def test_edit_become_password_negative(isolated_filesystem, qpc_server_config):
"""Edit the become password of a not created auth entry.
:id: 6364d80b-97b1-404e-85fd-76eebb7c6b5e
:description: Edit the become password of a not created auth entry.
:steps: Run ``qpc cred edit --name <invalidname> --become-password``
:expectedresults: The command should fail with a proper message.
"""
name = utils.uuid4()
username = utils.uuid4()
tmp_dir = os.path.basename(os.getcwd())
sshkeyfile_name = utils.uuid4()
sshkeyfile = Path(sshkeyfile_name)
sshkeyfile.touch()
cred_add_and_check({
"name": name,
"username": username,
"sshkeyfile": f"/sshkeys/{tmp_dir}/{sshkeyfile_name}"
})
name = utils.uuid4()
qpc_cred_edit = pexpect.spawn(
"{} cred edit --name={} --become-password".format(client_cmd, name))
assert qpc_cred_edit.expect(
'Credential "{}" does not exist'.format(name)) == 0
assert qpc_cred_edit.expect(pexpect.EOF) == 0
qpc_cred_edit.close()
assert qpc_cred_edit.exitstatus != 0
def test_add_with_username_password(isolated_filesystem, qpc_server_config,
source_type):
"""Add an auth with username and password.
:id: c935d34c-54f6-443f-a85c-344934bc0cfb
:description: Add an auth entry providing the ``--name``, ``--username``
and ``--pasword`` options.
:steps: Run ``qpc cred add --name <name> --username <username> --password``
:expectedresults: A new auth entry is created with the data provided as
input.
"""
name = utils.uuid4()
username = utils.uuid4()
cred_add_and_check(
{
"name": name,
"username": username,
"password": None,
"type": source_type
},
[(CONNECTION_PASSWORD_INPUT, utils.uuid4())],
)
cred_show_and_check(
{"name": name},
generate_show_output({
"cred_type": source_type,
"name": name,
"password": MASKED_PASSWORD_OUTPUT,
"username": username,
}),
)
def test_edit_sshkeyfile_negative(isolated_filesystem, qpc_server_config):
"""Edit the sshkeyfile of a not created auth entry.
:id: 97734b67-3d5e-4add-9282-22844fd436d1
:description: Edit the sshkeyfile of a not created auth entry.
:steps: Run ``qpc cred edit --name <invalidname> --sshkeyfile
<newsshkeyfile>``
:expectedresults: The command should fail with a proper message.
"""
name = utils.uuid4()
username = utils.uuid4()
tmp_dir = os.path.basename(os.getcwd())
sshkeyfile_name = utils.uuid4()
sshkeyfile = Path(sshkeyfile_name)
sshkeyfile.touch()
cred_add_and_check({
"name": name,
"username": username,
"sshkeyfile": f"/sshkeys/{tmp_dir}/{sshkeyfile_name}"
})
name = utils.uuid4()
sshkeyfile_name = utils.uuid4()
sshkeyfile = Path(sshkeyfile_name)
sshkeyfile.touch()
qpc_cred_edit = pexpect.spawn(
"{} cred edit --name={} --sshkeyfile {}".format(
client_cmd, name, f"/sshkeys/{tmp_dir}/{sshkeyfile_name}"))
qpc_cred_edit.logfile = BytesIO()
assert qpc_cred_edit.expect(
'Credential "{}" does not exist'.format(name)) == 0
assert qpc_cred_edit.expect(pexpect.EOF) == 0
qpc_cred_edit.close()
assert qpc_cred_edit.exitstatus != 0
def test_add_with_username_sshkeyfile(isolated_filesystem, qpc_server_config):
"""Add an auth with username and sshkeyfile.
:id: 9bfb16a2-5a10-4a01-9f9d-b29445c1f4bf
:description: Add an auth entry providing the ``--name``, ``--username``
and ``--sshkeyfile`` options.
:steps: Run ``qpc cred add --name <name> --username <username> --sshkeyfile
<sshkeyfile>``
:expectedresults: A new auth entry is created with the data provided as
input.
