mirror of
				https://github.com/apache/cloudstack.git
				synced 2025-11-04 00:02:37 +01:00 
			
		
		
		
	
		
			
				
	
	
		
			757 lines
		
	
	
		
			34 KiB
		
	
	
	
		
			Python
		
	
	
	
	
	
			
		
		
	
	
			757 lines
		
	
	
		
			34 KiB
		
	
	
	
		
			Python
		
	
	
	
	
	
# Licensed to the Apache Software Foundation (ASF) under one
 | 
						|
# or more contributor license agreements.  See the NOTICE file
 | 
						|
# distributed with this work for additional information
 | 
						|
# regarding copyright ownership.  The ASF licenses this file
 | 
						|
# to you under the Apache License, Version 2.0 (the
 | 
						|
# "License"); you may not use this file except in compliance
 | 
						|
# with the License.  You may obtain a copy of the License at
 | 
						|
#
 | 
						|
#   http://www.apache.org/licenses/LICENSE-2.0
 | 
						|
#
 | 
						|
# Unless required by applicable law or agreed to in writing,
 | 
						|
# software distributed under the License is distributed on an
 | 
						|
# "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
 | 
						|
# KIND, either express or implied.  See the License for the
 | 
						|
# specific language governing permissions and limitations
 | 
						|
# under the License.
 | 
						|
 | 
						|
""" P1 tests for networks in advanced zone with security groups
 | 
						|
"""
 | 
						|
#Import Local Modules
 | 
						|
import marvin
 | 
						|
from marvin.cloudstackTestCase import *
 | 
						|
from marvin.cloudstackAPI import *
 | 
						|
from marvin.integration.lib.utils import *
 | 
						|
from marvin.integration.lib.base import *
 | 
						|
from marvin.integration.lib.common import *
 | 
						|
import netaddr
 | 
						|
from nose.plugins.attrib import attr
 | 
						|
 | 
						|
class Services:
 | 
						|
    """ Test networks in advanced zone with security groups"""
 | 
						|
 | 
						|
    def __init__(self):
 | 
						|
        self.services = {
 | 
						|
                          "domain": {
 | 
						|
                                   "name": "DOM",
 | 
						|
                                   },
 | 
						|
                         "project": {
 | 
						|
                                    "name": "Project",
 | 
						|
                                    "displaytext": "Test project",
 | 
						|
                                    },
 | 
						|
                         "account": {
 | 
						|
                                    "email": "admin-XABU1@test.com",
 | 
						|
                                    "firstname": "admin-XABU1",
 | 
						|
                                    "lastname": "admin-XABU1",
 | 
						|
                                    "username": "admin-XABU1",
 | 
						|
                                    # Random characters are appended for unique
 | 
						|
                                    # username
 | 
						|
                                    "password": "fr3sca",
 | 
						|
                                    },
 | 
						|
                         "service_offering": {
 | 
						|
                                    "name": "Tiny Instance",
 | 
						|
                                    "displaytext": "Tiny Instance",
 | 
						|
                                    "cpunumber": 1,
 | 
						|
                                    "cpuspeed": 100, # in MHz
 | 
						|
                                    "memory": 128, # In MBs
 | 
						|
                                    },
 | 
						|
                         "shared_network_offering_sg": {
 | 
						|
                                    "name": 'MySharedOffering-sg',
 | 
						|
                                    "displaytext": 'MySharedOffering-sg',
 | 
						|
                                    "guestiptype": 'Shared',
 | 
						|
                                    "supportedservices": 'Dhcp,Dns,UserData,SecurityGroup',
 | 
						|
                                    "specifyVlan" : "False",
 | 
						|
                                    "specifyIpRanges" : "False",
 | 
						|
                                    "traffictype": 'GUEST',
 | 
						|
                                    "serviceProviderList" : {
 | 
						|
                                            "Dhcp": 'VirtualRouter',
 | 
						|
                                            "Dns": 'VirtualRouter',
 | 
						|
                                            "UserData": 'VirtualRouter',
 | 
						|
                                            "SecurityGroup": 'SecurityGroupProvider'
 | 
						|
                                        },
 | 
						|
                                },
 | 
						|
                         "shared_network_offering": {
 | 
						|
                                    "name": 'MySharedOffering',
 | 
						|
                                    "displaytext": 'MySharedOffering',
 | 
						|
                                    "guestiptype": 'Shared',
 | 
						|
                                    "supportedservices": 'Dhcp,Dns,UserData',
 | 
						|
                                    "specifyVlan" : "False",
 | 
						|
                                    "specifyIpRanges" : "False",
 | 
						|
                                    "traffictype": 'GUEST',
 | 
						|
                                    "serviceProviderList" : {
 | 
						|
