| # Copyright 2014 IBM Corp. |
| # |
| # Licensed under the Apache License, Version 2.0 (the "License"); you may |
| # not use this file except in compliance with the License. You may obtain |
| # a copy of the License at |
| # |
| # http://www.apache.org/licenses/LICENSE-2.0 |
| # |
| # Unless required by applicable law or agreed to in writing, software |
| # distributed under the License is distributed on an "AS IS" BASIS, WITHOUT |
| # WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the |
| # License for the specific language governing permissions and limitations |
| # under the License. |
| |
| import keystoneclient.v2_0.client as keystoneclient |
| import mock |
| import neutronclient.v2_0.client as neutronclient |
| from oslo.config import cfg |
| |
| from tempest import clients |
| from tempest.common import http |
| from tempest.common import isolated_creds |
| from tempest import config |
| from tempest import exceptions |
| from tempest.openstack.common.fixture import mockpatch |
| from tempest.services.identity.json import identity_client as json_iden_client |
| from tempest.services.identity.xml import identity_client as xml_iden_client |
| from tempest.services.network.json import network_client as json_network_client |
| from tempest.services.network.xml import network_client as xml_network_client |
| from tempest.tests import base |
| from tempest.tests import fake_config |
| from tempest.tests import fake_http |
| from tempest.tests import fake_identity |
| |
| |
| class TestTenantIsolation(base.TestCase): |
| |
| def setUp(self): |
| super(TestTenantIsolation, self).setUp() |
| self.useFixture(fake_config.ConfigFixture()) |
| self.stubs.Set(config, 'TempestConfigPrivate', fake_config.FakePrivate) |
| self.fake_http = fake_http.fake_httplib2(return_type=200) |
| self.stubs.Set(http.ClosingHttp, 'request', |
| fake_identity._fake_v2_response) |
| cfg.CONF.set_default('operator_role', 'FakeRole', |
| group='object-storage') |
| |
| def test_tempest_client(self): |
| iso_creds = isolated_creds.IsolatedCreds('test class') |
| self.assertTrue(isinstance(iso_creds.identity_admin_client, |
| json_iden_client.IdentityClientJSON)) |
| self.assertTrue(isinstance(iso_creds.network_admin_client, |
| json_network_client.NetworkClientJSON)) |
| |
| def test_official_client(self): |
| self.useFixture(mockpatch.PatchObject(keystoneclient.Client, |
| 'authenticate')) |
| self.useFixture(mockpatch.PatchObject(clients.OfficialClientManager, |
| '_get_image_client')) |
| self.useFixture(mockpatch.PatchObject(clients.OfficialClientManager, |
| '_get_object_storage_client')) |
| self.useFixture(mockpatch.PatchObject(clients.OfficialClientManager, |
| '_get_orchestration_client')) |
| self.useFixture(mockpatch.PatchObject(clients.OfficialClientManager, |
| '_get_ceilometer_client')) |
| iso_creds = isolated_creds.IsolatedCreds('test class', |
| tempest_client=False) |
| self.assertTrue(isinstance(iso_creds.identity_admin_client, |
| keystoneclient.Client)) |
| self.assertTrue(isinstance(iso_creds.network_admin_client, |
| neutronclient.Client)) |
| |
| def test_tempest_client_xml(self): |
| iso_creds = isolated_creds.IsolatedCreds('test class', interface='xml') |
| self.assertEqual(iso_creds.interface, 'xml') |
| self.assertTrue(isinstance(iso_creds.identity_admin_client, |
| xml_iden_client.IdentityClientXML)) |
| self.assertTrue(isinstance(iso_creds.network_admin_client, |
| xml_network_client.NetworkClientXML)) |
