def test_create_policy_no_rules(self, bigip, partition):
"""Create a simple policy with no rules."""
if isinstance(bigip, MagicMock):
return
test_policy = {
'name': self.name,
'strategy': "/Common/first-match",
'rules': []
}
policy = Policy(partition=partition, **test_policy)
try:
policy.create(bigip)
except exceptions.F5CcclError as e:
print(e)
(icr_policy, code) = self._get_policy_from_bigip(bigip, partition)
assert icr_policy
assert icr_policy.raw['name'] == self.name
assert icr_policy.raw['strategy'] == "/Common/first-match"
assert 'items' not in icr_policy.raw['rulesReference']
# assert icr_policy.raw['status'] == "legacy"
try:
policy.delete(bigip)
except exceptions.F5CcclError as e:
print(e)
def test_create_policy():
data = {
'name': "my_policy",
'partition': "Test",
'strategy': "/Common/first-match",
'rules': [],
'metadata': []
}
policy = Policy(**data)
assert policy.name == "my_policy"
assert policy.partition == "Test"
assert policy.data.get('strategy') == "/Common/first-match"
assert len(policy.data.get('rules')) == 0
assert policy.data.get('legacy')
assert policy.data.get('controls') == ["forwarding"]
assert policy.data.get('requires') == ["http"]
rules = {'name': "test_rule", 'actions': [], 'conditions': []}
data['rules'].append(rules)
policy = Policy(**data)
assert policy.name == "my_policy"
assert policy.partition == "Test"
assert policy.data.get('strategy') == "/Common/first-match"
assert len(policy.data.get('rules')) == 1
assert policy.data.get('legacy')
assert policy.data.get('controls') == ["forwarding"]
assert policy.data.get('requires') == ["http"]
def test_create_policy_one_rule(self, bigip, partition):
"""Create a simple policy with one rule."""
if isinstance(bigip, MagicMock):
return
test_rule = {
'name': "rule_0",
'actions': [],
'conditions': []
}
test_policy = {
'name': self.name,
'strategy': "/Common/first-match",
'rules': []
}
test_policy['rules'].append(test_rule)
# Create the policy resource.
policy = Policy(partition=partition, **test_policy)
try:
# Create on bigip.
policy.create(bigip)
except exceptions.F5CcclError as e:
print(e)
# Get the policy from the bigip.
(icr_policy, code) = self._get_policy_from_bigip(bigip, partition)
# Assert object exists and test attributes.
assert icr_policy
assert icr_policy.raw['name'] == self.name
assert icr_policy.raw['strategy'] == "/Common/first-match"
assert 'items' in icr_policy.raw['rulesReference']
rules = icr_policy.raw['rulesReference']['items']
assert len(rules) == 1
rule = rules[0]
assert rule['name'] == "rule_0"
assert rule['ordinal'] == 0
assert policy == IcrPolicy(**icr_policy.raw)
# Cleanup
try:
policy.delete(bigip)
except exceptions.F5CcclError as e:
print(e)
def api_policy():
test_policy = {
'name':
"wrapper_policy",
'strategy':
"/Common/first-match",
'rules': [{
'name':
"my_rule1",
'actions': [{
'pool': "/Test/pool1",
'forward': True,
'request': True
}],
'conditions': [{
"httpHeader": True,
"contains": True,
"tmName": "X-Header",
"values": ["openstack", "velcro"]
}]
}, {
'name': "my_rule2",
'actions': [{
'reset': True,
'forward': True
}],
'conditions': []
}]
}
return Policy(partition="Test", **test_policy)
def test_create_policy_supported_conditions(self, bigip, partition):
"""Create a policy with supported conditions"""
if isinstance(bigip, MagicMock):
return
policy_data = {
'name': self.name,
'strategy': "/Common/first-match",
'rules': [
{
'name': "test_rule0",
'actions': [],
'conditions': []
}
]
}
rule = policy_data['rules'][0]
skip_conditions = ["http_uri_unsupported", "http_unsupported_operand_type"]
# For each supported condition create, test, and delete.
for condition in conditions:
if condition in skip_conditions:
continue
rule['conditions'] = [conditions[condition]]
# Create the CCCL policy object.
policy = Policy(partition=partition, **policy_data)
# Create on the BIG-IP
try:
policy.create(bigip)
except exceptions.F5CcclError as e:
print(e)
# Retrieve it from the BIG-IP
(icr_policy, code) = self._get_policy_from_bigip(bigip, partition)
# Compare.
assert icr_policy
assert policy == IcrPolicy(**icr_policy.raw)
# Delete the policy
try:
policy.delete(bigip)
except exceptions.F5CcclError as e:
print(e)
def policy_0():
data = {
'name': "my_policy",
'partition': "Test",
'strategy': "/Common/first-match",
'rules': []
}
return Policy(**data)
def test_create_policy_no_rules(self, bigip, partition):
"""Create a simple policy with no rules."""
