예제 #1
0
    def setUp(self):
        super(HypervisorsPolicyTest, self).setUp()
        self.controller = hypervisors.HypervisorsController()
        self.req = fakes.HTTPRequest.blank('')
        self.controller._get_compute_nodes_by_name_pattern = mock.MagicMock()
        self.controller.host_api.compute_node_get_all = mock.MagicMock()
        self.controller.host_api.service_get_by_compute_host = mock.MagicMock()
        self.controller.host_api.compute_node_get = mock.MagicMock()

        # Check that system scoped admin, member and reader are able to
        # perform operations on hypervisors.
        # NOTE(gmann): Until old default rule which is admin_api is
        # deprecated and not removed, project admin and legacy admin
        # will be able to get hypervisors. This make sure that existing
        # tokens will keep working even we have changed this policy defaults
        # to reader role.
        self.reader_authorized_contexts = [
            self.system_admin_context, self.system_member_context,
            self.system_reader_context, self.legacy_admin_context,
            self.project_admin_context
        ]
        # Check that non-system-reader are not able to perform operations
        # on hypervisors
        self.reader_unauthorized_contexts = [
            self.system_foo_context,
            self.other_project_member_context,
            self.project_foo_context,
            self.project_member_context,
            self.project_reader_context,
            self.other_project_reader_context,
        ]
예제 #2
0
    def setUp(self):
        super(HypervisorsPolicyTest, self).setUp()
        self.controller = hypervisors.HypervisorsController()
        self.req = fakes.HTTPRequest.blank('')
        self.controller._get_compute_nodes_by_name_pattern = mock.MagicMock()
        self.controller.host_api.compute_node_get_all = mock.MagicMock()
        self.controller.host_api.service_get_by_compute_host = mock.MagicMock()
        self.controller.host_api.compute_node_get = mock.MagicMock()

        # With legacy rule and scope check disabled by default, system admin,
        # legacy admin, and project admin will be able to perform hypervisors
        # Operations.
        self.system_admin_authorized_contexts = [
            self.legacy_admin_context, self.system_admin_context,
            self.project_admin_context
        ]
 def _set_up_controller(self):
     self.controller = hypervisors_v21.HypervisorsController()
     self.controller.servicegroup_api.service_is_up = mock.MagicMock(
         return_value=True)
예제 #4
0
 def _prepare_extension(self):
     self.controller = hypervisors_v21.HypervisorsController()
     self.controller.servicegroup_api.service_is_up = mock.MagicMock(
         return_value=True)
 def _set_up_controller(self):
     self.controller = hypervisors_v21.HypervisorsController()