| |
| def _mock_user_create(self, id, name): |
| user_fix = self.useFixture(mockpatch.PatchObject( |
| json_iden_client.IdentityClientJSON, |
| 'create_user', |
| return_value=({'status': 200}, |
| {'id': id, 'name': name}))) |
| return user_fix |
| |
| def _mock_tenant_create(self, id, name): |
| tenant_fix = self.useFixture(mockpatch.PatchObject( |
| json_iden_client.IdentityClientJSON, |
| 'create_tenant', |
| return_value=({'status': 200}, |
| {'id': id, 'name': name}))) |
| return tenant_fix |
| |
| def _mock_list_roles(self, id, name): |
| roles_fix = self.useFixture(mockpatch.PatchObject( |
| json_iden_client.IdentityClientJSON, |
| 'list_roles', |
| return_value=({'status': 200}, |
| [{'id': id, 'name': name}, |
| {'id': '1', 'name': 'FakeRole'}]))) |
| return roles_fix |
| |
| def _mock_assign_user_role(self): |
| tenant_fix = self.useFixture(mockpatch.PatchObject( |
| json_iden_client.IdentityClientJSON, |
| 'assign_user_role', |
| return_value=({'status': 200}, |
| {}))) |
| return tenant_fix |
| |
| def _mock_list_role(self): |
| roles_fix = self.useFixture(mockpatch.PatchObject( |
| json_iden_client.IdentityClientJSON, |
| 'list_roles', |
| return_value=({'status': 200}, |
| [{'id': '1', 'name': 'FakeRole'}]))) |
| return roles_fix |
| |
| def _mock_network_create(self, iso_creds, id, name): |
| net_fix = self.useFixture(mockpatch.PatchObject( |
| iso_creds.network_admin_client, |
| 'create_network', |
| return_value=({'status': 200}, |
| {'network': {'id': id, 'name': name}}))) |
| return net_fix |
| |
| def _mock_subnet_create(self, iso_creds, id, name): |
| subnet_fix = self.useFixture(mockpatch.PatchObject( |
| iso_creds.network_admin_client, |
| 'create_subnet', |
| return_value=({'status': 200}, |
| {'subnet': {'id': id, 'name': name}}))) |
| return subnet_fix |
| |
| def _mock_router_create(self, id, name): |
| router_fix = self.useFixture(mockpatch.PatchObject( |
| json_network_client.NetworkClientJSON, |
| 'create_router', |
| return_value=({'status': 200}, |
| {'router': {'id': id, 'name': name}}))) |
| return router_fix |
| |
| @mock.patch('tempest.common.rest_client.RestClient') |
| def test_primary_creds(self, MockRestClient): |
| cfg.CONF.set_default('neutron', False, 'service_available') |
| iso_creds = isolated_creds.IsolatedCreds('test class', |
| password='fake_password') |
| self._mock_assign_user_role() |
| self._mock_list_role() |
| self._mock_tenant_create('1234', 'fake_prim_tenant') |
| self._mock_user_create('1234', 'fake_prim_user') |
| primary_creds = iso_creds.get_primary_creds() |
| self.assertEqual(primary_creds.username, 'fake_prim_user') |
| self.assertEqual(primary_creds.tenant_name, 'fake_prim_tenant') |
| # Verify IDs |
| self.assertEqual(primary_creds.tenant_id, '1234') |
| self.assertEqual(primary_creds.user_id, '1234') |
| |
| @mock.patch('tempest.common.rest_client.RestClient') |
| def test_admin_creds(self, MockRestClient): |
| cfg.CONF.set_default('neutron', False, 'service_available') |
| iso_creds = isolated_creds.IsolatedCreds('test class', |
| password='fake_password') |
| self._mock_list_roles('1234', 'admin') |
| self._mock_user_create('1234', 'fake_admin_user') |
| self._mock_tenant_create('1234', 'fake_admin_tenant') |
| |
| user_mock = mock.patch.object(json_iden_client.IdentityClientJSON, |
| 'assign_user_role') |
| user_mock.start() |
| self.addCleanup(user_mock.stop) |
| with mock.patch.object(json_iden_client.IdentityClientJSON, |
| 'assign_user_role') as user_mock: |
