1382 lines
65 KiB
Python
1382 lines
65 KiB
Python
# Copyright 2016 Blue Box, an IBM Company
|
|
#
|
|
# Licensed under the Apache License, Version 2.0 (the "License"); you may
|
|
# not use this file except in compliance with the License. You may obtain
|
|
# a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
|
|
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
|
|
# License for the specific language governing permissions and limitations
|
|
# under the License.
|
|
|
|
from unittest import mock
|
|
|
|
from oslo_config import cfg
|
|
from oslo_config import fixture as oslo_fixture
|
|
from oslo_utils import uuidutils
|
|
|
|
from octavia.common import constants
|
|
import octavia.common.context
|
|
from octavia.common import data_models
|
|
from octavia.common import exceptions
|
|
from octavia.tests.common import constants as c_const
|
|
from octavia.tests.functional.api.v2 import base
|
|
|
|
|
|
class TestL7Policy(base.BaseAPITest):
|
|
|
|
root_tag = 'l7policy'
|
|
root_tag_list = 'l7policies'
|
|
root_tag_links = 'l7policies_links'
|
|
|
|
def setUp(self):
|
|
super(TestL7Policy, self).setUp()
|
|
self.lb = self.create_load_balancer(uuidutils.generate_uuid())
|
|
self.lb_id = self.lb.get('loadbalancer').get('id')
|
|
self.project_id = self.lb.get('loadbalancer').get('project_id')
|
|
self.set_lb_status(self.lb_id)
|
|
self.listener = self.create_listener(
|
|
constants.PROTOCOL_HTTP, 80, lb_id=self.lb_id)
|
|
self.listener_id = self.listener.get('listener').get('id')
|
|
self.set_lb_status(self.lb_id)
|
|
self.pool = self.create_pool(
|
|
self.lb_id,
|
|
constants.PROTOCOL_HTTP,
|
|
constants.LB_ALGORITHM_ROUND_ROBIN)
|
|
self.pool_id = self.pool.get('pool').get('id')
|
|
self.set_lb_status(self.lb_id)
|
|
|
|
def test_get(self):
|
|
api_l7policy = self.create_l7policy(
|
|
self.listener_id,
|
|
constants.L7POLICY_ACTION_REJECT,
|
|
tags=['test_tag']).get(self.root_tag)
|
|
response = self.get(self.L7POLICY_PATH.format(
|
|
l7policy_id=api_l7policy.get('id'))).json.get(self.root_tag)
|
|
self.assertEqual(api_l7policy, response)
|
|
|
|
def test_get_authorized(self):
|
|
api_l7policy = self.create_l7policy(
|
|
self.listener_id,
|
|
constants.L7POLICY_ACTION_REJECT).get(self.root_tag)
|
|
|
|
self.conf = self.useFixture(oslo_fixture.Config(cfg.CONF))
|
|
auth_strategy = self.conf.conf.api_settings.get('auth_strategy')
|
|
self.conf.config(group='api_settings', auth_strategy=constants.TESTING)
|
|
with mock.patch.object(octavia.common.context.Context, 'project_id',
|
|
self.project_id):
|
|
override_credentials = {
|
|
'service_user_id': None,
|
|
'user_domain_id': None,
|
|
'is_admin_project': True,
|
|
'service_project_domain_id': None,
|
|
'service_project_id': None,
|
|
'roles': ['load-balancer_member'],
|
|
'user_id': None,
|
|
'is_admin': False,
|
|
'service_user_domain_id': None,
|
|
'project_domain_id': None,
|
|
'service_roles': [],
|
|
'project_id': self.project_id}
|
|
with mock.patch(
|
|
"oslo_context.context.RequestContext.to_policy_values",
|
|
return_value=override_credentials):
|
|
response = self.get(self.L7POLICY_PATH.format(
|
|
l7policy_id=api_l7policy.get('id')))
|
|
response = response.json.get(self.root_tag)
|
|
self.conf.config(group='api_settings', auth_strategy=auth_strategy)
|
|
self.assertEqual(api_l7policy, response)
|
|
|
|
def test_get_not_authorized(self):
|
|
api_l7policy = self.create_l7policy(
|
|
self.listener_id,
|
|
constants.L7POLICY_ACTION_REJECT).get(self.root_tag)
|
|
|
|
self.conf = self.useFixture(oslo_fixture.Config(cfg.CONF))
|
|
auth_strategy = self.conf.conf.api_settings.get('auth_strategy')
|
|
self.conf.config(group='api_settings', auth_strategy=constants.TESTING)
|
|
with mock.patch.object(octavia.common.context.Context, 'project_id',
|
|
uuidutils.generate_uuid()):
|
|
response = self.get(self.L7POLICY_PATH.format(
|
|
l7policy_id=api_l7policy.get('id')), status=403)
|
|
self.conf.config(group='api_settings', auth_strategy=auth_strategy)
|
|
self.assertEqual(self.NOT_AUTHORIZED_BODY, response.json)
|
|
|
|
def test_get_deleted_gives_404(self):
|
|
api_l7policy = self.create_l7policy(
|
|
self.listener_id,
|
|
constants.L7POLICY_ACTION_REJECT).get(self.root_tag)
|
|
|
|
self.set_object_status(self.l7policy_repo, api_l7policy.get('id'),
|
|
provisioning_status=constants.DELETED)
|
|
self.get(self.L7POLICY_PATH.format(l7policy_id=api_l7policy.get('id')),
|
|
status=404)
|
|
|
|
def test_bad_get(self):
|
|
self.get(self.L7POLICY_PATH.format(
|
|
l7policy_id=uuidutils.generate_uuid()), status=404)
|
|
|
|
def test_get_all(self):
|
|
api_l7policy = self.create_l7policy(self.listener_id,
|
|
constants.L7POLICY_ACTION_REJECT,
|
|
tags=['test_tag']
|
|
).get(self.root_tag)
|
|
self.set_lb_status(self.lb_id)
|
|
policies = self.get(self.L7POLICIES_PATH).json.get(self.root_tag_list)
|
|
self.assertIsInstance(policies, list)
|
|
self.assertEqual(1, len(policies))
|
|
self.assertEqual(api_l7policy.get('id'), policies[0].get('id'))
|
|
self.assertEqual(api_l7policy['tags'], policies[0]['tags'])
|
|
|
|
def test_get_all_admin(self):
|
|
project_id = uuidutils.generate_uuid()
|
|
lb1 = self.create_load_balancer(uuidutils.generate_uuid(), name='lb1',
|
|
project_id=project_id)
|
|
lb1_id = lb1.get('loadbalancer').get('id')
|
|
self.set_lb_status(lb1_id)
|
|
listener1 = self.create_listener(constants.PROTOCOL_HTTP, 80,
|
|
lb1_id)
|
|
listener1_id = listener1.get('listener').get('id')
|
|
self.set_lb_status(lb1_id)
|
|
pool1 = self.create_pool(lb1_id, constants.PROTOCOL_HTTP,
|
|
constants.LB_ALGORITHM_ROUND_ROBIN)
|
|
pool1_id = pool1.get('pool').get('id')
|
|
self.set_lb_status(lb1_id)
|
|
api_l7p_a = self.create_l7policy(
|
|
listener1_id,
|
|
constants.L7POLICY_ACTION_REJECT).get(self.root_tag)
|
|
self.set_lb_status(lb1_id)
|
|
api_l7p_b = self.create_l7policy(
|
|
listener1_id, constants.L7POLICY_ACTION_REDIRECT_TO_POOL,
|
|
position=2, redirect_pool_id=pool1_id).get(self.root_tag)
|
|
self.set_lb_status(lb1_id)
|
|
api_l7p_c = self.create_l7policy(
|
|
listener1_id, constants.L7POLICY_ACTION_REDIRECT_TO_URL,
|
|
position=3, redirect_url='http://localhost/').get(self.root_tag)
|
|
self.set_lb_status(lb1_id)
|
|
policies = self.get(self.L7POLICIES_PATH).json.get(self.root_tag_list)
|
|
self.assertEqual(3, len(policies))
|
|
policy_id_actions = [(p.get('id'), p.get('action')) for p in policies]
|
|
self.assertIn((api_l7p_a.get('id'), api_l7p_a.get('action')),
|
|
policy_id_actions)
|
|
self.assertIn((api_l7p_b.get('id'), api_l7p_b.get('action')),
|
|
policy_id_actions)
|
|
self.assertIn((api_l7p_c.get('id'), api_l7p_c.get('action')),
|
|
policy_id_actions)
|
|
|
|
def test_get_all_non_admin(self):
|
|
project_id = uuidutils.generate_uuid()
|
|
lb1 = self.create_load_balancer(uuidutils.generate_uuid(), name='lb1',
|
|
project_id=project_id)
|
|
lb1_id = lb1.get('loadbalancer').get('id')
|
|
self.set_lb_status(lb1_id)
|
|
listener1 = self.create_listener(constants.PROTOCOL_HTTP, 80,
|
