55713b94bf
Use OS_USER_DOMAIN_NAME and OS_PROJECT_DOMAIN_NAME env variables as the defaults for keystone v3 in integration tests. Change-Id: Idb58431cf95988a91504ccac5116e0f8e339578f Closes-Bug: #1560032
228 lines
8.0 KiB
Python
228 lines
8.0 KiB
Python
# Licensed under the Apache License, Version 2.0 (the "License"); you may
|
|
# not use this file except in compliance with the License. You may obtain
|
|
# a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
|
|
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
|
|
# License for the specific language governing permissions and limitations
|
|
# under the License.
|
|
|
|
import os
|
|
|
|
from ceilometerclient import client as ceilometer_client
|
|
from cinderclient import client as cinder_client
|
|
from heat.common.i18n import _
|
|
from heatclient import client as heat_client
|
|
from keystoneclient.auth.identity.generic import password
|
|
from keystoneclient import exceptions as kc_exceptions
|
|
from keystoneclient import session
|
|
from neutronclient.v2_0 import client as neutron_client
|
|
from novaclient import client as nova_client
|
|
from swiftclient import client as swift_client
|
|
|
|
|
|
class KeystoneWrapperClient(object):
|
|
"""Wrapper object for keystone client
|
|
|
|
This wraps keystone client, so we can encpasulate certain
|
|
added properties like auth_token, project_id etc.
|
|
"""
|
|
def __init__(self, auth_plugin, verify=True):
|
|
self.auth_plugin = auth_plugin
|
|
self.session = session.Session(
|
|
auth=auth_plugin,
|
|
verify=verify)
|
|
|
|
@property
|
|
def auth_token(self):
|
|
return self.auth_plugin.get_token(self.session)
|
|
|
|
@property
|
|
def auth_ref(self):
|
|
return self.auth_plugin.get_access(self.session)
|
|
|
|
@property
|
|
def project_id(self):
|
|
return self.auth_plugin.get_project_id(self.session)
|
|
|
|
def get_endpoint_url(self, service_type, region=None):
|
|
kwargs = {
|
|
'service_type': service_type,
|
|
'endpoint_type': 'publicURL'}
|
|
if region:
|
|
kwargs.update({'attr': 'region',
|
|
'filter_value': region})
|
|
return self.auth_ref.service_catalog.url_for(**kwargs)
|
|
|
|
|
|
class ClientManager(object):
|
|
"""Provides access to the official python clients for calling various APIs.
|
|
|
|
Manager that provides access to the official python clients for
|
|
calling various OpenStack APIs.
|
|
"""
|
|
|
|
CINDERCLIENT_VERSION = '2'
|
|
HEATCLIENT_VERSION = '1'
|
|
NOVACLIENT_VERSION = '2'
|
|
CEILOMETER_VERSION = '2'
|
|
|
|
def __init__(self, conf):
|
|
self.conf = conf
|
|
if self.conf.auth_url.find('/v'):
|
|
self.v2_auth_url = self.conf.auth_url.replace('/v3', '/v2.0')
|
|
self.auth_version = self.conf.auth_url.split('/v')[1]
|
|
else:
|
|
raise ValueError(_('Incorrectly specified auth_url config: no '
|
|
'version found.'))
