def test_tenant_access(self): """ Test AdminCLI command for tenant access management """ # create tenant1 without adding any vms and privileges # the "default_datastore" will be set to "_VM_DS" # a full access privilege will be created for tenant1 error_info, tenant = auth_api._tenant_create( name=self.tenant1_name, default_datastore=auth_data_const.VM_DS, description="Test tenant1", vm_list=[self.vm1_name], privileges=[]) self.assertEqual(None, error_info) # now, should only have privilege to ""_VM_DS error_info, privileges = auth_api._tenant_access_ls(self.tenant1_name) _, rows = vmdkops_admin.generate_tenant_access_ls_rows( privileges, self.tenant1_name) self.assertEqual(1, len(rows)) expected_output = [auth_data_const.VM_DS, "True", "Unset", "Unset"] actual_output = [rows[0][0], rows[0][1], rows[0][2], rows[0][3]] self.assertEqual(expected_output, actual_output) # remove the privilege to "_VM_DS", which should fail # since "_VM_DS still the "default_datastore" for tenant1 error_info = auth_api._tenant_access_rm( name=self.tenant1_name, datastore=auth_data_const.VM_DS) self.assertNotEqual(None, error_info) # add a access privilege for tenant to self.datastore_name # allow_create = False # max_volume size = 600MB # total_volume size = 1GB volume_maxsize_in_MB = convert.convert_to_MB("600MB") volume_totalsize_in_MB = convert.convert_to_MB("1GB") error_info = auth_api._tenant_access_add( name=self.tenant1_name, datastore=self.datastore_name, allow_create=False, volume_maxsize_in_MB=volume_maxsize_in_MB, volume_totalsize_in_MB=volume_totalsize_in_MB) self.assertEqual(None, error_info) # update the "default_datastore" to self.datastore_name error_info = auth_api._tenant_update( name=self.tenant1_name, default_datastore=self.datastore_name) self.assertEqual(None, error_info) # try to remove the privilege to "_VM_DS" again, which should not fail # since the "default_datastore" for tenant1 is set to self.datastore_name error_info = auth_api._tenant_access_rm( name=self.tenant1_name, datastore=auth_data_const.VM_DS) self.assertEqual(None, error_info) error_info, privileges = auth_api._tenant_access_ls(self.tenant1_name) self.assertEqual(None, error_info) header = vmdkops_admin.tenant_access_ls_headers() # There are 4 columns for each row, the name of the columns are # "Datastore", "Allow_create", "Max_volume_size", "Total_size" # Sample output of a row: # ['datastore1', 'False', '600.00MB', '1.00GB'] _, rows = vmdkops_admin.generate_tenant_access_ls_rows( privileges, self.tenant1_name) self.assertEqual(len(header), TENANT_ACCESS_LS_EXPECTED_COLUMN_COUNT) # tenant aceess privilege should only have a row now self.assertEqual(len(rows), 1) expected_output = [self.datastore_name, "False", "600.00MB", "1.00GB"] actual_output = [rows[0][0], rows[0][1], rows[0][2], rows[0][3]] self.assertEqual(expected_output, actual_output) # update the access privileges # change allow_create to True # change max_volume size to 1000MB # change total_volume size to 2GB volume_maxsize_in_MB = convert.convert_to_MB("1000MB") volume_totalsize_in_MB = convert.convert_to_MB("3GB") self.parser = vmdkops_admin.create_parser() privilege_test_info = [ ["False", "False"], ["FALSE", "False"], ["false", "False"], ["True", "True"], ["TRUE", "True"], ["true", "True"], ] for val in privilege_test_info: command = ("vmgroup access set --name={0} ".format( self.tenant1_name)) command += ("--datastore={0} ".format(self.datastore_name)) command += ("--allow-create={0} ".format(val[0])) command += ("--volume-maxsize=500MB --volume-totalsize=1GB") args = self.parser.parse_args(command.split()) error_info = vmdkops_admin.tenant_access_set(args) self.assertEqual(None, error_info) error_info, privileges = auth_api._tenant_access_ls( self.tenant1_name) self.assertEqual(None, error_info) _, rows = vmdkops_admin.generate_tenant_access_ls_rows( privileges, self.tenant1_name) self.assertEqual(len(rows), 1) expected_output = [ self.datastore_name, val[1], "500.00MB", "1.00GB" ] actual_output = [rows[0][0], rows[0][1], rows[0][2], rows[0][3]] self.assertEqual(expected_output, actual_output) print( "[Negative test case]: Expected invalid values for allow-create option" ) for val in ["INVALID", ""]: command = ("vmgroup access set --name={0} ".format( self.tenant1_name)) command += ("--datastore={0} ".format(self.datastore_name)) command += ("--allow-create={0} ".format(val)) command += ("--volume-maxsize=500MB --volume-totalsize=1GB") args = self.parser.parse_args(command.split()) error_info = vmdkops_admin.tenant_access_set(args) expected_message = "Invalid value {0} for allow-create option".format( val) self.assertEqual(expected_message, error_info) if self.datastore1_name: # second datastore is available, can test tenant update with --default_datastore error_info, tenant_list = auth_api._tenant_ls() self.assertEqual(None, error_info) # Two tenants in the list, "_DEFAULT" and "test_tenant1" # rows[0] is for "_DEFAULT" tenant, and rows[1] is for "test_tenant1" # There are 5 columns for each row, the name of the columns are # "Uuid", "Name", "Description", "Default_datastore", "VM_list" # Sample output of one row: # [u'9e1be0ce-3d58-40f6-a335-d6e267e34baa', u'test_tenant1', u'Test tenant1', '', 'test_vm1'] _, rows = vmdkops_admin.generate_tenant_ls_rows(tenant_list) # get "default_datastore" from the output actual_output = rows[1][3] expected_output = self.datastore_name self.assertEqual(expected_output, actual_output) # add access privilege to self.datastore1_name volume_maxsize_in_MB = convert.convert_to_MB("600MB") volume_totalsize_in_MB = convert.convert_to_MB("1GB") error_info = auth_api._tenant_access_add( name=self.tenant1_name, datastore=self.datastore1_name, allow_create=False, volume_maxsize_in_MB=volume_maxsize_in_MB, volume_totalsize_in_MB=volume_totalsize_in_MB) self.assertEqual(None, error_info) # update the "default_datastore" error_info = auth_api._tenant_update( name=self.tenant1_name, default_datastore=self.datastore1_name) self.assertEqual(None, error_info) error_info, tenant_list = auth_api._tenant_ls() self.assertEqual(None, error_info) _, rows = vmdkops_admin.generate_tenant_ls_rows(tenant_list) # get "default_datastore" from the output actual_output = rows[1][3] expected_output = self.datastore1_name self.assertEqual(expected_output, actual_output) # switch the "default_datastore" to self.datastore_name error_info = auth_api._tenant_update( name=self.tenant1_name, default_datastore=self.datastore_name) self.assertEqual(error_info, None) # remove the privilege to self.datastore1_name error_info = auth_api._tenant_access_rm( name=self.tenant1_name, datastore=self.datastore1_name) self.assertEqual(error_info, None) # remove access privileges, which should fail # since the "default_datastore" is set to self.datastore_name # cannot remove the privilege error_info = auth_api._tenant_access_rm(name=self.tenant1_name, datastore=self.datastore_name) self.assertNotEqual(None, error_info) error_info, privileges = auth_api._tenant_access_ls(self.tenant1_name) self.assertEqual(None, error_info) # now, only have a privilege to self.datastore_name _, rows = vmdkops_admin.generate_tenant_access_ls_rows( privileges, self.tenant1_name) self.assertEqual(1, len(rows)) expected_output = [self.datastore_name, "True", "500.00MB", "1.00GB"] actual_output = [rows[0][0], rows[0][1], rows[0][2], rows[0][3]] self.assertEqual(expected_output, actual_output)
def test_status(self): args = vmdkops_admin.create_parser().parse_args("status".split()) self.assertEqual(vmdkops_admin.status(args), None)
