mirror of
https://github.com/apache/cloudstack.git
synced 2025-11-04 00:02:37 +01:00
771 lines
17 KiB
XML
771 lines
17 KiB
XML
<!--
|
|
Licensed to the Apache Software Foundation (ASF) under one
|
|
or more contributor license agreements. See the NOTICE file
|
|
distributed with this work for additional information
|
|
regarding copyright ownership. The ASF licenses this file
|
|
to you under the Apache License, Version 2.0 (the
|
|
"License"); you may not use this file except in compliance
|
|
with the License. You may obtain a copy of the License at
|
|
|
|
http://www.apache.org/licenses/LICENSE-2.0
|
|
|
|
Unless required by applicable law or agreed to in writing,
|
|
software distributed under the License is distributed on an
|
|
"AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
|
|
KIND, either express or implied. See the License for the
|
|
specific language governing permissions and limitations
|
|
under the License.
|
|
-->
|
|
<securitygroups>
|
|
<!--
|
|
STEPS/TEST CASES COVERED:
|
|
2. Create a User and its Account
|
|
2. Register User Keys
|
|
3. Deploy a VM in the account
|
|
4. Acquire an IP Address
|
|
5. Release the IP Address
|
|
6. Reboot the VM
|
|
7. Stop the VM
|
|
8. Start the VM
|
|
9. List Routers
|
|
10. Stop Router
|
|
11. List Router
|
|
12. Start Router
|
|
13. Destroy VM
|
|
14. Verify that vm is destroyed
|
|
15. Recover virtual machine
|
|
16. Verify that vm is destroyed
|
|
17. Delete Account
|
|
|
|
-->
|
|
|
|
<command>
|
|
<name>createUser</name>
|
|
<testcase>Create User and Account</testcase>
|
|
<parameters>
|
|
<item random="true">
|
|
<name>username</name>
|
|
</item>
|
|
<item>
|
|
<name>password</name>
|
|
<value>apiuser</value>
|
|
</item>
|
|
<item>
|
|
<name>firstname</name>
|
|
<value>apiuser</value>
|
|
</item>
|
|
<item>
|
|
<name>lastname</name>
|
|
<value>apiuser</value>
|
|
</item>
|
|
<item>
|
|
<name>email</name>
|
|
<value>apiuser@gmail.com</value>
|
|
</item>
|
|
<item>
|
|
<name>accounttype</name>
|
|
<value>0</value>
|
|
</item>
|
|
</parameters>
|
|
<returnvalue>
|
|
<item setparam="true">
|
|
<name>id</name>
|
|
<param>userid</param>
|
|
</item>
|
|
<item setparam="true">
|
|
<name>account</name>
|
|
<param>accountname</param>
|
|
</item>
|
|
</returnvalue>
|
|
</command>
|
|
|
|
<command>
|
|
<name>registerUserKeys</name>
|
|
<testcase>Registering the User</testcase>
|
|
<parameters>
|
|
<item getparam="true">
|
|
<name>id</name>
|
|
<param>userid</param>
|
|
</item>
|
|
</parameters>
|
|
<returnvalue>
|
|
<item setparam="true">
|
|
<name>apikey</name>
|
|
<param>apikey</param>
|
|
</item>
|
|
<item setparam="true">
|
|
<name>secretkey</name>
|
|
<param>secretkey</param>
|
|
</item>
|
|
</returnvalue>
|
|
</command>
|
|
|
|
<command>
|
|
<name>createNetworkGroup</name>
|
|
<usercommand>true</usercommand>
|
|
<testcase>Create a Network Group</testcase>
|
|
<parameters>
|
|
<item setparam="true" random="true">
|
|
