This patch adds new test which checks if SG rules actually created
automatically for new default and non-default SG are matching template
rules from neutron DB.
Depends-On: https://review.opendev.org/c/openstack/neutron/+/884474
Related-bug: #1983053
Change-Id: Ica0810413bef7f0e3e6dff21f6c9e4cda1945a43
Some of the links and information were outdated here, update
and point to Neutron tree for installation and usage.
TrivialFix
Change-Id: Ia913a976dc2f60eb28548b2f099d924e160df2cf
Importing StatelessSecGroupDualStackDHCPv6StatelessTest was causing
a type error in case CONF.neutron_plugin_options.firewall_driver
was set to 'openvswitch' [1]. This patch fixes the issue by
separation code to a class with base functions, that is never skipped
and classes with tests that optionally can be skipped.
[1] https://bugzilla.redhat.com/show_bug.cgi?id=2249407
Change-Id: I90b9cf495f35aca7a9171dc685696ae4cdd4d0f2
NetworksTestDHCPv6 [1] has better
functionality in tempest than in neutron-tempest-plugin, so with
removing these tests from neutron-tempest-plugin we can get rid
of whole module, reducing the test duplications.
[1]cc0e9b1817/tempest/api/network/test_dhcp_ipv6.py (L31)
Change-Id: I080b83965acd69c3d1b4693527c1be0b730e80a6
In the job "neutron-tempest-plugin-openvswitch-enforce-scope-old-defaults"
we will now test old policies in the Neutron project together with what
is used by default in other projects, like Nova, Glance, etc.
Change-Id: I4c2440f6f1546d22d4acebe69c6143eefe10335a
We should add the segmentation_id as tempest option,
so that it can be changed to match the deployment if needed.
Change-Id: I42bea9217462226e8650e55997449e1cc05f085c
Add a new test job to test VPNaaS on OVN, that will be picked up
by the proposed patch [1] in neutron-vpnaas.
Since VPNaaS for OVN doesn't support IPv6 VMs, skip 6in4 and 6in6 tests.
[1] https://review.opendev.org/c/openstack/neutron-vpnaas/+/765353
Related-Bug: #1905391
Change-Id: I9e9e8e78fd22b5edbc794ec68dbe40302ed0f3fd
This reverts commit 2f1856baf89618c799d0956c95335f3b47460b52.
Reason for revert:
Neutron bobcat (enabled new RBAC by default) is released now and devstack enabling the same in depends on change. This means every job will be tested with Neutron new RBAC by default. So now we can have a job disable the new default and test old default until they are being removed.
Change-Id: Iec97cba15e5bf5b973a0cdf5c24f47b99e31a276
Depends-On: https://review.opendev.org/c/openstack/devstack/+/899306
Since [1], some cirros images have been deleted from the CI cache. It
could happen that using cirros images not cached, that imply to
download them, could fail. Any version not cached should be replaced by
its closer image version.
[1]https://review.opendev.org/c/openstack/project-config/+/873735
Related-Bug: #2039586
Change-Id: I3769e76fb6e6e5ea5a77bd52dc9c061f72431ac7
This reverts commit 209d363cce20d48d21455a196086a19f1d0d97e1.
Reason for revert: Fixes have landed in master and 2023.2 branches.
Change-Id: Idfbe64fe375df9576835c6948d47c660d4a5c508
Changes to the inrepo playbooks triggers all the jobs
unnecessarily, include these in irrelevant-files as
per jobs.
Change-Id: I5e326488b10b13f5191a6554f31ede02dc3504ba
With the latest kernel update in Ubuntu jammy we
need to include this role else jobs are failing.
Related-Bug: #2038541
Change-Id: Ia277239cf5cc8d4534d46a4a2340ba42905923ff
This patch adds some basic API tests for the new API for default SG
rules templates. Those new tests are checking if by default SG rules are
set in the same way as legacy rules which were there since "forever".
Second test checks basic lifecycle of the SG rule template.
Depends-On: https://review.opendev.org/c/openstack/neutron/+/883246/
Related-Bug: #1983053
Change-Id: I458f54ff6b73e277fe9506e90fa6af44d9c51101
This was enabled with switch to cirros 0.6.2[1],
but still seeing same tracebacks for cirros vm boot,
this mode is not required for the jobs so let's
turn it off. This may help in the other failures
seen in the Related Bug.
[1] https://review.opendev.org/c/openstack/neutron-tempest-plugin/+/890177
Related-Bug: #2036603
Change-Id: Ifb3972e74434b29a1c6acb9bc131678ba83d66a3
Create job template for 2023.2 jobs: neutron-tempest-plugin-jobs-2023-2
and fill it with job definitions for all Neutron core and stadium
projects active during the 2023.2 (Bobcat) cycle.
Change-Id: I3ad97b87abf4ba89885c9b4b25083ca357b6aca6
Tests fails randomly with l3_ha in openvswitch and
linuxbridge master and stable/2023.2 jobs, until the
issue is fixed let's turn off l3_ha temporary.