if isinstance(bigip, MagicMock):
return
test_policy = {
'name': self.name,
'strategy': "/Common/first-match",
'rules': []
}
policy = Policy(partition=partition, **test_policy)
try:
policy.create(bigip)
except exceptions.F5CcclError as e:
print(e)
(icr_policy, code) = self._get_policy_from_bigip(bigip, partition)
assert icr_policy
assert icr_policy.raw['name'] == self.name
assert icr_policy.raw['strategy'] == "/Common/first-match"
assert 'items' not in icr_policy.raw['rulesReference']
# assert icr_policy.raw['status'] == "legacy"
try:
policy.delete(bigip)
except exceptions.F5CcclError as e:
print(e)
def test_create_policy_supported_conditions(self, bigip, partition):
"""Create a policy with supported conditions"""
if isinstance(bigip, MagicMock):
return
policy_data = {
'name': self.name,
'strategy': "/Common/first-match",
'rules': [{
'name': "test_rule0",
'actions': [],
'conditions': []
}]
}
rule = policy_data['rules'][0]
skip_conditions = [
"http_uri_unsupported", "http_unsupported_operand_type"
]
# For each supported condition create, test, and delete.
for condition in conditions:
if condition in skip_conditions:
continue
rule['conditions'] = [conditions[condition]]
# Create the CCCL policy object.
policy = Policy(partition=partition, **policy_data)
# Create on the BIG-IP
try:
policy.create(bigip)
except exceptions.F5CcclError as e:
print(e)
# Retrieve it from the BIG-IP
(icr_policy, code) = self._get_policy_from_bigip(bigip, partition)
# Compare.
assert icr_policy
assert policy == IcrPolicy(**icr_policy.raw)
# Delete the policy
try:
policy.delete(bigip)
except exceptions.F5CcclError as e:
print(e)
def test_create_policy_one_rule(self, bigip, partition):
"""Create a simple policy with one rule."""
if isinstance(bigip, MagicMock):
return
test_rule = {'name': "rule_0", 'actions': [], 'conditions': []}
test_policy = {
'name': self.name,
'strategy': "/Common/first-match",
'rules': []
}
test_policy['rules'].append(test_rule)
# Create the policy resource.
policy = Policy(partition=partition, **test_policy)
try:
# Create on bigip.
policy.create(bigip)
except exceptions.F5CcclError as e:
print(e)
# Get the policy from the bigip.
(icr_policy, code) = self._get_policy_from_bigip(bigip, partition)
# Assert object exists and test attributes.
assert icr_policy
assert icr_policy.raw['name'] == self.name
assert icr_policy.raw['strategy'] == "/Common/first-match"
assert 'items' in icr_policy.raw['rulesReference']
rules = icr_policy.raw['rulesReference']['items']
assert len(rules) == 1
rule = rules[0]
assert rule['name'] == "rule_0"
assert rule['ordinal'] == 0
assert policy == IcrPolicy(**icr_policy.raw)
# Cleanup
try:
policy.delete(bigip)
except exceptions.F5CcclError as e:
print(e)
def test_create_policy_rule_conditions(self, bigip, partition):
"""Create a policy with a rule and conditions."""
