- project:
    templates:
      - openstack-cover-jobs
      - check-requirements
      - release-notes-jobs-python3
      - openstack-python3-ussuri-jobs
      - publish-openstack-docs-pti
    check:
      jobs:
        - cyborg-tempest
        - cyborg-tempest-ipv6-only
        - cyborg-tox-bandit:
            voting: false
    gate:
      jobs:
        - cyborg-tempest

- job:
    name: cyborg-tox-bandit
    parent: openstack-tox
    timeout: 2400
    vars:
      tox_envlist: bandit
    required-projects:
      - openstack/requirements
    irrelevant-files: &gate-irrelevant-files
      - ^(test-|)requirements.txt$
      - ^.*\.rst$
      - ^api-ref/.*$
      - ^cyborg/cmd/status\.py$
      - ^cyborg/hacking/.*$
      - ^cyborg/tests/functional.*$
      - ^cyborg/tests/unit.*$
      - ^doc/.*$
      - ^etc/.*$
      - ^releasenotes/.*$
      - ^setup.cfg$
      - ^tools/.*$
      - ^tox.ini$

- project:
    templates:
      - openstack-cover-jobs
      - check-requirements
      - release-notes-jobs-python3
      - openstack-python3-ussuri-jobs
      - publish-openstack-docs-pti
    check:
      jobs:
        - cyborg-tempest
        - cyborg-tempest-ipv6-only
        - cyborg-tox-bandit
    gate:
      jobs:
        - cyborg-tempest

- job:
    name: cyborg-tox-bandit
    parent: openstack-tox
    timeout: 2400
    vars:
      tox_envlist: bandit
    required-projects:
      - openstack/requirements
    irrelevant-files: &gate-irrelevant-files
      - ^(test-|)requirements.txt$
      - ^.*\.rst$
      - ^api-ref/.*$
      - ^cyborg/cmd/status\.py$
      - ^cyborg/hacking/.*$
      - ^cyborg/tests/functional.*$
      - ^cyborg/tests/unit.*$
      - ^doc/.*$
      - ^etc/.*$
      - ^releasenotes/.*$
      - ^setup.cfg$
      - ^tools/.*$
      - ^tox.ini$

Change bandit job from non-voting to voting
Change bandit job from non-voting to voting

Bandit check is a very important tool to check code security.
Before this patch, we put it as a non-voting job to temporarily ignore
existed bandit failures. After fixed all the existed bandit failures,
we should change this test job from non-voting to voting to make the
bandit job actually work, that is to let zuul do the bandit check for
all patches and give them zuul -1  once the new changes fail to pass
bandit the check.

Depends-On: https://review.opendev.org/#/c/720475
Depends-On: https://review.opendev.org/#/c/720456
Depends-On: https://review.opendev.org/#/c/720149
Depends-On: https://review.opendev.org/#/c/720143

Change-Id: I8480243382f66779a12b1e433b69d9be512e843e
