def test_non_admin_quota(self):
"""Tests that nonadmin network creation is limited by quota.
Test steps:
1) Admin set project network quota to 1.
2) User successfully creates network.
3) User fails to create second network.
4) (cleanup) Reset the user network quota.
5) (cleanup) Delete the network created in step 2.
"""
quota = utils.quota_show(self.clients['admin'],
self.projects['project1']['id'])
utils.quota_set(self.clients['admin'],
'--networks 1',
self.projects['project1']['id'])
self.addCleanup(utils.quota_set,
self.clients['admin'],
'--networks {0}'.format(quota['networks']),
self.projects['project1']['id'])
network1 = utils.network_create(self.clients['project1-member'])
self.addCleanup(utils.network_delete,
self.clients['project1-member'],
network1['name'])
self.assertRaises(exceptions.CommandFailed,
utils.network_create,
self.clients['project1-member'])
def test_lessee_attach_and_detach(self):
"""Tests that lessee can attach/detach a network from a node
Test steps:
1) Admin sets lessee of node to User 1.
2) User 1 retrieves information about the node.
3) User 1 sets provision state of the node to manageable.
4) User 1 creates a network.
5) User 1 creates a port on the network.
6) User 1 attaches node to network using port.
7) User 1 detaches node from network
8) (cleanup) Delete the port created in step 5.
9) (cleanup) Delete the network created in step 4.
10) (cleanup) Undeploy the node
11) (cleanup) Reset the lessee of the node.
"""
node = utils.node_show(self.clients['admin'], self.node)
utils.node_set(self.clients['admin'], self.node, 'lessee',
self.projects['project1']['id'])
self.addCleanup(utils.node_set, self.clients['admin'], self.node,
'lessee', node['lessee'])
node = utils.node_show(self.clients['project1-member'], self.node)
if node['provision_state'] != 'manageable':
utils.node_set_provision_state(self.clients['project1-member'],
self.node, 'manage')
network = utils.network_create(self.clients['project1-member'])
self.addCleanup(utils.network_delete, self.clients['admin'],
network['name'])
port = utils.port_create(self.clients['project1-member'],
network['name'])
self.addCleanup(utils.port_delete, self.clients['admin'], port['name'])
utils.esi_node_network_attach(self.clients['project1-member'],
self.node, port['name'])
node_network_list = utils.esi_node_network_list(
self.clients['project1-member'],
params="--node {0}".format(self.node))
self.assertEqual(
node_network_list[0]["Network"],
"{0} ({1})".format(network['name'],
network['provider:segmentation_id']))
utils.esi_node_network_detach(self.clients['project1-member'],
self.node, port['name'])
node_network_list = utils.esi_node_network_list(
self.clients['project1-member'],
params="--node {0}".format(self.node))
self.assertEqual(node_network_list[0]["Network"], None)
def test_nonadmin_no_network_cannot_attach(self):
"""Tests nonadmin no-permission network node operation
Tests that a nonadmin who is an owner/lessee cannot
attach a private network that they do not have permission
to use from a node
Test steps:
1) Admin sets lessee of node to User 1.
2) User 1 retrieves information about the node.
3) User 1 sets provision state of the node to manageable.
4) User 1 creates a network.
5) User 1 creates a port on the network.
6) User 1 attaches node to network using port.
7) User 1 detaches node from network
8) (cleanup) Delete the port created in step 5.
9) (cleanup) Delete the network created in step 4.
10) (cleanup) Undeploy the node
11) (cleanup) Reset the lessee of the node.