| admin_creds = iso_creds.get_admin_creds() |
| user_mock.assert_has_calls([ |
| mock.call('1234', '1234', '1'), |
| mock.call('1234', '1234', '1234')]) |
| self.assertEqual(admin_creds.username, 'fake_admin_user') |
| self.assertEqual(admin_creds.tenant_name, 'fake_admin_tenant') |
| # Verify IDs |
| self.assertEqual(admin_creds.tenant_id, '1234') |
| self.assertEqual(admin_creds.user_id, '1234') |
| |
| @mock.patch('tempest.common.rest_client.RestClient') |
| def test_all_cred_cleanup(self, MockRestClient): |
| cfg.CONF.set_default('neutron', False, 'service_available') |
| iso_creds = isolated_creds.IsolatedCreds('test class', |
| password='fake_password') |
| self._mock_assign_user_role() |
| roles_fix = self._mock_list_role() |
| tenant_fix = self._mock_tenant_create('1234', 'fake_prim_tenant') |
| user_fix = self._mock_user_create('1234', 'fake_prim_user') |
| iso_creds.get_primary_creds() |
| tenant_fix.cleanUp() |
| user_fix.cleanUp() |
| tenant_fix = self._mock_tenant_create('12345', 'fake_alt_tenant') |
| user_fix = self._mock_user_create('12345', 'fake_alt_user') |
| iso_creds.get_alt_creds() |
| tenant_fix.cleanUp() |
| user_fix.cleanUp() |
| roles_fix.cleanUp() |
| tenant_fix = self._mock_tenant_create('123456', 'fake_admin_tenant') |
| user_fix = self._mock_user_create('123456', 'fake_admin_user') |
| self._mock_list_roles('123456', 'admin') |
| iso_creds.get_admin_creds() |
| user_mock = self.patch( |
| 'tempest.services.identity.json.identity_client.' |
| 'IdentityClientJSON.delete_user') |
| tenant_mock = self.patch( |
| 'tempest.services.identity.json.identity_client.' |
| 'IdentityClientJSON.delete_tenant') |
| iso_creds.clear_isolated_creds() |
| # Verify user delete calls |
| calls = user_mock.mock_calls |
| self.assertEqual(len(calls), 3) |
| args = map(lambda x: x[1][0], calls) |
| self.assertIn('1234', args) |
| self.assertIn('12345', args) |
| self.assertIn('123456', args) |
| # Verify tenant delete calls |
| calls = tenant_mock.mock_calls |
| self.assertEqual(len(calls), 3) |
| args = map(lambda x: x[1][0], calls) |
| self.assertIn('1234', args) |
| self.assertIn('12345', args) |
| self.assertIn('123456', args) |
| |
| @mock.patch('tempest.common.rest_client.RestClient') |
| def test_alt_creds(self, MockRestClient): |
| cfg.CONF.set_default('neutron', False, 'service_available') |
| iso_creds = isolated_creds.IsolatedCreds('test class', |
| password='fake_password') |
| self._mock_assign_user_role() |
| self._mock_list_role() |
| self._mock_user_create('1234', 'fake_alt_user') |
| self._mock_tenant_create('1234', 'fake_alt_tenant') |
| alt_creds = iso_creds.get_alt_creds() |
| self.assertEqual(alt_creds.username, 'fake_alt_user') |
| self.assertEqual(alt_creds.tenant_name, 'fake_alt_tenant') |
| # Verify IDs |
| self.assertEqual(alt_creds.tenant_id, '1234') |
| self.assertEqual(alt_creds.user_id, '1234') |
| |
| @mock.patch('tempest.common.rest_client.RestClient') |
| def test_network_creation(self, MockRestClient): |
| iso_creds = isolated_creds.IsolatedCreds('test class', |
| password='fake_password') |
| self._mock_assign_user_role() |
| self._mock_list_role() |
| self._mock_user_create('1234', 'fake_prim_user') |
| self._mock_tenant_create('1234', 'fake_prim_tenant') |
| self._mock_network_create(iso_creds, '1234', 'fake_net') |
| self._mock_subnet_create(iso_creds, '1234', 'fake_subnet') |
| self._mock_router_create('1234', 'fake_router') |
| router_interface_mock = self.patch( |