"""
name = utils.uuid4()
username = utils.uuid4()
sshkeyfile_name = utils.uuid4()
tmp_dir = os.path.basename(os.getcwd())
sshkeyfile = Path(sshkeyfile_name)
sshkeyfile.touch()
# sshkeyfile = '/sshkeys/id_rsa'
cred_add_and_check({
"name": name,
"username": username,
"sshkeyfile": f"/sshkeys/{tmp_dir}/{sshkeyfile_name}"
})
cred_show_and_check(
{"name": name},
generate_show_output({
"name": name,
"ssh_keyfile": f"/sshkeys/{tmp_dir}/{sshkeyfile_name}",
"username": username
}),
)
def test_edit_become_password(isolated_filesystem, qpc_server_config):
"""Edit an auth's become password.
:id: e1230ce5-7cb5-40d5-8f50-ff33779eee9e
:description: Edit the password of an auth entry.
:steps: Run ``qpc cred edit --name <name> --become-password``
:expectedresults: The auth become password must be updated.
"""
name = utils.uuid4()
username = utils.uuid4()
tmp_dir = os.path.basename(os.getcwd())
sshkeyfile_name = utils.uuid4()
sshkeyfile = Path(sshkeyfile_name)
sshkeyfile.touch()
become_password = utils.uuid4()
new_become_password = utils.uuid4()
cred_add_and_check(
{
"name": name,
"username": username,
"sshkeyfile": f"/sshkeys/{tmp_dir}/{sshkeyfile_name}",
"become-password": None,
},
[(BECOME_PASSWORD_INPUT, become_password)],
)
cred_show_and_check(
{"name": name},
generate_show_output({
"become_password": MASKED_PASSWORD_OUTPUT,
"name": name,
"ssh_keyfile": f"/sshkeys/{tmp_dir}/{sshkeyfile_name}",
"username": username,
}),
)
qpc_cred_edit = pexpect.spawn(
"{} cred edit --name={} --become-password".format(client_cmd, name))
assert qpc_cred_edit.expect(BECOME_PASSWORD_INPUT) == 0
qpc_cred_edit.sendline(new_become_password)
assert qpc_cred_edit.expect(
'Credential "{}" was updated'.format(name)) == 0
assert qpc_cred_edit.expect(pexpect.EOF) == 0
qpc_cred_edit.close()
assert qpc_cred_edit.exitstatus == 0
cred_show_and_check(
{"name": name},
generate_show_output({
"become_password": MASKED_PASSWORD_OUTPUT,
"name": name,
"ssh_keyfile": f"/sshkeys/{tmp_dir}/{sshkeyfile_name}",
"username": username,
}),
)
def test_edit_sshkeyfile(isolated_filesystem, qpc_server_config):
"""Edit an auth's sshkeyfile.
:id: 81975705-bc77-4d1c-a8dd-72d1b996e19d
:description: Edit the sshkeyfile of an auth entry.
:steps: Run ``qpc cred edit --name <name> --sshkeyfile <newsshkeyfile>``
:expectedresults: The auth sshkeyfile must be updated.
"""
name = utils.uuid4()
username = utils.uuid4()
tmp_dir = os.path.basename(os.getcwd())
sshkeyfile_name = utils.uuid4()
sshkeyfile = Path(sshkeyfile_name)
sshkeyfile.touch()
new_sshkeyfile_name = utils.uuid4()
new_sshkeyfile = Path(new_sshkeyfile_name)
new_sshkeyfile.touch()
cred_add_and_check({
"name": name,
"username": username,
"sshkeyfile": f"/sshkeys/{tmp_dir}/{sshkeyfile_name}"
})
cred_show_and_check(
{"name": name},
generate_show_output({
"name": name,
"ssh_keyfile": f"/sshkeys/{tmp_dir}/{sshkeyfile_name}",
"username": username
}),
)
qpc_cred_edit = pexpect.spawn(
"{} cred edit --name={} --sshkeyfile {}".format(
client_cmd, name, f"/sshkeys/{tmp_dir}/{new_sshkeyfile_name}"))
qpc_cred_edit.logfile = BytesIO()
assert qpc_cred_edit.expect(
'Credential "{}" was updated'.format(name)) == 0
assert qpc_cred_edit.expect(pexpect.EOF) == 0
qpc_cred_edit.close()
assert qpc_cred_edit.exitstatus == 0
cred_show_and_check(
{"name": name},
generate_show_output({
"name": name,
"ssh_keyfile": f"/sshkeys/{tmp_dir}/{new_sshkeyfile_name}",
"username": username,
}),
)
def test_edit_password(isolated_filesystem, qpc_server_config, source_type):
"""Edit an auth's password.
