178 lines
7.3 KiB
Python
178 lines
7.3 KiB
Python
# Copyright 2014 Mirantis Inc.
|
|
# All Rights Reserved.
|
|
#
|
|
# Licensed under the Apache License, Version 2.0 (the "License"); you may
|
|
# not use this file except in compliance with the License. You may obtain
|
|
# a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
|
|
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
|
|
# License for the specific language governing permissions and limitations
|
|
# under the License.
|
|
|
|
from oslo_log import log
|
|
import six
|
|
from tempest import config
|
|
from tempest.lib import exceptions as lib_exc
|
|
import testtools
|
|
from testtools import testcase as tc
|
|
|
|
from manila_tempest_tests.tests.api import base
|
|
|
|
CONF = config.CONF
|
|
LOG = log.getLogger(__name__)
|
|
|
|
|
|
class SecServicesMappingNegativeTest(base.BaseSharesMixedTest):
|
|
|
|
@classmethod
|
|
def resource_setup(cls):
|
|
super(SecServicesMappingNegativeTest, cls).resource_setup()
|
|
cls.sn = cls.create_share_network(cleanup_in_class=True)
|
|
cls.ss = cls.create_security_service(cleanup_in_class=True)
|
|
cls.cl = cls.shares_client
|
|
# create share type
|
|
cls.share_type = cls._create_share_type()
|
|
cls.share_type_id = cls.share_type['id']
|
|
|
|
@tc.attr(base.TAG_NEGATIVE, base.TAG_API)
|
|
def test_add_sec_service_twice_to_share_network(self):
|
|
self.cl.add_sec_service_to_share_network(self.sn["id"], self.ss["id"])
|
|
self.assertRaises(lib_exc.Conflict,
|
|
self.cl.add_sec_service_to_share_network,
|
|
self.sn["id"], self.ss["id"])
|
|
|
|
@tc.attr(base.TAG_NEGATIVE, base.TAG_API)
|
|
def test_add_nonexistant_sec_service_to_share_network(self):
|
|
self.assertRaises(lib_exc.NotFound,
|
|
self.cl.add_sec_service_to_share_network,
|
|
self.sn["id"], "wrong_ss_id")
|
|
|
|
@tc.attr(base.TAG_NEGATIVE, base.TAG_API)
|
|
def test_add_empty_sec_service_id_to_share_network(self):
|
|
self.assertRaises(lib_exc.NotFound,
|
|
self.cl.add_sec_service_to_share_network,
|
|
self.sn["id"], "")
|
|
|
|
@tc.attr(base.TAG_NEGATIVE, base.TAG_API)
|
|
def test_add_sec_service_to_nonexistant_share_network(self):
|
|
self.assertRaises(lib_exc.NotFound,
|
|
self.cl.add_sec_service_to_share_network,
|
|
"wrong_sn_id", self.ss["id"])
|
|
|
|
@tc.attr(base.TAG_NEGATIVE, base.TAG_API)
|
|
def test_add_sec_service_to_share_network_with_empty_id(self):
|
|
self.assertRaises(lib_exc.NotFound,
|
|
self.cl.add_sec_service_to_share_network,
|
|
"", self.ss["id"])
|
|
|
|
@tc.attr(base.TAG_NEGATIVE, base.TAG_API)
|
|
def test_list_sec_services_for_nonexistant_share_network(self):
|
|
self.assertRaises(lib_exc.NotFound,
|
|
self.cl.list_sec_services_for_share_network,
|
|
"wrong_id")
|
|
|
|
@tc.attr(base.TAG_NEGATIVE, base.TAG_API)
|
|
def test_delete_nonexistant_sec_service_from_share_network(self):
|
|
self.assertRaises(lib_exc.NotFound,
|
|
self.cl.remove_sec_service_from_share_network,
|
|
self.sn["id"], "wrong_id")
|
|
|
|
@tc.attr(base.TAG_NEGATIVE, base.TAG_API)
|
|
def test_delete_sec_service_from_nonexistant_share_network(self):
|
|
self.assertRaises(lib_exc.NotFound,
|
|
self.cl.remove_sec_service_from_share_network,
|
|
"wrong_id", self.ss["id"])
|
|
|
|
@tc.attr(base.TAG_NEGATIVE, base.TAG_API)
|
|
def test_delete_nonexistant_ss_from_nonexistant_sn(self):
|
|
self.assertRaises(lib_exc.NotFound,
|
|
self.cl.remove_sec_service_from_share_network,
|
|
"wrong_id", "wrong_id")
|
|
|
|
@tc.attr(base.TAG_NEGATIVE, base.TAG_API_WITH_BACKEND)
|
|
@testtools.skipIf(
|
|
not CONF.share.multitenancy_enabled, "Only for multitenancy.")
