17d108e146
Current tacker client requires us to mention ssl_ca_cert and set it to None if we don't want to use ssl cert. This patch along with another patch on the tacker server side will make ssl_ca_cert a truly optional config. And, only the correct ssl_ca_cert will be able to authenticate. Tacker Server changes: https://review.openstack.org/#/c/546580/ Change-Id: Ic87fe3382e100183c685c3b34768a5a5de889982
109 lines
4.4 KiB
Python
109 lines
4.4 KiB
Python
# Copyright 2016 OpenStack Foundation.
|
|
# All Rights Reserved.
|
|
#
|
|
# Licensed under the Apache License, Version 2.0 (the "License"); you may
|
|
# not use this file except in compliance with the License. You may obtain
|
|
# a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
|
|
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
|
|
# License for the specific language governing permissions and limitations
|
|
# under the License.
|
|
|
|
|
|
from mock import sentinel
|
|
import testtools
|
|
|
|
from tackerclient.common import exceptions
|
|
from tackerclient.tacker.v1_0.nfvo import vim_utils
|
|
|
|
|
|
class TestVIMUtils(testtools.TestCase):
|
|
|
|
def test_args2body_vim(self):
|
|
config_param = {'project_name': sentinel.prj_name,
|
|
'username': sentinel.usrname1,
|
|
'password': sentinel.password1,
|
|
'project_domain_name': sentinel.prj_domain_name1,
|
|
'user_domain_name': sentinel.user_domain.name,
|
|
'cert_verify': 'True',
|
|
'type': 'openstack'}
|
|
vim = {}
|
|
auth_cred = config_param.copy()
|
|
auth_cred.pop('project_name')
|
|
auth_cred.pop('project_domain_name')
|
|
auth_cred.pop('type')
|
|
expected_vim = {'auth_cred': auth_cred,
|
|
'vim_project':
|
|
{'name': sentinel.prj_name,
|
|
'project_domain_name': sentinel.prj_domain_name1},
|
|
'type': 'openstack'}
|
|
vim_utils.args2body_vim(config_param.copy(), vim)
|
|
self.assertEqual(expected_vim, vim)
|
|
|
|
def test_args2body_kubernetes_vim(self):
|
|
config_param = {'username': sentinel.usrname1,
|
|
'password': sentinel.password1,
|
|
'ssl_ca_cert': 'abcxyz',
|
|
'project_name': sentinel.prj_name,
|
|
'type': 'kubernetes'}
|
|
vim = {}
|
|
auth_cred = config_param.copy()
|
|
auth_cred.pop('project_name')
|
|
auth_cred.pop('type')
|
|
expected_vim = {'auth_cred': auth_cred,
|
|
'vim_project':
|
|
{'name': sentinel.prj_name},
|
|
'type': 'kubernetes'}
|
|
vim_utils.args2body_vim(config_param.copy(), vim)
|
|
self.assertEqual(expected_vim, vim)
|
|
|
|
def test_args2body_kubernetes_vim_bearer(self):
|
|
config_param = {'bearer_token': sentinel.bearer_token,
|
|
'ssl_ca_cert': "None",
|
|
'project_name': sentinel.prj_name,
|
|
'type': 'kubernetes'}
|
|
vim = {}
|
|
auth_cred = config_param.copy()
|
|
auth_cred.pop('project_name')
|
|
auth_cred.pop('type')
|
|
expected_vim = {'auth_cred': auth_cred,
|
|
'vim_project':
|
|
{'name': sentinel.prj_name},
|
|
'type': 'kubernetes'}
|
|
vim_utils.args2body_vim(config_param.copy(), vim)
|
|
self.assertEqual(expected_vim, vim)
|
|
|
|
def test_args2body_vim_no_project(self):
|
|
config_param = {'username': sentinel.usrname1,
|
|
'password': sentinel.password1,
|
|
'user_domain_name': sentinel.user_domain.name,
|
|
'cert_verify': 'True',
|
|
'type': 'openstack'}
|
|
vim = {}
|
|
self.assertRaises(exceptions.TackerClientException,
|
|
vim_utils.args2body_vim,
|
|
config_param, vim)
|
|
|
|
def test_validate_auth_url_with_port(self):
|
|
auth_url = "http://localhost:8000/test"
|
|
url_parts = vim_utils.validate_auth_url(auth_url)
|
|
self.assertEqual('http', url_parts.scheme)
|
|
self.assertEqual('localhost:8000', url_parts.netloc)
|
|
self.assertEqual(8000, url_parts.port)
|
|
|
|
def test_validate_auth_url_without_port(self):
|
|
auth_url = "http://localhost/test"
|
|
url_parts = vim_utils.validate_auth_url(auth_url)
|
|
self.assertEqual('http', url_parts.scheme)
|
|
self.assertEqual('localhost', url_parts.netloc)
|
|
|
|
def test_validate_auth_url_exception(self):
|
|
auth_url = "localhost/test"
|
|
self.assertRaises(exceptions.TackerClientException,
|
|
vim_utils.validate_auth_url,
|
|
auth_url)
|