if isinstance(bigip, MagicMock):
return
policy_data = {
'name': self.name,
'strategy': "/Common/first-match",
'rules': [{
'name': "test_rule0",
'actions': [],
'conditions': []
}]
}
rule_0 = policy_data['rules'][0]
rule_0['conditions'].append(conditions['http_host'])
policy = Policy(partition=partition, **policy_data)
try:
policy.create(bigip)
except exceptions.F5CcclError as e:
print(e)
(icr_policy, code) = self._get_policy_from_bigip(bigip, partition)
assert icr_policy
assert policy == IcrPolicy(**icr_policy.raw)
# Add a condition
condition = conditions['http_host']
rule_0['conditions'].append(conditions['http_host'])
policy = Policy(partition=partition, **policy_data)
try:
policy.update(bigip)
except exceptions.F5CcclError as e:
print(e)
(icr_policy, code) = self._get_policy_from_bigip(bigip, partition)
assert icr_policy
assert policy == IcrPolicy(**icr_policy.raw)
# Remove both conditions
rule_0['conditions'] = list()
policy = Policy(partition=partition, **policy_data)
try:
policy.update(bigip)
except exceptions.F5CcclError as e:
print(e)
(icr_policy, code) = self._get_policy_from_bigip(bigip, partition)
assert icr_policy
assert policy == IcrPolicy(**icr_policy.raw)
# Modify the condition and check that they are different
new_condition = deepcopy(conditions['http_host'])
# Change the matcher.
new_condition.pop('equals')
new_condition['contains'] = True
rule_0['conditions'] = [new_condition]
policy = Policy(partition=partition, **policy_data)
# Test that the conditions are not equal.
assert policy != IcrPolicy(**icr_policy.raw)
# Update and check that they are equal
try:
policy.update(bigip)
except exceptions.F5CcclError as e:
print(e)
(icr_policy, code) = self._get_policy_from_bigip(bigip, partition)
assert icr_policy
assert policy == IcrPolicy(**icr_policy.raw)
# Delete the policy
try:
policy.delete(bigip)
except exceptions.F5CcclError as e:
print(e)
def test_create_policy_rules(self, bigip, partition):
if isinstance(bigip, MagicMock):
return
# Create a new policy
policy_data = {
'name': self.name,
'strategy': "/Common/first-match",
'rules': []
}
policy = Policy(partition=partition, **policy_data)
try:
policy.create(bigip)
except exceptions.F5CcclError as e:
print(e)
(icr_policy, code) = self._get_policy_from_bigip(bigip, partition)
assert icr_policy
for i in range(5):
test_rule = {'actions': [], 'conditions': []}
test_rule['name'] = "rule_{}".format(i)
policy_data['rules'].append(test_rule)
policy = Policy(partition=partition, **policy_data)
try:
policy.update(bigip)
except exceptions.F5CcclError as e:
print(e)
(icr_policy, code) = self._get_policy_from_bigip(bigip, partition)
assert icr_policy
assert 'items' in icr_policy.raw['rulesReference']
rules = icr_policy.raw['rulesReference']['items']
assert len(rules) == i + 1
# Assert that the policy is equal to the one on the bigip.
assert policy == IcrPolicy(**icr_policy.raw)
# Reverse the list of rules and assert that the ordinals change.
policy_data['rules'].reverse()
policy = Policy(partition=partition, **policy_data)
try:
policy.update(bigip)
except exceptions.F5CcclError as e:
print(e)
(icr_policy, code) = self._get_policy_from_bigip(bigip, partition)
assert icr_policy
assert 'items' in icr_policy.raw['rulesReference']
rules = icr_policy.raw['rulesReference']['items']
for rule in rules:
ordinal = rule['ordinal']
assert rule['name'] == "rule_{}".format(4 - ordinal)