|
|
|
|
self.insecure = self.conf.disable_ssl_certificate_validation
|
|
self.ca_file = self.conf.ca_file
|
|
self.identity_client = self._get_identity_client()
|
|
self.orchestration_client = self._get_orchestration_client()
|
|
self.compute_client = self._get_compute_client()
|
|
self.network_client = self._get_network_client()
|
|
self.volume_client = self._get_volume_client()
|
|
self.object_client = self._get_object_client()
|
|
self.metering_client = self._get_metering_client()
|
|
|
|
def _get_orchestration_client(self):
|
|
endpoint = os.environ.get('HEAT_URL')
|
|
if os.environ.get('OS_NO_CLIENT_AUTH') == 'True':
|
|
token = None
|
|
else:
|
|
token = self.identity_client.auth_token
|
|
try:
|
|
if endpoint is None:
|
|
endpoint = self.identity_client.get_endpoint_url(
|
|
'orchestration', self.conf.region)
|
|
except kc_exceptions.EndpointNotFound:
|
|
return None
|
|
else:
|
|
return heat_client.Client(
|
|
self.HEATCLIENT_VERSION,
|
|
endpoint,
|
|
token=token,
|
|
username=self.conf.username,
|
|
password=self.conf.password)
|
|
|
|
def _get_identity_client(self):
|
|
user_domain_name = self.conf.user_domain_name
|
|
project_domain_name = self.conf.project_domain_name
|
|
kwargs = {
|
|
'username': self.conf.username,
|
|
'password': self.conf.password,
|
|
'tenant_name': self.conf.tenant_name,
|
|
'auth_url': self.conf.auth_url
|
|
}
|
|
# keystone v2 can't ignore domain details
|
|
if self.auth_version == '3':
|
|
kwargs.update({
|
|
'user_domain_name': user_domain_name,
|
|
'project_domain_name': project_domain_name})
|
|
auth = password.Password(**kwargs)
|
|
if self.insecure:
|
|
verify_cert = False
|
|
else:
|
|
verify_cert = self.ca_file or True
|
|
|
|
return KeystoneWrapperClient(auth, verify_cert)
|
|
|
|
def _get_compute_client(self):
|
|
|
|
region = self.conf.region
|
|
|
|
client_args = (
|
|
self.conf.username,
|
|
self.conf.password,
|
|
self.conf.tenant_name,
|
|
# novaclient can not use v3 url
|
|
self.v2_auth_url
|
|
)
|
|
|
|
# Create our default Nova client to use in testing
|
|
return nova_client.Client(
|
|
self.NOVACLIENT_VERSION,
|
|
*client_args,
|
|
service_type='compute',
|
|
endpoint_type='publicURL',
|
|
region_name=region,
|
|
no_cache=True,
|
|
insecure=self.insecure,
|
|
cacert=self.ca_file,
|
|
http_log_debug=True)
|
|
|
|
def _get_network_client(self):
|
|
|
|
return neutron_client.Client(
|
|
username=self.conf.username,
|
|
password=self.conf.password,
|
|
tenant_name=self.conf.tenant_name,
|
|
endpoint_type='publicURL',
|
|
# neutronclient can not use v3 url
|
|
auth_url=self.v2_auth_url,
|
|
insecure=self.insecure,
|
|
ca_cert=self.ca_file)
|
|
|
|
def _get_volume_client(self):
|
|
region = self.conf.region
|
|
endpoint_type = 'publicURL'
|
|
return cinder_client.Client(
|
|
self.CINDERCLIENT_VERSION,
|
|
self.conf.username,
|
|
self.conf.password,
|
|
self.conf.tenant_name,
|
|
# cinderclient can not use v3 url
|
|
self.v2_auth_url,
|
|
region_name=region,
|
|
endpoint_type=endpoint_type,
|
|
insecure=self.insecure,
|
|
cacert=self.ca_file,
|
|
http_log_debug=True)
|
|
|
|
def _get_object_client(self):
|
|
args = {
|
|
'auth_version': self.auth_version,
|
|
'tenant_name': self.conf.tenant_name,
|
|
'user': self.conf.username,
|
|
'key': self.conf.password,
|
|
'authurl': self.conf.auth_url,
|
|
'os_options': {'endpoint_type': 'publicURL'},
|
|
'insecure': self.insecure,
|
|
'cacert': self.ca_file,
|
|
}
|
|
return swift_client.Connection(**args)
|
|
|
|
def _get_metering_client(self):
|
|
user_domain_name = self.conf.user_domain_name
|
|
project_domain_name = self.conf.project_domain_name
|
|
try:
|
|
endpoint = self.identity_client.get_endpoint_url('metering',
|
|
self.conf.region)
|
|
except kc_exceptions.EndpointNotFound:
|
|
return None
|
|
else:
|
|
args = {
|
|
'username': self.conf.username,
|
|
'password': self.conf.password,
|
|
'tenant_name': self.conf.tenant_name,
|
|
'auth_url': self.conf.auth_url,
|
|
'insecure': self.insecure,
|
|
'cacert': self.ca_file,
|
|
'region_name': self.conf.region,
|
|
'endpoint_type': 'publicURL',
|
|
'service_type': 'metering',
|
|
}
|
|
# ceilometerclient can't ignore domain details for
|
|
# v2 auth_url
|
|
if self.auth_version == '3':
|
|
args.update(
|
|
{'user_domain_name': user_domain_name,
|
|
'project_domain_name': project_domain_name})
|
|
|
|
return ceilometer_client.Client(self.CEILOMETER_VERSION,
|
|
endpoint, **args)
|