Update compute hypervisor tests to adopt new policies
Nova is moving to new policy defaults in ussuri[1] where
few polciies are made more granular to adopt the new defaults.
With granularity in few policies make change in policy name so
we have update the patrole tests to start checking against the
new policy names from ussuri onwards.
This commit updates the hypervisors policy tests
to move to new policies from ussuri onwards.
[1] https://specs.openstack.org/openstack/nova-specs/specs/ussuri/approved/policy-defaults-refresh.html
Change-Id: Ic540a42be0b05fc7c53c7ca78f6ff8e5725340e1
diff --git a/patrole_tempest_plugin/tests/api/compute/test_hypervisor_rbac.py b/patrole_tempest_plugin/tests/api/compute/test_hypervisor_rbac.py
index e0cdc52..8ad253a 100644
--- a/patrole_tempest_plugin/tests/api/compute/test_hypervisor_rbac.py
+++ b/patrole_tempest_plugin/tests/api/compute/test_hypervisor_rbac.py
@@ -14,11 +14,31 @@
# under the License.
from tempest.common import utils
+from tempest import config
from tempest.lib import decorators
from patrole_tempest_plugin import rbac_rule_validation
from patrole_tempest_plugin.tests.api.compute import rbac_base
+CONF = config.CONF
+
+if CONF.policy_feature_enabled.changed_nova_policies_ussuri:
+ _HYPERVISOR_LIST = "os_compute_api:os-hypervisors:list"
+ _HYPERVISOR_SHOW = "os_compute_api:os-hypervisors:show"
+ _HYPERVISOR_LIST_DETAIL = "os_compute_api:os-hypervisors:list-detail"
+ _HYPERVISOR_STATISTICS = "os_compute_api:os-hypervisors:statistics"
+ _HYPERVISOR_UPTIME = "os_compute_api:os-hypervisors:uptime"
+ _HYPERVISOR_SEARCH = "os_compute_api:os-hypervisors:search"
+ _HYPERVISOR_SERVER = "os_compute_api:os-hypervisors:servers"
+else:
+ _HYPERVISOR_LIST = "os_compute_api:os-hypervisors"
+ _HYPERVISOR_SHOW = "os_compute_api:os-hypervisors"
+ _HYPERVISOR_LIST_DETAIL = "os_compute_api:os-hypervisors"
+ _HYPERVISOR_STATISTICS = "os_compute_api:os-hypervisors"
+ _HYPERVISOR_UPTIME = "os_compute_api:os-hypervisors"
+ _HYPERVISOR_SEARCH = "os_compute_api:os-hypervisors"
+ _HYPERVISOR_SERVER = "os_compute_api:os-hypervisors"
+
class HypervisorRbacTest(rbac_base.BaseV2ComputeRbacTest):
@@ -39,7 +59,7 @@
@decorators.idempotent_id('17bbeb9a-e73e-445f-a771-c794448ef562')
@rbac_rule_validation.action(
service="nova",
- rules=["os_compute_api:os-hypervisors"])
+ rules=[_HYPERVISOR_LIST])
def test_list_hypervisors(self):
with self.override_role():
self.hypervisor_client.list_hypervisors()
@@ -47,7 +67,7 @@
@decorators.idempotent_id('36b95c7d-1085-487a-a674-b7c1ca35f520')
@rbac_rule_validation.action(
service="nova",
- rules=["os_compute_api:os-hypervisors"])
+ rules=[_HYPERVISOR_LIST_DETAIL])
def test_list_hypervisors_with_details(self):
with self.override_role():
self.hypervisor_client.list_hypervisors(detail=True)
@@ -55,7 +75,7 @@
@decorators.idempotent_id('8a7f6f9e-34a6-4480-8875-bba566c3a581')
@rbac_rule_validation.action(
service="nova",
- rules=["os_compute_api:os-hypervisors"])
+ rules=[_HYPERVISOR_SHOW])
def test_show_hypervisor(self):
with self.override_role():
self.hypervisor_client.show_hypervisor(self.hypervisor['id'])
@@ -63,7 +83,7 @@
@decorators.idempotent_id('ca0e465c-6365-4a7f-ae58-6f8ddbca06c2')
@rbac_rule_validation.action(
service="nova",
- rules=["os_compute_api:os-hypervisors"])
+ rules=[_HYPERVISOR_STATISTICS])
def test_show_hypervisor_statistics(self):
with self.override_role():
self.hypervisor_client.show_hypervisor_statistics()
@@ -71,7 +91,7 @@
@decorators.idempotent_id('109b37c5-91ba-4da5-b2a2-d7618d84406d')
@rbac_rule_validation.action(
service="nova",
- rules=["os_compute_api:os-hypervisors"])
+ rules=[_HYPERVISOR_UPTIME])
def test_show_hypervisor_uptime(self):
with self.override_role():
self.hypervisor_client.show_hypervisor_uptime(
@@ -102,7 +122,7 @@
@decorators.idempotent_id('b86f03cf-2e79-4d88-9eea-62f761591413')
@rbac_rule_validation.action(
service="nova",
- rules=["os_compute_api:os-hypervisors"])
+ rules=[_HYPERVISOR_SERVER])
def test_list_servers_on_hypervisor(self):
with self.override_role():
self.hypervisor_client.list_servers_on_hypervisor(
@@ -111,7 +131,7 @@
@decorators.idempotent_id('3dbc71c1-8f04-4674-a67c-dcb2fd99b1b4')
@rbac_rule_validation.action(
service="nova",
- rules=["os_compute_api:os-hypervisors"])
+ rules=[_HYPERVISOR_SEARCH])
def test_search_hypervisor(self):
with self.override_role():
self.hypervisor_client.search_hypervisor(
diff --git a/releasenotes/notes/adopt_nova_new_policies-c61d1c3751ff1bf9.yaml b/releasenotes/notes/adopt_nova_new_policies-c61d1c3751ff1bf9.yaml
index 48cdc08..67f28bc 100644
--- a/releasenotes/notes/adopt_nova_new_policies-c61d1c3751ff1bf9.yaml
+++ b/releasenotes/notes/adopt_nova_new_policies-c61d1c3751ff1bf9.yaml
@@ -12,3 +12,4 @@
- os_compute_api:os-attach-interfaces
- os_compute_api:os-instance-usage-audit-log
- os_compute_api:os-agents
+ - os_compute_api:os-hypervisors