Project

Profile

Help

Task #3800

closed

Task #7960: FIPS and support for ALLOWED_CONTENT_CHECKSUMS

Add FIPS to the CI matrix in the plugin_template

Added by daviddavis almost 6 years ago. Updated about 3 years ago.

Status:
CLOSED - CURRENTRELEASE
Priority:
Normal
Assignee:
Category:
-
Sprint/Milestone:
-
Start date:
Due date:
% Done:

100%

Estimated time:
Platform Release:
Groomed:
No
Sprint Candidate:
No
Tags:
CI/CD
Sprint:
Quarter:

Description

Background

We want to continuously test pulpcore, its dependencies, and all plugins to ensure all functional tests can run in FIPS enabled environments.

Solution

Have the plugin template add a run to the CI matrix that runs the functional tests in a FIPS enabled environment

TBD:

  • Where will the patched dependencies (either RPMs or Python bits) come from?

Files

clipboard-202102091714-mihtu.png (104 KB) clipboard-202102091714-mihtu.png mdepaulo@redhat.com, 02/09/2021 11:14 PM

Related issues

Blocked by Pulp - Task #7884: Move the pulp_installer Vagrant tests off TravisCLOSED - CURRENTRELEASEmdepaulo@redhat.com

Actions
Actions #1

Updated by daviddavis almost 6 years ago

  • Tracker changed from Story to Task
Actions #2

Updated by bmbouter almost 5 years ago

  • Tags deleted (Pulp 3)
Actions #3

Updated by daviddavis almost 4 years ago

  • Subject changed from Set up a Jenkins FIPS environment to test out Pulp 3 to Set up a CI FIPS environment to test out Pulp 3
Actions #4

Updated by bmbouter almost 4 years ago

  • Subject changed from Set up a CI FIPS environment to test out Pulp 3 to Add FIPS to the CI matrix in the plugin_template
  • Description updated (diff)
  • Tags CI/CD added
Actions #5

Updated by daviddavis over 3 years ago

  • Parent issue deleted (#3778)
Actions #6

Updated by daviddavis over 3 years ago

  • Parent issue set to #7960
Actions #7

Updated by daviddavis about 3 years ago

  • Blocked by Task #7884: Move the pulp_installer Vagrant tests off Travis added
Actions #8

Updated by mdepaulo@redhat.com about 3 years ago

It is possible to configure GitHub to let you merge while these long running tests complete. (Or if they fail).

Screenshot from pulp_installer.

It is not tracked in Git, but in the repo's Settings page "branches" for protecting the branch. "Require status checks to pass before merging "

Actions #9

Updated by daviddavis about 3 years ago

I think the FIPS test will probably run nightly (or on some scheduled basis) against plugins and pulpcore rather than against each PR.

Actions #10

Updated by fao89 about 3 years ago

  • Status changed from NEW to ASSIGNED
  • Assignee set to fao89
Actions #11

Updated by pulpbot about 3 years ago

  • Status changed from ASSIGNED to POST

Added by Fabricio Aguiar about 3 years ago

Revision 6a0ba096 | View on GitHub

Adding nightly FIPS tests

https://pulp.plan.io/issues/3800 closes #3800

Actions #12

Updated by Anonymous about 3 years ago

  • Status changed from POST to MODIFIED
  • % Done changed from 0 to 100
Actions #13

Updated by daviddavis about 3 years ago

  • Status changed from MODIFIED to ASSIGNED
Actions #14

Updated by ipanova@redhat.com about 3 years ago

  • Status changed from ASSIGNED to CLOSED - CURRENTRELEASE

Also available in: Atom PDF