500 lines
19 KiB
Python
500 lines
19 KiB
Python
# Copyright 2011 Eldar Nugaev
|
|
# All Rights Reserved.
|
|
#
|
|
# Licensed under the Apache License, Version 2.0 (the "License"); you may
|
|
# not use this file except in compliance with the License. You may obtain
|
|
# a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
|
|
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
|
|
# License for the specific language governing permissions and limitations
|
|
# under the License.
|
|
|
|
from lxml import etree
|
|
import webob
|
|
|
|
from nova.api.openstack.compute.contrib import keypairs as keypairs_v2
|
|
from nova.api.openstack.compute.plugins.v3 import keypairs as keypairs_v21
|
|
from nova.api.openstack import wsgi
|
|
from nova import db
|
|
from nova import exception
|
|
from nova.openstack.common import jsonutils
|
|
from nova.openstack.common import policy as common_policy
|
|
from nova import policy
|
|
from nova import quota
|
|
from nova import test
|
|
from nova.tests.api.openstack import fakes
|
|
from nova.tests.objects import test_keypair
|
|
|
|
|
|
QUOTAS = quota.QUOTAS
|
|
|
|
|
|
keypair_data = {
|
|
'public_key': 'FAKE_KEY',
|
|
'fingerprint': 'FAKE_FINGERPRINT',
|
|
}
|
|
|
|
|
|
def fake_keypair(name):
|
|
return dict(test_keypair.fake_keypair,
|
|
name=name, **keypair_data)
|
|
|
|
|
|
def db_key_pair_get_all_by_user(self, user_id):
|
|
return [fake_keypair('FAKE')]
|
|
|
|
|
|
def db_key_pair_create(self, keypair):
|
|
return fake_keypair(name=keypair['name'])
|
|
|
|
|
|
def db_key_pair_destroy(context, user_id, name):
|
|
if not (user_id and name):
|
|
raise Exception()
|
|
|
|
|
|
def db_key_pair_create_duplicate(context, keypair):
|
|
raise exception.KeyPairExists(key_name=keypair.get('name', ''))
|
|
|
|
|
|
class KeypairsTestV21(test.TestCase):
|
|
base_url = '/v3'
|
|
|
|
def _setup_app(self):
|
|
self.app = fakes.wsgi_app_v3(init_only=('os-keypairs', 'servers'))
|
|
self.app_server = self.app
|
|
|
|
def setUp(self):
|
|
super(KeypairsTestV21, self).setUp()
|
|
fakes.stub_out_networking(self.stubs)
|
|
fakes.stub_out_rate_limiting(self.stubs)
|
|
|
|
self.stubs.Set(db, "key_pair_get_all_by_user",
|
|
db_key_pair_get_all_by_user)
|
|
self.stubs.Set(db, "key_pair_create",
|
|
db_key_pair_create)
|
|
self.stubs.Set(db, "key_pair_destroy",
|
|
db_key_pair_destroy)
|
|
self.flags(
|
|
osapi_compute_extension=[
|
|
'nova.api.openstack.compute.contrib.select_extensions'],
|
|
osapi_compute_ext_list=['Keypairs'])
|
|
self._setup_app()
|
|
|
|
def test_keypair_list(self):
|
|
req = webob.Request.blank(self.base_url + '/os-keypairs')
|
|
res = req.get_response(self.app)
|
|
self.assertEqual(res.status_int, 200)
|
|
