-grenade-multinode:
@@ -901,6 +861,7 @@
- ironic-tempest-ipa-wholedisk-direct-tinyipa-multinode-shard
- tempest-centos9-stream-fips
- whitebox-devstack-multinode
- tempest-integrated-compute-rbac-old-defaults
experimental:
jobs:
- ironic-tempest-bfv:
@@ -932,3 +893,5 @@
- tempest-integrated-compute-centos-9-stream:
irrelevant-files: *nova-base-irrelevant-files
- whitebox-devstack-multinode
- tempest-integrated-compute-rbac-old-defaults:
irrelevant-files: *policies-irrelevant-files