|
lb1_id)
|
|
listener1_id = listener1.get('listener').get('id')
|
|
self.set_lb_status(lb1_id)
|
|
pool1 = self.create_pool(lb1_id, constants.PROTOCOL_HTTP,
|
|
constants.LB_ALGORITHM_ROUND_ROBIN)
|
|
pool1_id = pool1.get('pool').get('id')
|
|
self.set_lb_status(lb1_id)
|
|
self.create_l7policy(
|
|
listener1_id,
|
|
constants.L7POLICY_ACTION_REJECT).get(self.root_tag)
|
|
self.set_lb_status(lb1_id)
|
|
self.create_l7policy(
|
|
listener1_id, constants.L7POLICY_ACTION_REDIRECT_TO_POOL,
|
|
position=2, redirect_pool_id=pool1_id).get(self.root_tag)
|
|
self.set_lb_status(lb1_id)
|
|
api_l7p_c = self.create_l7policy(
|
|
self.listener_id, constants.L7POLICY_ACTION_REDIRECT_TO_URL,
|
|
redirect_url='http://localhost/').get(self.root_tag)
|
|
self.set_lb_status(lb1_id)
|
|
|
|
auth_strategy = self.conf.conf.api_settings.get('auth_strategy')
|
|
self.conf.config(group='api_settings',
|
|
auth_strategy=constants.KEYSTONE)
|
|
with mock.patch.object(octavia.common.context.Context, 'project_id',
|
|
api_l7p_c.get('project_id')):
|
|
override_credentials = {
|
|
'service_user_id': None,
|
|
'user_domain_id': None,
|
|
'is_admin_project': True,
|
|
'service_project_domain_id': None,
|
|
'service_project_id': None,
|
|
'roles': ['load-balancer_member'],
|
|
'user_id': None,
|
|
'is_admin': False,
|
|
'service_user_domain_id': None,
|
|
'project_domain_id': None,
|
|
'service_roles': [],
|
|
'project_id': self.project_id}
|
|
with mock.patch(
|
|
"oslo_context.context.RequestContext.to_policy_values",
|
|
return_value=override_credentials):
|
|
policies = self.get(
|
|
self.L7POLICIES_PATH).json.get(self.root_tag_list)
|
|
self.conf.config(group='api_settings', auth_strategy=auth_strategy)
|
|
|
|
self.assertEqual(1, len(policies))
|
|
policy_id_actions = [(p.get('id'), p.get('action')) for p in policies]
|
|
self.assertIn((api_l7p_c.get('id'), api_l7p_c.get('action')),
|
|
policy_id_actions)
|
|
|
|
def test_get_all_non_admin_global_observer(self):
|
|
project_id = uuidutils.generate_uuid()
|
|
lb1 = self.create_load_balancer(uuidutils.generate_uuid(), name='lb1',
|
|
project_id=project_id)
|
|
lb1_id = lb1.get('loadbalancer').get('id')
|
|
self.set_lb_status(lb1_id)
|
|
listener1 = self.create_listener(constants.PROTOCOL_HTTP, 80,
|
|
lb1_id)
|
|
listener1_id = listener1.get('listener').get('id')
|
|
self.set_lb_status(lb1_id)
|
|
pool1 = self.create_pool(lb1_id, constants.PROTOCOL_HTTP,
|
|
constants.LB_ALGORITHM_ROUND_ROBIN)
|
|
pool1_id = pool1.get('pool').get('id')
|
|
self.set_lb_status(lb1_id)
|
|
api_l7p_a = self.create_l7policy(
|
|
listener1_id,
|
|
constants.L7POLICY_ACTION_REJECT).get(self.root_tag)
|
|
self.set_lb_status(lb1_id)
|
|
api_l7p_b = self.create_l7policy(
|
|
listener1_id, constants.L7POLICY_ACTION_REDIRECT_TO_POOL,
|
|
position=2, redirect_pool_id=pool1_id).get(self.root_tag)
|
|
self.set_lb_status(lb1_id)
|
|
api_l7p_c = self.create_l7policy(
|
|
self.listener_id, constants.L7POLICY_ACTION_REDIRECT_TO_URL,
|
|
redirect_url='http://localhost/').get(self.root_tag)
|
|
self.set_lb_status(lb1_id)
|
|
|
|
auth_strategy = self.conf.conf.api_settings.get('auth_strategy')
|
|
self.conf.config(group='api_settings',
|
|
auth_strategy=constants.KEYSTONE)
|
|
with mock.patch.object(octavia.common.context.Context, 'project_id',
|
|
api_l7p_c.get('project_id')):
|
|
override_credentials = {
|
|
'service_user_id': None,
|
|
'user_domain_id': None,
|
|
'is_admin_project': True,
|
|
'service_project_domain_id': None,
|
|
'service_project_id': None,
|
|
'roles': ['load-balancer_global_observer'],
|
|
'user_id': None,
|
|
'is_admin': False,
|
|
'service_user_domain_id': None,
|
|
'project_domain_id': None,
|
|
'service_roles': [],
|
|
'project_id': self.project_id}
|
|
with mock.patch(
|
|
"oslo_context.context.RequestContext.to_policy_values",
|
|
return_value=override_credentials):
|
|
policies = self.get(
|
|
self.L7POLICIES_PATH).json.get(self.root_tag_list)
|
|
self.conf.config(group='api_settings', auth_strategy=auth_strategy)
|
|
|
|
self.assertEqual(3, len(policies))
|
|
policy_id_actions = [(p.get('id'), p.get('action')) for p in policies]
|
|
self.assertIn((api_l7p_a.get('id'), api_l7p_a.get('action')),
|
|
policy_id_actions)
|
|
self.assertIn((api_l7p_b.get('id'), api_l7p_b.get('action')),
|
|
policy_id_actions)
|
|
self.assertIn((api_l7p_c.get('id'), api_l7p_c.get('action')),
|
|
policy_id_actions)
|
|
|
|
def test_get_all_not_authorized(self):
|
|
self.create_l7policy(self.listener_id,
|
|
constants.L7POLICY_ACTION_REJECT,
|
|
).get(self.root_tag)
|
|
self.set_lb_status(self.lb_id)
|
|
|
|
auth_strategy = self.conf.conf.api_settings.get('auth_strategy')
|
|
self.conf.config(group='api_settings', auth_strategy=constants.TESTING)
|
|
with mock.patch.object(octavia.common.context.Context, 'project_id',
|
|
uuidutils.generate_uuid()):
|
|
policies = self.get(self.L7POLICIES_PATH, status=403).json
|
|
|
|
self.conf.config(group='api_settings', auth_strategy=auth_strategy)
|
|
self.assertEqual(self.NOT_AUTHORIZED_BODY, policies)
|
|
|
|
def test_get_all_hides_deleted(self):
|
|
api_l7policy = self.create_l7policy(
|
|
self.listener_id,
|
|
constants.L7POLICY_ACTION_REJECT).get(self.root_tag)
|
|
|
|
response = self.get(self.L7POLICIES_PATH)
|
|
objects = response.json.get(self.root_tag_list)
|
|
self.assertEqual(len(objects), 1)
|
|
self.set_object_status(self.l7policy_repo, api_l7policy.get('id'),
|
|
provisioning_status=constants.DELETED)
|
|
response = self.get(self.L7POLICIES_PATH)
|
|
objects = response.json.get(self.root_tag_list)
|
|
self.assertEqual(len(objects), 0)
|
|
|
|
def test_get_by_project_id(self):
|
|
project1_id = uuidutils.generate_uuid()
|
|
project2_id = uuidutils.generate_uuid()
|
|
lb1 = self.create_load_balancer(uuidutils.generate_uuid(), name='lb1',
|
|
project_id=project1_id)
|
|
lb1_id = lb1.get('loadbalancer').get('id')
|
|
self.set_lb_status(lb1_id)
|
|
lb2 = self.create_load_balancer(uuidutils.generate_uuid(), name='lb2',
|
|
project_id=project2_id)
|
|
lb2_id = lb2.get('loadbalancer').get('id')
|
|
self.set_lb_status(lb2_id)
|
|
listener1 = self.create_listener(constants.PROTOCOL_HTTP, 80,
|
|
lb1_id)
|
|
listener1_id = listener1.get('listener').get('id')
|
|
self.set_lb_status(lb1_id)
|
|
listener2 = self.create_listener(constants.PROTOCOL_HTTP, 80,
|
|
lb2_id)
|
|
listener2_id = listener2.get('listener').get('id')
|
|
self.set_lb_status(lb2_id)
|
|
pool1 = self.create_pool(lb1_id, constants.PROTOCOL_HTTP,
|
|
constants.LB_ALGORITHM_ROUND_ROBIN)
|
|
pool1_id = pool1.get('pool').get('id')
|
|
self.set_lb_status(lb1_id)
|
|
api_l7p_a = self.create_l7policy(
|
|
listener1_id,
|
|
constants.L7POLICY_ACTION_REJECT).get(self.root_tag)
|
|
self.set_lb_status(lb1_id)
|
|
api_l7p_b = self.create_l7policy(
|
|
listener1_id, constants.L7POLICY_ACTION_REDIRECT_TO_POOL,
|
|
position=2, redirect_pool_id=pool1_id).get(self.root_tag)
|
|
self.set_lb_status(lb1_id)
|
|
api_l7p_c = self.create_l7policy(
|
|