res_dict = jsonutils.loads(res.body)
|
|
response = {'keypairs': [{'keypair': dict(keypair_data, name='FAKE')}]}
|
|
self.assertEqual(res_dict, response)
|
|
|
|
def test_keypair_create(self):
|
|
body = {'keypair': {'name': 'create_test'}}
|
|
req = webob.Request.blank(self.base_url + '/os-keypairs')
|
|
req.method = 'POST'
|
|
req.body = jsonutils.dumps(body)
|
|
req.headers['Content-Type'] = 'application/json'
|
|
res = req.get_response(self.app)
|
|
self.assertEqual(res.status_int, 200)
|
|
res_dict = jsonutils.loads(res.body)
|
|
self.assertTrue(len(res_dict['keypair']['fingerprint']) > 0)
|
|
self.assertTrue(len(res_dict['keypair']['private_key']) > 0)
|
|
|
|
def _test_keypair_create_bad_request_case(self, body):
|
|
req = webob.Request.blank(self.base_url + '/os-keypairs')
|
|
req.method = 'POST'
|
|
req.body = jsonutils.dumps(body)
|
|
req.headers['Content-Type'] = 'application/json'
|
|
res = req.get_response(self.app)
|
|
self.assertEqual(res.status_int, 400)
|
|
|
|
def test_keypair_create_with_empty_name(self):
|
|
body = {'keypair': {'name': ''}}
|
|
self._test_keypair_create_bad_request_case(body)
|
|
|
|
def test_keypair_create_with_name_too_long(self):
|
|
body = {
|
|
'keypair': {
|
|
'name': 'a' * 256
|
|
}
|
|
}
|
|
self._test_keypair_create_bad_request_case(body)
|
|
|
|
def test_keypair_create_with_non_alphanumeric_name(self):
|
|
body = {
|
|
'keypair': {
|
|
'name': 'test/keypair'
|
|
}
|
|
}
|
|
self._test_keypair_create_bad_request_case(body)
|
|
|
|
def test_keypair_import_bad_key(self):
|
|
body = {
|
|
'keypair': {
|
|
'name': 'create_test',
|
|
'public_key': 'ssh-what negative',
|
|
},
|
|
}
|
|
self._test_keypair_create_bad_request_case(body)
|
|
|
|
def test_keypair_create_with_invalid_keypair_body(self):
|
|
body = {'alpha': {'name': 'create_test'}}
|
|
self._test_keypair_create_bad_request_case(body)
|
|
|
|
def test_keypair_import(self):
|
|
body = {
|
|
'keypair': {
|
|
'name': 'create_test',
|
|
'public_key': 'ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDBYIznA'
|
|
'x9D7118Q1VKGpXy2HDiKyUTM8XcUuhQpo0srqb9rboUp4'
|
|
'a9NmCwpWpeElDLuva707GOUnfaBAvHBwsRXyxHJjRaI6Y'
|
|
'Qj2oLJwqvaSaWUbyT1vtryRqy6J3TecN0WINY71f4uymi'
|
|
'MZP0wby4bKBcYnac8KiCIlvkEl0ETjkOGUq8OyWRmn7lj'
|
|
'j5SESEUdBP0JnuTFKddWTU/wD6wydeJaUhBTqOlHn0kX1'
|
|
'GyqoNTE1UEhcM5ZRWgfUZfTjVyDF2kGj3vJLCJtJ8LoGc'
|
|
'j7YaN4uPg1rBle+izwE/tLonRrds+cev8p6krSSrxWOwB'
|
|
'bHkXa6OciiJDvkRzJXzf',
|
|
},
|
|
}
|
|
|
|
req = webob.Request.blank(self.base_url + '/os-keypairs')
|
|
req.method = 'POST'
|
|
req.body = jsonutils.dumps(body)
|
|
req.headers['Content-Type'] = 'application/json'
|
|
res = req.get_response(self.app)
|
|
self.assertEqual(res.status_int, 200)
