def _create_projects(self):
self.p1 = utils.create_project(self.admin_client, 'p1', self.d1.id)
utils.grant_project_role(self.admin_client, self.admin_role.id,
self.admin.id, self.p1.id)
self.p2 = utils.create_project(self.admin_client, 'p2', self.d1.id)
utils.grant_project_role(self.admin_client, self.admin_role.id,
self.admin.id, self.p2.id)
def _create_projects(self):
self.p1 = utils.create_project(self.admin_client, 'p1', self.d1.id)
utils.grant_project_role(self.admin_client, self.admin_role.id,
self.admin.id, self.p1.id)
utils.grant_project_role(self.admin_client, self.cloud_admin_role.id,
self.admin.id, self.p1.id)
self.p2 = utils.create_project(self.admin_client, 'p2', self.d1.id)
utils.grant_project_role(self.admin_client, self.admin_role.id,
self.admin.id, self.p2.id)
utils.grant_project_role(self.admin_client, self.cloud_admin_role.id,
self.admin.id, self.p2.id)
def __init__(self, name, basepath, template='cartridge'):
self.name = name
self.basepath = basepath
self.template = template
# create project and save its path
self.path = create_project(basepath, name, template)
# save tarantool_enterprise_is_used() result to variable
tarantool_is_enterprise = tarantool_enterprise_is_used()
# files that should be delivered in the result package
project_files = recursive_listdir(self.path)
self.distribution_files = filter_out_files_removed_on_pack(project_files)
self.distribution_files.add('VERSION')
if tarantool_is_enterprise:
self.distribution_files.update({'tarantool', 'tarantoolctl'})
# project rockspec name and path
self.rockspec_name = '{}-scm-1.rockspec'.format(self.name)
self.rockspec_path = os.path.join(self.path, self.rockspec_name)
# rocks that should be delivered in the result package
self.rocks_content = get_base_project_rocks(self.name, self.rockspec_name)
# keys that should be mentioned in the package VERSION file
self.version_file_keys = {
'TARANTOOL',
self.name,
# default application dependencies
'cartridge',
'luatest',
}
if tarantool_is_enterprise:
self.version_file_keys.add('TARANTOOL_SDK')
def original_project(module_tmpdir):
project_name = 'original-project'
project_path = create_project(module_tmpdir, project_name, 'cartridge')
# add third-party module dependency to the rockspec
current_rockspec = None
with open(
os.path.join(project_path,
'{}-scm-1.rockspec'.format(project_name)), 'r') as f:
current_rockspec = f.read()
with open(
os.path.join(project_path,
'{}-scm-1.rockspec'.format(project_name)), 'w') as f:
f.write(
re.sub(r"dependencies = {",
"dependencies = {\n 'custom-module == scm-1',",
current_rockspec))
# create custom-module itself
dependency_module_path = os.path.join(project_path, 'third_party',
'custom-module')
os.makedirs(dependency_module_path)
with open(
os.path.join(dependency_module_path,
'custom-module-scm-1.rockspec'), 'w') as f:
rockspec_lines = [
"package = 'custom-module'",
"version = 'scm-1'",
"source = { url = '/dev/null' }",
"build = { type = 'none'}",
]
f.write('\n'.join(rockspec_lines))
# add cartridge.pre-build file to install custom-module dependency
with open(os.path.join(project_path, 'cartridge.pre-build'), 'w') as f:
prebuild_script_lines = [
"#!/bin/sh",
"tarantoolctl rocks make --chdir ./third_party/custom-module",
]
f.write('\n'.join(prebuild_script_lines))
# add cartridge.post-build file to remove test/ and tmp/ contents
with open(os.path.join(project_path, 'cartridge.post-build'), 'w') as f:
postbuild_script_lines = ["#!/bin/sh", "rm -rf test tmp third_party"]
f.write('\n'.join(postbuild_script_lines))
# add custom-module to rocks content
rocks_content = get_rocks_content(project_name)
rocks_content.add('.rocks/share/tarantool/rocks/custom-module')
return {
'name': project_name,
'path': project_path,
'distribution_files_list': get_distribution_files(project_name),
'rocks_content': rocks_content,
}
def launch():
"""launch your project.
This function execute flow to launch project.
--------
Args:
None
Returns:
None
"""
api = authenticate()
competitions = show_and_get_competitions_list(api)
choice = input_competition_number()
competition_number = valid_choice(choice, len(competitions))
ref = getattr(competitions[competition_number], "ref")
create_project(ref)
def __init__(self,
cartridge_cmd,
name,
basepath,
template='cartridge',
create_func=None):
self.name = name
self.basepath = basepath
self.template = template
self.deprecated_flow_is_used = False
self.vshard_groups_names = None
self.custom_roles = None
if create_func is None:
# create project and save its path
self.path = create_project(cartridge_cmd, basepath, name, template)
else:
self.path = create_func(basepath)
# save tarantool_enterprise_is_used() result to variable
tarantool_is_enterprise = tarantool_enterprise_is_used()
# files that should be delivered in the result package
project_files = recursive_listdir(self.path)
self.distribution_files = filter_out_files_removed_on_pack(
project_files)
self.distribution_files.add('VERSION')
self.distribution_files.add('VERSION.lua')
if tarantool_is_enterprise:
self.distribution_files.update({'tarantool', 'tarantoolctl'})
# project rockspec name and path
self.rockspec_name = '{}-scm-1.rockspec'.format(self.name)
self.rockspec_path = os.path.join(self.path, self.rockspec_name)
# rocks that should be delivered in the result package
self.rocks_content = get_base_project_rocks(self.name,
self.rockspec_name)
# keys that should be mentioned in the package VERSION file
self.version_file_keys = {
'TARANTOOL',
self.name,
# default application dependencies
'cartridge',
}
if tarantool_is_enterprise:
self.version_file_keys.add('TARANTOOL_SDK')
self.image_runtime_requirements_filepath = None
def project_path(request, module_tmpdir):
if request.param == 'cartridge' and not tarantool_enterprise_is_used():
pytest.skip('Skip cartridge template test for Opensource Tarantool')
project_path = create_project(module_tmpdir, 'project-' + request.param,
request.param)
## HACK: install cartridge rocks
if request.param == 'cartridge':
cmd = [
'tarantoolctl',
'rocks',
'install',
'https://raw.githubusercontent.com/rosik/cartridge/master/cartridge-scm-1.rockspec',
]
process = subprocess.run(cmd, cwd=project_path)
assert process.returncode == 0