listener2_id, constants.L7POLICY_ACTION_REDIRECT_TO_URL,
|
|
redirect_url='http://localhost/').get(self.root_tag)
|
|
self.set_lb_status(lb2_id)
|
|
policies = self.get(
|
|
self.L7POLICIES_PATH,
|
|
params={'project_id': project1_id}).json.get(self.root_tag_list)
|
|
|
|
self.assertEqual(2, len(policies))
|
|
policy_id_actions = [(p.get('id'), p.get('action')) for p in policies]
|
|
self.assertIn((api_l7p_a.get('id'), api_l7p_a.get('action')),
|
|
policy_id_actions)
|
|
self.assertIn((api_l7p_b.get('id'), api_l7p_b.get('action')),
|
|
policy_id_actions)
|
|
policies = self.get(
|
|
self.L7POLICIES_PATH,
|
|
params={'project_id': project2_id}).json.get(self.root_tag_list)
|
|
self.assertEqual(1, len(policies))
|
|
policy_id_actions = [(p.get('id'), p.get('action')) for p in policies]
|
|
self.assertIn((api_l7p_c.get('id'), api_l7p_c.get('action')),
|
|
policy_id_actions)
|
|
|
|
def test_get_all_sorted(self):
|
|
self.create_l7policy(
|
|
self.listener_id, constants.L7POLICY_ACTION_REJECT,
|
|
name='policy3').get(self.root_tag)
|
|
self.set_lb_status(self.lb_id)
|
|
self.create_l7policy(
|
|
self.listener_id, constants.L7POLICY_ACTION_REDIRECT_TO_POOL,
|
|
position=2, redirect_pool_id=self.pool_id,
|
|
name='policy2').get(self.root_tag)
|
|
self.set_lb_status(self.lb_id)
|
|
self.create_l7policy(
|
|
self.listener_id, constants.L7POLICY_ACTION_REDIRECT_TO_URL,
|
|
redirect_url='http://localhost/',
|
|
name='policy1').get(self.root_tag)
|
|
self.set_lb_status(self.lb_id)
|
|
|
|
response = self.get(self.L7POLICIES_PATH,
|
|
params={'sort': 'position:desc'})
|
|
policies_desc = response.json.get(self.root_tag_list)
|
|
response = self.get(self.L7POLICIES_PATH,
|
|
params={'sort': 'position:asc'})
|
|
policies_asc = response.json.get(self.root_tag_list)
|
|
|
|
self.assertEqual(3, len(policies_desc))
|
|
self.assertEqual(3, len(policies_asc))
|
|
|
|
policy_id_names_desc = [(policy.get('id'), policy.get('position'))
|
|
for policy in policies_desc]
|
|
policy_id_names_asc = [(policy.get('id'), policy.get('position'))
|
|
for policy in policies_asc]
|
|
self.assertEqual(policy_id_names_asc,
|
|
list(reversed(policy_id_names_desc)))
|
|
|
|
def test_get_all_limited(self):
|
|
self.create_l7policy(
|
|
self.listener_id, constants.L7POLICY_ACTION_REJECT,
|
|
name='policy1').get(self.root_tag)
|
|
self.set_lb_status(self.lb_id)
|
|
self.create_l7policy(
|
|
self.listener_id, constants.L7POLICY_ACTION_REDIRECT_TO_POOL,
|
|
position=2, redirect_pool_id=self.pool_id,
|
|
name='policy2').get(self.root_tag)
|
|
self.set_lb_status(self.lb_id)
|
|
self.create_l7policy(
|
|
self.listener_id, constants.L7POLICY_ACTION_REDIRECT_TO_URL,
|
|
redirect_url='http://localhost/',
|
|
name='policy3').get(self.root_tag)
|
|
self.set_lb_status(self.lb_id)
|
|
|
|
# First two -- should have 'next' link
|
|
first_two = self.get(self.L7POLICIES_PATH, params={'limit': 2}).json
|
|
objs = first_two[self.root_tag_list]
|
|
links = first_two[self.root_tag_links]
|
|
self.assertEqual(2, len(objs))
|
|
self.assertEqual(1, len(links))
|
|
self.assertEqual('next', links[0]['rel'])
|
|
|
|
# Third + off the end -- should have previous link
|
|
third = self.get(self.L7POLICIES_PATH, params={
|
|
'limit': 2,
|
|
'marker': first_two[self.root_tag_list][1]['id']}).json
|
|
objs = third[self.root_tag_list]
|
|
links = third[self.root_tag_links]
|
|
self.assertEqual(1, len(objs))
|
|
self.assertEqual(1, len(links))
|
|
self.assertEqual('previous', links[0]['rel'])
|
|
|
|
# Middle -- should have both links
|
|
middle = self.get(self.L7POLICIES_PATH, params={
|
|
'limit': 1,
|
|
'marker': first_two[self.root_tag_list][0]['id']}).json
|
|
objs = middle[self.root_tag_list]
|
|
links = middle[self.root_tag_links]
|
|
self.assertEqual(1, len(objs))
|
|
self.assertEqual(2, len(links))
|
|
self.assertItemsEqual(['previous', 'next'],
|
|
[link['rel'] for link in links])
|
|
|
|
def test_get_all_fields_filter(self):
|
|
self.create_l7policy(
|
|
self.listener_id, constants.L7POLICY_ACTION_REJECT,
|
|
name='policy1').get(self.root_tag)
|
|
self.set_lb_status(self.lb_id)
|
|
self.create_l7policy(
|
|
self.listener_id, constants.L7POLICY_ACTION_REDIRECT_TO_POOL,
|
|
position=2, redirect_pool_id=self.pool_id,
|
|
name='policy2').get(self.root_tag)
|
|
self.set_lb_status(self.lb_id)
|
|
self.create_l7policy(
|
|
self.listener_id, constants.L7POLICY_ACTION_REDIRECT_TO_URL,
|
|
redirect_url='http://localhost/',
|
|
name='policy3').get(self.root_tag)
|
|
self.set_lb_status(self.lb_id)
|
|
|
|
l7pos = self.get(self.L7POLICIES_PATH, params={
|
|
'fields': ['id', 'project_id']}).json
|
|
for l7po in l7pos['l7policies']:
|
|
self.assertIn(u'id', l7po)
|
|
self.assertIn(u'project_id', l7po)
|
|
self.assertNotIn(u'description', l7po)
|
|
|
|
def test_get_one_fields_filter(self):
|
|
l7p1 = self.create_l7policy(
|
|
self.listener_id, constants.L7POLICY_ACTION_REJECT,
|
|
name='policy1').get(self.root_tag)
|
|
self.set_lb_status(self.lb_id)
|
|
|
|
l7po = self.get(
|
|
self.L7POLICY_PATH.format(l7policy_id=l7p1.get('id')),
|
|
params={'fields': ['id', 'project_id']}).json.get(self.root_tag)
|
|
self.assertIn(u'id', l7po)
|
|
self.assertIn(u'project_id', l7po)
|
|
self.assertNotIn(u'description', l7po)
|
|
|
|
def test_get_all_filter(self):
|
|
policy1 = self.create_l7policy(
|
|
self.listener_id, constants.L7POLICY_ACTION_REJECT,
|
|
name='policy1').get(self.root_tag)
|
|
self.set_lb_status(self.lb_id)
|
|
self.create_l7policy(
|
|
self.listener_id, constants.L7POLICY_ACTION_REDIRECT_TO_POOL,
|
|
position=2, redirect_pool_id=self.pool_id,
|
|
name='policy2').get(self.root_tag)
|
|
self.set_lb_status(self.lb_id)
|
|
self.create_l7policy(
|
|
self.listener_id, constants.L7POLICY_ACTION_REDIRECT_TO_URL,
|
|
redirect_url='http://localhost/',
|
|
name='policy3').get(self.root_tag)
|
|
self.set_lb_status(self.lb_id)
|
|
|
|
l7pos = self.get(self.L7POLICIES_PATH, params={
|
|
'id': policy1['id']}).json
|
|
self.assertEqual(1, len(l7pos['l7policies']))
|
|
self.assertEqual(policy1['id'],
|
|
l7pos['l7policies'][0]['id'])
|
|
|
|
def test_get_all_tags_filter(self):
|
|
policy1 = self.create_l7policy(
|
|
self.listener_id, constants.L7POLICY_ACTION_REJECT,
|
|
tags=['test_tag1', 'test_tag2']).get(self.root_tag)
|
|
self.set_lb_status(self.lb_id)
|
|
policy2 = self.create_l7policy(
|
|
self.listener_id, constants.L7POLICY_ACTION_REDIRECT_TO_POOL,
|
|
position=2, redirect_pool_id=self.pool_id,
|
|
tags=['test_tag2', 'test_tag3']).get(self.root_tag)
|
|
self.set_lb_status(self.lb_id)
|
|
policy3 = self.create_l7policy(
|
|
self.listener_id, constants.L7POLICY_ACTION_REDIRECT_TO_URL,
|
|
redirect_url='http://localhost/',
|
|
tags=['test_tag4', 'test_tag5']).get(self.root_tag)
|
|
self.set_lb_status(self.lb_id)
|
|
|
|
policies = self.get(
|
|
self.L7POLICIES_PATH,
|
|
params={'tags': 'test_tag2'}
|
|
).json.get(self.root_tag_list)
|
|
self.assertIsInstance(policies, list)
|
|
self.assertEqual(2, len(policies))
|
|
self.assertEqual(