|
|
# FIXME(ja): sholud we check that public_key was sent to create?
|
|
res_dict = jsonutils.loads(res.body)
|
|
self.assertTrue(len(res_dict['keypair']['fingerprint']) > 0)
|
|
self.assertNotIn('private_key', res_dict['keypair'])
|
|
|
|
def test_keypair_import_quota_limit(self):
|
|
|
|
def fake_quotas_count(self, context, resource, *args, **kwargs):
|
|
return 100
|
|
|
|
self.stubs.Set(QUOTAS, "count", fake_quotas_count)
|
|
|
|
body = {
|
|
'keypair': {
|
|
'name': 'create_test',
|
|
'public_key': 'ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDBYIznA'
|
|
'x9D7118Q1VKGpXy2HDiKyUTM8XcUuhQpo0srqb9rboUp4'
|
|
'a9NmCwpWpeElDLuva707GOUnfaBAvHBwsRXyxHJjRaI6Y'
|
|
'Qj2oLJwqvaSaWUbyT1vtryRqy6J3TecN0WINY71f4uymi'
|
|
'MZP0wby4bKBcYnac8KiCIlvkEl0ETjkOGUq8OyWRmn7lj'
|
|
'j5SESEUdBP0JnuTFKddWTU/wD6wydeJaUhBTqOlHn0kX1'
|
|
'GyqoNTE1UEhcM5ZRWgfUZfTjVyDF2kGj3vJLCJtJ8LoGc'
|
|
'j7YaN4uPg1rBle+izwE/tLonRrds+cev8p6krSSrxWOwB'
|
|
'bHkXa6OciiJDvkRzJXzf',
|
|
},
|
|
}
|
|
|
|
req = webob.Request.blank(self.base_url + '/os-keypairs')
|
|
req.method = 'POST'
|
|
req.body = jsonutils.dumps(body)
|
|
req.headers['Content-Type'] = 'application/json'
|
|
res = req.get_response(self.app)
|
|
self.assertEqual(res.status_int, 403)
|
|
res_dict = jsonutils.loads(res.body)
|
|
self.assertEqual(
|
|
"Quota exceeded, too many key pairs.",
|
|
res_dict['forbidden']['message'])
|
|
|
|
def test_keypair_create_quota_limit(self):
|
|
|
|
def fake_quotas_count(self, context, resource, *args, **kwargs):
|
|
return 100
|
|
|
|
self.stubs.Set(QUOTAS, "count", fake_quotas_count)
|
|
|
|
body = {
|
|
'keypair': {
|
|
'name': 'create_test',
|
|
},
|
|
}
|
|
|
|
req = webob.Request.blank(self.base_url + '/os-keypairs')
|
|
req.method = 'POST'
|
|
req.body = jsonutils.dumps(body)
|
|
req.headers['Content-Type'] = 'application/json'
|
|
res = req.get_response(self.app)
|
|
self.assertEqual(res.status_int, 403)
|
|
res_dict = jsonutils.loads(res.body)
|
|
self.assertEqual(
|
|
"Quota exceeded, too many key pairs.",
|
|
res_dict['forbidden']['message'])
|
|
|
|
def test_keypair_create_duplicate(self):
|
|
self.stubs.Set(db, "key_pair_create", db_key_pair_create_duplicate)
|
|
body = {'keypair': {'name': 'create_duplicate'}}
|
|
req = webob.Request.blank(self.base_url + '/os-keypairs')
|
|
req.method = 'POST'
|
|
req.body = jsonutils.dumps(body)
|
|
req.headers['Content-Type'] = 'application/json'
|
|
res = req.get_response(self.app)
|
|
self.assertEqual(res.status_int, 409)
|
|
res_dict = jsonutils.loads(res.body)
|
|
self.assertEqual(
|
|
"Key pair 'create_duplicate' already exists.",
|
|
res_dict['conflictingRequest']['message'])
|
|
|
|
def test_keypair_delete(self):
|
|
req = webob.Request.blank(self.base_url + '/os-keypairs/FAKE')
|
|
req.method = 'DELETE'
|
|
req.headers['Content-Type'] = 'application/json'
|
|
res = req.get_response(self.app)
|
|
self.assertEqual(res.status_int, 202)
|
|
|
|
def test_keypair_get_keypair_not_found(self):
|
|
req = webob.Request.blank(self.base_url + '/os-keypairs/DOESNOTEXIST')
