| # vim: tabstop=4 shiftwidth=4 softtabstop=4 |
| |
| # Copyright 2012 OpenStack, LLC |
| # All Rights Reserved. |
| # |
| # Licensed under the Apache License, Version 2.0 (the "License"); you may |
| # not use this file except in compliance with the License. You may obtain |
| # a copy of the License at |
| # |
| # http://www.apache.org/licenses/LICENSE-2.0 |
| # |
| # Unless required by applicable law or agreed to in writing, software |
| # distributed under the License is distributed on an "AS IS" BASIS, WITHOUT |
| # WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the |
| # License for the specific language governing permissions and limitations |
| # under the License. |
| |
| import logging |
| |
| # Default client libs |
| import glanceclient |
| import keystoneclient.v2_0.client |
| import novaclient.client |
| try: |
| import quantumclient.v2_0.client |
| except ImportError: |
| pass |
| |
| import tempest.config |
| from tempest import exceptions |
| # Tempest REST Fuzz testing client libs |
| from tempest.services.compute.json import extensions_client |
| from tempest.services.compute.json import flavors_client |
| from tempest.services.compute.json import floating_ips_client |
| from tempest.services.compute.json import images_client |
| from tempest.services.compute.json import keypairs_client |
| from tempest.services.compute.json import limits_client |
| from tempest.services.compute.json import quotas_client |
| from tempest.services.compute.json import security_groups_client |
| from tempest.services.compute.json import servers_client |
| from tempest.services.compute.json import volumes_extensions_client |
| from tempest.services.network.json import network_client |
| from tempest.services.volume.json import snapshots_client |
| from tempest.services.volume.json import volumes_client |
| |
| NetworkClient = network_client.NetworkClient |
| ImagesClient = images_client.ImagesClientJSON |
| FlavorsClient = flavors_client.FlavorsClientJSON |
| ServersClient = servers_client.ServersClientJSON |
| LimitsClient = limits_client.LimitsClientJSON |
| ExtensionsClient = extensions_client.ExtensionsClientJSON |
| FloatingIPsClient = floating_ips_client.FloatingIPsClientJSON |
| SecurityGroupsClient = security_groups_client.SecurityGroupsClientJSON |
| KeyPairsClient = keypairs_client.KeyPairsClientJSON |
| VolumesExtensionsClient = volumes_extensions_client.VolumesExtensionsClientJSON |
| VolumesClient = volumes_client.VolumesClientJSON |
| SnapshotsClient = snapshots_client.SnapshotsClientJSON |
| QuotasClient = quotas_client.QuotasClientJSON |
| |
| LOG = logging.getLogger(__name__) |
| |
| |
| class Manager(object): |
| |
| """ |
| Base manager class |
| |
| Manager objects are responsible for providing a configuration object |
| and a client object for a test case to use in performing actions. |
| """ |
| |
| def __init__(self): |
| self.config = tempest.config.TempestConfig() |
| self.client_attr_names = [] |
| |
| |
| class FuzzClientManager(Manager): |
| |
| """ |
| Manager class that indicates the client provided by the manager |
| is a fuzz-testing client that Tempest contains. These fuzz-testing |
| clients are used to be able to throw random or invalid data at |
| an endpoint and check for appropriate error messages returned |
| from the endpoint. |
| """ |
| pass |
| |
| |
| class DefaultClientManager(Manager): |
| |
| """ |
| Manager that provides the default clients to access the various |
| OpenStack APIs. |
| """ |
| |
| NOVACLIENT_VERSION = '2' |
| |
| def __init__(self): |
| super(DefaultClientManager, self).__init__() |
| self.compute_client = self._get_compute_client() |
| self.image_client = self._get_image_client() |
| self.identity_client = self._get_identity_client() |
| self.network_client = self._get_network_client() |
| self.client_attr_names = [ |
| 'compute_client', |
| 'image_client', |
| 'identity_client', |
| 'network_client', |
| ] |
| |
| def _get_compute_client(self, username=None, password=None, |
| tenant_name=None): |
| # Novaclient will not execute operations for anyone but the |
| # identified user, so a new client needs to be created for |
| # each user that operations need to be performed for. |
| if not username: |
| username = self.config.identity.username |
| if not password: |
| password = self.config.identity.password |
| if not tenant_name: |
| tenant_name = self.config.identity.tenant_name |
| |
| if None in (username, password, tenant_name): |
| msg = ("Missing required credentials for compute client. " |
| "username: %(username)s, password: %(password)s, " |
| "tenant_name: %(tenant_name)s") % locals() |
| raise exceptions.InvalidConfiguration(msg) |
| |
| auth_url = self.config.identity.uri |
| dscv = self.config.identity.disable_ssl_certificate_validation |
| |
| client_args = (username, password, tenant_name, auth_url) |
| |
| # Create our default Nova client to use in testing |
| service_type = self.config.compute.catalog_type |
| return novaclient.client.Client(self.NOVACLIENT_VERSION, |
| *client_args, |
| service_type=service_type, |
| no_cache=True, |
| insecure=dscv) |
| |
| def _get_image_client(self): |
| keystone = self._get_identity_client() |
| token = keystone.auth_token |
| endpoint = keystone.service_catalog.url_for(service_type='image', |
| endpoint_type='publicURL') |