<name>name</name>
|
|
<param>networkgrp-1</param>
|
|
</item>
|
|
</parameters>
|
|
</command>
|
|
|
|
<!-- FIRST INGRESS RULE -->
|
|
|
|
<command>
|
|
<name>authorizeNetworkGroupIngress</name>
|
|
<testcase>Add the First Ingress Rule</testcase>
|
|
<parameters>
|
|
<item getparam="true">
|
|
<name>networkgroupname</name>
|
|
<param>networkgrp-1</param>
|
|
</item>
|
|
<item>
|
|
<name>cidrlist</name>
|
|
<value>192.168.131.171/32</value> <!-- CHANGE IF REQUIRED -->
|
|
</item>
|
|
<item>
|
|
<name>endport</name>
|
|
<value>22</value>
|
|
</item>
|
|
<item>
|
|
<name>startport</name>
|
|
<value>22</value>
|
|
</item>
|
|
<item>
|
|
<name>protocol</name>
|
|
<value>tcp</value>
|
|
</item>
|
|
<item getparam="true">
|
|
<name>account</name>
|
|
<param>accountname</param>
|
|
</item>
|
|
<item>
|
|
<name>domainid</name>
|
|
<value>1</value>
|
|
</item>
|
|
</parameters>
|
|
</command>
|
|
|
|
<command>
|
|
<name>deployVirtualMachine</name>
|
|
<usercommand>true</usercommand>
|
|
<testcase>Deploy a VM with the Network Group Assigned</testcase>
|
|
<parameters>
|
|
<item getparam="true">
|
|
<name>zoneid</name>
|
|
<param>globalzoneid</param>
|
|
</item>
|
|
<item getparam="true">
|
|
<name>serviceofferingid</name>
|
|
<param>flatnetworkserviceofferingid</param>
|
|
</item>
|
|
<item getparam="true">
|
|
<name>networkgrouplist</name>
|
|
<param>networkgrp-1</param>
|
|
</item>
|
|
<item getparam="true">
|
|
<name>templateid</name>
|
|
<param>globaltemplateid</param>
|
|
</item>
|
|
</parameters>
|
|
<returnvalue>
|
|
<item setparam="true">
|
|
<name>id</name>
|
|
<param>vmid</param>
|
|
</item>
|
|
<item setparam="true">
|
|
<name>ipaddress</name>
|
|
<param>vmip</param>
|
|
</item>
|
|
</returnvalue>
|
|
</command>
|
|
|
|
<command>
|
|
<name>sleep.sh</name>
|
|
<script>true</script>
|
|
<testcase>Sleep for 2 min</testcase>
|
|
<parameters>
|
|
<item>
|
|
<name>s</name>
|
|
<value>120</value>
|
|
</item>
|
|
</parameters>
|
|
</command>
|
|
|
|
<command>
|
|
<name>ssh.sh</name>
|
|
<script>true</script>
|
|
<testcase>Ssh access test for the VM</testcase>
|
|
<parameters>
|
|
<item getparam="true">
|
|
<name>h</name>
|
|
<param>vmip</param>
|
|
</item>
|
|
<item>
|
|
<name>p</name>
|
|
<value>password</value>
|
|
</item>
|
|
</parameters>
|
|
</command>
|
|
|
|
<command>
|
|
<name>sleep.sh</name>
|
|
<script>true</script>
|
|
<testcase>Sleep for 1 min</testcase>
|
|
<parameters>
|
|
<item>
|
|
<name>s</name>
|
|
<value>60</value>
|
|
</item>
|
|
</parameters>
|
|
</command>
|
|
|
|
<command>
|
|
<name>stopVirtualMachine</name>
|
|
<usercommand>true</usercommand>
|
|
<testcase>Stopping VM</testcase>
|
|
<parameters>
|
|
<item getparam="true">
|
|
<name>id</name>
|
|
<param>vmid</param>
|
|
</item>
|
|
</parameters>
|
|
</command>
|
|
|
|
<command>
|
|
<name>startVirtualMachine</name>
|
|
<usercommand>true</usercommand>
|
|
<testcase>Starting VM</testcase>
|
|
<parameters>
|
|