|
|
res = req.get_response(self.app)
|
|
self.assertEqual(res.status_int, 404)
|
|
|
|
def test_keypair_delete_not_found(self):
|
|
|
|
def db_key_pair_get_not_found(context, user_id, name):
|
|
raise exception.KeypairNotFound(user_id=user_id, name=name)
|
|
|
|
self.stubs.Set(db, "key_pair_get",
|
|
db_key_pair_get_not_found)
|
|
req = webob.Request.blank(self.base_url + '/os-keypairs/WHAT')
|
|
res = req.get_response(self.app)
|
|
self.assertEqual(res.status_int, 404)
|
|
|
|
def test_keypair_show(self):
|
|
|
|
def _db_key_pair_get(context, user_id, name):
|
|
return dict(test_keypair.fake_keypair,
|
|
name='foo', public_key='XXX', fingerprint='YYY')
|
|
|
|
self.stubs.Set(db, "key_pair_get", _db_key_pair_get)
|
|
|
|
req = webob.Request.blank(self.base_url + '/os-keypairs/FAKE')
|
|
req.method = 'GET'
|
|
req.headers['Content-Type'] = 'application/json'
|
|
res = req.get_response(self.app)
|
|
res_dict = jsonutils.loads(res.body)
|
|
self.assertEqual(res.status_int, 200)
|
|
self.assertEqual('foo', res_dict['keypair']['name'])
|
|
self.assertEqual('XXX', res_dict['keypair']['public_key'])
|
|
self.assertEqual('YYY', res_dict['keypair']['fingerprint'])
|
|
|
|
def test_keypair_show_not_found(self):
|
|
|
|
def _db_key_pair_get(context, user_id, name):
|
|
raise exception.KeypairNotFound(user_id=user_id, name=name)
|
|
|
|
self.stubs.Set(db, "key_pair_get", _db_key_pair_get)
|
|
|
|
req = webob.Request.blank(self.base_url + '/os-keypairs/FAKE')
|
|
req.method = 'GET'
|
|
req.headers['Content-Type'] = 'application/json'
|
|
res = req.get_response(self.app)
|
|
self.assertEqual(res.status_int, 404)
|
|
|
|
def test_show_server(self):
|
|
self.stubs.Set(db, 'instance_get',
|
|
fakes.fake_instance_get())
|
|
self.stubs.Set(db, 'instance_get_by_uuid',
|
|
fakes.fake_instance_get())
|
|
req = webob.Request.blank(self.base_url + '/servers/1')
|
|
req.headers['Content-Type'] = 'application/json'
|
|
response = req.get_response(self.app_server)
|
|
self.assertEqual(response.status_int, 200)
|
|
res_dict = jsonutils.loads(response.body)
|
|
self.assertIn('key_name', res_dict['server'])
|
|
self.assertEqual(res_dict['server']['key_name'], '')
|
|
|
|
def test_detail_servers(self):
|
|
self.stubs.Set(db, 'instance_get_all_by_filters',
|
|
fakes.fake_instance_get_all_by_filters())
|
|
req = fakes.HTTPRequest.blank(self.base_url + '/servers/detail')
|
|
res = req.get_response(self.app_server)
|
|
server_dicts = jsonutils.loads(res.body)['servers']
|
|
self.assertEqual(len(server_dicts), 5)
|
|
|
|
for server_dict in server_dicts:
|
|
self.assertIn('key_name', server_dict)
|
|
self.assertEqual(server_dict['key_name'], '')
|
|
|
|
|
|
class KeypairPolicyTestV21(test.TestCase):
|
|
KeyPairController = keypairs_v21.KeypairController()
|
|
policy_path = 'compute_extension:v3:os-keypairs'
|
|
base_url = '/v3'
|
|
|
|
def setUp(self):
|
|
super(KeypairPolicyTestV21, self).setUp()
|
|
|
|
def _db_key_pair_get(context, user_id, name):
|
|
return dict(test_keypair.fake_keypair,
|
|