return project_path
def deprecared_project(module_tmpdir):
project_name = 'deprecated-project'
project_path = create_project(module_tmpdir, project_name, 'cartridge')
def create_file(path, text=None):
with open(path, 'w') as f:
if text:
f.write(text)
# create .cartridge.ignore file
for item in ignored_data:
directory = os.path.join(project_path, item['dir'])
if not os.path.exists(directory):
os.makedirs(directory)
create_file(os.path.join(directory, item['file']))
create_file(os.path.join(project_path, ".cartridge.ignore"),
'\n'.join(ignore_patterns))
os.remove(os.path.join(project_path, 'cartridge.pre-build'))
os.remove(os.path.join(project_path, 'cartridge.post-build'))
distribution_files_list = get_distribution_files(project_name)
distribution_files_list = distribution_files_list.union([
'ignored', # special folder for test work cartridge ignore
'ignored/asterisk',
'test',
'test/helper',
'test/integration',
'test/unit',
'tmp',
'tmp/.keep',
])
return {
'name': project_name,
'path': project_path,
'distribution_files_list': distribution_files_list,
'rocks_content': get_rocks_content(project_name)
}
def project_path(request, module_tmpdir):
if request.param == 'cartridge' and not tarantool_enterprise_is_used():
pytest.skip('Skip cartridge template test for Opensource Tarantool')
return create_project(module_tmpdir, 'project-' + request.param,
request.param)
"""
In the case of using cloud_admin rule using
a specific domain:
"admin_required": "(role:admin or is_admin:1)
and domain_id:cloud_admin_domain_id",
"""
# Regular admin login
admin_client = utils.create_client('admin', 'admin', 'admin', 'Default',
'Default', 'http://*****:*****@example.com', admin_project.id,
admin_domain.id)
# Create cloud_admin role (admin in this case)
admin_role = utils.create_role(admin_client, 'admin')
# Grant roles at cloud_admin_domain and cloud_admin_project
utils.grant_project_role(admin_client, admin_role.id, cloud_admin.id,
admin_project.id)
utils.grant_domain_role(admin_client, admin_role.id, cloud_admin.id,
admin_domain.id)
def main():
f = open('log_test_authorization_cider.txt', 'w')
original = sys.stdout
sys.stdout = utils.Tee(sys.stdout, f)
token = 0
domain_id, production_project_id, cms_project_id, atlas_project_id = (
0, ) * 4
computing_project_id, visualisation_project_id, services_project_id = (
0, ) * 3
operations_project_id = 0
try:
token_json = utils.default_token_json('admin', 'demo')
token = utils.get_token(token_json)
print '======================================================================='
print 'This script will use the follow hierarchy to validate the authorization'
print 'actions related to Nested Quotas on Cinder'
print '======================================================================='
print 'Hierarchy:'
print ' Domain_X '
print ' |'
print ' ProductionIT - Mike'
print ' / \ '
print ' Jay - CMS ATLAS - John'
print ' / \ / \ '
print ' Computing Visualisation Operations Services '
print ' Walter Duncan Eric Xing'
print ''
print 'Actors:'
print ''
print 'Mike - Cloud Admin (i.e. role:cloud-admin) of ProductionIT'
print 'Jay - Manager (i.e. role: project-admin) of Project CMS'
print 'John - Manager (i.e. role: project-admin) of Project ATLAS'
print 'Eric - Manager (i.e. role: project-admin) of Project Operations'
print 'Xing - Manager (i.e. role: project-admin) of Project Services'
print 'Walter - Manager (i.e. role: project-admin) of Project Computing'
print 'Duncan - Manager (i.e. role: project-admin) of Project Visualisation'
print '======================================================================='
admin_role = utils.get_role(token, 'admin')
# Create a new domain
print 'Creating the domain...'
domain = utils.domain_json()
domain_id = utils.create_domain(domain, token)
print 'Domain created: %s' % domain_id
print '======================================================================='
print 'Creating the projects...'
# Create project ProductionIT
production_project_json = utils.project_json('ProductionIT', domain_id)
production_project_id = utils.create_project(production_project_json,
token)
print "ProductionIT created: %s" % production_project_id
print '======================================================================='
# Create Project CMS
cms_project_json = utils.project_json('CMS', domain_id,
production_project_id)
cms_project_id = utils.create_project(cms_project_json, token)
print "CMS created: %s" % cms_project_id
print '======================================================================='
# Create Project Atlas
atlas_project_json = utils.project_json('ATLAS', domain_id,
production_project_id)
atlas_project_id = utils.create_project(atlas_project_json, token)
print "ATLAS created: %s" % atlas_project_id
print '======================================================================='
# Create Project computing
computing_project_json = utils.project_json('computing', domain_id,
cms_project_id)
computing_project_id = utils.create_project(computing_project_json,
token)
print "Computing created: %s" % computing_project_id
print '======================================================================='
# Create Project visualisation
visual_project_json = utils.project_json('visualisation', domain_id,
cms_project_id)
visualisation_project_id = utils.create_project(
visual_project_json, token)
print "Visualisation created: %s" % visualisation_project_id
print '======================================================================='
# Create Project services
services_project_json = utils.project_json('services', domain_id,
atlas_project_id)
services_project_id = utils.create_project(services_project_json,
token)
print "Services created: %s" % services_project_id
print '======================================================================='
# Create Project operations
operations_project_json = utils.project_json('operations', domain_id,
atlas_project_id)
operations_project_id = utils.create_project(operations_project_json,
token)
print "Operations created: %s" % operations_project_id
print '======================================================================='
# Creating users
# Creating and grant admin role to mike in production
print 'Creating the users...'