                                            "Dhcp": 'VirtualRouter',
 | 
						|
                                            "Dns": 'VirtualRouter',
 | 
						|
                                            "UserData": 'VirtualRouter'
 | 
						|
                                        },
 | 
						|
                                },
 | 
						|
                         "shared_network_sg": {
 | 
						|
                                  "name": "MyIsolatedNetwork - Test",
 | 
						|
                                  "displaytext": "MyIsolatedNetwork",
 | 
						|
                                  "networkofferingid":"1",
 | 
						|
                                  "vlan" :1200,
 | 
						|
                                  "gateway" :"172.16.15.1",
 | 
						|
                                  "netmask" :"255.255.255.0",
 | 
						|
                                  "startip" :"172.16.15.2",
 | 
						|
                                  "endip" :"172.16.15.20",
 | 
						|
                                  "acltype" : "Domain",
 | 
						|
                                  "scope":"all",
 | 
						|
                                },
 | 
						|
                         "shared_network": {
 | 
						|
                                  "name": "MySharedNetwork - Test",
 | 
						|
                                  "displaytext": "MySharedNetwork",
 | 
						|
                                  "vlan" :1201,
 | 
						|
                                  "gateway" :"172.16.15.1",
 | 
						|
                                  "netmask" :"255.255.255.0",
 | 
						|
                                  "startip" :"172.16.15.21",
 | 
						|
                                  "endip" :"172.16.15.41",
 | 
						|
                                  "acltype" : "Domain",
 | 
						|
                                  "scope":"all",
 | 
						|
                                },
 | 
						|
                         "isolated_network_offering": {
 | 
						|
                                    "name": 'Network offering-DA services',
 | 
						|
                                    "displaytext": 'Network offering-DA services',
 | 
						|
                                    "guestiptype": 'Isolated',
 | 
						|
                                    "supportedservices": 'Dhcp,Dns,SourceNat,PortForwarding,Vpn,Firewall,Lb,UserData,StaticNat',
 | 
						|
                                    "traffictype": 'GUEST',
 | 
						|
                                    "availability": 'Optional',
 | 
						|
                                    "serviceProviderList": {
 | 
						|
                                            "Dhcp": 'VirtualRouter',
 | 
						|
                                            "Dns": 'VirtualRouter',
 | 
						|
                                            "SourceNat": 'VirtualRouter',
 | 
						|
                                            "PortForwarding": 'VirtualRouter',
 | 
						|
                                            "Vpn": 'VirtualRouter',
 | 
						|
                                            "Firewall": 'VirtualRouter',
 | 
						|
                                            "Lb": 'VirtualRouter',
 | 
						|
                                            "UserData": 'VirtualRouter',
 | 
						|
                                            "StaticNat": 'VirtualRouter',
 | 
						|
                                        },
 | 
						|
                         },
 | 
						|
                         "isolated_network": {
 | 
						|
                                  "name": "Isolated Network",
 | 
						|
                                  "displaytext": "Isolated Network",
 | 
						|
                         },
 | 
						|
                         "virtual_machine": {
 | 
						|
                                    "displayname": "Test VM",
 | 
						|
                                    "username": "root",
 | 
						|
                                    "password": "password",
 | 
						|
                                    "ssh_port": 22,
 | 
						|
                                    "hypervisor": 'XenServer',
 | 
						|
                                    # Hypervisor type should be same as
 | 
						|
                                    # hypervisor type of cluster
 | 
						|
                                    "privateport": 22,
 | 
						|
                                    "publicport": 22,
 | 
						|
                                    "protocol": 'TCP',
 | 
						|
                                },
 | 
						|
                         "ostype": 'CentOS 5.3 (64-bit)',
 | 
						|
                         # Cent OS 5.3 (64 bit)
 | 
						|
                         "sleep": 90,
 | 
						|
                         "timeout": 10,
 | 
						|
                         "mode": 'advanced',
 | 
						|
                         "securitygroupenabled": 'true'
 | 
						|
                    }
 | 
						|
        
 | 
						|
class TestNetworksInAdvancedSG(cloudstackTestCase):
 | 
						|
    
 | 
						|
    @classmethod
 | 
						|
    def setUpClass(cls):
 | 
						|
        cls.api_client = super(
 | 
						|
                               TestNetworksInAdvancedSG,
 | 
						|
                               cls
 | 
						|
                               ).getClsTestClient().getApiClient()
 | 
						|
        