:id: 07bbe78d-d140-449d-b835-59b35d9e9a59
:description: Edit the password of an auth entry.
:steps: Run ``qpc cred edit --name <name> --password <newpassword>``
:expectedresults: The auth password must be updated.
"""
name = utils.uuid4()
username = utils.uuid4()
password = utils.uuid4()
new_password = utils.uuid4()
cred_add_and_check(
{
"name": name,
"username": username,
"password": None,
"type": source_type
},
[(CONNECTION_PASSWORD_INPUT, password)],
)
cred_show_and_check(
{"name": name},
generate_show_output({
"cred_type": source_type,
"name": name,
"password": MASKED_PASSWORD_OUTPUT,
"username": username,
}),
)
qpc_cred_edit = pexpect.spawn("{} cred edit --name={} --password".format(
client_cmd, name))
assert qpc_cred_edit.expect(CONNECTION_PASSWORD_INPUT) == 0
qpc_cred_edit.sendline(new_password)
assert qpc_cred_edit.expect(
'Credential "{}" was updated'.format(name)) == 0
assert qpc_cred_edit.expect(pexpect.EOF) == 0
qpc_cred_edit.close()
assert qpc_cred_edit.exitstatus == 0
cred_show_and_check(
{"name": name},
generate_show_output({
"cred_type": source_type,
"name": name,
"password": MASKED_PASSWORD_OUTPUT,
"username": username,
}),
)
def test_edit_username(isolated_filesystem, qpc_server_config, source_type):
"""Edit an auth's username.
:id: 69e2d06e-5c29-42ab-916e-e724451afabe
:description: Edit the username of an auth entry.
:steps: Run ``qpc cred edit --name <name> --username <newusername>``
:expectedresults: The auth username must be updated and the ``credentials``
file must be updated.
"""
name = utils.uuid4()
username = utils.uuid4()
new_username = utils.uuid4()
cred_add_and_check(
{
"name": name,
"password": None,
"type": source_type,
"username": username
},
[(CONNECTION_PASSWORD_INPUT, utils.uuid4())],
)
cred_show_and_check(
{"name": name},
generate_show_output({
"cred_type": source_type,
"name": name,
"password": MASKED_PASSWORD_OUTPUT,
"username": username,
}),
)
qpc_cred_edit = pexpect.spawn(
"{} cred edit --name={} --username={}".format(client_cmd, name,
new_username))
qpc_cred_edit.logfile = BytesIO()
assert qpc_cred_edit.expect(
'Credential "{}" was updated'.format(name)) == 0
assert qpc_cred_edit.expect(pexpect.EOF) == 0
qpc_cred_edit.close()
assert qpc_cred_edit.exitstatus == 0
cred_show_and_check(
{"name": name},
generate_show_output({
"cred_type": source_type,
"name": name,
"password": MASKED_PASSWORD_OUTPUT,
"username": new_username,
}),
)
def test_clear_all(isolated_filesystem, qpc_server_config):
"""Clear all auth entries.
:id: 16aa6914-e7ae-400f-b12b-6c9d218c4e0f
:description: Clear multiple auth entries using the ``--all`` option.
:steps: Run ``qpc cred clear --all``
:expectedresults: All auth entries are removed.
