diff --git a/.zuul.yaml b/.zuul.yaml
new file mode 100644
index 0000000..f5a45a3
--- /dev/null
+++ b/.zuul.yaml
@@ -0,0 +1,46 @@
+- job:
+    name: castellan-functional-devstack
+    parent: devstack
+    description: |
+      Run DevStack-based Castellan functional tests
+    pre-run: playbooks/devstack/pre.yaml
+    run: playbooks/devstack/run.yaml
+    post-run: playbooks/devstack/post.yaml
+    required-projects:
+      - name: openstack/castellan
+      - name: openstack/barbican
+      - name: openstack/python-barbicanclient
+    roles:
+      - zuul: openstack-infra/devstack
+    timeout: 9000
+    vars:
+      devstack_services:
+        # is there a way to disable all services?  I only want barbican
+        ceilometer-acentral: False
+        ceilometer-acompute: False
+        ceilometer-alarm-evaluator: False
+        ceilometer-alarm-notifier: False
+        ceilometer-anotification: False
+        ceilometer-api: False
+        ceilometer-collector: False
+        horizon: False
+        s-account: False
+        s-container: False
+        s-object: False
+        s-proxy: False
+      devstack_plugins:
+        barbican: git://git.openstack.org/openstack/barbican
+      tox_environment:
+        PYTHONUNBUFFERED: 'true'
+      tox_install_siblings: False # I don't know what this means
+      tox_envlist: functional
+      zuul_work_dir: src/git.openstack.org/openstack/castellan
+
+- project:
+    name: openstack/castellan
+    check:
+      jobs:
+        - castellan-functional-devstack
+    gate:
+      jobs:
+        - castellan-functional-devstack
diff --git a/playbooks/devstack/post.yaml b/playbooks/devstack/post.yaml
new file mode 100644
index 0000000..db7ca7d
--- /dev/null
+++ b/playbooks/devstack/post.yaml
@@ -0,0 +1,4 @@
+- hosts: all
+  roles:
+    - fetch-tox-output
+    - fetch-stestr-output
diff --git a/playbooks/devstack/pre.yaml b/playbooks/devstack/pre.yaml
new file mode 100644
index 0000000..c432487
--- /dev/null
+++ b/playbooks/devstack/pre.yaml
@@ -0,0 +1,10 @@
+- hosts: all
+  roles:
+    - run-devstack
+    - role: bindep
+      bindep_profile: test
+      bindep_dir: "{{ zuul_work_dir }}"
+    - test-setup
+    - ensure-tox
+    - role: tox-siblings
+      when: tox_install_siblings
diff --git a/playbooks/devstack/run.yaml b/playbooks/devstack/run.yaml
new file mode 100644
index 0000000..22f8209
--- /dev/null
+++ b/playbooks/devstack/run.yaml
@@ -0,0 +1,3 @@
+- hosts: all
+  roles:
+    - tox