mike = utils.create_user(token, 'Mike', domain_id)
print "Mike: %s" % mike
utils.grant_user_role(token, mike, admin_role, [production_project_id])
print '======================================================================='
# Creating and grant admin role to jay in cms
jay = utils.create_user(token, 'Jay', domain_id)
print "Jay: %s" % jay
utils.grant_user_role(token, jay, admin_role, [cms_project_id])
print '======================================================================='
# Creating and grant admin role to john in atlas
john = utils.create_user(token, 'John', domain_id)
print "John: %s" % john
utils.grant_user_role(token, john, admin_role, [atlas_project_id])
print '======================================================================='
# Creating and grant admin role to eric in operations
eric = utils.create_user(token, 'Eric', domain_id)
print "Eric: %s" % eric
utils.grant_user_role(token, eric, admin_role, [operations_project_id])
print '======================================================================='
# Creating and grant admin role to xing in services
xing = utils.create_user(token, 'Xing', domain_id)
print "Xing: %s" % xing
utils.grant_user_role(token, xing, admin_role, [services_project_id])
print '======================================================================='
# Creating and grant admin role to walter in computing
walter = utils.create_user(token, 'Walter', domain_id)
print "Walter: %s" % walter
utils.grant_user_role(token, walter, admin_role,
[computing_project_id])
print '======================================================================='
# Creating and grant admin role to duncan in visualisation
duncan = utils.create_user(token, 'Duncan', domain_id)
print "Ducnan: %s" % duncan
utils.grant_user_role(token, duncan, admin_role,
[visualisation_project_id])
print '======================================================================='
print 'Now, we will get a token for Mike in ProductionIT (root project)'
print 'and show that Mike can update the quota for the root project.'
print '======================================================================='
# Get a token for Mike in ProductionIT
mike_token_json = utils.get_token_json('Mike', production_project_id)
mike_token = utils.get_token(mike_token_json)
print 'Token for mike: %s' % mike_token
print '======================================================================='
# Update the Production Quota to 100
print 'Updating the ProductionIT quota for 100...'
quota_value = 100
production_quota = utils.update_quota(mike_token,
production_project_id,
production_project_id,
quota_value)
print "Mike updating Production Quota: %s" % production_quota
print '======================================================================='
print 'Trying get the default quota for CMS...'
# Verify that the default quotas for CMS is zero
cms_quota = utils.get_quota(mike_token, production_project_id,
cms_project_id)
print "Mike getting CMS Quota: %s" % cms_quota
print '======================================================================='
print 'Trying update the CMS quota for 45...'
# Update the CMS Quota to 45
quota_value = 45
new_cms_quota = utils.update_quota(mike_token, production_project_id,
cms_project_id, quota_value)
print "Mike updating CMS Quota: %s" % new_cms_quota
print '======================================================================='
print 'Now, we get a token for Jay in CMS and we will try update the CMS Quota'
print '======================================================================='
# Get a token for Jay in CMS
jay_token_json = utils.get_token_json('Jay', cms_project_id)
jay_token = utils.get_token(jay_token_json)
print 'Token for Jay: %s ' % jay_token
print '======================================================================='
# Raise a exception when try update the CMS Quota with
# only a project_admin
print 'Trying update the CMS quota for 50'
quota_value = 50
forbidden_error = 403
new_cms_quota = utils.update_quota(jay_token, cms_project_id,
cms_project_id, quota_value)
if new_cms_quota == forbidden_error:
print 'Error: Cannot update the quota for CMS with user Jay'
print '======================================================================='
# Verify that the default quotas for Visualisation is zero
cms_quota = utils.get_quota(jay_token, cms_project_id, cms_project_id)
print "Trying get the CMS Quota: %s" % cms_quota
print '======================================================================='
# Raise a exception when try update the Visualisation Quota with a
# project_admin in a non-root project
print 'Trying update the Visualisation Quota with Jay'
quota_value = 10
new_visualisation_quota = utils.update_quota(jay_token, cms_project_id,
visualisation_project_id,
quota_value)
if new_visualisation_quota == forbidden_error:
print 'Error: Cannot update the quota for Visualisation with user Jay'
else:
print 'New Visualisation Quota: %s ' % new_visualisation_quota
print '======================================================================='
# Raise a exception when try get the Visualisation Quota with a
# project_admin in a non-root project
print 'Trying get the Visualisation Quota with Jay'
visualisation_quota = utils.get_quota(jay_token, cms_project_id,
visualisation_project_id)
if visualisation_quota == forbidden_error:
print 'Error: Cannot get the quota for Visualisation with user Jay'
else:
print 'Get Visualisation Quota: %s ' % new_visualisation_quota
print '======================================================================='
# Raise a exception when try get the Atlas Quota with a project_admin
# in a non-root project
atlas_quota = utils.get_quota(jay_token, cms_project_id,
atlas_project_id)
if atlas_quota == forbidden_error:
print 'Error: Cannot get the quota for Atlas with user Jay'
print '======================================================================='
# Get a token for Duncan in Visualisation
duncan_token_json = utils.get_token_json('Duncan',
visualisation_project_id)
duncan_token = utils.get_token(duncan_token_json)
print 'Get a token for Duncan in Visualisation: %s ' % duncan_token
# Raise a exception when try get the Atlas Quota with a project_admin
# in a subproject
cms_quota = utils.get_quota(duncan_token, visualisation_project_id,
cms_project_id)
if cms_quota == forbidden_error:
print 'Error: Cannot get the quota for CMS with user Duncan'
print '======================================================================='
# Raise a exception when try update the Visualisation Quota
# with a project_admin in a non-root project
quota_value = 10
new_visualisation_quota = utils.update_quota(duncan_token,
visualisation_project_id,
visualisation_project_id,
quota_value)
if new_visualisation_quota == forbidden_error:
print('Cannot update the quota for Visualisation with user Duncan')
print '======================================================================='
# Verify that the default quotas for Visualisation is zero
visual_quota = utils.get_quota(duncan_token, visualisation_project_id,
visualisation_project_id)
print('Duncan getting the Visualisation Quota: %s' % visual_quota)
print '======================================================================='
print 'Clean up...'