<item getparam="true">
|
|
<name>id</name>
|
|
<param>vmid</param>
|
|
</item>
|
|
</parameters>
|
|
</command>
|
|
|
|
<command>
|
|
<name>rebootVirtualMachine</name>
|
|
<usercommand>true</usercommand>
|
|
<testcase>Rebooting VM</testcase>
|
|
<parameters>
|
|
<item getparam="true">
|
|
<name>id</name>
|
|
<param>vmid</param>
|
|
</item>
|
|
</parameters>
|
|
</command>
|
|
|
|
<command>
|
|
<name>revokeNetworkGroupIngress</name>
|
|
<testcase>Revoke The First Ingress Rule</testcase>
|
|
<parameters>
|
|
<item getparam="true">
|
|
<name>networkgroupname</name>
|
|
<param>networkgrp-1</param>
|
|
</item>
|
|
<item>
|
|
<name>cidrlist</name>
|
|
<value>192.168.131.171/32</value> <!-- CHANGE IF REQUIRED -->
|
|
</item>
|
|
<item>
|
|
<name>endport</name>
|
|
<value>22</value>
|
|
</item>
|
|
<item>
|
|
<name>startport</name>
|
|
<value>22</value>
|
|
</item>
|
|
<item>
|
|
<name>protocol</name>
|
|
<value>tcp</value>
|
|
</item>
|
|
<item getparam="true">
|
|
<name>account</name>
|
|
<param>accountname</param>
|
|
</item>
|
|
<item>
|
|
<name>domainid</name>
|
|
<value>1</value>
|
|
</item>
|
|
</parameters>
|
|
</command>
|
|
|
|
<command>
|
|
<name>ssh.sh</name>
|
|
<script>true</script>
|
|
<error>true</error>
|
|
<testcase>Ssh access test for the vm - should fail as ingress rule is revoked</testcase>
|
|
<parameters>
|
|
<item getparam="true">
|
|
<name>h</name>
|
|
<param>vmip</param>
|
|
</item>
|
|
<item>
|
|
<name>p</name>
|
|
<value>password</value>
|
|
</item>
|
|
</parameters>
|
|
</command>
|
|
|
|
<!-- SECOND INGRESS RULE -->
|
|
|
|
<command>
|
|
<name>authorizeNetworkGroupIngress</name>
|
|
<testcase>Add the Second Ingress Rule</testcase>
|
|
<parameters>
|
|
<item getparam="true">
|
|
<name>networkgroupname</name>
|
|
<param>networkgrp-1</param>
|
|
</item>
|
|
<item>
|
|
<name>cidrlist</name>
|
|
<value>192.168.131.172/32</value> <!-- CHANGE IF REQUIRED -->
|
|
</item>
|
|
<item>
|
|
<name>endport</name>
|
|
<value>22</value>
|
|
</item>
|
|
<item>
|
|
<name>startport</name>
|
|
<value>22</value>
|
|
</item>
|
|
<item>
|
|
<name>protocol</name>
|
|
<value>tcp</value>
|
|
</item>
|
|
<item getparam="true">
|
|
<name>account</name>
|
|
<param>accountname</param>
|
|
</item>
|
|
<item>
|
|
<name>domainid</name>
|
|
<value>1</value>
|
|
</item>
|
|
</parameters>
|
|
</command>
|
|
|
|
<command>
|
|
<name>deployVirtualMachine</name>
|
|
<usercommand>true</usercommand>
|
|
<testcase>Deploy a VM with the Network Group Assigned</testcase>
|
|
<parameters>
|
|
<item getparam="true">
|
|
<name>zoneid</name>
|
|
<param>globalzoneid</param>
|
|
</item>
|
|
<item getparam="true">
|
|
<name>serviceofferingid</name>
|
|
<param>flatnetworkserviceofferingid</param>
|
|
</item>
|
|
<item getparam="true">
|
|
<name>networkgrouplist</name>
|
|
<param>networkgrp-1</param>
|
|
</item>
|
|
<item getparam="true">
|
|
<name>templateid</name>
|
|
<param>globaltemplateid</param>
|
|
</item>
|
|