 | 
						|
        cls.services = Services().services
 | 
						|
 | 
						|
        # Get Zone, Domain and templates
 | 
						|
        cls.domain = get_domain(cls.api_client, cls.services)
 | 
						|
        cls.zone = get_zone(cls.api_client, cls.services)
 | 
						|
        cls.template = get_template(
 | 
						|
                            cls.api_client,
 | 
						|
                            cls.zone.id,
 | 
						|
                            cls.services["ostype"]
 | 
						|
                            )
 | 
						|
        
 | 
						|
        cls.services["virtual_machine"]["zoneid"] = cls.zone.id
 | 
						|
        cls.services["virtual_machine"]["template"] = cls.template.id
 | 
						|
 | 
						|
        cls.service_offering = ServiceOffering.create(
 | 
						|
                                            cls.api_client,
 | 
						|
                                            cls.services["service_offering"]
 | 
						|
                                            )
 | 
						|
        
 | 
						|
        cls._cleanup = [
 | 
						|
                        cls.service_offering,
 | 
						|
                        ]
 | 
						|
        return
 | 
						|
 | 
						|
    @classmethod
 | 
						|
    def tearDownClass(cls):
 | 
						|
        try:
 | 
						|
            #Cleanup resources used
 | 
						|
            cleanup_resources(cls.api_client, cls._cleanup)
 | 
						|
        except Exception as e:
 | 
						|
            raise Exception("Warning: Exception during cleanup : %s" % e)
 | 
						|
        return
 | 
						|
 | 
						|
    def setUp(self):
 | 
						|
        self.api_client = self.testClient.getApiClient()
 | 
						|
        self.dbclient = self.testClient.getDbConnection()
 | 
						|
        self.cleanup = []
 | 
						|
        self.cleanup_networks = []
 | 
						|
        self.cleanup_accounts = []
 | 
						|
        self.cleanup_domains = []
 | 
						|
        self.cleanup_projects = []
 | 
						|
        self.cleanup_vms = []
 | 
						|
        return
 | 
						|
 | 
						|
    def tearDown(self):
 | 
						|
        try:
 | 
						|
            #Clean up, terminate the created network offerings
 | 
						|
            cleanup_resources(self.api_client, self.cleanup)
 | 
						|
        except Exception as e:
 | 
						|
            raise Exception("Warning: Exception during cleanup : %s" % e)
 | 
						|
        
 | 
						|
        #below components is not a part of cleanup because to mandate the order and to cleanup network
 | 
						|
        try:
 | 
						|
            for vm in self.cleanup_vms:
 | 
						|
               vm.delete(self.api_client)
 | 
						|
        except Exception as e:
 | 
						|
            raise Exception("Warning: Exception during virtual machines cleanup : %s" % e)
 | 
						|
    
 | 
						|
        try:
 | 
						|
            for project in self.cleanup_projects:
 | 
						|
                 project.delete(self.api_client)    
 | 
						|
        except Exception as e:
 | 
						|
             raise Exception("Warning: Exception during project cleanup : %s" % e)
 | 
						|
        
 | 
						|
        try:
 | 
						|
            for account in self.cleanup_accounts:
 | 
						|
                account.delete(self.api_client)    
 | 
						|
        except Exception as e:
 | 
						|
            raise Exception("Warning: Exception during account cleanup : %s" % e)
 | 
						|
        
 | 
						|
        try:
 | 
						|
            for domain in self.cleanup_domains:
 | 
						|
                domain.delete(self.api_client)
 | 
						|
        except Exception as e:
 | 
						|
            raise Exception("Warning: Exception during domain cleanup : %s" % e)
 | 
						|
            
 | 
						|
        #Wait till all resources created are cleaned up completely and then attempt to delete Network
 | 
						|
        time.sleep(self.services["sleep"])
 | 
						|
        
 | 
						|
        try:
 | 
						|
            for network in self.cleanup_networks:
 | 
						|
                network.delete(self.api_client)
 | 
						|
        except Exception as e:
 | 
						|
            raise Exception("Warning: Exception during network cleanup : %s" % e)
 | 
						|
        return
 | 
						|
 | 
						|
    @attr(tags = ["advancedsg"])
 | 
						|
    def test_createIsolatedNetwork(self):
 | 
						|
        """ Test Isolated Network """
 | 
						|
        