name='foo', public_key='XXX', fingerprint='YYY')
|
|
|
|
self.stubs.Set(db, "key_pair_get",
|
|
_db_key_pair_get)
|
|
self.stubs.Set(db, "key_pair_get_all_by_user",
|
|
db_key_pair_get_all_by_user)
|
|
self.stubs.Set(db, "key_pair_create",
|
|
db_key_pair_create)
|
|
self.stubs.Set(db, "key_pair_destroy",
|
|
db_key_pair_destroy)
|
|
|
|
def test_keypair_list_fail_policy(self):
|
|
rules = {self.policy_path + ':index':
|
|
common_policy.parse_rule('role:admin')}
|
|
policy.set_rules(rules)
|
|
req = fakes.HTTPRequest.blank(self.base_url + '/os-keypairs')
|
|
self.assertRaises(exception.Forbidden,
|
|
self.KeyPairController.index,
|
|
req)
|
|
|
|
def test_keypair_list_pass_policy(self):
|
|
rules = {self.policy_path + ':index':
|
|
common_policy.parse_rule('')}
|
|
policy.set_rules(rules)
|
|
req = fakes.HTTPRequest.blank(self.base_url + '/os-keypairs')
|
|
res = self.KeyPairController.index(req)
|
|
self.assertIn('keypairs', res)
|
|
|
|
def test_keypair_show_fail_policy(self):
|
|
rules = {self.policy_path + ':show':
|
|
common_policy.parse_rule('role:admin')}
|
|
policy.set_rules(rules)
|
|
req = fakes.HTTPRequest.blank(self.base_url + '/os-keypairs/FAKE')
|
|
self.assertRaises(exception.Forbidden,
|
|
self.KeyPairController.show,
|
|
req, 'FAKE')
|
|
|
|
def test_keypair_show_pass_policy(self):
|
|
rules = {self.policy_path + ':show':
|
|
common_policy.parse_rule('')}
|
|
policy.set_rules(rules)
|
|
req = fakes.HTTPRequest.blank(self.base_url + '/os-keypairs/FAKE')
|
|
res = self.KeyPairController.show(req, 'FAKE')
|
|
self.assertIn('keypair', res)
|
|
|
|
def test_keypair_create_fail_policy(self):
|
|
body = {'keypair': {'name': 'create_test'}}
|
|
rules = {self.policy_path + ':create':
|
|
common_policy.parse_rule('role:admin')}
|
|
policy.set_rules(rules)
|
|
req = fakes.HTTPRequest.blank(self.base_url + '/os-keypairs')
|
|
req.method = 'POST'
|
|
self.assertRaises(exception.Forbidden,
|
|
self.KeyPairController.create,
|
|
req, body=body)
|
|
|
|
def test_keypair_create_pass_policy(self):
|
|
body = {'keypair': {'name': 'create_test'}}
|
|
rules = {self.policy_path + ':create':
|
|
common_policy.parse_rule('')}
|
|
policy.set_rules(rules)
|
|
req = fakes.HTTPRequest.blank(self.base_url + '/os-keypairs')
|
|
req.method = 'POST'
|
|
res = self.KeyPairController.create(req, body=body)
|
|
self.assertIn('keypair', res)
|
|
|
|
def test_keypair_delete_fail_policy(self):
|
|
rules = {self.policy_path + ':delete':
|
|
common_policy.parse_rule('role:admin')}
|
|
policy.set_rules(rules)
|
|
req = fakes.HTTPRequest.blank(self.base_url + '/os-keypairs/FAKE')
|
|
req.method = 'DELETE'
|
|
self.assertRaises(exception.Forbidden,
|
|
self.KeyPairController.delete,
|
|
req, 'FAKE')
|
|
|
|
def test_keypair_delete_pass_policy(self):
|
|
rules = {self.policy_path + ':delete':
|
|
common_policy.parse_rule('')}
|
|
policy.set_rules(rules)
|
|
req = fakes.HTTPRequest.blank(self.base_url + '/os-keypairs/FAKE')
|
|
req.method = 'DELETE'
|
|
res = self.KeyPairController.delete(req, 'FAKE')