</parameters>
|
|
<returnvalue>
|
|
<item setparam="true">
|
|
<name>id</name>
|
|
<param>vmid</param>
|
|
</item>
|
|
<item setparam="true">
|
|
<name>ipaddress</name>
|
|
<param>vmip</param>
|
|
</item>
|
|
</returnvalue>
|
|
</command>
|
|
|
|
<command>
|
|
<name>sleep.sh</name>
|
|
<script>true</script>
|
|
<testcase>Sleep for 2 min</testcase>
|
|
<parameters>
|
|
<item>
|
|
<name>s</name>
|
|
<value>120</value>
|
|
</item>
|
|
</parameters>
|
|
</command>
|
|
|
|
<command>
|
|
<name>ssh.sh</name>
|
|
<script>true</script>
|
|
<error>true</error>
|
|
<testcase>Ssh test for the vm - should fail as no access provided by ingress rule</testcase>
|
|
<parameters>
|
|
<item getparam="true">
|
|
<name>h</name>
|
|
<param>vmip</param>
|
|
</item>
|
|
<item>
|
|
<name>p</name>
|
|
<value>password</value>
|
|
</item>
|
|
</parameters>
|
|
</command>
|
|
|
|
<command>
|
|
<name>revokeNetworkGroupIngress</name>
|
|
<testcase>Revoke The Second Ingress Rule</testcase>
|
|
<parameters>
|
|
<item getparam="true">
|
|
<name>networkgroupname</name>
|
|
<param>networkgrp-1</param>
|
|
</item>
|
|
<item>
|
|
<name>cidrlist</name>
|
|
<value>192.168.131.172/32</value> <!-- CHANGE IF REQUIRED -->
|
|
</item>
|
|
<item>
|
|
<name>endport</name>
|
|
<value>22</value>
|
|
</item>
|
|
<item>
|
|
<name>startport</name>
|
|
<value>22</value>
|
|
</item>
|
|
<item>
|
|
<name>protocol</name>
|
|
<value>tcp</value>
|
|
</item>
|
|
<item getparam="true">
|
|
<name>account</name>
|
|
<param>accountname</param>
|
|
</item>
|
|
<item>
|
|
<name>domainid</name>
|
|
<value>1</value>
|
|
</item>
|
|
</parameters>
|
|
</command>
|
|
|
|
<!-- THIRD INGRESS RULE -->
|
|
|
|
<command>
|
|
<name>authorizeNetworkGroupIngress</name>
|
|
<testcase>Add the Third Ingress Rule</testcase>
|
|
<parameters>
|
|
<item getparam="true">
|
|
<name>networkgroupname</name>
|
|
<param>networkgrp-1</param>
|
|
</item>
|
|
<item>
|
|
<name>cidrlist</name>
|
|
<value>192.168.131.0/24</value> <!-- CHANGE IF REQUIRED -->
|
|
</item>
|
|
<item>
|
|
<name>endport</name>
|
|
<value>80</value>
|
|
</item>
|
|
<item>
|
|
<name>startport</name>
|
|
<value>80</value>
|
|
</item>
|
|
<item>
|
|
<name>protocol</name>
|
|
<value>tcp</value>
|
|
</item>
|
|
<item getparam="true">
|
|
<name>account</name>
|
|
<param>accountname</param>
|
|
</item>
|
|
<item>
|
|
<name>domainid</name>
|
|
<value>1</value>
|
|
</item>
|
|
</parameters>
|
|
</command>
|
|
|
|
<command>
|
|
<name>deployVirtualMachine</name>
|
|
<usercommand>true</usercommand>
|
|
<testcase>Deploy a VM with the Network Group Assigned</testcase>
|
|
<parameters>
|
|
<item getparam="true">
|
|
<name>zoneid</name>
|
|
<param>globalzoneid</param>
|
|
</item>
|
|
<item getparam="true">
|
|
<name>serviceofferingid</name>
|
|
<param>flatnetworkserviceofferingid</param>
|
|
</item>
|
|
<item getparam="true">
|
|
<name>networkgrouplist</name>
|
|
<param>networkgrp-1</param>
|
|
</item>
|
|
