OpenStack Orchestration (Heat)
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
 
 

339 lines
12 KiB

#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
import mock
from heat.engine.clients.os.keystone import fake_keystoneclient as fake_ks
from heat.engine import constraints
from heat.engine import properties
from heat.engine import resource
from heat.engine.resources.openstack.keystone import group
from heat.engine import stack
from heat.engine import template
from heat.tests import common
from heat.tests import utils
keystone_group_template = {
'heat_template_version': '2013-05-23',
'resources': {
'test_group': {
'type': 'OS::Keystone::Group',
'properties': {
'name': 'test_group_1',
'description': 'Test group',
'domain': 'default'
}
}
}
}
class KeystoneGroupTest(common.HeatTestCase):
def setUp(self):
super(KeystoneGroupTest, self).setUp()
self.ctx = utils.dummy_context()
self.stack = stack.Stack(
self.ctx, 'test_stack_keystone',
template.Template(keystone_group_template)
)
self.test_group = self.stack['test_group']
# Mock client
self.keystoneclient = mock.Mock()
self.patchobject(resource.Resource, 'client',
return_value=fake_ks.FakeKeystoneClient(
client=self.keystoneclient))
self.groups = self.keystoneclient.groups
self.role_assignments = self.keystoneclient.role_assignments
# Mock client plugin
def _side_effect(value):
return value
self.keystone_client_plugin = mock.MagicMock()
(self.keystone_client_plugin.get_domain_id.
side_effect) = _side_effect
self.test_group.client_plugin = mock.MagicMock()
(self.test_group.client_plugin.
return_value) = self.keystone_client_plugin
def _get_mock_group(self):
value = mock.MagicMock()
group_id = '477e8273-60a7-4c41-b683-fdb0bc7cd151'
value.id = group_id
return value
def test_properties_title(self):
property_title_map = {
group.KeystoneGroup.NAME: 'name',
group.KeystoneGroup.DESCRIPTION: 'description',
group.KeystoneGroup.DOMAIN: 'domain'
}
for actual_title, expected_title in property_title_map.items():
self.assertEqual(
expected_title,
actual_title,
'KeystoneGroup PROPERTIES(%s) title modified.' %
actual_title)
def test_property_name_validate_schema(self):
schema = group.KeystoneGroup.properties_schema[
group.KeystoneGroup.NAME]
self.assertEqual(
True,
schema.update_allowed,
'update_allowed for property %s is modified' %
group.KeystoneGroup.NAME)
self.assertEqual(properties.Schema.STRING,
schema.type,
'type for property %s is modified' %
group.KeystoneGroup.NAME)
self.assertEqual('Name of keystone group.',
schema.description,
'description for property %s is modified' %
group.KeystoneGroup.NAME)
def test_property_description_validate_schema(self):
schema = group.KeystoneGroup.properties_schema[
group.KeystoneGroup.DESCRIPTION]
self.assertEqual(
True,
schema.update_allowed,
'update_allowed for property %s is modified' %
group.KeystoneGroup.DESCRIPTION)
self.assertEqual(properties.Schema.STRING,
schema.type,
'type for property %s is modified' %
group.KeystoneGroup.DESCRIPTION)
self.assertEqual('Description of keystone group.',
schema.description,
'description for property %s is modified' %
group.KeystoneGroup.DESCRIPTION)
self.assertEqual(
'',
schema.default,
'default for property %s is modified' %
group.KeystoneGroup.DESCRIPTION)
def test_property_domain_validate_schema(self):
schema = group.KeystoneGroup.properties_schema[
group.KeystoneGroup.DOMAIN]
self.assertEqual(
True,
schema.update_allowed,
'update_allowed for property %s is modified' %
group.KeystoneGroup.DOMAIN)
self.assertEqual(properties.Schema.STRING,
schema.type,
'type for property %s is modified' %
group.KeystoneGroup.DOMAIN)
self.assertEqual('Name or id of keystone domain.',
schema.description,
'description for property %s is modified' %
group.KeystoneGroup.DOMAIN)
self.assertEqual([constraints.CustomConstraint('keystone.domain')],
schema.constraints,
'constrains for property %s is modified' %
group.KeystoneGroup.DOMAIN)
self.assertEqual(
'default',
schema.default,
'default for property %s is modified' %
group.KeystoneGroup.DOMAIN)
def _get_property_schema_value_default(self, name):
schema = group.KeystoneGroup.properties_schema[name]
return schema.default
def test_group_handle_create(self):
mock_group = self._get_mock_group()
self.groups.create.return_value = mock_group
# validate the properties
self.assertEqual(
'test_group_1',
self.test_group.properties.get(group.KeystoneGroup.NAME))
self.assertEqual(
'Test group',
self.test_group.properties.get(group.KeystoneGroup.DESCRIPTION))
self.assertEqual(
'default',