except Exception as e:
print 'Error'
tear_down(token, [
production_project_id, cms_project_id, atlas_project_id,
computing_project_id, visualisation_project_id,
services_project_id, operations_project_id
], domain_id)
f.close()
print e
tear_down(token, [
production_project_id, cms_project_id, atlas_project_id,
computing_project_id, visualisation_project_id, services_project_id,
operations_project_id
], domain_id)
f.close()
and domain_id:cloud_admin_domain_id",
"""
# Regular admin login
admin_client = utils.create_client('admin',
'admin',
'admin',
'Default',
'Default',
'http://*****:*****@example.com',
admin_project.id,
admin_domain.id)
# Create cloud_admin role (admin in this case)
admin_role = utils.create_role(admin_client, 'admin')
# Grant roles at cloud_admin_domain and cloud_admin_project
utils.grant_project_role(admin_client, admin_role.id,
cloud_admin.id, admin_project.id)
def project_path(module_tmpdir):
return create_project(module_tmpdir, project_name, 'plain')
def project_path(request, module_tmpdir):
return create_project(module_tmpdir, 'project-' + request.param,
request.param)
def main():
f = open('log_test_values_cider.txt', 'w')
original = sys.stdout
sys.stdout = utils.Tee(sys.stdout, f)
token = 0
domain_id, production_project_id, cms_project_id, atlas_project_id = (0, )*4
computing_project_id, visualisation_project_id, services_project_id = (0, )*3
operations_project_id = 0
try:
token_json = utils.default_token_json('admin', 'demo')
token = utils.get_token(token_json)
print '======================================================================='
print 'This script will use the follow hierarchy to validate the quota values'
print 'related to Nested Quotas on Cinder'
print '======================================================================='
print 'Hierarchy:'
print ' Domain_X '
print ' |'
print ' ProductionIT - Mike'
print ' / \ '
print ' Jay - CMS ATLAS - John'
print ' / \ / \ '
print ' Computing Visualisation Operations Services '
print ' Walter Duncan Eric Xing'
print ''
print 'Actors:'
print ''
print 'Mike - Cloud Admin (i.e. role:cloud-admin) of ProductionIT'
print 'Jay - Manager (i.e. role: project-admin) of Project CMS'
print 'John - Manager (i.e. role: project-admin) of Project ATLAS'
print 'Eric - Manager (i.e. role: project-admin) of Project Operations'
print 'Xing - Manager (i.e. role: project-admin) of Project Services'
print 'Walter - Manager (i.e. role: project-admin) of Project Computing'
print 'Duncan - Manager (i.e. role: project-admin) of Project Visualisation'
print '======================================================================='
# Create a new domain
print 'Creating the domain...'
domain = utils.domain_json()
domain_id = utils.create_domain(domain, token)
print 'Domain created: %s' % domain_id
print '======================================================================='
print 'Creating the projects...'
# Create project ProductionIT
production_project_json = utils.project_json('ProductionIT', domain_id)
production_project_id = utils.create_project(production_project_json,
token)
print "ProductionIT created: %s" % production_project_id
print '======================================================================='
# Create Project CMS
cms_project_json = utils.project_json('CMS', domain_id,
production_project_id)
cms_project_id = utils.create_project(cms_project_json, token)
print "CMS created: %s" % cms_project_id
print '======================================================================='
# Create Project Atlas
atlas_project_json = utils.project_json('ATLAS',
domain_id,
production_project_id)
atlas_project_id = utils.create_project(atlas_project_json, token)
print "ATLAS created: %s" % atlas_project_id
print '======================================================================='
# Create Project computing
computing_project_json = utils.project_json('computing',
domain_id,
cms_project_id)
computing_project_id = utils.create_project(computing_project_json,
token)
print "Computing created: %s" % computing_project_id
print '======================================================================='
# Create Project visualisation
visual_project_json = utils.project_json('visualisation',
domain_id,
cms_project_id)
visualisation_project_id = utils.create_project(visual_project_json,
token)
print "Visualisation created: %s" % visualisation_project_id
print '======================================================================='
# Create Project services
services_project_json = utils.project_json('services',
domain_id,
atlas_project_id)
services_project_id = utils.create_project(services_project_json,
token)
print "Services created: %s" % services_project_id
print '======================================================================='
# Create Project operations
operations_project_json = utils.project_json('operations',
domain_id,
atlas_project_id)
operations_project_id = utils.create_project(operations_project_json,
token)
print "Operations created: %s" % operations_project_id
print '======================================================================='
admin_role = utils.get_role(token, 'admin')
# Creating users
# Creating and grant admin role to mike in production
print 'Creating the users...'
mike = utils.create_user(token, 'Mike', domain_id)
print "Mike: %s" % mike
utils.grant_user_role(token, mike,
admin_role, [production_project_id])
print '======================================================================='
# Creating and grant admin role to jay in cms
jay = utils.create_user(token, 'Jay', domain_id)
print "Jay: %s" % jay
utils.grant_user_role(token, jay,
admin_role, [cms_project_id])
print '======================================================================='
# Creating and grant admin role to john in atlas
john = utils.create_user(token, 'John', domain_id)
print "John: %s" % john
utils.grant_user_role(token, john,
admin_role, [atlas_project_id])
print '======================================================================='
# Creating and grant admin role to eric in operations
eric = utils.create_user(token, 'Eric', domain_id)
print "Eric: %s" % eric
utils.grant_user_role(token, eric,
admin_role, [operations_project_id])
print '======================================================================='
# Creating and grant admin role to xing in services
xing = utils.create_user(token, 'Xing', domain_id)
print "Xing: %s" % xing
utils.grant_user_role(token, xing,
admin_role, [services_project_id])
print '======================================================================='
# Creating and grant admin role to walter in computing
walter = utils.create_user(token, 'Walter', domain_id)
print "Walter: %s" % walter
utils.grant_user_role(token, walter,
admin_role, [computing_project_id])
print '======================================================================='
# Creating and grant admin role to duncan in visualisation
duncan = utils.create_user(token, 'Duncan', domain_id)
print "Ducnan: %s" % duncan
utils.grant_user_role(token, duncan,
admin_role, [visualisation_project_id])
print '======================================================================='
print 'Now, we will get a token for Mike in ProductionIT (root project)'
print 'and show that the quota calculation in the hierarchy works well.'
print '======================================================================='
# Get a token for Mike in ProductionIT
mike_token_json = utils.get_token_json('Mike',
production_project_id)
mike_token = utils.get_token(mike_token_json)
print 'Token for mike: %s' % mike_token
print '======================================================================='
# Update the Prduction Quota to 100
print 'Updating the ProductionIT quota for 100...'
quota_value = 100
production_quota = utils.update_quota(mike_token,
production_project_id,
production_project_id,
quota_value)
quota_show_production = utils.quota_show(mike_token,
production_project_id,
production_project_id)
print '======================================================================='
print "Production Quota: %s" % quota_show_production
print '======================================================================='
# Update the CMS Quota to 40
print 'Updating the CMS quota for 40...'