| 'tempest.services.network.json.network_client.NetworkClientJSON.' |
| 'add_router_interface_with_subnet_id') |
| iso_creds.get_primary_creds() |
| router_interface_mock.called_once_with('1234', '1234') |
| network = iso_creds.get_primary_network() |
| subnet = iso_creds.get_primary_subnet() |
| router = iso_creds.get_primary_router() |
| self.assertEqual(network['id'], '1234') |
| self.assertEqual(network['name'], 'fake_net') |
| self.assertEqual(subnet['id'], '1234') |
| self.assertEqual(subnet['name'], 'fake_subnet') |
| self.assertEqual(router['id'], '1234') |
| self.assertEqual(router['name'], 'fake_router') |
| |
| @mock.patch('tempest.common.rest_client.RestClient') |
| def test_network_cleanup(self, MockRestClient): |
| iso_creds = isolated_creds.IsolatedCreds('test class', |
| password='fake_password') |
| # Create primary tenant and network |
| self._mock_assign_user_role() |
| roles_fix = self._mock_list_role() |
| user_fix = self._mock_user_create('1234', 'fake_prim_user') |
| tenant_fix = self._mock_tenant_create('1234', 'fake_prim_tenant') |
| net_fix = self._mock_network_create(iso_creds, '1234', 'fake_net') |
| subnet_fix = self._mock_subnet_create(iso_creds, '1234', 'fake_subnet') |
| router_fix = self._mock_router_create('1234', 'fake_router') |
| router_interface_mock = self.patch( |
| 'tempest.services.network.json.network_client.NetworkClientJSON.' |
| 'add_router_interface_with_subnet_id') |
| iso_creds.get_primary_creds() |
| router_interface_mock.called_once_with('1234', '1234') |
| router_interface_mock.reset_mock() |
| tenant_fix.cleanUp() |
| user_fix.cleanUp() |
| net_fix.cleanUp() |
| subnet_fix.cleanUp() |
| router_fix.cleanUp() |
| # Create alternate tenant and network |
| user_fix = self._mock_user_create('12345', 'fake_alt_user') |
| tenant_fix = self._mock_tenant_create('12345', 'fake_alt_tenant') |
| net_fix = self._mock_network_create(iso_creds, '12345', 'fake_alt_net') |
| subnet_fix = self._mock_subnet_create(iso_creds, '12345', |
| 'fake_alt_subnet') |
| router_fix = self._mock_router_create('12345', 'fake_alt_router') |
| iso_creds.get_alt_creds() |
| router_interface_mock.called_once_with('12345', '12345') |
| router_interface_mock.reset_mock() |
| tenant_fix.cleanUp() |
| user_fix.cleanUp() |
| net_fix.cleanUp() |
| subnet_fix.cleanUp() |
| router_fix.cleanUp() |
| roles_fix.cleanUp() |
| # Create admin tenant and networks |
| user_fix = self._mock_user_create('123456', 'fake_admin_user') |
| tenant_fix = self._mock_tenant_create('123456', 'fake_admin_tenant') |
| net_fix = self._mock_network_create(iso_creds, '123456', |
| 'fake_admin_net') |
| subnet_fix = self._mock_subnet_create(iso_creds, '123456', |
| 'fake_admin_subnet') |
| router_fix = self._mock_router_create('123456', 'fake_admin_router') |
| self._mock_list_roles('123456', 'admin') |
| iso_creds.get_admin_creds() |
| self.patch('tempest.services.identity.json.identity_client.' |
| 'IdentityClientJSON.delete_user') |
| self.patch('tempest.services.identity.json.identity_client.' |
| 'IdentityClientJSON.delete_tenant') |
| net = mock.patch.object(iso_creds.network_admin_client, |
| 'delete_network') |
| net_mock = net.start() |
| subnet = mock.patch.object(iso_creds.network_admin_client, |
| 'delete_subnet') |
| subnet_mock = subnet.start() |
| router = mock.patch.object(iso_creds.network_admin_client, |
| 'delete_router') |
| router_mock = router.start() |
| remove_router_interface_mock = self.patch( |
