293 lines
12 KiB
Python
293 lines
12 KiB
Python
# vim: tabstop=4 shiftwidth=4 softtabstop=4
|
|
|
|
# Copyright 2012 United States Government as represented by the
|
|
# Administrator of the National Aeronautics and Space Administration.
|
|
# All Rights Reserved.
|
|
#
|
|
# Copyright 2012 Nebula, Inc.
|
|
#
|
|
# Licensed under the Apache License, Version 2.0 (the "License"); you may
|
|
# not use this file except in compliance with the License. You may obtain
|
|
# a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
|
|
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
|
|
# License for the specific language governing permissions and limitations
|
|
# under the License.
|
|
|
|
from django import http
|
|
from django.conf import settings
|
|
from django.core.urlresolvers import reverse
|
|
|
|
from mox import IsA
|
|
|
|
from horizon import api
|
|
from horizon import test
|
|
from .tables import SecurityGroupsTable, RulesTable
|
|
|
|
INDEX_URL = reverse('horizon:nova:access_and_security:index')
|
|
SG_CREATE_URL = \
|
|
reverse('horizon:nova:access_and_security:security_groups:create')
|
|
|
|
|
|
def strip_absolute_base(uri):
|
|
return uri.split(settings.TESTSERVER, 1)[-1]
|
|
|
|
|
|
class SecurityGroupsViewTests(test.TestCase):
|
|
def setUp(self):
|
|
super(SecurityGroupsViewTests, self).setUp()
|
|
sec_group = self.security_groups.first()
|
|
self.edit_url = reverse('horizon:nova:access_and_security:'
|
|
'security_groups:edit_rules',
|
|
args=[sec_group.id])
|
|
|
|
def test_create_security_groups_get(self):
|
|
res = self.client.get(SG_CREATE_URL)
|
|
self.assertTemplateUsed(res,
|
|
'nova/access_and_security/security_groups/create.html')
|
|
|
|
def test_create_security_groups_post(self):
|
|
sec_group = self.security_groups.first()
|
|
self.mox.StubOutWithMock(api, 'security_group_create')
|
|
api.security_group_create(IsA(http.HttpRequest),
|
|
sec_group.name,
|
|
sec_group.description).AndReturn(sec_group)
|
|
self.mox.ReplayAll()
|
|
|
|
formData = {'method': 'CreateGroup',
|
|
'name': sec_group.name,
|
|
'description': sec_group.description}
|
|
res = self.client.post(SG_CREATE_URL, formData)
|
|
self.assertRedirectsNoFollow(res, INDEX_URL)
|
|
|
|
def test_create_security_groups_post_exception(self):
|
|
sec_group = self.security_groups.first()
|
|
self.mox.StubOutWithMock(api, 'security_group_create')
|
|
api.security_group_create(IsA(http.HttpRequest),
|
|
sec_group.name,
|
|
sec_group.description) \
|
|
.AndRaise(self.exceptions.nova)
|
|
self.mox.ReplayAll()
|
|
|
|
formData = {'method': 'CreateGroup',
|
|
'name': sec_group.name,
|
|
'description': sec_group.description}
|
|
res = self.client.post(SG_CREATE_URL, formData)
|
|
self.assertMessageCount(error=1)
|
|
self.assertRedirectsNoFollow(res, INDEX_URL)
|
|
|
|
def test_edit_rules_get(self):
|
|
sec_group = self.security_groups.first()
|
|
sec_group_list = self.security_groups.list()
|
|
|
|
self.mox.StubOutWithMock(api, 'security_group_get')
|
|
api.security_group_get(IsA(http.HttpRequest),
|
|
sec_group.id).AndReturn(sec_group)
|
|
self.mox.StubOutWithMock(api, 'security_group_list')
|
|
api.security_group_list(
|
|
IsA(http.HttpRequest)).AndReturn(sec_group_list)
|
|
self.mox.ReplayAll()
|
|
|