 | 
						|
        # Steps,
 | 
						|
        #  1. create an Admin Account - admin-XABU1
 | 
						|
        #  2. listPhysicalNetworks in available zone
 | 
						|
        #  3. createNetworkOffering: 
 | 
						|
        #  4. Enable network offering - updateNetworkOffering - state=Enabled
 | 
						|
        #  5. createNetwork
 | 
						|
        # Validations,
 | 
						|
        #  1. listAccounts name=admin-XABU1, state=enabled returns your account
 | 
						|
        #  2. listPhysicalNetworks should return at least one active physical network
 | 
						|
        #  4. listNetworkOfferings - name=myisolatedoffering, should list enabled offering
 | 
						|
        #  5. network creation should FAIL since isolated network is not supported in advanced zone with security groups.
 | 
						|
        
 | 
						|
        #Create admin account
 | 
						|
        self.admin_account = Account.create(
 | 
						|
                                    self.api_client,
 | 
						|
                                    self.services["account"],
 | 
						|
                                    admin=True,
 | 
						|
                                    domainid=self.domain.id
 | 
						|
                                    )
 | 
						|
        
 | 
						|
        self.cleanup_accounts.append(self.admin_account)
 | 
						|
        
 | 
						|
        #verify that the account got created with state enabled
 | 
						|
        list_accounts_response = Account.list(
 | 
						|
                                        self.api_client,
 | 
						|
                                        id=self.admin_account.id,
 | 
						|
                                        listall=True
 | 
						|
                                        )
 | 
						|
        self.assertEqual(
 | 
						|
            isinstance(list_accounts_response, list),
 | 
						|
            True,
 | 
						|
            "listAccounts returned invalid object in response."
 | 
						|
            )
 | 
						|
        self.assertNotEqual(
 | 
						|
            len(list_accounts_response),
 | 
						|
            0,
 | 
						|
            "listAccounts returned empty list."
 | 
						|
            )
 | 
						|
        self.assertEqual(
 | 
						|
            list_accounts_response[0].state,
 | 
						|
            "enabled",
 | 
						|
            "The admin account created is not enabled."
 | 
						|
            )
 | 
						|
        
 | 
						|
        self.debug("Admin type account created: %s" % self.admin_account.name)
 | 
						|
        
 | 
						|
        #Create an user account
 | 
						|
        self.user_account = Account.create(
 | 
						|
                                   self.api_client,
 | 
						|
                                   self.services["account"],
 | 
						|
                                   admin=False,
 | 
						|
                                   domainid=self.domain.id
 | 
						|
                                   )
 | 
						|
        
 | 
						|
        self.cleanup_accounts.append(self.user_account)
 | 
						|
        
 | 
						|
        #verify that the account got created with state enabled
 | 
						|
        list_accounts_response = Account.list(
 | 
						|
                                        self.api_client,
 | 
						|
                                        id=self.user_account.id,
 | 
						|
                                        listall=True
 | 
						|
                                        )
 | 
						|
        self.assertEqual(
 | 
						|
            isinstance(list_accounts_response, list),
 | 
						|
            True,
 | 
						|
            "listAccounts returned invalid object in response."
 | 
						|
            )
 | 
						|
        self.assertNotEqual(
 | 
						|
            len(list_accounts_response),
 | 
						|
            0,
 | 
						|
            "listAccounts returned empty list."
 | 
						|
            )
 | 
						|
        self.assertEqual(
 | 
						|
            list_accounts_response[0].state,
 | 
						|
            "enabled",
 | 
						|
            "The user account created is not enabled."
 | 
						|
            )
 | 
						|
        
 | 
						|
        self.debug("User type account created: %s" % self.user_account.name)
 | 
						|
        
 | 
						|
        #Verify that there should be at least one physical network present in zone.
 | 
						|
        list_physical_networks_response = PhysicalNetwork.list(
 | 
						|
                                                         self.api_client,
 | 
						|
                                                         zoneid=self.zone.id
 | 
						|
                                                         )
 | 
						|
        self.assertEqual(
 | 
						|
            isinstance(list_physical_networks_response, list),
 | 
						|
            True,
 | 
						|
            "listPhysicalNetworks returned invalid object in response."
 | 
						|
            )
 | 
						|
        self.assertNotEqual(
 | 
						|
            len(list_physical_networks_response),
 | 
						|
            0,
 | 
						|
            "listPhysicalNetworks should return at least one physical network."
 | 
						|
            )
 | 
						|
        
 | 
						|
        physical_network = list_physical_networks_response[0]
 | 
						|
        