# Assert that the policy is equal to the one on the bigip.
assert policy == IcrPolicy(**icr_policy.raw)
policy_data = {
'name': self.name,
'strategy': "/Common/first-match",
'rules': []
}
policy = Policy(partition=partition, **policy_data)
try:
policy.update(bigip)
except exceptions.F5CcclError as e:
print(e)
(icr_policy, code) = self._get_policy_from_bigip(bigip, partition)
assert icr_policy
assert 'items' not in icr_policy.raw['rulesReference']
try:
policy.delete(bigip)
except exceptions.F5CcclError as e:
print(e)
def test_update_policy_one_rule(self, bigip, partition):
if isinstance(bigip, MagicMock):
return
# Create a new policy
policy_data = {
'name': self.name,
'strategy': "/Common/first-match",
'rules': []
}
policy = Policy(partition=partition, **policy_data)
try:
policy.create(bigip)
except exceptions.F5CcclError as e:
print(e)
# Retrieve it from the BIG-IP
(icr_policy, code) = self._get_policy_from_bigip(bigip, partition)
assert code == 200
# Assert the attributes of the retrieved policy
assert icr_policy
assert icr_policy.raw['name'] == self.name
assert icr_policy.raw['strategy'] == "/Common/first-match"
assert 'items' not in icr_policy.raw['rulesReference']
# Update the policy strategy
new_policy_data = {
'name': self.name,
'strategy': "/Common/best-match",
'rules': []
}
policy = Policy(partition=partition, **new_policy_data)
try:
policy.update(bigip)
except exceptions.F5CcclError as e:
print(e)
# Retrieve it from the BIG-IP
(icr_policy, code) = self._get_policy_from_bigip(bigip, partition)
assert code == 200
# Assert strategy changed
assert icr_policy
assert icr_policy.raw['strategy'] == "/Common/best-match"
# Add a rule to the policy, and update
test_rule = {'name': "rule_0", 'actions': [], 'conditions': []}
new_policy_data['rules'].append(test_rule)
policy = Policy(partition=partition, **new_policy_data)
try:
policy.update(bigip)
except exceptions.F5CcclError as e:
print(e)
# Retrieve it from the BIG-IP
(icr_policy, code) = self._get_policy_from_bigip(bigip, partition)
assert code == 200
# Assert rule added
assert icr_policy
assert 'items' in icr_policy.raw['rulesReference']
rules = icr_policy.raw['rulesReference']['items']
assert len(rules) == 1
rule = rules[0]
assert rule['name'] == "rule_0"
# Remove the rule.
new_policy_data['rules'].pop()
policy = Policy(partition=partition, **new_policy_data)
try:
policy.update(bigip)
except exceptions.F5CcclError as e:
print(e)
# Retrieve it from the BIG-IP
(icr_policy, code) = self._get_policy_from_bigip(bigip, partition)
assert code == 200
# Assert rule removed
assert icr_policy
assert 'items' not in icr_policy.raw['rulesReference']
# cleanup
try:
policy.delete(bigip)
except exceptions.F5CcclError as e:
print(e)
def test_create_policy_rule_conditions(self, bigip, partition):
"""Create a policy with a rule and conditions."""
if isinstance(bigip, MagicMock):
return
policy_data = {
'name': self.name,
'strategy': "/Common/first-match",
'rules': [
{
'name': "test_rule0",
'actions': [],
'conditions': []
}
]
}
rule_0 = policy_data['rules'][0]
rule_0['conditions'].append(conditions['http_host'])
policy = Policy(partition=partition, **policy_data)
try:
policy.create(bigip)
except exceptions.F5CcclError as e:
print(e)
(icr_policy, code) = self._get_policy_from_bigip(bigip, partition)
assert icr_policy
assert policy == IcrPolicy(**icr_policy.raw)
# Add a condition
condition = conditions['http_host']
rule_0['conditions'].append(conditions['http_host'])
policy = Policy(partition=partition, **policy_data)
try:
policy.update(bigip)
except exceptions.F5CcclError as e:
print(e)
(icr_policy, code) = self._get_policy_from_bigip(bigip, partition)
assert icr_policy
assert policy == IcrPolicy(**icr_policy.raw)
# Remove both conditions
rule_0['conditions'] = list()
policy = Policy(partition=partition, **policy_data)
try:
policy.update(bigip)
except exceptions.F5CcclError as e:
print(e)
(icr_policy, code) = self._get_policy_from_bigip(bigip, partition)
assert icr_policy
assert policy == IcrPolicy(**icr_policy.raw)
# Modify the condition and check that they are different
new_condition = deepcopy(conditions['http_host'])
# Change the matcher.
new_condition.pop('equals')
new_condition['contains'] = True
rule_0['conditions'] = [new_condition]
policy = Policy(partition=partition, **policy_data)
# Test that the conditions are not equal.
assert policy != IcrPolicy(**icr_policy.raw)
# Update and check that they are equal
try:
policy.update(bigip)
except exceptions.F5CcclError as e:
print(e)
(icr_policy, code) = self._get_policy_from_bigip(bigip, partition)
assert icr_policy
assert policy == IcrPolicy(**icr_policy.raw)
# Delete the policy
try:
policy.delete(bigip)
except exceptions.F5CcclError as e:
print(e)
def test_create_policy_rules(self, bigip, partition):
if isinstance(bigip, MagicMock):
return
# Create a new policy
policy_data = {
'name': self.name,
'strategy': "/Common/first-match",
'rules': []
}
policy = Policy(partition=partition, **policy_data)
try:
policy.create(bigip)
except exceptions.F5CcclError as e:
print(e)
(icr_policy, code) = self._get_policy_from_bigip(bigip, partition)
assert icr_policy
for i in range(5):
test_rule = {
'actions': [],
'conditions': []
}
test_rule['name'] = "rule_{}".format(i)
policy_data['rules'].append(test_rule)
policy = Policy(partition=partition, **policy_data)
try:
policy.update(bigip)
except exceptions.F5CcclError as e:
print(e)
(icr_policy, code) = self._get_policy_from_bigip(bigip, partition)
assert icr_policy
assert 'items' in icr_policy.raw['rulesReference']
rules = icr_policy.raw['rulesReference']['items']
