Use zuul.build instead of zuul.change in os access job (#44)

Signed-off-by: Artem Goncharov <artem.goncharov@gmail.com>
SovereignCloudStack · Sep 17, 2024 · 34a6360 · 34a6360
1 parent b5795f9
commit 34a6360
Show file tree

Hide file tree

Showing 3 changed files with 7 additions and 4 deletions.
diff --git a/playbooks/openstack/post.yaml b/playbooks/openstack/post.yaml
@@ -17,5 +17,5 @@
     - name: "Drop temporary credentials by name"
       openstack_application_credentials:
         cloud: "{{ cloud_config.config }}"
-        name: "functest_{{ zuul.change }}"
+        name: "functest_{{ zuul.build }}"
         state: "absent"
diff --git a/playbooks/openstack/pre.yaml b/playbooks/openstack/pre.yaml
@@ -36,7 +36,7 @@
       delegate_to: localhost
       openstack_application_credentials:
         cloud: "{{ cloud_config.config }}"
-        name: "functest_{{ zuul.change }}"
+        name: "functest_{{ zuul.build }}"
       register: app_cred
 
     - name: Ensure openstack directory exists
@@ -51,11 +51,11 @@
       ansible.builtin.template:
         src: "templates/clouds.yaml.j2"
         dest: "/etc/openstack/clouds.yaml"
-        mode: "0400"
+        mode: "0440"
 
     - name: Create secure.yaml
       become: true
       ansible.builtin.template:
         src: "templates/secure.yaml.j2"
         dest: "/etc/openstack/secure.yaml"
-        mode: "0400"
+        mode: "0440"
diff --git a/zuul.d/jobs.yaml b/zuul.d/jobs.yaml
@@ -48,10 +48,13 @@
     parent: base
     pre-run: playbooks/openstack/pre.yaml
     post-run: playbooks/openstack/post.yaml
+    post-review: True
     semaphores:
       - semaphore-openstack-access
     allowed-projects:
       - SovereignCloudStack/zuul-config
+      - SovereignCloudStack/k8s-cluster-api-provider
+      - SovereignCloudStack/cluster-stacks
     vars:
       cloud: "gx-scs-zuul"
       vault_cloud_path: "clouds/gx_scs_k8s_e2e"