| dscv = self.config.identity.disable_ssl_certificate_validation |
| return glanceclient.Client('1', endpoint=endpoint, token=token, |
| insecure=dscv) |
| |
| def _get_identity_client(self, username=None, password=None, |
| tenant_name=None): |
| # This identity client is not intended to check the security |
| # of the identity service, so use admin credentials by default. |
| if not username: |
| username = self.config.identity.admin_username |
| if not password: |
| password = self.config.identity.admin_password |
| if not tenant_name: |
| tenant_name = self.config.identity.admin_tenant_name |
| |
| if None in (username, password, tenant_name): |
| msg = ("Missing required credentials for identity client. " |
| "username: %(username)s, password: %(password)s, " |
| "tenant_name: %(tenant_name)s") % locals() |
| raise exceptions.InvalidConfiguration(msg) |
| |
| auth_url = self.config.identity.uri |
| dscv = self.config.identity.disable_ssl_certificate_validation |
| |
| return keystoneclient.v2_0.client.Client(username=username, |
| password=password, |
| tenant_name=tenant_name, |
| auth_url=auth_url, |
| insecure=dscv) |
| |
| def _get_network_client(self): |
| # The intended configuration is for the network client to have |
| # admin privileges and indicate for whom resources are being |
| # created via a 'tenant_id' parameter. This will often be |
| # preferable to authenticating as a specific user because |
| # working with certain resources (public routers and networks) |
| # often requires admin privileges anyway. |
| username = self.config.identity.admin_username |
| password = self.config.identity.admin_password |
| tenant_name = self.config.identity.admin_tenant_name |
| |
| if None in (username, password, tenant_name): |
| msg = ("Missing required credentials for network client. " |
| "username: %(username)s, password: %(password)s, " |
| "tenant_name: %(tenant_name)s") % locals() |
| raise exceptions.InvalidConfiguration(msg) |
| |
| auth_url = self.config.identity.uri |
| dscv = self.config.identity.disable_ssl_certificate_validation |
| |
| return quantumclient.v2_0.client.Client(username=username, |
| password=password, |
| tenant_name=tenant_name, |
| auth_url=auth_url, |
| insecure=dscv) |
| |
| |
| class ComputeFuzzClientManager(FuzzClientManager): |
| |
| """ |
| Manager that uses the Tempest REST client that can send |
| random or invalid data at the OpenStack Compute API |
| """ |
| |
| def __init__(self, username=None, password=None, tenant_name=None): |
| """ |
| We allow overriding of the credentials used within the various |
| client classes managed by the Manager object. Left as None, the |
| standard username/password/tenant_name is used. |
| |
| :param username: Override of the username |
| :param password: Override of the password |
| :param tenant_name: Override of the tenant name |
| """ |
| super(ComputeFuzzClientManager, self).__init__() |
| |
| # If no creds are provided, we fall back on the defaults |
| # in the config file for the Compute API. |
| username = username or self.config.identity.username |
| password = password or self.config.identity.password |
| tenant_name = tenant_name or self.config.identity.tenant_name |
| |
| if None in (username, password, tenant_name): |
| msg = ("Missing required credentials. " |
| "username: %(username)s, password: %(password)s, " |
| "tenant_name: %(tenant_name)s") % locals() |
| raise exceptions.InvalidConfiguration(msg) |
| |
| auth_url = self.config.identity.uri |
| |
| # Ensure /tokens is in the URL for Keystone... |
| if 'tokens' not in auth_url: |
| auth_url = auth_url.rstrip('/') + '/tokens' |
| |
| if self.config.identity.strategy == 'keystone': |
| client_args = (self.config, username, password, auth_url, |
| tenant_name) |
| else: |
| client_args = (self.config, username, password, auth_url) |
| |
| self.servers_client = ServersClient(*client_args) |
| self.flavors_client = FlavorsClient(*client_args) |
| self.images_client = ImagesClient(*client_args) |
| self.limits_client = LimitsClient(*client_args) |
| self.extensions_client = ExtensionsClient(*client_args) |
| self.keypairs_client = KeyPairsClient(*client_args) |
| self.security_groups_client = SecurityGroupsClient(*client_args) |
| self.floating_ips_client = FloatingIPsClient(*client_args) |
| self.volumes_extensions_client = VolumesExtensionsClient(*client_args) |
| self.volumes_client = VolumesClient(*client_args) |
| self.snapshots_client = SnapshotsClient(*client_args) |
| self.quotas_client = QuotasClient(*client_args) |
| self.network_client = NetworkClient(*client_args) |
| |
| |
| class ComputeFuzzClientAltManager(Manager): |
| |
| """ |
| Manager object that uses the alt_XXX credentials for its |
| managed client objects |
| """ |
| |
| def __init__(self): |
| conf = tempest.config.TempestConfig() |
| super(ComputeFuzzClientAltManager, self).__init__( |
| conf.identity.alt_username, |
| conf.identity.alt_password, |
| conf.identity.alt_tenant_name) |
| |
| |
| class ComputeFuzzClientAdminManager(Manager): |
| |
| """ |
| Manager object that uses the alt_XXX credentials for its |
| managed client objects |
| """ |
| |
| def __init__(self): |
| conf = tempest.config.TempestConfig() |
| super(ComputeFuzzClientAdminManager, self).__init__( |
| conf.compute_admin.username, |
| conf.compute_admin.password, |
| conf.compute_admin.tenant_name) |