"""
auths = []
for _ in range(random.randint(2, 3)):
name = utils.uuid4()
username = utils.uuid4()
tmp_dir = os.path.basename(os.getcwd())
sshkeyfile_name = utils.uuid4()
sshkeyfile = Path(sshkeyfile_name)
sshkeyfile.touch()
auth = {
"name": name,
"password": None,
"ssh_keyfile": f"/sshkeys/{tmp_dir}/{sshkeyfile_name}",
"become_password": None,
"username": username,
}
auths.append(auth)
cred_add_and_check({
"name":
name,
"username":
username,
"sshkeyfile":
f"/sshkeys/{tmp_dir}/{sshkeyfile_name}",
})
output, exitstatus = pexpect.run("{} cred clear --all".format(client_cmd),
encoding="utf-8",
withexitstatus=True)
assert "All credentials were removed." in output
assert exitstatus == 0
output, exitstatus = pexpect.run("{} cred list".format(client_cmd),
encoding="utf8",
withexitstatus=True)
assert "No credentials exist yet." in output
assert exitstatus == 0
def test_clear(isolated_filesystem, qpc_server_config):
"""Clear an auth.
:id: 550acd7f-0e2a-419c-a996-818b8475532f
:description: Clear one auth entry by entering the ``--name`` of an already
created entry.
:steps: Run ``qpc cred clear --name <name>``
:expectedresults: The auth entry is removed.
"""
name = utils.uuid4()
username = utils.uuid4()
tmp_dir = os.path.basename(os.getcwd())
sshkeyfile_name = utils.uuid4()
sshkeyfile = Path(sshkeyfile_name)
sshkeyfile.touch()
cred_add_and_check({
"name": name,
"username": username,
"sshkeyfile": f"/sshkeys/{tmp_dir}/{sshkeyfile_name}"
})
cred_show_and_check(
{"name": name},
generate_show_output({
"name": name,
"ssh_keyfile": f"/sshkeys/{tmp_dir}/{sshkeyfile_name}",
"username": username
}),
)
qpc_cred_clear = pexpect.spawn("{} cred clear --name={}".format(
client_cmd, name))
assert qpc_cred_clear.expect(
'Credential "{}" was removed'.format(name)) == 0
assert qpc_cred_clear.expect(pexpect.EOF) == 0
qpc_cred_clear.close()
assert qpc_cred_clear.exitstatus == 0
qpc_cred_show = pexpect.spawn("{} cred show --name={}".format(
client_cmd, name))
assert qpc_cred_show.expect(
'Credential "{}" does not exist'.format(name)) == 0
assert qpc_cred_show.expect(pexpect.EOF) == 0
qpc_cred_show.close()
def test_add_with_username_sshkeyfile_become_password(isolated_filesystem,
qpc_server_config):
"""Add an auth with username, sshkeyfile and become password.
:id: 94a45a9b-cda7-41e7-8be5-caf598917ebb
:description: Add an auth entry providing the ``--name``, ``--username``,
``--sshkeyfile`` and ``--become-password`` options.
:steps: Run ``qpc cred add --name <name> --username <username> --sshkeyfile
<sshkeyfile> --become-password``
:expectedresults: A new auth entry is created with the data provided as
input.
"""
name = utils.uuid4()
username = utils.uuid4()
sshkeyfile_name = utils.uuid4()
tmp_dir = os.path.basename(os.getcwd())
sshkeyfile = Path(sshkeyfile_name)
sshkeyfile.touch()
cred_add_and_check(
{
"name": name,
"username": username,
"sshkeyfile": f"/sshkeys/{tmp_dir}/{sshkeyfile_name}",
"become-password": None,
},
[(BECOME_PASSWORD_INPUT, utils.uuid4())],
)
cred_show_and_check(
{"name": name},
generate_show_output({
"cred_type": "network",
"become_password": MASKED_PASSWORD_OUTPUT,
"name": name,
"ssh_keyfile": f"/sshkeys/{tmp_dir}/{sshkeyfile_name}",
"username": username,
}),
)
def test_add_with_username_password_become_password(isolated_filesystem,
qpc_server_config):
"""Add an auth with username, password and become password.
:id: df0d61d5-363f-400a-961c-04146f6089e1
:description: Add an auth entry providing the ``--name``, ``--username``,
``--pasword`` and ``--become-password`` options.
:steps: Run ``qpc cred add --name <name> --username <username> --password
--become-password``
:expectedresults: A new auth entry is created with the data provided as
input.