assert len(rules) == i+1
# Assert that the policy is equal to the one on the bigip.
assert policy == IcrPolicy(**icr_policy.raw)
# Reverse the list of rules and assert that the ordinals change.
policy_data['rules'].reverse()
policy = Policy(partition=partition, **policy_data)
try:
policy.update(bigip)
except exceptions.F5CcclError as e:
print(e)
(icr_policy, code) = self._get_policy_from_bigip(bigip, partition)
assert icr_policy
assert 'items' in icr_policy.raw['rulesReference']
rules = icr_policy.raw['rulesReference']['items']
for rule in rules:
ordinal = rule['ordinal']
assert rule['name'] == "rule_{}".format(4-ordinal)
# Assert that the policy is equal to the one on the bigip.
assert policy == IcrPolicy(**icr_policy.raw)
policy_data = {
'name': self.name,
'strategy': "/Common/first-match",
'rules': []
}
policy = Policy(partition=partition, **policy_data)
try:
policy.update(bigip)
except exceptions.F5CcclError as e:
print(e)
(icr_policy, code) = self._get_policy_from_bigip(bigip, partition)
assert icr_policy
assert 'items' not in icr_policy.raw['rulesReference']
try:
policy.delete(bigip)
except exceptions.F5CcclError as e:
print(e)
def test_update_policy_one_rule(self, bigip, partition):
if isinstance(bigip, MagicMock):
return
# Create a new policy
policy_data = {
'name': self.name,
'strategy': "/Common/first-match",
'rules': []
}
policy = Policy(partition=partition, **policy_data)
try:
policy.create(bigip)
except exceptions.F5CcclError as e:
print(e)
# Retrieve it from the BIG-IP
(icr_policy, code) = self._get_policy_from_bigip(bigip, partition)
assert code == 200
# Assert the attributes of the retrieved policy
assert icr_policy
assert icr_policy.raw['name'] == self.name
assert icr_policy.raw['strategy'] == "/Common/first-match"
assert 'items' not in icr_policy.raw['rulesReference']
# Update the policy strategy
new_policy_data = {
'name': self.name,
'strategy': "/Common/best-match",
'rules': []
}
policy = Policy(partition=partition, **new_policy_data)
try:
policy.update(bigip)
except exceptions.F5CcclError as e:
print(e)
# Retrieve it from the BIG-IP
(icr_policy, code) = self._get_policy_from_bigip(bigip, partition)
assert code == 200
# Assert strategy changed
assert icr_policy
assert icr_policy.raw['strategy'] == "/Common/best-match"
# Add a rule to the policy, and update
test_rule = {
'name': "rule_0",
'actions': [],
'conditions': []
}
new_policy_data['rules'].append(test_rule)
policy = Policy(partition=partition, **new_policy_data)
try:
policy.update(bigip)
except exceptions.F5CcclError as e:
print(e)
# Retrieve it from the BIG-IP
(icr_policy, code) = self._get_policy_from_bigip(bigip, partition)
assert code == 200
# Assert rule added
assert icr_policy
assert 'items' in icr_policy.raw['rulesReference']
rules = icr_policy.raw['rulesReference']['items']
assert len(rules) == 1
rule = rules[0]
assert rule['name'] == "rule_0"
# Remove the rule.
new_policy_data['rules'].pop()
policy = Policy(partition=partition, **new_policy_data)
try:
policy.update(bigip)
except exceptions.F5CcclError as e:
print(e)
# Retrieve it from the BIG-IP
(icr_policy, code) = self._get_policy_from_bigip(bigip, partition)
assert code == 200
# Assert rule removed
assert icr_policy
assert 'items' not in icr_policy.raw['rulesReference']
# cleanup
try:
policy.delete(bigip)
except exceptions.F5CcclError as e:
print(e)