Task #3800
closed
Task #7960: FIPS and support for ALLOWED_CONTENT_CHECKSUMS
Add FIPS to the CI matrix in the plugin_template
Status:
CLOSED - CURRENTRELEASE
Description
Background¶
We want to continuously test pulpcore, its dependencies, and all plugins to ensure all functional tests can run in FIPS enabled environments.
Solution¶
Have the plugin template add a run to the CI matrix that runs the functional tests in a FIPS enabled environment
TBD:
- Where will the patched dependencies (either RPMs or Python bits) come from?
Files
- Tracker changed from Story to Task
- Subject changed from Set up a Jenkins FIPS environment to test out Pulp 3 to Set up a CI FIPS environment to test out Pulp 3
- Subject changed from Set up a CI FIPS environment to test out Pulp 3 to Add FIPS to the CI matrix in the plugin_template
- Description updated (diff)
- Tags CI/CD added
- Parent issue deleted (
#3778)
- Parent issue set to #7960
- Blocked by Task #7884: Move the pulp_installer Vagrant tests off Travis added
It is possible to configure GitHub to let you merge while these long running tests complete. (Or if they fail).
Screenshot from pulp_installer.
It is not tracked in Git, but in the repo's Settings page "branches" for protecting the branch. "Require status checks to pass before merging "
I think the FIPS test will probably run nightly (or on some scheduled basis) against plugins and pulpcore rather than against each PR.
- Status changed from NEW to ASSIGNED
- Assignee set to fao89
- Status changed from ASSIGNED to POST
- Status changed from POST to MODIFIED
- % Done changed from 0 to 100
- Status changed from MODIFIED to ASSIGNED
- Status changed from ASSIGNED to CLOSED - CURRENTRELEASE
Also available in: Atom
PDF
.
Adding nightly FIPS tests
https://pulp.plan.io/issues/3800 closes #3800