jobs: include common prefix 'tf-a' for all job names
Besides having a uniform pattern to identify TF-A CI jobs, the idea is
to easily match these using patterns/regexs which would make role-base
authentication easier to maintain. Role-base authentication would
become the default authentication method [1] required for the on-going
MbedTLS CI migration [2], where jobs only accept this authentication
type.
Once role-base setup is complete at Jenkins configuration level for
all CI jobs (include TF-A and TF-M jobs), then subsequent patches
should remove all the current (matrix) authentication code embedded
into the jobs.
[1] https://linaro.atlassian.net/browse/TFC-197
[2] https://linaro.atlassian.net/browse/TFC-4
Signed-off-by: Leonardo Sandoval <leonardo.sandoval@linaro.org>
Change-Id: I0cd286969c2ea8020bab6162c094bef63ab9afaa
diff --git a/tf-a-tftf-gerrit-tforg-l2.yaml b/tf-a-tftf-gerrit-tforg-l2.yaml
new file mode 100644
index 0000000..d3dce45
--- /dev/null
+++ b/tf-a-tftf-gerrit-tforg-l2.yaml
@@ -0,0 +1,123 @@
+- job:
+ name: tf-a-tftf-gerrit-tforg-l2
+ node: docker-amd64-tf-a-bionic
+ project-type: multijob
+ concurrent: true
+ disabled: false
+ description: |
+ Job that triggers for every TF-A-Tests patch approved with the Allow-CI+2
+ label on review.trustedfirmware.org.
+ properties:
+ - throttle:
+ option: project
+ enabled: true
+ max-total: 5
+ - build-discarder:
+ days-to-keep: 14
+ - authorization:
+ !include: authorization.yaml.inc
+ parameters:
+ - string:
+ name: GERRIT_PROJECT
+ default: 'TF-A/tf-a-tests'
+ - string:
+ name: GERRIT_BRANCH
+ default: 'refs/heads/master'
+ - string:
+ name: GERRIT_REFSPEC
+ default: '+refs/heads/master:refs/remotes/origin/master'
+ - string:
+ name: GERRIT_PATCHSET_NUMBER
+ default: ''
+ - string:
+ name: GERRIT_CHANGE_NUMBER
+ default: ''
+ - string:
+ name: TFTF_GERRIT_REFSPEC
+ default: ${GERRIT_REFSPEC}
+ description: 'Parameter only used by the clone script'
+ - string:
+ name: SHARE_FOLDER
+ default: '/srv/shared/${JOB_NAME}/${BUILD_NUMBER}'
+ description: 'Folder containing shared repositories for downstream pipeline jobs'
+ wrappers:
+ - credentials-binding:
+ - ssh-user-private-key:
+ credential-id: TFA_CI_BOT_USER_SSH_KEY
+ key-file-variable: CI_BOT_KEY
+ username-variable: CI_BOT_USERNAME
+ passphrase-variable: ''
+ - workspace-cleanup
+ - timestamps
+ builders:
+ - shell:
+ !include-raw: scripts/clone.sh
+ - shell: |
+ #!/bin/bash
+ set -e
+ cat << EOF > env.param
+ GERRIT_PATCHSET_NUMBER=${GERRIT_PATCHSET_NUMBER}
+ GERRIT_CHANGE_NUMBER=${GERRIT_CHANGE_NUMBER}
+ GERRIT_HOST=${GERRIT_HOST}
+ QA_SERVER_PROJECT=${JOB_NAME}
+ QA_SERVER_VERSION=${BUILD_NUMBER}
+ TFTF_GERRIT_PROJECT=${GERRIT_PROJECT}
+ TFTF_GERRIT_BRANCH=${GERRIT_BRANCH}
+ TFTF_GERRIT_REFSPEC=${GERRIT_REFSPEC}
+ SHARE_FOLDER=${SHARE_FOLDER}
+ EOF
+ - multijob:
+ condition: COMPLETED
+ name: Carry out level 1 tests
+ projects:
+ - kill-phase-on: NEVER
+ name: tf-a-tftf-gerrit-tforg-l1
+ current-parameters: true
+ property-file: env.param
+ - multijob:
+ condition: COMPLETED
+ name: Run Firmware Update Tests
+ projects:
+ - kill-phase-on: NEVER
+ name: tf-a-ci-gateway
+ predefined-parameters: |-
+ TEST_GROUPS=tftf-l2-fwu
+ TFTF_REFSPEC=$GERRIT_REFSPEC
+ property-file: env.param
+ - multijob:
+ condition: COMPLETED
+ name: Run Level 2 testing of TF-A-Tests
+ projects:
+ - kill-phase-on: NEVER
+ name: tf-a-ci-gateway
+ predefined-parameters: |-
+ TEST_GROUPS=tftf-l2-fvp-auxiliary tftf-l2-juno tf-l2-boot-tests-spm-mm tftf-l2-fvp-dynamiq spm-l2-boot-tests
+ TFTF_REFSPEC=$GERRIT_REFSPEC
+ property-file: env.param
+ - multijob:
+ condition: COMPLETED
+ name: Run extensive TF-A-Tests
+ projects:
+ - kill-phase-on: NEVER
+ name: tf-a-ci-gateway
+ predefined-parameters: |-
+ TEST_GROUPS=tftf-l2-extensive-tests-fvp
+ TFTF_REFSPEC=$GERRIT_REFSPEC
+ property-file: env.param
+ triggers:
+ - gerrit:
+ server-name: review.trustedfirmware.org
+ projects:
+ - branches:
+ - branch-compare-type: PLAIN
+ branch-pattern: master
+ project-compare-type: PLAIN
+ project-pattern: TF-A/tf-a-tests
+ trigger-on:
+ - comment-added-event:
+ approval-category: "Allow-CI"
+ approval-value: 2
+ override-votes: true
+ gerrit-build-successful-verified-value: 1
+ gerrit-build-failed-verified-value: -1
+ gerrit-build-unstable-verified-value: -1