self.test_group.properties.get(group.KeystoneGroup.DOMAIN))
self.test_group.handle_create()
# validate group creation
self.groups.create.assert_called_once_with(
name='test_group_1',
description='Test group',
domain='default')
# validate physical resource id
self.assertEqual(mock_group.id, self.test_group.resource_id)
def test_group_handle_create_default(self):
values = {
group.KeystoneGroup.NAME: None,
group.KeystoneGroup.DESCRIPTION:
(self._get_property_schema_value_default(
group.KeystoneGroup.DESCRIPTION)),
group.KeystoneGroup.DOMAIN:
(self._get_property_schema_value_default(
group.KeystoneGroup.DOMAIN)),
group.KeystoneGroup.ROLES: None
}
def _side_effect(key):
return values[key]
mock_group = self._get_mock_group()
self.groups.create.return_value = mock_group
self.test_group.properties = mock.MagicMock()
self.test_group.properties.get.side_effect = _side_effect
self.test_group.properties.__getitem__.side_effect = _side_effect
self.test_group.physical_resource_name = mock.MagicMock()
self.test_group.physical_resource_name.return_value = 'foo'
# validate the properties
self.assertEqual(
None,
self.test_group.properties.get(group.KeystoneGroup.NAME))
self.assertEqual(
'',
self.test_group.properties.get(group.KeystoneGroup.DESCRIPTION))
self.assertEqual(
'default',
self.test_group.properties.get(group.KeystoneGroup.DOMAIN))
self.test_group.handle_create()
# validate group creation
self.groups.create.assert_called_once_with(
name='foo',
description='',
domain='default')
def test_group_handle_update(self):
self.test_group.resource_id = '477e8273-60a7-4c41-b683-fdb0bc7cd151'
prop_diff = {group.KeystoneGroup.NAME: 'test_group_1_updated',
group.KeystoneGroup.DESCRIPTION: 'Test Group updated',
group.KeystoneGroup.DOMAIN: 'test_domain'}
self.test_group.handle_update(json_snippet=None,
tmpl_diff=None,
prop_diff=prop_diff)
self.groups.update.assert_called_once_with(
group=self.test_group.resource_id,
name=prop_diff[group.KeystoneGroup.NAME],
description=prop_diff[group.KeystoneGroup.DESCRIPTION],
domain_id='test_domain'
)
# validate the role assignment isn't updated
self.roles = self.keystoneclient.roles
self.assertEqual(0, self.roles.revoke.call_count)
self.assertEqual(0, self.roles.grant.call_count)
def test_group_handle_update_default(self):
self.test_group.resource_id = '477e8273-60a7-4c41-b683-fdb0bc7cd151'
prop_diff = {group.KeystoneGroup.DESCRIPTION: 'Test Project updated'}
self.test_group.handle_update(json_snippet=None,
tmpl_diff=None,
prop_diff=prop_diff)
# validate default name to physical resource name and
# domain is set from stored properties used during creation.
self.groups.update.assert_called_once_with(
group=self.test_group.resource_id,
name=None,
description=prop_diff[group.KeystoneGroup.DESCRIPTION],
domain_id='default'
)
def test_group_handle_delete(self):
self.test_group.resource_id = '477e8273-60a7-4c41-b683-fdb0bc7cd151'
self.groups.delete.return_value = None
self.test_group.handle_delete()
self.groups.delete.assert_called_once_with(
self.test_group.resource_id
)
def test_group_handle_delete_resource_id_is_none(self):
self.resource_id = None
self.assertIsNone(self.test_group.handle_delete())
def test_group_handle_delete_not_found(self):
exc = self.keystoneclient.NotFound
self.groups.delete.side_effect = exc
self.assertIsNone(self.test_group.handle_delete())
def test_show_resource(self):
group = mock.Mock()
group.to_dict.return_value = {'attr': 'val'}
self.groups.get.return_value = group
res = self.test_group._show_resource()
self.assertEqual({'attr': 'val'}, res)
def test_get_live_state(self):
group = mock.Mock()
group.to_dict.return_value = {
'id': '48ee1f94b77047e592de55a4934c198c',
'domain_id': 'default',
'name': 'fake',
'links': {'self': 'some_link'},
'description': ''}
roles = mock.MagicMock()
roles.to_dict.return_value = {
'scope': {
'project': {'id': 'fc0fe982401643368ff2eb11d9ca70f1'}},
'role': {'id': '3b8b253648f44256a457a5073b78021d'},
'group': {'id': '4147558a763046cfb68fb870d58ef4cf'}}
self.role_assignments.list.return_value = [roles]
self.groups.get.return_value = group
self.test_group.resource_id = '1234'
reality = self.test_group.get_live_state(self.test_group.properties)
expected = {
'domain': 'default',
'name': 'fake',
'description': '',
'roles': [{
'role': '3b8b253648f44256a457a5073b78021d',
'project': 'fc0fe982401643368ff2eb11d9ca70f1',
'domain': None
}]
}
self.assertEqual(set(expected.keys()), set(reality.keys()))
for key in expected:
self.assertEqual(expected[key], reality[key])