<item getparam="true">
|
|
<name>templateid</name>
|
|
<param>globaltemplateid</param>
|
|
</item>
|
|
</parameters>
|
|
<returnvalue>
|
|
<item setparam="true">
|
|
<name>id</name>
|
|
<param>vmid</param>
|
|
</item>
|
|
<item setparam="true">
|
|
<name>ipaddress</name>
|
|
<param>vmip</param>
|
|
</item>
|
|
</returnvalue>
|
|
</command>
|
|
|
|
<command>
|
|
<name>sleep.sh</name>
|
|
<script>true</script>
|
|
<testcase>Sleep for 2 min</testcase>
|
|
<parameters>
|
|
<item>
|
|
<name>s</name>
|
|
<value>120</value>
|
|
</item>
|
|
</parameters>
|
|
</command>
|
|
|
|
<command>
|
|
<name>ssh.sh</name>
|
|
<script>true</script>
|
|
<error>true</error>
|
|
<testcase>Ssh test for the vm - should fail as no access provided by ingress rule</testcase>
|
|
<parameters>
|
|
<item getparam="true">
|
|
<name>h</name>
|
|
<param>vmip</param>
|
|
</item>
|
|
<item>
|
|
<name>p</name>
|
|
<value>password</value>
|
|
</item>
|
|
</parameters>
|
|
</command>
|
|
|
|
<command>
|
|
<name>revokeNetworkGroupIngress</name>
|
|
<testcase>Revoke The Third Ingress Rule</testcase>
|
|
<parameters>
|
|
<item getparam="true">
|
|
<name>networkgroupname</name>
|
|
<param>networkgrp-1</param>
|
|
</item>
|
|
<item>
|
|
<name>cidrlist</name>
|
|
<value>192.168.131.0/24</value> <!-- CHANGE IF REQUIRED -->
|
|
</item>
|
|
<item>
|
|
<name>endport</name>
|
|
<value>80</value>
|
|
</item>
|
|
<item>
|
|
<name>startport</name>
|
|
<value>80</value>
|
|
</item>
|
|
<item>
|
|
<name>protocol</name>
|
|
<value>tcp</value>
|
|
</item>
|
|
<item getparam="true">
|
|
<name>account</name>
|
|
<param>accountname</param>
|
|
</item>
|
|
<item>
|
|
<name>domainid</name>
|
|
<value>1</value>
|
|
</item>
|
|
</parameters>
|
|
</command>
|
|
|
|
<!-- FOURTH INGRESS RULE -->
|
|
|
|
<command>
|
|
<name>authorizeNetworkGroupIngress</name>
|
|
<testcase>Add the Fourth Ingress Rule</testcase>
|
|
<parameters>
|
|
<item getparam="true">
|
|
<name>networkgroupname</name>
|
|
<param>networkgrp-1</param>
|
|
</item>
|
|
<item>
|
|
<name>cidrlist</name>
|
|
<value>192.168.130.0/24</value> <!-- CHANGE IF REQUIRED -->
|
|
</item>
|
|
<item>
|
|
<name>endport</name>
|
|
<value>80</value>
|
|
</item>
|
|
<item>
|
|
<name>startport</name>
|
|
<value>80</value>
|
|
</item>
|
|
<item>
|
|
<name>protocol</name>
|
|
<value>tcp</value>
|
|
</item>
|
|
<item getparam="true">
|
|
<name>account</name>
|
|
<param>accountname</param>
|
|
</item>
|
|
<item>
|
|
<name>domainid</name>
|
|
<value>1</value>
|
|
</item>
|
|
</parameters>
|
|
</command>
|
|
|
|
<command>
|
|
<name>deployVirtualMachine</name>
|
|
<usercommand>true</usercommand>
|
|
<testcase>Deploy a VM with the Network Group Assigned</testcase>
|
|
<parameters>
|
|
<item getparam="true">
|
|
<name>zoneid</name>
|
|
<param>globalzoneid</param>
|
|
</item>
|
|
<item getparam="true">
|
|
<name>serviceofferingid</name>
|
|
<param>flatnetworkserviceofferingid</param>
|
|
</item>
|
|
<item getparam="true">