quota_value = 40
cms_quota = utils.update_quota(mike_token,
production_project_id,
cms_project_id,
quota_value)
quota_show_production = utils.quota_show(mike_token,
production_project_id,
production_project_id)
quota_show_cms = utils.quota_show(mike_token, production_project_id, cms_project_id)
print 'Verify that allocated ProductionIT quota was updated to 40'
print "Production Quota: %s" % quota_show_production
print "CMS Quota: %s" % quota_show_cms
print '======================================================================='
# Update the Atlas Quota to 30
print 'Updating the Atlas quota for 30...'
quota_value = 30
atlas_quota = utils.update_quota(mike_token,
production_project_id,
atlas_project_id,
quota_value)
quota_show_production = utils.quota_show(mike_token,
production_project_id,
production_project_id)
quota_show_atlas = utils.quota_show(mike_token,
production_project_id,
atlas_project_id)
print 'Verify that allocated ProductionIT quota was updated to 70'
print "Production Quota: %s" % quota_show_production
print "Atlas Quota: %s" % quota_show_atlas
print '======================================================================='
# Update the Computing Quota to 15
print 'Updating the Computing quota for 15...'
quota_value = 15
computing_quota = utils.update_quota(mike_token,
production_project_id,
computing_project_id,
quota_value)
quota_show_cms = utils.quota_show(mike_token,
production_project_id,
cms_project_id)
quota_show_computing = utils.quota_show(mike_token,
production_project_id,
computing_project_id)
print 'Verify that allocated CMS quota was updated to 15'
print "CMS Quota: %s" % quota_show_cms
print "Computing Quota: %s" % quota_show_computing
print '======================================================================='
# Update the visualisaton Quota to 15
print 'Updating the Visualisation quota for 15...'
quota_value = 15
visualisation_quota = utils.update_quota(mike_token,
production_project_id,
visualisation_project_id,
quota_value)
quota_show_cms = utils.quota_show(mike_token,
production_project_id,
cms_project_id)
quota_show_visualisation = utils.quota_show(mike_token,
production_project_id,
visualisation_project_id)
print 'Verify that allocated CMS quota was updated to 30'
print "CMS Quota: %s" % quota_show_cms
print "Visualisation Quota: %s" % quota_show_visualisation
print '======================================================================='
print 'Updating the Services quota for 10...'
# Update the services Quota to 10
quota_value = 10
services_quota = utils.update_quota(mike_token,
production_project_id,
services_project_id,
quota_value)
quota_show_atlas = utils.quota_show(mike_token,
production_project_id,
atlas_project_id)
quota_show_services = utils.quota_show(mike_token,
production_project_id,
services_project_id)
print 'Verify that allocated Atlas quota was updated to 10'
print "Atlas Quota: %s" % quota_show_atlas
print "Service Quota: %s" % quota_show_services
print '======================================================================='
# Update the operations Quota to 10
quota_value = 10
operations_quota = utils.update_quota(mike_token,
production_project_id,
operations_project_id,
quota_value)
quota_show_atlas = utils.quota_show(mike_token,
production_project_id,
atlas_project_id)
quota_show_operations = utils.quota_show(mike_token,
production_project_id,
operations_project_id)
print 'Verify that allocated Atlas quota was updated to 20'
print "Atlas Quota: %s" % quota_show_atlas
print "Operations Quota: %s" % quota_show_operations
print '======================================================================='
# Update the CMS Quota to 40
quota_value = 71
print 'Trying update the CMS quota for 71...'
cms_quota = utils.update_quota(mike_token,
production_project_id,
cms_project_id,
quota_value)
print "Error: %s" % cms_quota
print '======================================================================='
print "Creating 10 Volumes in CMS..."
# Get a token for Jay in CMS
jay_token_json = utils.get_token_json('Jay', cms_project_id)
jay_token = utils.get_token(jay_token_json)
for i in range(0,10):
utils.create_volume(jay_token, cms_project_id)
quota_show_cms = utils.quota_show(jay_token, cms_project_id, cms_project_id)
print "CMS Quota: %s" % quota_show_cms
print 'Now, we dont have free quota in CMS'
print '======================================================================='
print "Trying update the computing quota to 16 (subproject for CMS)..."
quota_value = 16
computing_quota = utils.update_quota(mike_token,
production_project_id,
computing_project_id,
quota_value)
print "Error: %s" % computing_quota
print '======================================================================='
print 'Clean up...'
except Exception as e:
print 'Error'
tear_down(token, [production_project_id,
cms_project_id,
atlas_project_id,
computing_project_id,
visualisation_project_id,
services_project_id,
operations_project_id], domain_id)
f.close()
print e
tear_down(token, [production_project_id,
cms_project_id,
atlas_project_id,
computing_project_id,
visualisation_project_id,
services_project_id,
operations_project_id], domain_id)
f.close()
def main():
f = open('log_test_values_cider.txt', 'w')
original = sys.stdout
sys.stdout = utils.Tee(sys.stdout, f)
token = 0
domain_id, production_project_id, cms_project_id, atlas_project_id = (
0, ) * 4
computing_project_id, visualisation_project_id, services_project_id = (
0, ) * 3
operations_project_id = 0
try:
token_json = utils.default_token_json('admin', 'demo')
token = utils.get_token(token_json)
print '======================================================================='
print 'This script will use the follow hierarchy to validate the quota values'
print 'related to Nested Quotas on Cinder'
print '======================================================================='
print 'Hierarchy:'
print ' Domain_X '
print ' |'
print ' ProductionIT - Mike'
print ' / \ '
print ' Jay - CMS ATLAS - John'
print ' / \ / \ '
print ' Computing Visualisation Operations Services '
print ' Walter Duncan Eric Xing'
print ''
print 'Actors:'
print ''
print 'Mike - Cloud Admin (i.e. role:cloud-admin) of ProductionIT'
print 'Jay - Manager (i.e. role: project-admin) of Project CMS'
print 'John - Manager (i.e. role: project-admin) of Project ATLAS'
print 'Eric - Manager (i.e. role: project-admin) of Project Operations'
print 'Xing - Manager (i.e. role: project-admin) of Project Services'
print 'Walter - Manager (i.e. role: project-admin) of Project Computing'
print 'Duncan - Manager (i.e. role: project-admin) of Project Visualisation'
print '======================================================================='
# Create a new domain
print 'Creating the domain...'
domain = utils.domain_json()
domain_id = utils.create_domain(domain, token)
print 'Domain created: %s' % domain_id
print '======================================================================='
print 'Creating the projects...'