|
res = self.client.get(self.edit_url)
|
|
self.assertTemplateUsed(res,
|
|
'nova/access_and_security/security_groups/edit_rules.html')
|
|
self.assertItemsEqual(res.context['security_group'].name,
|
|
sec_group.name)
|
|
|
|
def test_edit_rules_get_exception(self):
|
|
sec_group = self.security_groups.first()
|
|
sec_group_list = self.security_groups.list()
|
|
|
|
self.mox.StubOutWithMock(api, 'security_group_get')
|
|
self.mox.StubOutWithMock(api, 'security_group_list')
|
|
self.mox.StubOutWithMock(api, 'tenant_floating_ip_list')
|
|
self.mox.StubOutWithMock(api.nova, 'keypair_list')
|
|
self.mox.StubOutWithMock(api.nova, 'server_list')
|
|
|
|
api.nova.server_list(IsA(http.HttpRequest),
|
|
all_tenants=True).AndReturn(self.servers.list())
|
|
api.nova.keypair_list(IsA(http.HttpRequest)) \
|
|
.AndReturn(self.keypairs.list())
|
|
api.tenant_floating_ip_list(IsA(http.HttpRequest)) \
|
|
.AndReturn(self.floating_ips.list())
|
|
api.security_group_get(IsA(http.HttpRequest),
|
|
sec_group.id).AndRaise(self.exceptions.nova)
|
|
api.security_group_list(
|
|
IsA(http.HttpRequest)).AndReturn(sec_group_list)
|
|
api.security_group_list(
|
|
IsA(http.HttpRequest)).AndReturn(sec_group_list)
|
|
self.mox.ReplayAll()
|
|
|
|
res = self.client.get(self.edit_url)
|
|
self.assertRedirects(res, INDEX_URL)
|
|
|
|
def test_edit_rules_add_rule_cidr(self):
|
|
sec_group = self.security_groups.first()
|
|
sec_group_list = self.security_groups.list()
|
|
rule = self.security_group_rules.first()
|
|
|
|
self.mox.StubOutWithMock(api, 'security_group_rule_create')
|
|
self.mox.StubOutWithMock(api, 'security_group_list')
|
|
api.security_group_rule_create(IsA(http.HttpRequest),
|
|
sec_group.id,
|
|
rule.ip_protocol,
|
|
int(rule.from_port),
|
|
int(rule.to_port),
|
|
rule.ip_range['cidr'],
|
|
None).AndReturn(rule)
|
|
api.security_group_list(
|
|
IsA(http.HttpRequest)).AndReturn(sec_group_list)
|
|
self.mox.ReplayAll()
|
|
|
|
formData = {'method': 'AddRule',
|
|
'security_group_id': sec_group.id,
|
|
'from_port': rule.from_port,
|
|
'to_port': rule.to_port,
|
|
'ip_protocol': rule.ip_protocol,
|
|
'cidr': rule.ip_range['cidr'],
|
|
'source_group': ''}
|
|
res = self.client.post(self.edit_url, formData)
|
|
self.assertRedirectsNoFollow(res, INDEX_URL)
|
|
|
|
def test_edit_rules_add_rule_cidr_and_source_group(self):
|
|
sec_group = self.security_groups.first()
|
|
sec_group_other = self.security_groups.get(id=2)
|
|
sec_group_list = self.security_groups.list()
|
|
rule = self.security_group_rules.first()
|
|
|
|
self.mox.StubOutWithMock(api, 'security_group_get')
|
|
self.mox.StubOutWithMock(api, 'security_group_list')
|
|
api.security_group_get(IsA(http.HttpRequest),
|
|
sec_group.id).AndReturn(sec_group)
|
|
api.security_group_list(
|
|
IsA(http.HttpRequest)).AndReturn(sec_group_list)
|
|
self.mox.ReplayAll()
|
|
|
|
formData = {'method': 'AddRule',
|
|
'security_group_id': sec_group.id,
|
|
'from_port': rule.from_port,
|
|
'to_port': rule.to_port,
|
|
'ip_protocol': rule.ip_protocol,
|
|
'cidr': "127.0.0.1/32",
|
|
'source_group': sec_group_other.id}
|
|
res = self.client.post(self.edit_url, formData)
|
|
self.assertNoMessages()
|
|
msg = 'Either CIDR or Source Group may be specified, but not both.'