"""
name = utils.uuid4()
username = utils.uuid4()
cred_add_and_check(
{
"name": name,
"username": username,
"password": None,
"become-password": None
},
[
(CONNECTION_PASSWORD_INPUT, utils.uuid4()),
(BECOME_PASSWORD_INPUT, utils.uuid4()),
],
)
cred_show_and_check(
{"name": name},
generate_show_output({
"become_password": MASKED_PASSWORD_OUTPUT,
"name": name,
"password": MASKED_PASSWORD_OUTPUT,
"username": username,
}),
)
def test_clear_with_source(isolated_filesystem, qpc_server_config):
"""Attempt to clear a credential being used by a source.
:id: 66d84e9c-3124-11e8-b467-0ed5f89f718b
:description: Create a credential and a source that utilizes the
credential. Try to clear the credential entry by entering the --name
of the credential which is associated with the source entry. After that
remove the associated source entry and try to remove the credential
again, it should now be removed.
:steps:
1) Run ``qpc cred add --name <name> --type <type> --username <username>
--sshkeyfile <sshkeyfile>``
2) Run ``qpc source add --name <name> --type <type> --cred <cred>
--hosts <hosts>``
3) Run ``qpc cred clear --name <name>`` (fails due to source)
4) Run ``qpc source clear --name <name>``
5) Run ``qpc cred clear --name <name>``
:expectedresults: The credential is only removed after the source that is
using it has been deleted.
"""
cred_name = utils.uuid4()
cred_type = "network"
source_name = utils.uuid4()
hosts = ["127.0.0.1"]
username = utils.uuid4()
tmp_dir = os.path.basename(os.getcwd())
sshkeyfile_name = utils.uuid4()
sshkeyfile = Path(sshkeyfile_name)
sshkeyfile.touch()
cred_add_and_check({
"name": cred_name,
"type": cred_type,
"username": username,
"sshkeyfile": f"/sshkeys/{tmp_dir}/{sshkeyfile_name}",
})
cred_show_and_check(
{"name": cred_name},
generate_show_output({
"name": cred_name,
"ssh_keyfile": f"/sshkeys/{tmp_dir}/{sshkeyfile_name}",
"username": username,
}),
)
# create dependent source
source_add_and_check({
"name": source_name,
"cred": [cred_name],
"hosts": hosts
})
output = source_show({"name": source_name})
output = json.loads(output)
# try to delete credential
qpc_cred_clear = pexpect.spawn("{} cred clear --name={}".format(
client_cmd, cred_name))
qpc_cred_clear.logfile = BytesIO()
assert qpc_cred_clear.expect(pexpect.EOF) == 0
assert (qpc_cred_clear.logfile.getvalue().strip().decode("utf-8") ==
"Error: Credential cannot be deleted because it is used by 1"
" or more sources.\r\n"
"sources: {'id': '%s', 'name': '%s'}\r\n"
'Failed to remove credential "%s". '
"For more information, see the server log file." %
(output["id"], source_name, cred_name))
qpc_cred_clear.logfile.close()
qpc_cred_clear.close()
assert qpc_cred_clear.exitstatus == 1
qpc_cred_clear.close()
# delete the source using credential
qpc_source_clear = pexpect.spawn("{} source clear --name={}".format(
client_cmd, source_name))
assert qpc_source_clear.expect(
'Source "{}" was removed'.format(source_name)) == 0
assert qpc_source_clear.expect(pexpect.EOF) == 0
qpc_source_clear.close()
assert qpc_source_clear.exitstatus == 0
# successfully remove credential
qpc_cred_clear = pexpect.spawn("{} cred clear --name={}".format(
client_cmd, cred_name))
assert qpc_cred_clear.expect(
'Credential "{}" was removed'.format(cred_name)) == 0
assert qpc_cred_clear.expect(pexpect.EOF) == 0
qpc_cred_clear.close()
assert qpc_cred_clear.exitstatus == 0
# try showing cred
qpc_cred_show = pexpect.spawn("{} cred show --name={}".format(
client_cmd, cred_name))
assert qpc_cred_show.expect(
'Credential "{}" does not exist'.format(cred_name)) == 0
assert qpc_cred_show.expect(pexpect.EOF) == 0
qpc_cred_show.close()