# Create project ProductionIT
production_project_json = utils.project_json('ProductionIT', domain_id)
production_project_id = utils.create_project(production_project_json,
token)
print "ProductionIT created: %s" % production_project_id
print '======================================================================='
# Create Project CMS
cms_project_json = utils.project_json('CMS', domain_id,
production_project_id)
cms_project_id = utils.create_project(cms_project_json, token)
print "CMS created: %s" % cms_project_id
print '======================================================================='
# Create Project Atlas
atlas_project_json = utils.project_json('ATLAS', domain_id,
production_project_id)
atlas_project_id = utils.create_project(atlas_project_json, token)
print "ATLAS created: %s" % atlas_project_id
print '======================================================================='
# Create Project computing
computing_project_json = utils.project_json('computing', domain_id,
cms_project_id)
computing_project_id = utils.create_project(computing_project_json,
token)
print "Computing created: %s" % computing_project_id
print '======================================================================='
# Create Project visualisation
visual_project_json = utils.project_json('visualisation', domain_id,
cms_project_id)
visualisation_project_id = utils.create_project(
visual_project_json, token)
print "Visualisation created: %s" % visualisation_project_id
print '======================================================================='
# Create Project services
services_project_json = utils.project_json('services', domain_id,
atlas_project_id)
services_project_id = utils.create_project(services_project_json,
token)
print "Services created: %s" % services_project_id
print '======================================================================='
# Create Project operations
operations_project_json = utils.project_json('operations', domain_id,
atlas_project_id)
operations_project_id = utils.create_project(operations_project_json,
token)
print "Operations created: %s" % operations_project_id
print '======================================================================='
admin_role = utils.get_role(token, 'admin')
# Creating users
# Creating and grant admin role to mike in production
print 'Creating the users...'
mike = utils.create_user(token, 'Mike', domain_id)
print "Mike: %s" % mike
utils.grant_user_role(token, mike, admin_role, [production_project_id])
print '======================================================================='
# Creating and grant admin role to jay in cms
jay = utils.create_user(token, 'Jay', domain_id)
print "Jay: %s" % jay
utils.grant_user_role(token, jay, admin_role, [cms_project_id])
print '======================================================================='
# Creating and grant admin role to john in atlas
john = utils.create_user(token, 'John', domain_id)
print "John: %s" % john
utils.grant_user_role(token, john, admin_role, [atlas_project_id])
print '======================================================================='
# Creating and grant admin role to eric in operations
eric = utils.create_user(token, 'Eric', domain_id)
print "Eric: %s" % eric
utils.grant_user_role(token, eric, admin_role, [operations_project_id])
print '======================================================================='
# Creating and grant admin role to xing in services
xing = utils.create_user(token, 'Xing', domain_id)
print "Xing: %s" % xing
utils.grant_user_role(token, xing, admin_role, [services_project_id])
print '======================================================================='
# Creating and grant admin role to walter in computing
walter = utils.create_user(token, 'Walter', domain_id)
print "Walter: %s" % walter
utils.grant_user_role(token, walter, admin_role,
[computing_project_id])
print '======================================================================='
# Creating and grant admin role to duncan in visualisation
duncan = utils.create_user(token, 'Duncan', domain_id)
print "Ducnan: %s" % duncan
utils.grant_user_role(token, duncan, admin_role,
[visualisation_project_id])
print '======================================================================='
print 'Now, we will get a token for Mike in ProductionIT (root project)'
print 'and show that the quota calculation in the hierarchy works well.'
print '======================================================================='
# Get a token for Mike in ProductionIT
mike_token_json = utils.get_token_json('Mike', production_project_id)
mike_token = utils.get_token(mike_token_json)
print 'Token for mike: %s' % mike_token
print '======================================================================='
# Update the Prduction Quota to 100
print 'Updating the ProductionIT quota for 100...'
quota_value = 100
production_quota = utils.update_quota(mike_token,
production_project_id,
production_project_id,
quota_value)
quota_show_production = utils.quota_show(mike_token,
production_project_id,
production_project_id)
print '======================================================================='
print "Production Quota: %s" % quota_show_production
print '======================================================================='
# Update the CMS Quota to 40
print 'Updating the CMS quota for 40...'
quota_value = 40
cms_quota = utils.update_quota(mike_token, production_project_id,
cms_project_id, quota_value)
quota_show_production = utils.quota_show(mike_token,
production_project_id,
production_project_id)
quota_show_cms = utils.quota_show(mike_token, production_project_id,
cms_project_id)
print 'Verify that allocated ProductionIT quota was updated to 40'
print "Production Quota: %s" % quota_show_production
print "CMS Quota: %s" % quota_show_cms
print '======================================================================='
# Update the Atlas Quota to 30
print 'Updating the Atlas quota for 30...'
quota_value = 30
atlas_quota = utils.update_quota(mike_token, production_project_id,
atlas_project_id, quota_value)
quota_show_production = utils.quota_show(mike_token,
production_project_id,
production_project_id)
quota_show_atlas = utils.quota_show(mike_token, production_project_id,
atlas_project_id)
print 'Verify that allocated ProductionIT quota was updated to 70'
print "Production Quota: %s" % quota_show_production
print "Atlas Quota: %s" % quota_show_atlas
print '======================================================================='
# Update the Computing Quota to 15
print 'Updating the Computing quota for 15...'
quota_value = 15
computing_quota = utils.update_quota(mike_token, production_project_id,
computing_project_id, quota_value)
quota_show_cms = utils.quota_show(mike_token, production_project_id,
cms_project_id)
quota_show_computing = utils.quota_show(mike_token,
production_project_id,
computing_project_id)
print 'Verify that allocated CMS quota was updated to 15'
print "CMS Quota: %s" % quota_show_cms
print "Computing Quota: %s" % quota_show_computing
print '======================================================================='
# Update the visualisaton Quota to 15
print 'Updating the Visualisation quota for 15...'
quota_value = 15
visualisation_quota = utils.update_quota(mike_token,
production_project_id,
visualisation_project_id,
quota_value)
quota_show_cms = utils.quota_show(mike_token, production_project_id,
cms_project_id)
quota_show_visualisation = utils.quota_show(mike_token,
production_project_id,
visualisation_project_id)
print 'Verify that allocated CMS quota was updated to 30'
print "CMS Quota: %s" % quota_show_cms
print "Visualisation Quota: %s" % quota_show_visualisation
print '======================================================================='
print 'Updating the Services quota for 10...'