|
|
[policy1.get('id'), policy2.get('id')],
|
|
[policy.get('id') for policy in policies]
|
|
)
|
|
|
|
policies = self.get(
|
|
self.L7POLICIES_PATH,
|
|
params={'tags': ['test_tag2', 'test_tag3']}
|
|
).json.get(self.root_tag_list)
|
|
self.assertIsInstance(policies, list)
|
|
self.assertEqual(1, len(policies))
|
|
self.assertEqual(
|
|
[policy2.get('id')],
|
|
[policy.get('id') for policy in policies]
|
|
)
|
|
|
|
policies = self.get(
|
|
self.L7POLICIES_PATH,
|
|
params={'tags-any': 'test_tag2'}
|
|
).json.get(self.root_tag_list)
|
|
self.assertIsInstance(policies, list)
|
|
self.assertEqual(2, len(policies))
|
|
self.assertEqual(
|
|
[policy1.get('id'), policy2.get('id')],
|
|
[policy.get('id') for policy in policies]
|
|
)
|
|
|
|
policies = self.get(
|
|
self.L7POLICIES_PATH,
|
|
params={'not-tags': 'test_tag2'}
|
|
).json.get(self.root_tag_list)
|
|
self.assertIsInstance(policies, list)
|
|
self.assertEqual(1, len(policies))
|
|
self.assertEqual(
|
|
[policy3.get('id')],
|
|
[policy.get('id') for policy in policies]
|
|
)
|
|
|
|
policies = self.get(
|
|
self.L7POLICIES_PATH,
|
|
params={'not-tags-any': ['test_tag2', 'test_tag4']}
|
|
).json.get(self.root_tag_list)
|
|
self.assertIsInstance(policies, list)
|
|
self.assertEqual(0, len(policies))
|
|
|
|
policies = self.get(
|
|
self.L7POLICIES_PATH,
|
|
params={'tags': 'test_tag2',
|
|
'tags-any': ['test_tag1', 'test_tag3']}
|
|
).json.get(self.root_tag_list)
|
|
self.assertIsInstance(policies, list)
|
|
self.assertEqual(2, len(policies))
|
|
self.assertEqual(
|
|
[policy1.get('id'), policy2.get('id')],
|
|
[policy.get('id') for policy in policies]
|
|
)
|
|
|
|
policies = self.get(
|
|
self.L7POLICIES_PATH,
|
|
params={'tags': 'test_tag2', 'not-tags': 'test_tag2'}
|
|
).json.get(self.root_tag_list)
|
|
self.assertIsInstance(policies, list)
|
|
self.assertEqual(0, len(policies))
|
|
|
|
def test_empty_get_all(self):
|
|
response = self.get(self.L7POLICIES_PATH).json.get(self.root_tag_list)
|
|
self.assertIsInstance(response, list)
|
|
self.assertEqual(0, len(response))
|
|
|
|
def test_create_reject_policy(self):
|
|
api_l7policy = self.create_l7policy(self.listener_id,
|
|
constants.L7POLICY_ACTION_REJECT,
|
|
).get(self.root_tag)
|
|
self.assertEqual(constants.L7POLICY_ACTION_REJECT,
|
|
api_l7policy['action'])
|
|
self.assertEqual(1, api_l7policy['position'])
|
|
self.assertIsNone(api_l7policy['redirect_pool_id'])
|
|
self.assertIsNone(api_l7policy['redirect_url'])
|
|
self.assertTrue(api_l7policy['admin_state_up'])
|
|
self.assert_correct_status(
|
|
lb_id=self.lb_id, listener_id=self.listener_id,
|
|
l7policy_id=api_l7policy.get('id'),
|
|
lb_prov_status=constants.PENDING_UPDATE,
|
|
listener_prov_status=constants.PENDING_UPDATE,
|
|
l7policy_prov_status=constants.PENDING_CREATE,
|
|
l7policy_op_status=constants.OFFLINE)
|
|
|
|
def test_create_policy_authorized(self):
|
|
self.conf = self.useFixture(oslo_fixture.Config(cfg.CONF))
|
|
auth_strategy = self.conf.conf.api_settings.get('auth_strategy')
|
|
self.conf.config(group='api_settings', auth_strategy=constants.TESTING)
|
|
|
|
with mock.patch.object(octavia.common.context.Context, 'project_id',
|
|
self.project_id):
|
|
override_credentials = {
|
|
'service_user_id': None,
|
|
'user_domain_id': None,
|
|
'is_admin_project': True,
|
|
'service_project_domain_id': None,
|
|
'service_project_id': None,
|
|
'roles': ['load-balancer_member'],
|
|
'user_id': None,
|
|
'is_admin': False,
|
|
'service_user_domain_id': None,
|
|
'project_domain_id': None,
|
|
'service_roles': [],
|
|
'project_id': self.project_id}
|
|
with mock.patch(
|
|
"oslo_context.context.RequestContext.to_policy_values",
|
|
return_value=override_credentials):
|
|
api_l7policy = self.create_l7policy(
|
|
self.listener_id,
|
|
constants.L7POLICY_ACTION_REJECT).get(self.root_tag)
|
|
|
|
self.conf.config(group='api_settings', auth_strategy=auth_strategy)
|
|
self.assertEqual(constants.L7POLICY_ACTION_REJECT,
|
|
api_l7policy['action'])
|
|
self.assertEqual(1, api_l7policy['position'])
|
|
self.assertIsNone(api_l7policy['redirect_pool_id'])
|
|
self.assertIsNone(api_l7policy['redirect_url'])
|
|
self.assertTrue(api_l7policy['admin_state_up'])
|
|
self.assert_correct_status(
|
|
lb_id=self.lb_id, listener_id=self.listener_id,
|
|
l7policy_id=api_l7policy.get('id'),
|
|
lb_prov_status=constants.PENDING_UPDATE,
|
|
listener_prov_status=constants.PENDING_UPDATE,
|
|
l7policy_prov_status=constants.PENDING_CREATE,
|
|
l7policy_op_status=constants.OFFLINE)
|
|
|
|
def test_create_policy_not_authorized(self):
|
|
self.conf = self.useFixture(oslo_fixture.Config(cfg.CONF))
|
|
auth_strategy = self.conf.conf.api_settings.get('auth_strategy')
|
|
self.conf.config(group='api_settings', auth_strategy=constants.TESTING)
|
|
|
|
with mock.patch.object(octavia.common.context.Context, 'project_id',
|
|
self.project_id):
|
|
api_l7policy = self.create_l7policy(
|
|
self.listener_id,
|
|
constants.L7POLICY_ACTION_REJECT, status=403)
|
|
|
|
self.conf.config(group='api_settings', auth_strategy=auth_strategy)
|
|
self.assertEqual(self.NOT_AUTHORIZED_BODY, api_l7policy)
|
|
|
|
def test_create_redirect_to_pool(self):
|
|
api_l7policy = self.create_l7policy(
|
|
self.listener_id, constants.L7POLICY_ACTION_REDIRECT_TO_POOL,
|
|
redirect_pool_id=self.pool_id).get(self.root_tag)
|
|
self.assertEqual(constants.L7POLICY_ACTION_REDIRECT_TO_POOL,
|
|
api_l7policy['action'])
|
|
self.assertEqual(1, api_l7policy['position'])
|
|
self.assertEqual(self.pool_id, api_l7policy['redirect_pool_id'])
|
|
self.assertIsNone(api_l7policy['redirect_url'])
|
|
self.assertTrue(api_l7policy['admin_state_up'])
|
|
self.assert_correct_status(
|
|
lb_id=self.lb_id, listener_id=self.listener_id,
|
|
l7policy_id=api_l7policy.get('id'),
|
|
lb_prov_status=constants.PENDING_UPDATE,
|
|
listener_prov_status=constants.PENDING_UPDATE,
|
|
l7policy_prov_status=constants.PENDING_CREATE,
|
|
l7policy_op_status=constants.OFFLINE)
|
|
|
|
def test_create_redirect_to_url(self):
|
|
api_l7policy = self.create_l7policy(
|
|
self.listener_id, constants.L7POLICY_ACTION_REDIRECT_TO_URL,
|
|
redirect_url='http://www.example.com').get(self.root_tag)
|
|
self.assertEqual(constants.L7POLICY_ACTION_REDIRECT_TO_URL,
|
|
api_l7policy['action'])
|
|
self.assertEqual(1, api_l7policy['position'])
|
|
self.assertIsNone(api_l7policy.get('redirect_pool_id'))
|
|
self.assertEqual('http://www.example.com',
|
|
api_l7policy['redirect_url'])
|
|
self.assertTrue(api_l7policy['admin_state_up'])
|
|
self.assert_correct_status(
|
|
lb_id=self.lb_id, listener_id=self.listener_id,
|
|
l7policy_id=api_l7policy.get('id'),
|
|
lb_prov_status=constants.PENDING_UPDATE,
|
|
listener_prov_status=constants.PENDING_UPDATE,
|
|
l7policy_prov_status=constants.PENDING_CREATE,
|
|
l7policy_op_status=constants.OFFLINE)
|
|
|
|
def test_create_with_redirect_http_code(self):
|
|
action_key_values = {
|
|
constants.L7POLICY_ACTION_REDIRECT_PREFIX: {
|
|