"""
node = utils.node_show(self.clients['admin'], self.node)
utils.node_set(self.clients['admin'],
self.node,
'lessee',
self.projects['project1']['id'])
self.addCleanup(utils.node_set,
self.clients['admin'],
self.node,
'lessee', node['lessee'])
network = utils.network_create(self.clients['admin'])
self.addCleanup(utils.network_delete,
self.clients['admin'],
network['name'])
port = utils.port_create(self.clients['admin'],
network['name'])
self.addCleanup(utils.port_delete, self.clients['admin'],
port['name'])
node = utils.node_show(self.clients['project1-member'], self.node)
utils.node_set_provision_state(self.clients['project1-member'],
self.node, 'manage')
self.addCleanup(utils.node_set_provision_state,
self.clients['admin'],
self.node, 'undeploy')
self.assertRaises(exceptions.CommandFailed,
utils.esi_node_network_attach,
self.clients['project1-member'],
self.node,
port['name'])
def test_nonadmin_no_node_cannot_attach_or_detach(self):
"""Tests nonadmin no node permission node/network operations
Tests that a nonadmin who is neither an owner nor an lessee
cannot attach or detach a network from a node
Test steps:
1) User 1 creates a network.
2) User 1 creates a port on the network.
3) User 1 fails to attach node to network using port.
4) Admin attaches node to network using port.
5) User 1 fails to detach node from network
6) (cleanup) Detach port from node.
7) (cleanup) Delete the port created in step 2.
8) (cleanup) Delete the network created in step 1.
9) (cleanup) Undeploy the node
"""
node = utils.node_show(self.clients['admin'], self.node)
network = utils.network_create(self.clients['project1-member'])
self.addCleanup(utils.network_delete,
self.clients['admin'],
network['name'])
port = utils.port_create(self.clients['project1-member'],
network['name'])
self.addCleanup(utils.port_delete, self.clients['admin'],
port['name'])
self.assertRaises(exceptions.CommandFailed,
utils.esi_node_network_attach,
self.clients['project1-member'],
self.node,
port['name'])
if node['provision_state'] != 'manageable':
utils.node_set_provision_state(self.clients['admin'],
self.node, 'manage')
self.addCleanup(utils.node_set_provision_state,
self.clients['admin'],
self.node, 'undeploy')
utils.esi_node_network_attach(self.clients['admin'],
self.node, port['name'])
self.addCleanup(utils.esi_node_network_detach,
self.clients['admin'],
self.node, port['name'])
self.assertRaises(exceptions.CommandFailed,
utils.esi_node_network_detach,
self.clients['project1-member'],
self.node,
port['name'])
def test_admin_attach_and_detach(self):
"""Tests that an admin can attach and detach a network from a node
Test steps:
1) Admin retrieves information about the node.
2) Admin sets provision state of the node to manageable.
3) Admin creates a network.
4) Admin creates a port on the network.
5) Admin attaches node to network using port.
6) Admin detaches node from network
7) (cleanup) Delete the port created in step 5.
8) (cleanup) Delete the network created in step 4.
9) (cleanup) Undeploy the node.
"""
node = utils.node_show(self.clients['admin'], self.node)
if node['provision_state'] != 'manageable':
utils.node_set_provision_state(self.clients['admin'],
self.node, 'manage')
self.addCleanup(utils.node_set_provision_state,
self.clients['admin'],
self.node, 'undeploy')
network = utils.network_create(self.clients['admin'])
self.addCleanup(utils.network_delete,
self.clients['admin'],
network['name'])
port = utils.port_create(self.clients['admin'],
network['name'])
self.addCleanup(utils.port_delete, self.clients['admin'],
port['name'])
utils.esi_node_network_attach(self.clients['admin'],
self.node, port['name'])
node_network_list = utils.esi_node_network_list(
self.clients['admin'],
params="--node {0}".format(self.node))
self.assertEqual(node_network_list[0]["Network"],
"{0} ({1})".format(
network['name'],
network['provider:segmentation_id']))
utils.esi_node_network_detach(self.clients['admin'],
self.node, port['name'])
node_network_list = utils.esi_node_network_list(
self.clients['admin'],
params="--node {0}".format(self.node))
self.assertEqual(node_network_list[0]["Network"], None)
def test_admin_public_network(self):
"""Tests that an admin can create a public network that nonadmins can view.
Test steps:
1) Admin creates public network.
2) Nonadmin retrieves information about the network.
3) (cleanup) Delete the network created in step 1.
"""
network = utils.network_create(self.clients['admin'], shared='share')
self.addCleanup(utils.network_delete,
self.clients['admin'],
network['name'])
network_show = utils.network_show(self.clients['project1-member'],
network['name'])
self.assertEqual(network['id'], network_show['id'])
def test_non_admin_private_network(self):
"""Tests that a nonadmin can create a private network.