Related-Bug: #2037239
Change-Id: Ia23b39819834e2bc12ec7113bb841007f7cf1ff5
ExtraDHCPOptionsIpV6TestJSON and ExtraDHCPOptionsTestJSON -
https://opendev.org/openstack/tempest/src/branch/master/tempest/\
api/network/test_dhcp_ipv6.py has same functionality in tempest
and neutron-tempest-plugin, so with removing these tests from
neutron-tempest-plugin we can get rid of whole module, reducing
the test duplications.
Change-Id: I111eeba5c29cd7d703e6663be12e8e7e7659919e
RoutersDVRTest -https://opendev.org/openstack/tempest/src/branch\
/master/tempest/api/network/admin/test_routers_dvr.py has same
functionality in tempest and neutron-tempest-plugin, so with
removing these tests from tempest we can get rid of whole module,
reducing the test duplications.
Change-Id: Ie7d37def794a3cbdb2444ebbeba237fd58ddfb8a
There is a condition when rhel is used as default image
in tempest, so default_image_is_advanced set as true
and validation.image_ssh_user is set but
advanced_image_ssh_user is not set.
test_fragmented_traffic_is_accepted was failing
because advanced_image_ssh_user was empty.
Change-Id: I7fa5b167ba27cc78e017765eca927a1dfb24825e
Set GLOBAL_VENV=false in neutron-tempest-plugin-base
job definition to fix gate jobs broken by devstack
change [0].
Had to make the neutron-tempest-plugin-dynamic-routing-*
jobs non-voting as they are failing on the master branch
check queue. Work is still ongoing on a fix.
[0] https://review.opendev.org/c/openstack/devstack/+/558930
Closes-bug: #2031415
Related-bug: #2031526
Change-Id: I2cab7e9169ca6ddaea8b580dbb995e0886bd93c1
Openvswitch firewall driver does not support stateless SG so tests from
classes:
StatelessSecGroupDualStackDHCPv6StatelessTest
StatelessSecGroupDualStackSlaacTest
from the module neutron_tempest_plugin.scenario.test_security_groups
should be skipped in such case.
Closes-bz: https://bugzilla.redhat.com/show_bug.cgi?id=2227138
Change-Id: Ice0f3573dd51851752c745c0b1d35c82bd7808fd
LIBVIRT_CPU_MODE: host-passthrough was commented
as there was some issue with 0.6.1. 0.6.2 is known
to have the fix included, so let's use that instead.
Change-Id: I534d537400fa67796a64a550b3fe45a3b28f250e
As of now the only validation done in Neutron&Designate E2E scenario
test cases is based on DNS query client only.
As a result, we don't really know what's happens on the Designate side,
for example, we wouldn't expect to see the recordset on Backend if it
wasn't previously created on the Designate.
This patch improves the situation and it will definitely help on debugging.
It will use "Designate APIs" when "query client" throws an assertion.
For example, if "A" type recordset wasn't detected on backend (as expected
by test), "Designate APIs" will be used to provide more details on failure.
Change-Id: Ie2093e457e0b664f36204d61f3020ef84ef15a3e
This patch is a follow-up of [1]. In order to keep using the same OVS
and OVN versions used before in the stable branched Wallaby and
Victoria, this patch enforces the OVN version to v21.06
[1]https://review.opendev.org/c/openstack/neutron-tempest-plugin/+/887666
Change-Id: I961bfb5b58d34bf6400117c6ea788231db40a5fe
This could be fixed by merging
https://review.opendev.org/c/openstack/devstack/+/887184 and
https://review.opendev.org/c/openstack/devstack/+/887185 but, talking
to devstack maintainers upstream this patch does introduce a regression:
<frickler> the problem with that patch is that it introduces a regression
because GIT_DEPTH no longer works and until we have a fix for that,
I'm hesitating to do more backports of it
So, I think we could workaround this by using the name of the branches
with those commits included instead of the commit hash, that would work
with the git clone function from devstack.
Change-Id: I18c81ae4a9b5a50e2db25302ab99883248b473a1
Signed-off-by: Lucas Alvares Gomes <lucasagomes@gmail.com>
In nc run as client, when it is provided by the nmap (nmap-ncat package
in Centos/RHEL for example) it could happend that client which was
started with input string given through pipe (echo "test" | nc ... ) was
closed sooner than it received response from the nc server. In such case
nc client was finished without error (exit code 0) but also without
printing any message from server and that causes tests failures.
To avoid that there is option "-d 1" (--delay) added. According to the
nc man page [1] this option can be used to configure "Wait between
read/writes".
[1] https://man7.org/linux/man-pages/man1/ncat.1.html
Change-Id: Id49654aa5ca59eeb0585646d3fd5aa0de22337b5
The tenant_id property of RestClient in tempest was deprecated in
25.0.0. This replaces the deprecated property by the new project_id
property to avoid the following warning.
WARNING tempest.lib.common.rest_client [-] Deprecated: "tenant_id"
property is deprecated for removal, use "project_id" instead
Depends-on: https://review.opendev.org/c/openstack/tempest/+/707938
Change-Id: Ie3c32f9f2278b78603a4214c5717df8691ba490a