'redirect_prefix': 'https://example.com',
|
|
'redirect_http_code': 302},
|
|
constants.L7POLICY_ACTION_REDIRECT_TO_URL: {
|
|
'redirect_url': 'http://www.example.com',
|
|
'redirect_http_code': 301}}
|
|
count = 1
|
|
# First, test with redirect actions
|
|
for action in [constants.L7POLICY_ACTION_REDIRECT_TO_URL,
|
|
constants.L7POLICY_ACTION_REDIRECT_PREFIX]:
|
|
api_l7policy = self.create_l7policy(
|
|
self.listener_id, action,
|
|
**action_key_values[action]).get(self.root_tag)
|
|
self.assertEqual(action, api_l7policy['action'])
|
|
self.assertEqual(count, api_l7policy['position'])
|
|
self.assertIsNone(api_l7policy.get('redirect_pool_id'))
|
|
if api_l7policy.get('redirect_url'):
|
|
self.assertEqual(action_key_values[action]['redirect_url'],
|
|
api_l7policy['redirect_url'])
|
|
elif api_l7policy.get('redirect_prefix'):
|
|
self.assertEqual(action_key_values[action]['redirect_prefix'],
|
|
api_l7policy['redirect_prefix'])
|
|
self.assertEqual(action_key_values[action]['redirect_http_code'],
|
|
api_l7policy['redirect_http_code'])
|
|
self.assert_correct_status(
|
|
lb_id=self.lb_id, listener_id=self.listener_id,
|
|
l7policy_id=api_l7policy.get('id'),
|
|
lb_prov_status=constants.PENDING_UPDATE,
|
|
listener_prov_status=constants.PENDING_UPDATE,
|
|
l7policy_prov_status=constants.PENDING_CREATE,
|
|
l7policy_op_status=constants.OFFLINE)
|
|
self.set_lb_status(self.lb_id)
|
|
count += 1
|
|
|
|
# test with redirect_pool action
|
|
api_l7policy = self.create_l7policy(
|
|
self.listener_id, constants.L7POLICY_ACTION_REDIRECT_TO_POOL,
|
|
redirect_pool_id=self.pool_id,
|
|
redirect_http_code=308).get(self.root_tag)
|
|
self.assertEqual(constants.L7POLICY_ACTION_REDIRECT_TO_POOL,
|
|
api_l7policy['action'])
|
|
self.assertEqual(self.pool_id, api_l7policy.get('redirect_pool_id'))
|
|
self.assertIsNone(api_l7policy.get('redirect_url'))
|
|
self.assertIsNone(api_l7policy.get('redirect_prefix'))
|
|
self.assertIsNone(api_l7policy.get('redirect_http_code'))
|
|
self.assert_correct_status(
|
|
lb_id=self.lb_id, listener_id=self.listener_id,
|
|
l7policy_id=api_l7policy.get('id'),
|
|
lb_prov_status=constants.PENDING_UPDATE,
|
|
listener_prov_status=constants.PENDING_UPDATE,
|
|
l7policy_prov_status=constants.PENDING_CREATE,
|
|
l7policy_op_status=constants.OFFLINE)
|
|
|
|
def test_bad_create(self):
|
|
l7policy = {'listener_id': self.listener_id,
|
|
'name': 'test1'}
|
|
self.post(self.L7POLICIES_PATH, self._build_body(l7policy), status=400)
|
|
|
|
def test_bad_create_redirect_to_pool(self):
|
|
l7policy = {
|
|
'action': constants.L7POLICY_ACTION_REDIRECT_TO_POOL,
|
|
'listener_id': self.listener_id,
|
|
'redirect_pool_id': uuidutils.generate_uuid()}
|
|
self.post(self.L7POLICIES_PATH, self._build_body(l7policy), status=404)
|
|
|
|
def test_bad_create_redirect_to_url(self):
|
|
l7policy = {'listener_id': self.listener_id,
|
|
'action': constants.L7POLICY_ACTION_REDIRECT_TO_URL,
|
|
'redirect_url': 'bad url'}
|
|
self.post(self.L7POLICIES_PATH, self._build_body(l7policy), status=400)
|
|
|
|
def test_bad_create_with_redirect_http_code(self):
|
|
for test_code in [1, '', 'HTTPCODE']:
|
|
l7policy = {'listener_id': self.listener_id,
|
|
'action': constants.L7POLICY_ACTION_REDIRECT_TO_URL,
|
|
'redirect_url': 'http://www.example.com',
|
|
'redirect_http_code': test_code}
|
|
self.post(self.L7POLICIES_PATH, self._build_body(l7policy),
|
|
status=400)
|
|
|
|
@mock.patch('octavia.api.drivers.utils.call_provider')
|
|
def test_create_with_bad_provider(self, mock_provider):
|
|
mock_provider.side_effect = exceptions.ProviderDriverError(
|
|
prov='bad_driver', user_msg='broken')
|
|
l7policy = {'listener_id': self.listener_id,
|
|
'action': constants.L7POLICY_ACTION_REDIRECT_TO_URL,
|
|
'redirect_url': 'http://a.com'}
|
|
response = self.post(self.L7POLICIES_PATH, self._build_body(l7policy),
|
|
status=500)
|
|
self.assertIn('Provider \'bad_driver\' reports error: broken',
|
|
response.json.get('faultstring'))
|
|
|
|
def test_create_over_quota(self):
|
|
self.start_quota_mock(data_models.L7Policy)
|
|
l7policy = {'listener_id': self.listener_id,
|
|
'action': constants.L7POLICY_ACTION_REDIRECT_TO_URL,
|
|
'redirect_url': 'http://a.com'}
|
|
self.post(self.L7POLICIES_PATH, self._build_body(l7policy), status=403)
|
|
|
|
def test_update(self):
|
|
api_l7policy = self.create_l7policy(self.listener_id,
|
|
constants.L7POLICY_ACTION_REJECT,
|
|
tags=['old_tag']
|
|
).get(self.root_tag)
|
|
self.set_lb_status(self.lb_id)
|
|
new_l7policy = {
|
|
'action': constants.L7POLICY_ACTION_REDIRECT_TO_URL,
|
|
'redirect_url': 'http://www.example.com',
|
|
'tags': ['new_tag']}
|
|
response = self.put(self.L7POLICY_PATH.format(
|
|
l7policy_id=api_l7policy.get('id')),
|
|
self._build_body(new_l7policy)).json.get(self.root_tag)
|
|
self.assertEqual(constants.L7POLICY_ACTION_REDIRECT_TO_URL,
|
|
response.get('action'))
|
|
self.assertEqual(['new_tag'], response['tags'])
|
|
self.assert_correct_status(
|
|
lb_id=self.lb_id, listener_id=self.listener_id,
|
|
l7policy_id=api_l7policy.get('id'),
|
|
lb_prov_status=constants.PENDING_UPDATE,
|
|
listener_prov_status=constants.PENDING_UPDATE,
|
|
l7policy_prov_status=constants.PENDING_UPDATE)
|
|
|
|
def test_update_authorized(self):
|
|
api_l7policy = self.create_l7policy(self.listener_id,
|
|
constants.L7POLICY_ACTION_REJECT,
|
|
).get(self.root_tag)
|
|
self.set_lb_status(self.lb_id)
|
|
new_l7policy = {
|
|
'action': constants.L7POLICY_ACTION_REDIRECT_TO_URL,
|
|
'redirect_url': 'http://www.example.com'}
|
|
|
|
self.conf = self.useFixture(oslo_fixture.Config(cfg.CONF))
|
|
auth_strategy = self.conf.conf.api_settings.get('auth_strategy')
|
|
self.conf.config(group='api_settings', auth_strategy=constants.TESTING)
|
|
with mock.patch.object(octavia.common.context.Context, 'project_id',
|
|
self.project_id):
|
|
override_credentials = {
|
|
'service_user_id': None,
|
|
'user_domain_id': None,
|
|
'is_admin_project': True,
|
|
'service_project_domain_id': None,
|
|
'service_project_id': None,
|
|
'roles': ['load-balancer_member'],
|
|
'user_id': None,
|
|
'is_admin': False,
|
|
'service_user_domain_id': None,
|
|
'project_domain_id': None,
|
|
'service_roles': [],
|
|
'project_id': self.project_id}
|
|
with mock.patch(
|
|
"oslo_context.context.RequestContext.to_policy_values",
|
|
return_value=override_credentials):
|
|
response = self.put(self.L7POLICY_PATH.format(
|
|
l7policy_id=api_l7policy.get('id')),
|
|
self._build_body(new_l7policy)).json.get(self.root_tag)
|
|
|
|
self.conf.config(group='api_settings', auth_strategy=auth_strategy)
|
|
self.assertEqual(constants.L7POLICY_ACTION_REDIRECT_TO_URL,
|
|
response.get('action'))
|
|
self.assert_correct_status(
|
|
lb_id=self.lb_id, listener_id=self.listener_id,
|
|
l7policy_id=api_l7policy.get('id'),
|
|
lb_prov_status=constants.PENDING_UPDATE,
|
|
listener_prov_status=constants.PENDING_UPDATE,
|
|
l7policy_prov_status=constants.PENDING_UPDATE)
|
|
|
|
def test_update_not_authorized(self):