# Update the services Quota to 10
quota_value = 10
services_quota = utils.update_quota(mike_token, production_project_id,
services_project_id, quota_value)
quota_show_atlas = utils.quota_show(mike_token, production_project_id,
atlas_project_id)
quota_show_services = utils.quota_show(mike_token,
production_project_id,
services_project_id)
print 'Verify that allocated Atlas quota was updated to 10'
print "Atlas Quota: %s" % quota_show_atlas
print "Service Quota: %s" % quota_show_services
print '======================================================================='
# Update the operations Quota to 10
quota_value = 10
operations_quota = utils.update_quota(mike_token,
production_project_id,
operations_project_id,
quota_value)
quota_show_atlas = utils.quota_show(mike_token, production_project_id,
atlas_project_id)
quota_show_operations = utils.quota_show(mike_token,
production_project_id,
operations_project_id)
print 'Verify that allocated Atlas quota was updated to 20'
print "Atlas Quota: %s" % quota_show_atlas
print "Operations Quota: %s" % quota_show_operations
print '======================================================================='
# Update the CMS Quota to 40
quota_value = 71
print 'Trying update the CMS quota for 71...'
cms_quota = utils.update_quota(mike_token, production_project_id,
cms_project_id, quota_value)
print "Error: %s" % cms_quota
print '======================================================================='
print "Creating 10 Volumes in CMS..."
# Get a token for Jay in CMS
jay_token_json = utils.get_token_json('Jay', cms_project_id)
jay_token = utils.get_token(jay_token_json)
for i in range(0, 10):
utils.create_volume(jay_token, cms_project_id)
quota_show_cms = utils.quota_show(jay_token, cms_project_id,
cms_project_id)
print "CMS Quota: %s" % quota_show_cms
print 'Now, we dont have free quota in CMS'
print '======================================================================='
print "Trying update the computing quota to 16 (subproject for CMS)..."
quota_value = 16
computing_quota = utils.update_quota(mike_token, production_project_id,
computing_project_id, quota_value)
print "Error: %s" % computing_quota
print '======================================================================='
print 'Clean up...'
except Exception as e:
print 'Error'
tear_down(token, [
production_project_id, cms_project_id, atlas_project_id,
computing_project_id, visualisation_project_id,
services_project_id, operations_project_id
], domain_id)
f.close()
print e
tear_down(token, [
production_project_id, cms_project_id, atlas_project_id,
computing_project_id, visualisation_project_id, services_project_id,
operations_project_id
], domain_id)
f.close()
def main():
f = open("log_test_authorization_cider.txt", "w")
original = sys.stdout
sys.stdout = utils.Tee(sys.stdout, f)
token = 0
domain_id, production_project_id, cms_project_id, atlas_project_id = (0,) * 4
computing_project_id, visualisation_project_id, services_project_id = (0,) * 3
operations_project_id = 0
try:
token_json = utils.default_token_json("admin", "demo")
token = utils.get_token(token_json)
print "======================================================================="
print "This script will use the follow hierarchy to validate the authorization"
print "actions related to Nested Quotas on Cinder"
print "======================================================================="
print "Hierarchy:"
print " Domain_X "
print " |"
print " ProductionIT - Mike"
print " / \ "
print " Jay - CMS ATLAS - John"
print " / \ / \ "
print " Computing Visualisation Operations Services "
print " Walter Duncan Eric Xing"
print ""
print "Actors:"
print ""
print "Mike - Cloud Admin (i.e. role:cloud-admin) of ProductionIT"
print "Jay - Manager (i.e. role: project-admin) of Project CMS"
print "John - Manager (i.e. role: project-admin) of Project ATLAS"
print "Eric - Manager (i.e. role: project-admin) of Project Operations"
print "Xing - Manager (i.e. role: project-admin) of Project Services"
print "Walter - Manager (i.e. role: project-admin) of Project Computing"
print "Duncan - Manager (i.e. role: project-admin) of Project Visualisation"
print "======================================================================="
admin_role = utils.get_role(token, "admin")
# Create a new domain
print "Creating the domain..."
domain = utils.domain_json()
domain_id = utils.create_domain(domain, token)
print "Domain created: %s" % domain_id
print "======================================================================="
print "Creating the projects..."
# Create project ProductionIT
production_project_json = utils.project_json("ProductionIT", domain_id)
production_project_id = utils.create_project(production_project_json, token)
print "ProductionIT created: %s" % production_project_id
print "======================================================================="
# Create Project CMS
cms_project_json = utils.project_json("CMS", domain_id, production_project_id)
cms_project_id = utils.create_project(cms_project_json, token)
print "CMS created: %s" % cms_project_id
print "======================================================================="
# Create Project Atlas
atlas_project_json = utils.project_json("ATLAS", domain_id, production_project_id)
atlas_project_id = utils.create_project(atlas_project_json, token)
print "ATLAS created: %s" % atlas_project_id
print "======================================================================="
# Create Project computing
computing_project_json = utils.project_json("computing", domain_id, cms_project_id)
computing_project_id = utils.create_project(computing_project_json, token)
print "Computing created: %s" % computing_project_id
print "======================================================================="
# Create Project visualisation
visual_project_json = utils.project_json("visualisation", domain_id, cms_project_id)
visualisation_project_id = utils.create_project(visual_project_json, token)
print "Visualisation created: %s" % visualisation_project_id
print "======================================================================="
# Create Project services
services_project_json = utils.project_json("services", domain_id, atlas_project_id)
services_project_id = utils.create_project(services_project_json, token)
print "Services created: %s" % services_project_id
print "======================================================================="
# Create Project operations
operations_project_json = utils.project_json("operations", domain_id, atlas_project_id)
operations_project_id = utils.create_project(operations_project_json, token)
print "Operations created: %s" % operations_project_id
print "======================================================================="
# Creating users
# Creating and grant admin role to mike in production
print "Creating the users..."