|
|
self.assertFormErrors(res, count=1, message=msg)
|
|
|
|
def test_edit_rules_invalid_port_range(self):
|
|
sec_group = self.security_groups.first()
|
|
sec_group_list = self.security_groups.list()
|
|
rule = self.security_group_rules.first()
|
|
|
|
self.mox.StubOutWithMock(api, 'security_group_get')
|
|
api.security_group_get(IsA(http.HttpRequest),
|
|
sec_group.id).AndReturn(sec_group)
|
|
self.mox.StubOutWithMock(api, 'security_group_list')
|
|
api.security_group_list(
|
|
IsA(http.HttpRequest)).AndReturn(sec_group_list)
|
|
self.mox.ReplayAll()
|
|
|
|
formData = {'method': 'AddRule',
|
|
'security_group_id': sec_group.id,
|
|
'from_port': rule.from_port,
|
|
'to_port': int(rule.from_port) - 1,
|
|
'ip_protocol': rule.ip_protocol,
|
|
'cidr': rule.ip_range['cidr'],
|
|
'source_group': ''}
|
|
res = self.client.post(self.edit_url, formData)
|
|
self.assertNoMessages()
|
|
self.assertContains(res, "greater than or equal to")
|
|
|
|
def test_edit_rules_add_rule_exception(self):
|
|
sec_group = self.security_groups.first()
|
|
sec_group_list = self.security_groups.list()
|
|
rule = self.security_group_rules.first()
|
|
|
|
self.mox.StubOutWithMock(api, 'security_group_rule_create')
|
|
self.mox.StubOutWithMock(api, 'security_group_list')
|
|
api.security_group_rule_create(IsA(http.HttpRequest),
|
|
sec_group.id,
|
|
rule.ip_protocol,
|
|
int(rule.from_port),
|
|
int(rule.to_port),
|
|
rule.ip_range['cidr'],
|
|
None).AndRaise(self.exceptions.nova)
|
|
api.security_group_list(
|
|
IsA(http.HttpRequest)).AndReturn(sec_group_list)
|
|
self.mox.ReplayAll()
|
|
|
|
formData = {'method': 'AddRule',
|
|
'security_group_id': sec_group.id,
|
|
'from_port': rule.from_port,
|
|
'to_port': rule.to_port,
|
|
'ip_protocol': rule.ip_protocol,
|
|
'cidr': rule.ip_range['cidr'],
|
|
'source_group': ''}
|
|
res = self.client.post(self.edit_url, formData)
|
|
self.assertRedirectsNoFollow(res, INDEX_URL)
|
|
|
|
def test_edit_rules_delete_rule(self):
|
|
sec_group = self.security_groups.first()
|
|
rule = self.security_group_rules.first()
|
|
|
|
self.mox.StubOutWithMock(api, 'security_group_rule_delete')
|
|
api.security_group_rule_delete(IsA(http.HttpRequest), rule.id)
|
|
self.mox.ReplayAll()
|
|
|
|
form_data = {"action": "rules__delete__%s" % rule.id}
|
|
req = self.factory.post(self.edit_url, form_data)
|
|
table = RulesTable(req, sec_group.rules)
|
|
handled = table.maybe_handle()
|
|
self.assertEqual(strip_absolute_base(handled['location']), INDEX_URL)
|
|
|
|
def test_edit_rules_delete_rule_exception(self):
|
|
rule = self.security_group_rules.first()
|
|
|
|
self.mox.StubOutWithMock(api, 'security_group_rule_delete')
|
|
api.security_group_rule_delete(IsA(http.HttpRequest),
|
|
rule.id).AndRaise(self.exceptions.nova)
|
|
self.mox.ReplayAll()
|
|
|
|
form_data = {"action": "rules__delete__%s" % rule.id}
|
|
req = self.factory.post(self.edit_url, form_data)
|
|
table = RulesTable(req, self.security_group_rules.list())
|
|
handled = table.maybe_handle()
|
|
self.assertEqual(strip_absolute_base(handled['location']),
|
|
INDEX_URL)
|
|
|
|
def test_delete_group(self):
|
|
sec_group = self.security_groups.get(name="other_group")
|
|
|
|
self.mox.StubOutWithMock(api, 'security_group_delete')
|
|
api.security_group_delete(IsA(http.HttpRequest), sec_group.id)
|
|
self.mox.ReplayAll()
|
|
|
|
form_data = {"action": "security_groups__delete__%s" % sec_group.id}
|
|
req = self.factory.post(INDEX_URL, form_data)
|
|
table = SecurityGroupsTable(req, self.security_groups.list())
|
|
handled = table.maybe_handle()
|
|
self.assertEqual(strip_absolute_base(handled['location']),
|
|
INDEX_URL)
|
|
|
|
def test_delete_group_exception(self):
|
|
sec_group = self.security_groups.get(name="other_group")
|
|
|
|
self.mox.StubOutWithMock(api, 'security_group_delete')
|
|
api.security_group_delete(IsA(http.HttpRequest),
|
|
sec_group.id).AndRaise(self.exceptions.nova)
|
|
|
|
self.mox.ReplayAll()
|
|
|
|
form_data = {"action": "security_groups__delete__%s" % sec_group.id}
|
|
req = self.factory.post(INDEX_URL, form_data)
|
|
table = SecurityGroupsTable(req, self.security_groups.list())
|
|
handled = table.maybe_handle()
|
|
|
|
self.assertEqual(strip_absolute_base(handled['location']),
|
|
INDEX_URL)
|