|
|
api_l7policy = self.create_l7policy(self.listener_id,
|
|
constants.L7POLICY_ACTION_REJECT,
|
|
).get(self.root_tag)
|
|
self.set_lb_status(self.lb_id)
|
|
new_l7policy = {
|
|
'action': constants.L7POLICY_ACTION_REDIRECT_TO_URL,
|
|
'redirect_url': 'http://www.example.com'}
|
|
|
|
self.conf = self.useFixture(oslo_fixture.Config(cfg.CONF))
|
|
auth_strategy = self.conf.conf.api_settings.get('auth_strategy')
|
|
self.conf.config(group='api_settings', auth_strategy=constants.TESTING)
|
|
with mock.patch.object(octavia.common.context.Context, 'project_id',
|
|
self.project_id):
|
|
response = self.put(self.L7POLICY_PATH.format(
|
|
l7policy_id=api_l7policy.get('id')),
|
|
self._build_body(new_l7policy), status=403)
|
|
|
|
self.conf.config(group='api_settings', auth_strategy=auth_strategy)
|
|
self.assertEqual(self.NOT_AUTHORIZED_BODY, response.json)
|
|
self.assert_correct_status(
|
|
lb_id=self.lb_id, listener_id=self.listener_id,
|
|
l7policy_id=api_l7policy.get('id'),
|
|
lb_prov_status=constants.ACTIVE,
|
|
listener_prov_status=constants.ACTIVE,
|
|
l7policy_prov_status=constants.ACTIVE)
|
|
|
|
def test_bad_update(self):
|
|
api_l7policy = self.create_l7policy(self.listener_id,
|
|
constants.L7POLICY_ACTION_REJECT,
|
|
).get(self.root_tag)
|
|
new_l7policy = {'listener_id': self.listener_id,
|
|
'action': 'bad action'}
|
|
self.put(self.L7POLICY_PATH.format(
|
|
l7policy_id=api_l7policy.get('id')),
|
|
self._build_body(new_l7policy), status=400)
|
|
|
|
def test_bad_update_redirect_to_pool(self):
|
|
api_l7policy = self.create_l7policy(self.listener_id,
|
|
constants.L7POLICY_ACTION_REJECT,
|
|
).get(self.root_tag)
|
|
new_l7policy = {
|
|
'listener_id': self.listener_id,
|
|
'action': constants.L7POLICY_ACTION_REDIRECT_TO_POOL,
|
|
'redirect_pool_id': uuidutils.generate_uuid()}
|
|
self.put(self.L7POLICY_PATH.format(
|
|
l7policy_id=api_l7policy.get('id')),
|
|
self._build_body(new_l7policy), status=400)
|
|
|
|
def test_bad_update_redirect_to_url(self):
|
|
api_l7policy = self.create_l7policy(self.listener_id,
|
|
constants.L7POLICY_ACTION_REJECT,
|
|
).get(self.root_tag)
|
|
new_l7policy = {
|
|
'listener_id': self.listener_id,
|
|
'action': constants.L7POLICY_ACTION_REDIRECT_TO_URL,
|
|
'redirect_url': 'bad url'}
|
|
self.put(self.L7POLICY_PATH.format(
|
|
l7policy_id=api_l7policy.get('id')),
|
|
self._build_body(new_l7policy), status=400)
|
|
|
|
@mock.patch('octavia.api.drivers.utils.call_provider')
|
|
def test_update_with_bad_provider(self, mock_provider):
|
|
api_l7policy = self.create_l7policy(self.listener_id,
|
|
constants.L7POLICY_ACTION_REJECT,
|
|
).get(self.root_tag)
|
|
self.set_lb_status(self.lb_id)
|
|
new_l7policy = {
|
|
'action': constants.L7POLICY_ACTION_REDIRECT_TO_URL,
|
|
'redirect_url': 'http://www.example.com'}
|
|
mock_provider.side_effect = exceptions.ProviderDriverError(
|
|
prov='bad_driver', user_msg='broken')
|
|
response = self.put(self.L7POLICY_PATH.format(
|
|
l7policy_id=api_l7policy.get('id')),
|
|
self._build_body(new_l7policy), status=500)
|
|
self.assertIn('Provider \'bad_driver\' reports error: broken',
|
|
response.json.get('faultstring'))
|
|
|
|
def test_update_redirect_to_pool_bad_pool_id(self):
|
|
api_l7policy = self.create_l7policy(self.listener_id,
|
|
constants.L7POLICY_ACTION_REJECT,
|
|
).get(self.root_tag)
|
|
self.set_lb_status(self.lb_id)
|
|
new_l7policy = {'redirect_pool_id': uuidutils.generate_uuid()}
|
|
self.put(self.L7POLICY_PATH.format(l7policy_id=api_l7policy.get('id')),
|
|
self._build_body(new_l7policy), status=404)
|
|
|
|
def test_update_redirect_to_pool_minimal(self):
|
|
api_l7policy = self.create_l7policy(self.listener_id,
|
|
constants.L7POLICY_ACTION_REJECT
|
|
).get(self.root_tag)
|
|
self.set_lb_status(self.lb_id)
|
|
new_l7policy = {'redirect_pool_id': self.pool_id}
|
|
self.put(self.L7POLICY_PATH.format(l7policy_id=api_l7policy.get('id')),
|
|
self._build_body(new_l7policy))
|
|
|
|
def test_update_redirect_to_url_bad_url(self):
|
|
api_l7policy = self.create_l7policy(self.listener_id,
|
|
constants.L7POLICY_ACTION_REJECT,
|
|
).get(self.root_tag)
|
|
self.set_lb_status(self.lb_id)
|
|
new_l7policy = {'listener_id': self.listener_id,
|
|
'redirect_url': 'bad-url'}
|
|
self.put(self.L7POLICY_PATH.format(l7policy_id=api_l7policy.get('id')),
|
|
self._build_body(new_l7policy), status=400)
|
|
|
|
def test_update_redirect_to_url_minimal(self):
|
|
api_l7policy = self.create_l7policy(self.listener_id,
|
|
constants.L7POLICY_ACTION_REJECT,
|
|
).get(self.root_tag)
|
|
self.set_lb_status(self.lb_id)
|
|
new_l7policy = {'redirect_url': 'http://www.example.com/'}
|
|
self.put(self.L7POLICY_PATH.format(l7policy_id=api_l7policy.get('id')),
|
|
self._build_body(new_l7policy))
|
|
|
|
def test_update_with_redirect_http_code(self):
|
|
# test from non exist
|
|
api_l7policy = self.create_l7policy(self.listener_id,
|
|
constants.L7POLICY_ACTION_REJECT,
|
|
).get(self.root_tag)
|
|
self.set_lb_status(self.lb_id)
|
|
new_l7policy = {
|
|
'action': constants.L7POLICY_ACTION_REDIRECT_TO_URL,
|
|
'redirect_url': 'http://www.example.com',
|
|
'redirect_http_code': 308}
|
|
response = self.put(self.L7POLICY_PATH.format(
|
|
l7policy_id=api_l7policy.get('id')),
|
|
self._build_body(new_l7policy)).json.get(self.root_tag)
|
|
self.assertEqual(constants.L7POLICY_ACTION_REDIRECT_TO_URL,
|
|
response.get('action'))
|
|
self.assertEqual(308, response.get('redirect_http_code'))
|
|
self.set_lb_status(self.lb_id)
|
|
|
|
# test from exist to new
|
|
api_l7policy = self.create_l7policy(
|
|
self.listener_id, constants.L7POLICY_ACTION_REDIRECT_TO_URL,
|
|
redirect_url='http://www.example.com',
|
|
redirect_http_code=302).get(self.root_tag)
|
|
self.set_lb_status(self.lb_id)
|
|
new_l7policy = {
|
|
'redirect_http_code': 308}
|
|
response = self.put(self.L7POLICY_PATH.format(
|
|
l7policy_id=api_l7policy.get('id')),
|
|
self._build_body(new_l7policy)).json.get(self.root_tag)
|
|
self.assertEqual(constants.L7POLICY_ACTION_REDIRECT_TO_URL,
|
|
response.get('action'))
|
|
self.assertEqual(308, response.get('redirect_http_code'))
|
|
self.set_lb_status(self.lb_id)
|
|
|
|
# test from exist to null
|
|
new_l7policy = {
|
|
'redirect_http_code': None}
|
|
response = self.put(self.L7POLICY_PATH.format(
|
|
l7policy_id=api_l7policy.get('id')),
|
|
self._build_body(new_l7policy)).json.get(self.root_tag)
|
|
self.assertIsNone(response.get('redirect_http_code'))
|
|
|
|
def test_bad_update_with_redirect_http_code(self):
|
|
api_l7policy = self.create_l7policy(self.listener_id,
|
|
constants.L7POLICY_ACTION_REJECT,
|
|
).get(self.root_tag)
|
|
self.set_lb_status(self.lb_id)
|
|
new_l7policy = {
|
|
'action': constants.L7POLICY_ACTION_REDIRECT_TO_URL,
|
|
'redirect_url': 'http://www.example.com',
|
|
'redirect_http_code': ''}
|
|
self.put(self.L7POLICY_PATH.format(
|
|
l7policy_id=api_l7policy.get('id')),
|
|
self._build_body(new_l7policy), status=400).json.get(self.root_tag)
|