| 'tempest.services.network.json.network_client.NetworkClientJSON.' |
| 'remove_router_interface_with_subnet_id') |
| return_values = ({'status': 200}, {'ports': []}) |
| port_list_mock = mock.patch.object(iso_creds.network_admin_client, |
| 'list_ports', |
| return_value=return_values) |
| |
| port_list_mock.start() |
| iso_creds.clear_isolated_creds() |
| # Verify remove router interface calls |
| calls = remove_router_interface_mock.mock_calls |
| self.assertEqual(len(calls), 3) |
| args = map(lambda x: x[1], calls) |
| self.assertIn(('1234', '1234'), args) |
| self.assertIn(('12345', '12345'), args) |
| self.assertIn(('123456', '123456'), args) |
| # Verify network delete calls |
| calls = net_mock.mock_calls |
| self.assertEqual(len(calls), 3) |
| args = map(lambda x: x[1][0], calls) |
| self.assertIn('1234', args) |
| self.assertIn('12345', args) |
| self.assertIn('123456', args) |
| # Verify subnet delete calls |
| calls = subnet_mock.mock_calls |
| self.assertEqual(len(calls), 3) |
| args = map(lambda x: x[1][0], calls) |
| self.assertIn('1234', args) |
| self.assertIn('12345', args) |
| self.assertIn('123456', args) |
| # Verify router delete calls |
| calls = router_mock.mock_calls |
| self.assertEqual(len(calls), 3) |
| args = map(lambda x: x[1][0], calls) |
| self.assertIn('1234', args) |
| self.assertIn('12345', args) |
| self.assertIn('123456', args) |
| |
| @mock.patch('tempest.common.rest_client.RestClient') |
| def test_network_alt_creation(self, MockRestClient): |
| iso_creds = isolated_creds.IsolatedCreds('test class', |
| password='fake_password') |
| self._mock_assign_user_role() |
| self._mock_list_role() |
| self._mock_user_create('1234', 'fake_alt_user') |
| self._mock_tenant_create('1234', 'fake_alt_tenant') |
| self._mock_network_create(iso_creds, '1234', 'fake_alt_net') |
| self._mock_subnet_create(iso_creds, '1234', 'fake_alt_subnet') |
| self._mock_router_create('1234', 'fake_alt_router') |
| router_interface_mock = self.patch( |
| 'tempest.services.network.json.network_client.NetworkClientJSON.' |
| 'add_router_interface_with_subnet_id') |
| iso_creds.get_alt_creds() |
| router_interface_mock.called_once_with('1234', '1234') |
| network = iso_creds.get_alt_network() |
| subnet = iso_creds.get_alt_subnet() |
| router = iso_creds.get_alt_router() |
| self.assertEqual(network['id'], '1234') |
| self.assertEqual(network['name'], 'fake_alt_net') |
| self.assertEqual(subnet['id'], '1234') |
| self.assertEqual(subnet['name'], 'fake_alt_subnet') |
| self.assertEqual(router['id'], '1234') |
| self.assertEqual(router['name'], 'fake_alt_router') |
| |
| @mock.patch('tempest.common.rest_client.RestClient') |
| def test_network_admin_creation(self, MockRestClient): |
| iso_creds = isolated_creds.IsolatedCreds('test class', |
| password='fake_password') |
| self._mock_assign_user_role() |
| self._mock_user_create('1234', 'fake_admin_user') |
| self._mock_tenant_create('1234', 'fake_admin_tenant') |
| self._mock_network_create(iso_creds, '1234', 'fake_admin_net') |
| self._mock_subnet_create(iso_creds, '1234', 'fake_admin_subnet') |
| self._mock_router_create('1234', 'fake_admin_router') |
| router_interface_mock = self.patch( |
| 'tempest.services.network.json.network_client.NetworkClientJSON.' |
| 'add_router_interface_with_subnet_id') |
| self._mock_list_roles('123456', 'admin') |
| iso_creds.get_admin_creds() |
| router_interface_mock.called_once_with('1234', '1234') |
| network = iso_creds.get_admin_network() |
