snaps/openstack/utils/tests/keystone_utils_tests.py

   1 # Copyright (c) 2017 Cable Television Laboratories, Inc. ("CableLabs")
   2 #                    and others.  All rights reserved.
   3 #
   4 # Licensed under the Apache License, Version 2.0 (the "License");
   5 # you may not use this file except in compliance with the License.
   6 # You may obtain a copy of the License at:
   7 #
   8 #     http://www.apache.org/licenses/LICENSE-2.0
   9 #
  10 # Unless required by applicable law or agreed to in writing, software
  11 # distributed under the License is distributed on an "AS IS" BASIS,
  12 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
  13 # See the License for the specific language governing permissions and
  14 # limitations under the License.
  15 import uuid
  16
  17 from snaps.openstack.create_project import ProjectSettings
  18 from snaps.openstack.create_user import UserSettings
  19 from snaps.openstack.tests.os_source_file_test import OSComponentTestCase
  20 from snaps.openstack.utils import keystone_utils
  21
  22 __author__ = 'spisarski'
  23
  24
  25 class KeystoneSmokeTests(OSComponentTestCase):
  26     """
  27     Tests to ensure that the neutron client can communicate with the cloud
  28     """
  29
  30     def test_keystone_connect_success(self):
  31         """
  32         Tests to ensure that the proper credentials can connect.
  33         """
  34         keystone = keystone_utils.keystone_client(self.os_creds)
  35
  36         users = keystone.users.list()
  37         self.assertIsNotNone(users)
  38
  39     def test_keystone_connect_fail(self):
  40         """
  41         Tests to ensure that the improper credentials cannot connect.
  42         """
  43         from snaps.openstack.os_credentials import OSCreds
  44
  45         with self.assertRaises(Exception):
  46             keystone = keystone_utils.keystone_client(OSCreds(
  47                 username='user', password='pass', auth_url='url',
  48                 project_name='project'))
  49             keystone.users.list()
  50
  51
  52 class KeystoneUtilsTests(OSComponentTestCase):
  53     """
  54     Test for the CreateImage class defined in create_image.py
  55     """
  56
  57     def setUp(self):
  58         """
  59         Instantiates the CreateImage object that is responsible for downloading
  60         and creating an OS image file within OpenStack
  61         """
  62         self.guid = self.__class__.__name__ + '-' + str(uuid.uuid4())
  63         self.username = self.guid + '-username'
  64         self.user = None
  65
  66         self.project_name = self.guid + '-projName'
  67         self.project = None
  68         self.role = None
  69         self.keystone = keystone_utils.keystone_client(self.os_creds)
  70
  71     def tearDown(self):
  72         """
  73         Cleans the remote OpenStack objects
  74         """
  75         if self.project:
  76                 keystone_utils.delete_project(self.keystone, self.project)
  77
  78         if self.user:
  79             keystone_utils.delete_user(self.keystone, self.user)
  80
  81         if self.role:
  82             keystone_utils.delete_role(self.keystone, self.role)
  83
  84     def test_create_user_minimal(self):
  85         """
  86         Tests the keystone_utils.create_user() function
  87         """
  88         user_settings = UserSettings(
  89             name=self.username,
  90             password=str(uuid.uuid4()),
  91             domain_name=self.os_creds.user_domain_name)
  92         self.user = keystone_utils.create_user(self.keystone, user_settings)
  93         self.assertEqual(self.username, self.user.name)
  94
  95         user = keystone_utils.get_user(self.keystone, self.username)
  96         self.assertIsNotNone(user)
  97         self.assertEqual(self.user, user)
  98
  99     def test_create_project_minimal(self):
 100         """
 101         Tests the keyston_utils.create_project() funtion
 102         """
 103         project_settings = ProjectSettings(
 104             name=self.project_name, domain=self.os_creds.project_domain_name)
 105         self.project = keystone_utils.create_project(self.keystone,
 106                                                      project_settings)
 107         self.assertEqual(self.project_name, self.project.name)
 108
 109         project = keystone_utils.get_project(
 110             keystone=self.keystone, project_settings=project_settings)
 111         self.assertIsNotNone(project)
 112         self.assertEqual(self.project_name, self.project.name)
 113
 114         domain = keystone_utils.get_domain_by_id(
 115             self.keystone, project.domain_id)
 116         self.assertIsNotNone(domain)
 117         self.assertEqual(domain.id, project.domain_id)
 118
 119     def test_get_endpoint_success(self):
 120         """
 121         Tests to ensure that proper credentials and proper service type can
 122         succeed.
 123         """
 124         endpoint = keystone_utils.get_endpoint(self.os_creds,
 125                                                service_type='identity')
 126         self.assertIsNotNone(endpoint)
 127
 128     def test_get_endpoint_fail_without_proper_service(self):
 129         """
 130         Tests to ensure that proper credentials and improper service type
 131         cannot succeed.
 132         """
 133         with self.assertRaises(Exception):
 134             keystone_utils.get_endpoint(self.os_creds, service_type='glance')
 135
 136     def test_get_endpoint_fail_without_proper_credentials(self):
 137         """
 138         Tests to ensure that improper credentials and proper service type
 139         cannot succeed.
 140         """
 141         from snaps.openstack.os_credentials import OSCreds
 142
 143         with self.assertRaises(Exception):
 144             keystone_utils.get_endpoint(
 145                 OSCreds(username='user', password='pass', auth_url='url',
 146                         project_name='project'),
 147                 service_type='image')
 148
 149     def test_get_endpoint_with_each_interface(self):
 150         """
 151         Tests to ensure that endpoint urls are obtained with
 152         'public', 'internal' and 'admin' interface
 153         """
 154         endpoint_public = keystone_utils.get_endpoint(self.os_creds,
 155                                                       service_type='image',
 156                                                       interface='public')
 157         endpoint_internal = keystone_utils.get_endpoint(self.os_creds,
 158                                                         service_type='image',
 159                                                         interface='internal')
 160         endpoint_admin = keystone_utils.get_endpoint(self.os_creds,
 161                                                      service_type='image',
 162                                                      interface='admin')
 163         self.assertIsNotNone(endpoint_public)
 164         self.assertIsNotNone(endpoint_internal)
 165         self.assertIsNotNone(endpoint_admin)
 166
 167     def test_grant_user_role_to_project(self):
 168         """
 169         Tests the keystone_utils function grant_user_role_to_project()
 170         :return:
 171         """
 172         user_settings = UserSettings(
 173             name=self.username, password=str(uuid.uuid4()),
 174             domain_name=self.os_creds.user_domain_name)
 175         self.user = keystone_utils.create_user(self.keystone, user_settings)
 176         self.assertEqual(self.username, self.user.name)
 177
 178         project_settings = ProjectSettings(
 179             name=self.project_name, domain=self.os_creds.project_domain_name)
 180         self.project = keystone_utils.create_project(self.keystone,
 181                                                      project_settings)
 182         self.assertEqual(self.project_name, self.project.name)
 183
 184         role_name = self.guid + '-role'
 185         self.role = keystone_utils.create_role(self.keystone, role_name)
 186         self.assertEqual(role_name, self.role.name)
 187
 188         keystone_utils.grant_user_role_to_project(
 189             self.keystone, self.role, self.user, self.project)
 190
 191         user_roles = keystone_utils.get_roles_by_user(
 192             self.keystone, self.user, self.project)
 193         self.assertIsNotNone(user_roles)
 194         self.assertEqual(1, len(user_roles))
 195         self.assertEqual(self.role.id, user_roles[0].id)