[SERVER-2555] Enable redhatfips-7-x86_64 test pipeline for puppetserver Created: 2019/05/23  Updated: 2019/09/12  Resolved: 2019/08/02

Status: Resolved
Project: Puppet Server
Component/s: None
Affects Version/s: None
Fix Version/s: SERVER 6.6.0

Type: Task Priority: Normal
Reporter: Sara Meisburger Assignee: Maggie Dreyer
Resolution: Done Votes: 0
Labels: resolved-issue-added
Remaining Estimate: Not Specified
Time Spent: Not Specified
Original Estimate: Not Specified

Issue Links:
is blocked by BKR-1604 Add a beaker helper to detect FIPS mode Resolved
is blocked by FACT-1927 Build Facter for JRuby on redhatfips-... Resolved
is blocked by SERVER-2554 Enable redhatfips-7-x86_64 builds for... Resolved
Epic Link: Add redhatfips-7-x86_64 as a supported master platform for PE
Team: Froyo
Sprint: Release Engineering Kanban
Release Notes: New Feature
Release Notes Summary: RedHat 7 FIPS mode packages are now available for puppetserver.
QA Risk Assessment: Needs Assessment


Add redhatfips-7-x86_64 to puppetserver test matrices in ci-job-configs.
Disable puppetserver gem test(s) since they do not work in fips.

Comment by Maggie Dreyer [ 2019/07/12 ]

First issue I'm hitting is that the PuppetDB module won't install under FIPS. I'm trying to figure out if beaker has a way of detecting that we're running in FIPS, because currently PDB install is skipped based on platform name, but we just use el7 for FIPS too, and make no distinction.

Comment by Maggie Dreyer [ 2019/07/17 ]

Three related PRs for this:
Beaker: https://github.com/puppetlabs/beaker/pull/1592
Puppet: https://github.com/puppetlabs/puppet/pull/7616
Puppetserver: https://github.com/puppetlabs/puppetserver/pull/2122

The puppetserver should be merged last, and once all three are in and promoted, we can add the redhatfips target to ci-job-configs.

Comment by Maggie Dreyer [ 2019/07/18 ]

Filed https://tickets.puppetlabs.com/browse/SERVER-2596 about re-enabling the tests using puppet module once that tool is fixed.

Comment by Maggie Dreyer [ 2019/07/23 ]

The PR skipping tests has yet to be merged, but the PMT has already been fixed. I'll re-evaluate once that code becomes available to test against. We may not need the puppetserver PR.

Generated at Sun May 31 13:58:01 PDT 2020 using Jira 8.5.2#805002-sha1:a66f9354b9e12ac788984e5d84669c903a370049.