| subnet = iso_creds.get_admin_subnet() |
| router = iso_creds.get_admin_router() |
| self.assertEqual(network['id'], '1234') |
| self.assertEqual(network['name'], 'fake_admin_net') |
| self.assertEqual(subnet['id'], '1234') |
| self.assertEqual(subnet['name'], 'fake_admin_subnet') |
| self.assertEqual(router['id'], '1234') |
| self.assertEqual(router['name'], 'fake_admin_router') |
| |
| @mock.patch('tempest.common.rest_client.RestClient') |
| def test_no_network_resources(self, MockRestClient): |
| net_dict = { |
| 'network': False, |
| 'router': False, |
| 'subnet': False, |
| 'dhcp': False, |
| } |
| iso_creds = isolated_creds.IsolatedCreds('test class', |
| password='fake_password', |
| network_resources=net_dict) |
| self._mock_assign_user_role() |
| self._mock_list_role() |
| self._mock_user_create('1234', 'fake_prim_user') |
| self._mock_tenant_create('1234', 'fake_prim_tenant') |
| net = mock.patch.object(iso_creds.network_admin_client, |
| 'delete_network') |
| net_mock = net.start() |
| subnet = mock.patch.object(iso_creds.network_admin_client, |
| 'delete_subnet') |
| subnet_mock = subnet.start() |
| router = mock.patch.object(iso_creds.network_admin_client, |
| 'delete_router') |
| router_mock = router.start() |
| |
| iso_creds.get_primary_creds() |
| self.assertEqual(net_mock.mock_calls, []) |
| self.assertEqual(subnet_mock.mock_calls, []) |
| self.assertEqual(router_mock.mock_calls, []) |
| network = iso_creds.get_primary_network() |
| subnet = iso_creds.get_primary_subnet() |
| router = iso_creds.get_primary_router() |
| self.assertIsNone(network) |
| self.assertIsNone(subnet) |
| self.assertIsNone(router) |
| |
| @mock.patch('tempest.common.rest_client.RestClient') |
| def test_router_without_network(self, MockRestClient): |
| net_dict = { |
| 'network': False, |
| 'router': True, |
| 'subnet': False, |
| 'dhcp': False, |
| } |
| iso_creds = isolated_creds.IsolatedCreds('test class', |
| password='fake_password', |
| network_resources=net_dict) |
| self._mock_assign_user_role() |
| self._mock_list_role() |
| self._mock_user_create('1234', 'fake_prim_user') |
| self._mock_tenant_create('1234', 'fake_prim_tenant') |
| self.assertRaises(exceptions.InvalidConfiguration, |
| iso_creds.get_primary_creds) |
| |
| @mock.patch('tempest.common.rest_client.RestClient') |
| def test_subnet_without_network(self, MockRestClient): |
| net_dict = { |
| 'network': False, |
| 'router': False, |
| 'subnet': True, |
| 'dhcp': False, |
| } |
| iso_creds = isolated_creds.IsolatedCreds('test class', |
| password='fake_password', |
| network_resources=net_dict) |
| self._mock_assign_user_role() |
| self._mock_list_role() |
| self._mock_user_create('1234', 'fake_prim_user') |
| self._mock_tenant_create('1234', 'fake_prim_tenant') |
| self.assertRaises(exceptions.InvalidConfiguration, |
| iso_creds.get_primary_creds) |
| |
| @mock.patch('tempest.common.rest_client.RestClient') |
| def test_dhcp_without_subnet(self, MockRestClient): |
| net_dict = { |
| 'network': False, |
| 'router': False, |
| 'subnet': False, |
| 'dhcp': True, |
| } |
| iso_creds = isolated_creds.IsolatedCreds('test class', |
| password='fake_password', |
| network_resources=net_dict) |
| self._mock_assign_user_role() |
| self._mock_list_role() |
| self._mock_user_create('1234', 'fake_prim_user') |
| self._mock_tenant_create('1234', 'fake_prim_tenant') |
| self.assertRaises(exceptions.InvalidConfiguration, |
| iso_creds.get_primary_creds) |