|
|
|
def test_delete(self):
|
|
api_l7policy = self.create_l7policy(
|
|
self.listener_id,
|
|
constants.L7POLICY_ACTION_REJECT).get(self.root_tag)
|
|
self.set_lb_status(self.lb_id)
|
|
# Set status to ACTIVE/ONLINE because set_lb_status did it in the db
|
|
api_l7policy['provisioning_status'] = constants.ACTIVE
|
|
api_l7policy['operating_status'] = constants.ONLINE
|
|
api_l7policy.pop('updated_at')
|
|
|
|
response = self.get(self.L7POLICY_PATH.format(
|
|
l7policy_id=api_l7policy.get('id'))).json.get(self.root_tag)
|
|
response.pop('updated_at')
|
|
self.assertEqual(api_l7policy, response)
|
|
|
|
self.delete(self.L7POLICY_PATH.format(
|
|
l7policy_id=api_l7policy.get('id')))
|
|
self.assert_correct_status(
|
|
lb_id=self.lb_id, listener_id=self.listener_id,
|
|
l7policy_id=api_l7policy.get('id'),
|
|
lb_prov_status=constants.PENDING_UPDATE,
|
|
listener_prov_status=constants.PENDING_UPDATE,
|
|
l7policy_prov_status=constants.PENDING_DELETE)
|
|
|
|
def test_delete_authorized(self):
|
|
api_l7policy = self.create_l7policy(
|
|
self.listener_id,
|
|
constants.L7POLICY_ACTION_REJECT).get(self.root_tag)
|
|
self.set_lb_status(self.lb_id)
|
|
# Set status to ACTIVE/ONLINE because set_lb_status did it in the db
|
|
api_l7policy['provisioning_status'] = constants.ACTIVE
|
|
api_l7policy['operating_status'] = constants.ONLINE
|
|
api_l7policy.pop('updated_at')
|
|
|
|
response = self.get(self.L7POLICY_PATH.format(
|
|
l7policy_id=api_l7policy.get('id'))).json.get(self.root_tag)
|
|
response.pop('updated_at')
|
|
self.assertEqual(api_l7policy, response)
|
|
|
|
self.conf = self.useFixture(oslo_fixture.Config(cfg.CONF))
|
|
auth_strategy = self.conf.conf.api_settings.get('auth_strategy')
|
|
self.conf.config(group='api_settings', auth_strategy=constants.TESTING)
|
|
with mock.patch.object(octavia.common.context.Context, 'project_id',
|
|
self.project_id):
|
|
override_credentials = {
|
|
'service_user_id': None,
|
|
'user_domain_id': None,
|
|
'is_admin_project': True,
|
|
'service_project_domain_id': None,
|
|
'service_project_id': None,
|
|
'roles': ['load-balancer_member'],
|
|
'user_id': None,
|
|
'is_admin': False,
|
|
'service_user_domain_id': None,
|
|
'project_domain_id': None,
|
|
'service_roles': [],
|
|
'project_id': self.project_id}
|
|
with mock.patch(
|
|
"oslo_context.context.RequestContext.to_policy_values",
|
|
return_value=override_credentials):
|
|
|
|
self.delete(self.L7POLICY_PATH.format(
|
|
l7policy_id=api_l7policy.get('id')))
|
|
|
|
self.conf.config(group='api_settings', auth_strategy=auth_strategy)
|
|
self.assert_correct_status(
|
|
lb_id=self.lb_id, listener_id=self.listener_id,
|
|
l7policy_id=api_l7policy.get('id'),
|
|
lb_prov_status=constants.PENDING_UPDATE,
|
|
listener_prov_status=constants.PENDING_UPDATE,
|
|
l7policy_prov_status=constants.PENDING_DELETE)
|
|
|
|
def test_delete_not_authorized(self):
|
|
api_l7policy = self.create_l7policy(
|
|
self.listener_id,
|
|
constants.L7POLICY_ACTION_REJECT).get(self.root_tag)
|
|
self.set_lb_status(self.lb_id)
|
|
# Set status to ACTIVE/ONLINE because set_lb_status did it in the db
|
|
api_l7policy['provisioning_status'] = constants.ACTIVE
|
|
api_l7policy['operating_status'] = constants.ONLINE
|
|
api_l7policy.pop('updated_at')
|
|
|
|
response = self.get(self.L7POLICY_PATH.format(
|
|
l7policy_id=api_l7policy.get('id'))).json.get(self.root_tag)
|
|
response.pop('updated_at')
|
|
self.assertEqual(api_l7policy, response)
|
|
|
|
self.conf = self.useFixture(oslo_fixture.Config(cfg.CONF))
|
|
auth_strategy = self.conf.conf.api_settings.get('auth_strategy')
|
|
self.conf.config(group='api_settings', auth_strategy=constants.TESTING)
|
|
with mock.patch.object(octavia.common.context.Context, 'project_id',
|
|
uuidutils.generate_uuid()):
|
|
self.delete(self.L7POLICY_PATH.format(
|
|
l7policy_id=api_l7policy.get('id')), status=403)
|
|
|
|
self.conf.config(group='api_settings', auth_strategy=auth_strategy)
|
|
self.assert_correct_status(
|
|
lb_id=self.lb_id, listener_id=self.listener_id,
|
|
l7policy_id=api_l7policy.get('id'),
|
|
lb_prov_status=constants.ACTIVE,
|
|
listener_prov_status=constants.ACTIVE,
|
|
l7policy_prov_status=constants.ACTIVE)
|
|
|
|
def test_bad_delete(self):
|
|
self.delete(self.L7POLICY_PATH.format(
|
|
l7policy_id=uuidutils.generate_uuid()), status=404)
|
|
|
|
@mock.patch('octavia.api.drivers.utils.call_provider')
|
|
def test_delete_with_bad_provider(self, mock_provider):
|
|
api_l7policy = self.create_l7policy(self.listener_id,
|
|
constants.L7POLICY_ACTION_REJECT,
|
|
).get(self.root_tag)
|
|
self.set_lb_status(self.lb_id)
|
|
# Set status to ACTIVE/ONLINE because set_lb_status did it in the db
|
|
api_l7policy['provisioning_status'] = constants.ACTIVE
|
|
api_l7policy['operating_status'] = constants.ONLINE
|
|
response = self.get(self.L7POLICY_PATH.format(
|
|
l7policy_id=api_l7policy.get('id'))).json.get(self.root_tag)
|
|
|
|
self.assertIsNone(api_l7policy.pop('updated_at'))
|
|
self.assertIsNotNone(response.pop('updated_at'))
|
|
self.assertEqual(api_l7policy, response)
|
|
mock_provider.side_effect = exceptions.ProviderDriverError(
|
|
prov='bad_driver', user_msg='broken')
|
|
self.delete(self.L7POLICY_PATH.format(
|
|
l7policy_id=api_l7policy.get('id')), status=500)
|
|
|
|
def test_create_when_lb_pending_update(self):
|
|
self.create_l7policy(self.listener_id,
|
|
constants.L7POLICY_ACTION_REJECT,
|
|
)
|
|
self.set_lb_status(self.lb_id)
|
|
self.put(self.LB_PATH.format(lb_id=self.lb_id),
|
|
body={'loadbalancer': {'name': 'test_name_change'}})
|
|
new_l7policy = {
|
|
'listener_id': self.listener_id,
|
|
'action': constants.L7POLICY_ACTION_REDIRECT_TO_URL,
|
|
'redirect_url': 'http://www.example.com'}
|
|
self.post(self.L7POLICIES_PATH, body=self._build_body(new_l7policy),
|
|
status=409)
|
|
|
|
def test_update_when_lb_pending_update(self):
|
|
l7policy = self.create_l7policy(self.listener_id,
|
|
constants.L7POLICY_ACTION_REJECT,
|
|
).get(self.root_tag)
|
|
self.set_lb_status(self.lb_id)
|
|
self.put(self.LB_PATH.format(lb_id=self.lb_id),
|
|
body={'loadbalancer': {'name': 'test_name_change'}})
|
|
new_l7policy = {'action': constants.L7POLICY_ACTION_REDIRECT_TO_URL,
|
|
'redirect_url': 'http://www.example.com'}
|
|
self.put(self.L7POLICY_PATH.format(
|
|
l7policy_id=l7policy.get('id')),
|
|
body=self._build_body(new_l7policy), status=409)
|
|
|
|
def test_delete_when_lb_pending_update(self):
|
|
l7policy = self.create_l7policy(self.listener_id,
|
|
constants.L7POLICY_ACTION_REJECT,
|
|
).get(self.root_tag)
|
|
self.set_lb_status(self.lb_id)
|
|
self.put(self.LB_PATH.format(lb_id=self.lb_id),
|
|
body={'loadbalancer': {'name': 'test_name_change'}})
|
|
self.delete(self.L7POLICY_PATH.format(
|
|
l7policy_id=l7policy.get('id')),
|
|
status=409)
|
|
|
|
def test_create_when_lb_pending_delete(self):
|
|
self.delete(self.LB_PATH.format(lb_id=self.lb_id),
|
|
params={'cascade': "true"})
|
|
new_l7policy = {
|
|
'listener_id': self.listener_id,
