diff --git a/playbooks/roles/bifrost-keystone-install/files/keystone_policy.te b/playbooks/roles/bifrost-keystone-install/files/keystone_policy.te index b7e8b745c..fd3873b68 100644 --- a/playbooks/roles/bifrost-keystone-install/files/keystone_policy.te +++ b/playbooks/roles/bifrost-keystone-install/files/keystone_policy.te @@ -3,9 +3,12 @@ module keystone_policy 1.0; require { type var_run_t; type httpd_t; + type unconfined_service_t; class sock_file write; + class unix_stream_socket connectto; } #============= httpd_t ============== allow httpd_t var_run_t:sock_file write; +allow httpd_t unconfined_service_t:unix_stream_socket connectto; diff --git a/zuul.d/bifrost-jobs.yaml b/zuul.d/bifrost-jobs.yaml index 408ef202b..b611bbeaf 100644 --- a/zuul.d/bifrost-jobs.yaml +++ b/zuul.d/bifrost-jobs.yaml @@ -118,8 +118,7 @@ - job: name: bifrost-integration-tinyipa-keystone-centos-8 - parent: bifrost-integration-tinyipa - nodeset: centos-8-stream + parent: bifrost-integration-tinyipa-centos-8 required-projects: - openstack/keystone - openstack/ironic-prometheus-exporter @@ -141,6 +140,18 @@ parent: bifrost-integration-tinyipa nodeset: centos-9-stream +- job: + name: bifrost-integration-tinyipa-keystone-centos-9 + parent: bifrost-integration-tinyipa-centos-9 + required-projects: + - openstack/keystone + - openstack/ironic-prometheus-exporter + vars: + enable_keystone: true + enable_tls: true + test_driver: redfish + enable_prometheus_exporter: true + #NOTE(rpittau): remove buster support in Z or later - job: name: bifrost-integration-tinyipa-debian-buster diff --git a/zuul.d/project.yaml b/zuul.d/project.yaml index d055d697a..dd234e4d7 100644 --- a/zuul.d/project.yaml +++ b/zuul.d/project.yaml @@ -12,6 +12,7 @@ - bifrost-integration-tinyipa-centos-8 - bifrost-integration-tinyipa-keystone-ubuntu-focal - bifrost-integration-tinyipa-keystone-centos-8 + - bifrost-integration-tinyipa-keystone-centos-9 - bifrost-integration-tinyipa-debian-bullseye - bifrost-integration-redfish-vmedia-uefi-ubuntu-focal - bifrost-integration-redfish-vmedia-uefi-centos-8 @@ -65,6 +66,7 @@ - bifrost-integration-tinyipa-centos-8 - bifrost-integration-tinyipa-keystone-ubuntu-focal - bifrost-integration-tinyipa-keystone-centos-8 + - bifrost-integration-tinyipa-keystone-centos-9 - bifrost-integration-tinyipa-debian-bullseye - bifrost-integration-redfish-vmedia-uefi-ubuntu-focal - bifrost-integration-redfish-vmedia-uefi-centos-8