Test steps:
1) User 1 creates network.
2) User 1 retrieves information about the network.
3) User 2 cannot retrieve information about the network.
4) User 1 shares network with User 2
5) User 2 can retrieve information about the network.
6) User 1 unshares network with User 2
7) User 2 can no longer retrieve information about the network.
8) (cleanup) Delete the network created in step 1.
"""
network = utils.network_create(self.clients['project1-member'])
self.addCleanup(utils.network_delete,
self.clients['project1-member'],
network['name'])
network_show = utils.network_show(self.clients['project1-member'],
network['name'])
self.assertEqual(network['id'], network_show['id'])
self.assertRaises(exceptions.CommandFailed,
utils.network_show,
self.clients['project2-member'],
network['name'])
network_rbac = utils.network_rbac_create(
self.clients['project1-member'],
self.projects['project2']['id'],
network['name'])
network_show_2 = utils.network_show(self.clients['project2-member'],
network['name'])
self.assertEqual(network['id'], network_show_2['id'])
utils.network_rbac_delete(self.clients['project1-member'],
network_rbac['id'])
self.assertRaises(exceptions.CommandFailed,
utils.network_show,
self.clients['project2-member'],
network['name'])
def test_non_admin_trunk_port(self):
"""Tests that a nonadmin can create and update a trunk port
Test steps:
1) User 1 lists trunks.
2) User 2 lists trunks.
3) User 1 creates a network.
4) User 1 creates a trunk using native network from step 3.
5) User 1 lists trunks and sees trunk from step 4.
6) User 2 lists trunks and does not see trunk.
7) User 1 creates a second network.
8) User 1 adds network from step 7 to trunk as tagged network.
9) User 1 lists trunks and sees updated trunk.
10) User 1 removes network from step 7 from trunk.
11) User 1 lists trunks and sees updated trunk.
12) User 1 deletes trunk.
13) (cleanup) Delete the network created in step 3.
14) (cleanup) Delete the trunk created in step 4.
15) (cleanup) Delete the network created in step 7.
"""
trunks = utils.esi_trunk_list(self.clients['project1-member'])
self.assertEqual(len(trunks), 0)
trunks = utils.esi_trunk_list(self.clients['project2-member'])
self.assertEqual(len(trunks), 0)
network1 = utils.network_create(self.clients['project1-member'])
self.addCleanup(utils.network_delete, self.clients['admin'],
network1['name'])
trunk = utils.esi_trunk_create(self.clients['project1-member'],
network1['name'])
self.addCleanup(utils.esi_trunk_delete,
self.clients['admin'],
trunk['Trunk'],
fail_ok=True)
trunks = utils.esi_trunk_list(self.clients['project1-member'])
self.assertEqual(len(trunks), 1)
self.assertEqual(
trunks[0]['Network'],
"{0} ({1})".format(network1['name'],
network1['provider:segmentation_id']))
trunks = utils.esi_trunk_list(self.clients['project2-member'])
self.assertEqual(len(trunks), 0)
network2 = utils.network_create(self.clients['project1-member'])
self.addCleanup(utils.network_delete, self.clients['admin'],
network2['name'])
utils.esi_trunk_add_network(self.clients['project1-member'],
trunk['Trunk'], network2['name'])
trunks = utils.esi_trunk_list(self.clients['project1-member'])
self.assertEqual(
trunks[0]['Network'], "{0} ({1})\n{2} ({3})".format(
network1['name'], network1['provider:segmentation_id'],
network2['name'], network2['provider:segmentation_id']))
utils.esi_trunk_remove_network(self.clients['project1-member'],
trunk['Trunk'], network2['name'])
trunks = utils.esi_trunk_list(self.clients['project1-member'])
self.assertEqual(
trunks[0]['Network'],
"{0} ({1})".format(network1['name'],
network1['provider:segmentation_id']))
utils.esi_trunk_delete(self.clients['project1-member'], trunk['Trunk'])