mike = utils.create_user(token, "Mike", domain_id)
print "Mike: %s" % mike
utils.grant_user_role(token, mike, admin_role, [production_project_id])
print "======================================================================="
# Creating and grant admin role to jay in cms
jay = utils.create_user(token, "Jay", domain_id)
print "Jay: %s" % jay
utils.grant_user_role(token, jay, admin_role, [cms_project_id])
print "======================================================================="
# Creating and grant admin role to john in atlas
john = utils.create_user(token, "John", domain_id)
print "John: %s" % john
utils.grant_user_role(token, john, admin_role, [atlas_project_id])
print "======================================================================="
# Creating and grant admin role to eric in operations
eric = utils.create_user(token, "Eric", domain_id)
print "Eric: %s" % eric
utils.grant_user_role(token, eric, admin_role, [operations_project_id])
print "======================================================================="
# Creating and grant admin role to xing in services
xing = utils.create_user(token, "Xing", domain_id)
print "Xing: %s" % xing
utils.grant_user_role(token, xing, admin_role, [services_project_id])
print "======================================================================="
# Creating and grant admin role to walter in computing
walter = utils.create_user(token, "Walter", domain_id)
print "Walter: %s" % walter
utils.grant_user_role(token, walter, admin_role, [computing_project_id])
print "======================================================================="
# Creating and grant admin role to duncan in visualisation
duncan = utils.create_user(token, "Duncan", domain_id)
print "Ducnan: %s" % duncan
utils.grant_user_role(token, duncan, admin_role, [visualisation_project_id])
print "======================================================================="
print "Now, we will get a token for Mike in ProductionIT (root project)"
print "and show that Mike can update the quota for the root project."
print "======================================================================="
# Get a token for Mike in ProductionIT
mike_token_json = utils.get_token_json("Mike", production_project_id)
mike_token = utils.get_token(mike_token_json)
print "Token for mike: %s" % mike_token
print "======================================================================="
# Update the Production Quota to 100
print "Updating the ProductionIT quota for 100..."
quota_value = 100
production_quota = utils.update_quota(mike_token, production_project_id, production_project_id, quota_value)
print "Mike updating Production Quota: %s" % production_quota
print "======================================================================="
print "Trying get the default quota for CMS..."
# Verify that the default quotas for CMS is zero
cms_quota = utils.get_quota(mike_token, production_project_id, cms_project_id)
print "Mike getting CMS Quota: %s" % cms_quota
print "======================================================================="
print "Trying update the CMS quota for 45..."
# Update the CMS Quota to 45
quota_value = 45
new_cms_quota = utils.update_quota(mike_token, production_project_id, cms_project_id, quota_value)
print "Mike updating CMS Quota: %s" % new_cms_quota
print "======================================================================="
print "Now, we get a token for Jay in CMS and we will try update the CMS Quota"
print "======================================================================="
# Get a token for Jay in CMS
jay_token_json = utils.get_token_json("Jay", cms_project_id)
jay_token = utils.get_token(jay_token_json)
print "Token for Jay: %s " % jay_token
print "======================================================================="
# Raise a exception when try update the CMS Quota with
# only a project_admin
print "Trying update the CMS quota for 50"
quota_value = 50
forbidden_error = 403
new_cms_quota = utils.update_quota(jay_token, cms_project_id, cms_project_id, quota_value)
if new_cms_quota == forbidden_error:
print "Error: Cannot update the quota for CMS with user Jay"
print "======================================================================="
# Verify that the default quotas for Visualisation is zero
cms_quota = utils.get_quota(jay_token, cms_project_id, cms_project_id)
print "Trying get the CMS Quota: %s" % cms_quota
print "======================================================================="
# Raise a exception when try update the Visualisation Quota with a
# project_admin in a non-root project
print "Trying update the Visualisation Quota with Jay"
quota_value = 10
new_visualisation_quota = utils.update_quota(jay_token, cms_project_id, visualisation_project_id, quota_value)
if new_visualisation_quota == forbidden_error:
print "Error: Cannot update the quota for Visualisation with user Jay"
else:
print "New Visualisation Quota: %s " % new_visualisation_quota
print "======================================================================="
# Raise a exception when try get the Visualisation Quota with a
# project_admin in a non-root project
print "Trying get the Visualisation Quota with Jay"
visualisation_quota = utils.get_quota(jay_token, cms_project_id, visualisation_project_id)
if visualisation_quota == forbidden_error:
print "Error: Cannot get the quota for Visualisation with user Jay"
else:
print "Get Visualisation Quota: %s " % new_visualisation_quota
print "======================================================================="
# Raise a exception when try get the Atlas Quota with a project_admin
# in a non-root project
atlas_quota = utils.get_quota(jay_token, cms_project_id, atlas_project_id)
if atlas_quota == forbidden_error:
print "Error: Cannot get the quota for Atlas with user Jay"
print "======================================================================="
# Get a token for Duncan in Visualisation
duncan_token_json = utils.get_token_json("Duncan", visualisation_project_id)
duncan_token = utils.get_token(duncan_token_json)
print "Get a token for Duncan in Visualisation: %s " % duncan_token
# Raise a exception when try get the Atlas Quota with a project_admin
# in a subproject
cms_quota = utils.get_quota(duncan_token, visualisation_project_id, cms_project_id)
if cms_quota == forbidden_error:
print "Error: Cannot get the quota for CMS with user Duncan"
print "======================================================================="
# Raise a exception when try update the Visualisation Quota
# with a project_admin in a non-root project
quota_value = 10
new_visualisation_quota = utils.update_quota(
duncan_token, visualisation_project_id, visualisation_project_id, quota_value
)
if new_visualisation_quota == forbidden_error:
print ("Cannot update the quota for Visualisation with user Duncan")
print "======================================================================="
# Verify that the default quotas for Visualisation is zero
visual_quota = utils.get_quota(duncan_token, visualisation_project_id, visualisation_project_id)
print ("Duncan getting the Visualisation Quota: %s" % visual_quota)
print "======================================================================="
print "Clean up..."
except Exception as e:
print "Error"
tear_down(
token,
[
production_project_id,
cms_project_id,
atlas_project_id,
computing_project_id,
visualisation_project_id,
services_project_id,
operations_project_id,
],
domain_id,
)
f.close()
print e
tear_down(
token,
[
production_project_id,
cms_project_id,
atlas_project_id,
computing_project_id,
visualisation_project_id,
services_project_id,
operations_project_id,
],
domain_id,
)
f.close()