|
|
'action': constants.L7POLICY_ACTION_REDIRECT_TO_URL,
|
|
'redirect_url': 'http://www.example.com'}
|
|
self.post(self.L7POLICIES_PATH, body=self._build_body(new_l7policy),
|
|
status=409)
|
|
|
|
def test_update_when_lb_pending_delete(self):
|
|
l7policy = self.create_l7policy(self.listener_id,
|
|
constants.L7POLICY_ACTION_REJECT,
|
|
).get(self.root_tag)
|
|
self.set_lb_status(self.lb_id)
|
|
self.delete(self.LB_PATH.format(lb_id=self.lb_id),
|
|
params={'cascade': "true"})
|
|
new_l7policy = {
|
|
'action': constants.L7POLICY_ACTION_REDIRECT_TO_URL,
|
|
'redirect_url': 'http://www.example.com'}
|
|
self.put(self.L7POLICY_PATH.format(
|
|
l7policy_id=l7policy.get('id')),
|
|
body=self._build_body(new_l7policy), status=409)
|
|
|
|
def test_delete_when_lb_pending_delete(self):
|
|
l7policy = self.create_l7policy(self.listener_id,
|
|
constants.L7POLICY_ACTION_REJECT,
|
|
).get(self.root_tag)
|
|
self.set_lb_status(self.lb_id)
|
|
self.delete(self.LB_PATH.format(lb_id=self.lb_id),
|
|
params={'cascade': "true"})
|
|
self.delete(self.L7POLICY_PATH.format(
|
|
l7policy_id=l7policy.get('id')),
|
|
status=409)
|
|
|
|
def test_update_already_deleted(self):
|
|
l7policy = self.create_l7policy(self.listener_id,
|
|
constants.L7POLICY_ACTION_REJECT,
|
|
).get(self.root_tag)
|
|
# This updates the child objects
|
|
self.set_lb_status(self.lb_id, status=constants.DELETED)
|
|
new_l7policy = {
|
|
'action': constants.L7POLICY_ACTION_REDIRECT_TO_URL,
|
|
'redirect_url': 'http://www.example.com'}
|
|
self.put(self.L7POLICY_PATH.format(l7policy_id=l7policy.get('id')),
|
|
body=self._build_body(new_l7policy), status=404)
|
|
|
|
def test_delete_already_deleted(self):
|
|
l7policy = self.create_l7policy(self.listener_id,
|
|
constants.L7POLICY_ACTION_REJECT,
|
|
).get(self.root_tag)
|
|
# This updates the child objects
|
|
self.set_lb_status(self.lb_id, status=constants.DELETED)
|
|
self.delete(self.L7POLICY_PATH.format(
|
|
l7policy_id=l7policy.get('id')),
|
|
status=404)
|
|
|
|
@mock.patch('octavia.common.tls_utils.cert_parser.load_certificates_data')
|
|
def test_listener_pool_protocol_map_post(self, mock_cert_data):
|
|
cert = data_models.TLSContainer(certificate='cert')
|
|
mock_cert_data.return_value = {'sni_certs': [cert]}
|
|
valid_map = constants.VALID_LISTENER_POOL_PROTOCOL_MAP
|
|
port = 1
|
|
l7policy = {'action': constants.L7POLICY_ACTION_REDIRECT_TO_POOL}
|
|
for listener_proto in valid_map:
|
|
for pool_proto in valid_map[listener_proto]:
|
|
port = port + 1
|
|
opts = {}
|
|
if listener_proto == constants.PROTOCOL_TERMINATED_HTTPS:
|
|
opts['sni_container_refs'] = [uuidutils.generate_uuid()]
|
|
listener = self.create_listener(
|
|
listener_proto, port, self.lb_id, **opts).get('listener')
|
|
self.set_object_status(self.lb_repo, self.lb_id)
|
|
pool = self.create_pool(
|
|
self.lb_id, pool_proto,
|
|
constants.LB_ALGORITHM_ROUND_ROBIN).get('pool')
|
|
|
|
l7policy['listener_id'] = listener.get('id')
|
|
l7policy['redirect_pool_id'] = pool.get('id')
|
|
self.set_object_status(self.lb_repo, self.lb_id)
|
|
self.post(self.L7POLICIES_PATH,
|
|
self._build_body(l7policy), status=201)
|
|
self.set_object_status(self.lb_repo, self.lb_id)
|
|
|
|
invalid_map = c_const.INVALID_LISTENER_POOL_PROTOCOL_MAP
|
|
port = 100
|
|
for listener_proto in invalid_map:
|
|
opts = {}
|
|
if listener_proto == constants.PROTOCOL_TERMINATED_HTTPS:
|
|
opts['sni_container_refs'] = [uuidutils.generate_uuid()]
|
|
listener = self.create_listener(
|
|
listener_proto, port, self.lb_id, **opts).get('listener')
|
|
self.set_object_status(self.lb_repo, self.lb_id)
|
|
port = port + 1
|
|
for pool_proto in invalid_map[listener_proto]:
|
|
pool = self.create_pool(
|
|
self.lb_id, pool_proto,
|
|
constants.LB_ALGORITHM_ROUND_ROBIN).get('pool')
|
|
self.set_object_status(self.lb_repo, self.lb_id)
|
|
|
|
l7policy['listener_id'] = listener.get('id')
|
|
l7policy['redirect_pool_id'] = pool.get('id')
|
|
expect_error_msg = ("Validation failure: The pool protocol "
|
|
"'%s' is invalid while the listener "
|
|
"protocol is '%s'.") % (pool_proto,
|
|
listener_proto)
|
|
res = self.post(self.L7POLICIES_PATH,
|
|
self._build_body(l7policy), status=400)
|
|
self.assertEqual(expect_error_msg, res.json['faultstring'])
|
|
self.assert_correct_status(lb_id=self.lb_id)
|
|
|
|
@mock.patch('octavia.common.tls_utils.cert_parser.load_certificates_data')
|
|
def test_listener_pool_protocol_map_put(self, mock_cert_data):
|
|
cert = data_models.TLSContainer(certificate='cert')
|
|
mock_cert_data.return_value = {'sni_certs': [cert]}
|
|
valid_map = constants.VALID_LISTENER_POOL_PROTOCOL_MAP
|
|
port = 1
|
|
new_l7policy = {'action': constants.L7POLICY_ACTION_REDIRECT_TO_POOL}
|
|
for listener_proto in valid_map:
|
|
for pool_proto in valid_map[listener_proto]:
|
|
port = port + 1
|
|
opts = {}
|
|
if listener_proto == constants.PROTOCOL_TERMINATED_HTTPS:
|
|
opts['sni_container_refs'] = [uuidutils.generate_uuid()]
|
|
listener = self.create_listener(
|
|
listener_proto, port, self.lb_id, **opts).get('listener')
|
|
self.set_object_status(self.lb_repo, self.lb_id)
|
|
pool = self.create_pool(
|
|
self.lb_id, pool_proto,
|
|
constants.LB_ALGORITHM_ROUND_ROBIN).get('pool')
|
|
self.set_object_status(self.lb_repo, self.lb_id)
|
|
l7policy = self.create_l7policy(
|
|
listener.get('id'),
|
|
constants.L7POLICY_ACTION_REJECT).get(self.root_tag)
|
|
self.set_object_status(self.lb_repo, self.lb_id)
|
|
new_l7policy['redirect_pool_id'] = pool.get('id')
|
|
|
|
self.put(
|
|
self.L7POLICY_PATH.format(l7policy_id=l7policy.get('id')),
|
|
self._build_body(new_l7policy), status=200)
|
|
self.set_object_status(self.lb_repo, self.lb_id)
|
|
|
|
invalid_map = c_const.INVALID_LISTENER_POOL_PROTOCOL_MAP
|
|
port = 100
|
|
for listener_proto in invalid_map:
|
|
opts = {}
|
|
if listener_proto == constants.PROTOCOL_TERMINATED_HTTPS:
|
|
opts['sni_container_refs'] = [uuidutils.generate_uuid()]
|
|
listener = self.create_listener(
|
|
listener_proto, port, self.lb_id, **opts).get('listener')
|
|
self.set_object_status(self.lb_repo, self.lb_id)
|
|
port = port + 1
|
|
for pool_proto in invalid_map[listener_proto]:
|
|
pool = self.create_pool(
|
|
self.lb_id, pool_proto,
|
|
constants.LB_ALGORITHM_ROUND_ROBIN).get('pool')
|
|
self.set_object_status(self.lb_repo, self.lb_id)
|
|
l7policy = self.create_l7policy(
|
|
listener.get('id'),
|
|
constants.L7POLICY_ACTION_REJECT).get(self.root_tag)
|
|
self.set_object_status(self.lb_repo, self.lb_id)
|
|
new_l7policy['redirect_pool_id'] = pool.get('id')
|
|
expect_error_msg = ("Validation failure: The pool protocol "
|
|
"'%s' is invalid while the listener "
|
|
"protocol is '%s'.") % (pool_proto,
|
|
listener_proto)
|
|
res = self.put(self.L7POLICY_PATH.format(
|
|
l7policy_id=l7policy.get('id')),
|
|
self._build_body(new_l7policy), status=400)
|
|
self.assertEqual(expect_error_msg, res.json['faultstring'])
|
|
self.assert_correct_status(lb_id=self.lb_id)
|