|
|
<name>networkgrouplist</name>
|
|
<param>networkgrp-1</param>
|
|
</item>
|
|
<item getparam="true">
|
|
<name>templateid</name>
|
|
<param>globaltemplateid</param>
|
|
</item>
|
|
</parameters>
|
|
<returnvalue>
|
|
<item setparam="true">
|
|
<name>id</name>
|
|
<param>vmid</param>
|
|
</item>
|
|
<item setparam="true">
|
|
<name>ipaddress</name>
|
|
<param>vmip</param>
|
|
</item>
|
|
</returnvalue>
|
|
</command>
|
|
|
|
<command>
|
|
<name>sleep.sh</name>
|
|
<script>true</script>
|
|
<testcase>Sleep for 2 min</testcase>
|
|
<parameters>
|
|
<item>
|
|
<name>s</name>
|
|
<value>120</value>
|
|
</item>
|
|
</parameters>
|
|
</command>
|
|
|
|
<command>
|
|
<name>ssh.sh</name>
|
|
<script>true</script>
|
|
<error>true</error>
|
|
<testcase>Ssh test for the vm - should fail as no access provided by ingress rule</testcase>
|
|
<parameters>
|
|
<item getparam="true">
|
|
<name>h</name>
|
|
<param>vmip</param>
|
|
</item>
|
|
<item>
|
|
<name>p</name>
|
|
<value>password</value>
|
|
</item>
|
|
</parameters>
|
|
</command>
|
|
|
|
<command>
|
|
<name>revokeNetworkGroupIngress</name>
|
|
<testcase>Revoke The Fourth Ingress Rule</testcase>
|
|
<parameters>
|
|
<item getparam="true">
|
|
<name>networkgroupname</name>
|
|
<param>networkgrp-1</param>
|
|
</item>
|
|
<item>
|
|
<name>cidrlist</name>
|
|
<value>192.168.130.0/24</value> <!-- CHANGE IF REQUIRED -->
|
|
</item>
|
|
<item>
|
|
<name>endport</name>
|
|
<value>80</value>
|
|
</item>
|
|
<item>
|
|
<name>startport</name>
|
|
<value>80</value>
|
|
</item>
|
|
<item>
|
|
<name>protocol</name>
|
|
<value>tcp</value>
|
|
</item>
|
|
<item getparam="true">
|
|
<name>account</name>
|
|
<param>accountname</param>
|
|
</item>
|
|
<item>
|
|
<name>domainid</name>
|
|
<value>1</value>
|
|
</item>
|
|
</parameters>
|
|
</command>
|
|
|
|
|
|
<!-- Clean Up -->
|
|
<command>
|
|
<name>deleteNetworkGroup</name>
|
|
<usercommand>true</usercommand>
|
|
<testcase>Delete First network group</testcase>
|
|
<parameters>
|
|
<item getparam="true">
|
|
<name>name</name>
|
|
<param>networkgrp-1</param>
|
|
</item>
|
|
</parameters>
|
|
</command>
|
|
|
|
<command>
|
|
<name>destroyVirtualMachine</name>
|
|
<usercommand>true</usercommand>
|
|
<testcase>Destroying virtual machine</testcase>
|
|
<parameters>
|
|
<item getparam="true">
|
|
<name>id</name>
|
|
<param>vmid</param>
|
|
</item>
|
|
</parameters>
|
|
</command>
|
|
|
|
<command>
|
|
<name>sleep.sh</name>
|
|
<script>true</script>
|
|
<testcase>Sleep for 2 min</testcase>
|
|
<parameters>
|
|
<item>
|
|
<name>s</name>
|
|
<value>120</value>
|
|
</item>
|
|
</parameters>
|
|
</command>
|
|
|
|
|
|
<!-- Delete user as a part of cleanup -->
|
|
<command>
|
|
<name>deleteUser</name>
|
|
<testcase>Deleting the user</testcase>
|
|
<parameters>
|
|
<item getparam="true">
|
|
<name>id</name>
|
|
<param>userid</param>
|
|
</item>
|
|
</parameters>
|
|
</command>
|
|
|
|
</securitygroups>
|