def setUp(self): self.parser = vmdkops_admin.create_parser()
def __init__(self, *args, **kwargs): super(TestConfig, self).__init__(*args, **kwargs) self.parser = vmdkops_admin.create_parser()
def test_tenant_access(self): """ Test AdminCLI command for tenant access management """ # create tenant1 without adding any vms and privileges # the "default_datastore" will be set to "_VM_DS" # a full access privilege will be created for tenant1 error_info, tenant = auth_api._tenant_create( name=self.tenant1_name, default_datastore=auth_data_const.VM_DS, description="Test tenant1", vm_list=[self.vm1_name], privileges=[]) self.assertEqual(None, error_info) # now, should only have privilege to ""_VM_DS error_info, privileges = auth_api._tenant_access_ls(self.tenant1_name) _, rows = vmdkops_admin.generate_tenant_access_ls_rows(privileges, self.tenant1_name) self.assertEqual(1, len(rows)) expected_output = [auth_data_const.VM_DS, "True", "Unset", "Unset"] actual_output = [rows[0][0], rows[0][1], rows[0][2], rows[0][3]] self.assertEqual(expected_output, actual_output) # remove the privilege to "_VM_DS", which should fail # since "_VM_DS still the "default_datastore" for tenant1 error_info = auth_api._tenant_access_rm(name=self.tenant1_name, datastore=auth_data_const.VM_DS ) self.assertNotEqual(None, error_info) # add a access privilege for tenant to self.datastore_name # allow_create = False # max_volume size = 600MB # total_volume size = 1GB volume_maxsize_in_MB = convert.convert_to_MB("600MB") volume_totalsize_in_MB = convert.convert_to_MB("1GB") error_info = auth_api._tenant_access_add(name=self.tenant1_name, datastore=self.datastore_name, allow_create=False, volume_maxsize_in_MB=volume_maxsize_in_MB, volume_totalsize_in_MB=volume_totalsize_in_MB ) self.assertEqual(None, error_info) # update the "default_datastore" to self.datastore_name error_info = auth_api._tenant_update(name=self.tenant1_name, default_datastore=self.datastore_name) self.assertEqual(None, error_info) # try to remove the privilege to "_VM_DS" again, which should not fail # since the "default_datastore" for tenant1 is set to self.datastore_name error_info = auth_api._tenant_access_rm(name=self.tenant1_name, datastore=auth_data_const.VM_DS ) self.assertEqual(None, error_info) error_info, privileges = auth_api._tenant_access_ls(self.tenant1_name) self.assertEqual(None, error_info) header = vmdkops_admin.tenant_access_ls_headers() # There are 4 columns for each row, the name of the columns are # "Datastore", "Allow_create", "Max_volume_size", "Total_size" # Sample output of a row: # ['datastore1', 'False', '600.00MB', '1.00GB'] _, rows = vmdkops_admin.generate_tenant_access_ls_rows(privileges, self.tenant1_name) self.assertEqual(len(header), TENANT_ACCESS_LS_EXPECTED_COLUMN_COUNT) # tenant aceess privilege should only have a row now self.assertEqual(len(rows), 1) expected_output = [self.datastore_name, "False", "600.00MB", "1.00GB"] actual_output = [rows[0][0], rows[0][1], rows[0][2], rows[0][3]] self.assertEqual(expected_output, actual_output) # update the access privileges # change allow_create to True # change max_volume size to 1000MB # change total_volume size to 2GB volume_maxsize_in_MB = convert.convert_to_MB("1000MB") volume_totalsize_in_MB = convert.convert_to_MB("3GB") self.parser = vmdkops_admin.create_parser() privilege_test_info = [ ["False", "False"], ["FALSE", "False"], ["false", "False"], ["True", "True"], ["TRUE", "True"], ["true", "True"], ] for val in privilege_test_info: command = ("vmgroup access set --name={0} ".format(self.tenant1_name)) command += ("--datastore={0} ".format(self.datastore_name)) command += ("--allow-create={0} ".format(val[0])) command += ("--volume-maxsize=500MB --volume-totalsize=1GB") args = self.parser.parse_args(command.split()) error_info = vmdkops_admin.tenant_access_set(args) self.assertEqual(None, error_info) error_info, privileges = auth_api._tenant_access_ls(self.tenant1_name) self.assertEqual(None, error_info) _, rows = vmdkops_admin.generate_tenant_access_ls_rows(privileges, self.tenant1_name) self.assertEqual(len(rows), 1) expected_output = [self.datastore_name, val[1], "500.00MB", "1.00GB"] actual_output = [rows[0][0], rows[0][1], rows[0][2], rows[0][3]] self.assertEqual(expected_output, actual_output) print("[Negative test case]: Expected invalid values for allow-create option") for val in ["INVALID", ""]: command = ("vmgroup access set --name={0} ".format(self.tenant1_name)) command += ("--datastore={0} ".format(self.datastore_name)) command += ("--allow-create={0} ".format(val)) command += ("--volume-maxsize=500MB --volume-totalsize=1GB") args = self.parser.parse_args(command.split()) error_info = vmdkops_admin.tenant_access_set(args) expected_message = "ERROR:Invalid value {0} for allow-create option".format(val) self.assertEqual(expected_message, error_info) if self.datastore1_name: # second datastore is available, can test tenant update with --default_datastore error_info, tenant_list = auth_api._tenant_ls() self.assertEqual(None, error_info) # Two tenants in the list, "_DEFAULT" and "test_tenant1" # rows[0] is for "_DEFAULT" tenant, and rows[1] is for "test_tenant1" # There are 5 columns for each row, the name of the columns are # "Uuid", "Name", "Description", "Default_datastore", "VM_list" # Sample output of one row: # [u'9e1be0ce-3d58-40f6-a335-d6e267e34baa', u'test_tenant1', u'Test tenant1', '', 'test_vm1'] _, rows = vmdkops_admin.generate_tenant_ls_rows(tenant_list) # get "default_datastore" from the output actual_output = rows[1][3] expected_output = self.datastore_name self.assertEqual(expected_output, actual_output) # add access privilege to self.datastore1_name volume_maxsize_in_MB = convert.convert_to_MB("600MB") volume_totalsize_in_MB = convert.convert_to_MB("1GB") error_info = auth_api._tenant_access_add(name=self.tenant1_name, datastore=self.datastore1_name, allow_create=False, volume_maxsize_in_MB=volume_maxsize_in_MB, volume_totalsize_in_MB=volume_totalsize_in_MB) self.assertEqual(None, error_info) # update the "default_datastore" error_info = auth_api._tenant_update(name=self.tenant1_name, default_datastore=self.datastore1_name) self.assertEqual(None, error_info) error_info, tenant_list = auth_api._tenant_ls() self.assertEqual(None, error_info) _, rows = vmdkops_admin.generate_tenant_ls_rows(tenant_list) # get "default_datastore" from the output actual_output = rows[1][3] expected_output = self.datastore1_name self.assertEqual(expected_output, actual_output) # switch the "default_datastore" to self.datastore_name error_info = auth_api._tenant_update(name=self.tenant1_name, default_datastore=self.datastore_name) self.assertEqual(error_info, None) # remove the privilege to self.datastore1_name error_info = auth_api._tenant_access_rm(name=self.tenant1_name, datastore=self.datastore1_name) self.assertEqual(error_info, None) # remove access privileges, which should fail # since the "default_datastore" is set to self.datastore_name # cannot remove the privilege error_info = auth_api._tenant_access_rm(name=self.tenant1_name, datastore=self.datastore_name) self.assertNotEqual(None, error_info) error_info, privileges = auth_api._tenant_access_ls(self.tenant1_name) self.assertEqual(None, error_info) # now, only have a privilege to self.datastore_name _, rows = vmdkops_admin.generate_tenant_access_ls_rows(privileges, self.tenant1_name) self.assertEqual(1, len(rows)) expected_output = [self.datastore_name, "True", "500.00MB", "1.00GB"] actual_output = [rows[0][0], rows[0][1], rows[0][2], rows[0][3]] self.assertEqual(expected_output, actual_output)