|
|
|
|
# NOTE: on v2.1, http status code is set as wsgi_code of API
|
|
# method instead of status_int in a response object.
|
|
if isinstance(self.KeyPairController, keypairs_v21.KeypairController):
|
|
status_int = self.KeyPairController.delete.wsgi_code
|
|
else:
|
|
status_int = res.status_int
|
|
self.assertEqual(202, status_int)
|
|
|
|
|
|
class KeypairsXMLSerializerTest(test.TestCase):
|
|
def setUp(self):
|
|
super(KeypairsXMLSerializerTest, self).setUp()
|
|
self.deserializer = wsgi.XMLDeserializer()
|
|
|
|
def test_default_serializer(self):
|
|
exemplar = dict(keypair=dict(
|
|
public_key='fake_public_key',
|
|
private_key='fake_private_key',
|
|
fingerprint='fake_fingerprint',
|
|
user_id='fake_user_id',
|
|
name='fake_key_name'))
|
|
serializer = keypairs_v2.KeypairTemplate()
|
|
text = serializer.serialize(exemplar)
|
|
|
|
tree = etree.fromstring(text)
|
|
|
|
self.assertEqual('keypair', tree.tag)
|
|
for child in tree:
|
|
self.assertIn(child.tag, exemplar['keypair'])
|
|
self.assertEqual(child.text, exemplar['keypair'][child.tag])
|
|
|
|
def test_index_serializer(self):
|
|
exemplar = dict(keypairs=[
|
|
dict(keypair=dict(
|
|
name='key1_name',
|
|
public_key='key1_key',
|
|
fingerprint='key1_fingerprint')),
|
|
dict(keypair=dict(
|
|
name='key2_name',
|
|
public_key='key2_key',
|
|
fingerprint='key2_fingerprint'))])
|
|
serializer = keypairs_v2.KeypairsTemplate()
|
|
text = serializer.serialize(exemplar)
|
|
|
|
tree = etree.fromstring(text)
|
|
|
|
self.assertEqual('keypairs', tree.tag)
|
|
self.assertEqual(len(exemplar['keypairs']), len(tree))
|
|
for idx, keypair in enumerate(tree):
|
|
self.assertEqual('keypair', keypair.tag)
|
|
kp_data = exemplar['keypairs'][idx]['keypair']
|
|
for child in keypair:
|
|
self.assertIn(child.tag, kp_data)
|
|
self.assertEqual(child.text, kp_data[child.tag])
|
|
|
|
def test_deserializer(self):
|
|
exemplar = dict(keypair=dict(
|
|
name='key_name',
|
|
public_key='public_key'))
|
|
intext = ("<?xml version='1.0' encoding='UTF-8'?>\n"
|
|
'<keypair><name>key_name</name>'
|
|
'<public_key>public_key</public_key></keypair>')
|
|
|
|
result = self.deserializer.deserialize(intext)['body']
|
|
self.assertEqual(result, exemplar)
|
|
|
|
|
|
class KeypairsTestV2(KeypairsTestV21):
|
|
base_url = '/v2/fake'
|
|
|
|
def _setup_app(self):
|
|
self.app = fakes.wsgi_app(init_only=('os-keypairs',))
|
|
self.app_server = fakes.wsgi_app(init_only=('servers',))
|
|
|
|
|
|
class KeypairPolicyTestV2(KeypairPolicyTestV21):
|
|
KeyPairController = keypairs_v2.KeypairController()
|
|
policy_path = 'compute_extension:keypairs'
|
|
base_url = '/v2/fake'
|