|
|
def test_delete_ss_from_sn_used_by_share_server(self):
|
|
sn = self.shares_client.get_share_network(
|
|
self.os.shares_client.share_network_id)
|
|
fresh_sn = self.create_share_network(
|
|
neutron_net_id=sn["neutron_net_id"],
|
|
neutron_subnet_id=sn["neutron_subnet_id"])
|
|
|
|
self.shares_client.add_sec_service_to_share_network(
|
|
fresh_sn["id"], self.ss["id"])
|
|
|
|
# Security service with fake data is used, so if we use backend driver
|
|
# that fails on wrong data, we expect error here.
|
|
# We require any share that uses our share-network.
|
|
try:
|
|
self.create_share(share_type_id=self.share_type_id,
|
|
share_network_id=fresh_sn["id"],
|
|
cleanup_in_class=False)
|
|
except Exception as e:
|
|
# we do wait for either 'error' or 'available' status because
|
|
# it is the only available statuses for proper deletion.
|
|
LOG.warning("Caught exception. It is expected in case backend "
|
|
"fails having security-service with improper data "
|
|
"that leads to share-server creation error. "
|
|
"%s" % six.text_type(e))
|
|
|
|
self.assertRaises(lib_exc.Forbidden,
|
|
self.cl.remove_sec_service_from_share_network,
|
|
fresh_sn["id"],
|
|
self.ss["id"])
|
|
|
|
@tc.attr(base.TAG_NEGATIVE, base.TAG_API)
|
|
def test_try_map_two_ss_with_same_type_to_sn(self):
|
|
# create share network
|
|
data = self.generate_share_network_data()
|
|
|
|
sn = self.create_share_network(client=self.cl, **data)
|
|
self.assertDictContainsSubset(data, sn)
|
|
|
|
# create security services with same type
|
|
security_services = []
|
|
for i in range(2):
|
|
data = self.generate_security_service_data()
|
|
ss = self.create_security_service(client=self.cl, **data)
|
|
self.assertDictContainsSubset(data, ss)
|
|
security_services.insert(i, ss)
|
|
|
|
# Add security service to share network
|
|
self.cl.add_sec_service_to_share_network(
|
|
sn["id"], security_services[0]["id"])
|
|
|
|
# Try to add security service with same type
|
|
self.assertRaises(lib_exc.Conflict,
|
|
self.cl.add_sec_service_to_share_network,
|
|
sn["id"], security_services[1]["id"])
|
|
|
|
@tc.attr(base.TAG_NEGATIVE, base.TAG_API)
|
|
def test_try_delete_ss_that_assigned_to_sn(self):
|
|
# create share network
|
|
data = self.generate_share_network_data()
|
|
|
|
sn = self.create_share_network(client=self.cl, **data)
|
|
self.assertDictContainsSubset(data, sn)
|
|
|
|
# create security service
|
|
data = self.generate_security_service_data()
|
|
|
|
ss = self.create_security_service(client=self.cl, **data)
|
|
self.assertDictContainsSubset(data, ss)
|
|
|
|
# Add security service to share network
|
|
self.cl.add_sec_service_to_share_network(sn["id"], ss["id"])
|
|
|
|
# Try delete ss, that has been assigned to some sn
|
|
self.assertRaises(lib_exc.Forbidden,
|
|
self.cl.delete_security_service,
|
|
ss["id"], )
|
|
|
|
# remove seurity service from share-network
|
|
self.cl.remove_sec_service_from_share_network(sn["id"], ss["id"])
|