 | 
						|
        self.debug("Physical network found: %s" % physical_network.id)
 | 
						|
        
 | 
						|
        #Create Network Offering
 | 
						|
        self.isolated_network_offering = NetworkOffering.create(
 | 
						|
                                                 self.api_client,
 | 
						|
                                                 self.services["isolated_network_offering"],
 | 
						|
                                                 conservemode=False
 | 
						|
                                                 )
 | 
						|
        
 | 
						|
        self.cleanup.append(self.isolated_network_offering)
 | 
						|
        
 | 
						|
        #Verify that the network offering got created 
 | 
						|
        list_network_offerings_response = NetworkOffering.list(
 | 
						|
                                                         self.api_client,
 | 
						|
                                                         id=self.isolated_network_offering.id
 | 
						|
                                                         )
 | 
						|
        self.assertEqual(
 | 
						|
            isinstance(list_network_offerings_response, list),
 | 
						|
            True,
 | 
						|
            "listNetworkOfferings returned invalid object in response."
 | 
						|
            )
 | 
						|
        self.assertNotEqual(
 | 
						|
            len(list_network_offerings_response),
 | 
						|
            0,
 | 
						|
            "listNetworkOfferings returned empty list."
 | 
						|
            )
 | 
						|
        self.assertEqual(
 | 
						|
            list_network_offerings_response[0].state,
 | 
						|
            "Disabled",
 | 
						|
            "The network offering created should be bydefault disabled."
 | 
						|
            )
 | 
						|
        
 | 
						|
        self.debug("Isolated Network offering created: %s" % self.isolated_network_offering.id)
 | 
						|
        
 | 
						|
        #Update network offering state from disabled to enabled.
 | 
						|
        network_offering_update_response = NetworkOffering.update(
 | 
						|
                                                           self.isolated_network_offering,
 | 
						|
                                                           self.api_client,
 | 
						|
                                                           id=self.isolated_network_offering.id,
 | 
						|
                                                           state="enabled"
 | 
						|
                                                           )
 | 
						|
        
 | 
						|
        #Verify that the state of the network offering is updated
 | 
						|
        list_network_offerings_response = NetworkOffering.list(
 | 
						|
                                                         self.api_client,
 | 
						|
                                                         id=self.isolated_network_offering.id
 | 
						|
                                                         )
 | 
						|
        self.assertEqual(
 | 
						|
            isinstance(list_network_offerings_response, list),
 | 
						|
            True,
 | 
						|
            "listNetworkOfferings returned invalid object in response."
 | 
						|
            )
 | 
						|
        self.assertNotEqual(
 | 
						|
            len(list_network_offerings_response),
 | 
						|
            0,
 | 
						|
            "listNetworkOfferings returned empty list."
 | 
						|
            )
 | 
						|
        self.assertEqual(
 | 
						|
            list_network_offerings_response[0].state,
 | 
						|
            "Enabled",
 | 
						|
            "The network offering state should get updated to Enabled."
 | 
						|
            )
 | 
						|
        
 | 
						|
        #create network using the isolated network offering created
 | 
						|
        try:
 | 
						|
            self.isolated_network = Network.create(
 | 
						|
                         self.api_client,
 | 
						|
                         self.services["isolated_network"],
 | 
						|
                         networkofferingid=self.isolated_network_offering.id,
 | 
						|
                         zoneid=self.zone.id,
 | 
						|
                         )
 | 
						|
            self.cleanup_networks.append(self.isolated_network) 
 | 
						|
            self.fail("Create isolated network is invalid in advanced zone with security groups.")
 | 
						|
        except Exception as e:
 | 
						|
            self.debug("Network creation failed because create isolated network is invalid in advanced zone with security groups.")
 | 
						|
 | 
						|
    @attr(tags = ["advancedsg"])
 | 
						|
    def test_createSharedNetwork_withoutSG(self):
 | 
						|
        """ Test Shared Network with without SecurityProvider """
 | 
						|
        
 | 
						|
        # Steps,
 | 
						|
        #  1. create an Admin account
 | 
						|
        #  2. create a shared NetworkOffering
 | 
						|
        #  3. enable the network offering
 | 
						|
        #  4. listPhysicalNetworks 
 | 
						|
        #  5. createNetwork
 | 
						|
        # Validations,
 | 
						|
        #  1. listAccounts state=enabled returns your account
 | 
						|
        #  2. listNetworkOfferings - name=mysharedoffering , should list offering in disabled state
 | 
						|
        #  3. listNetworkOfferings - name=mysharedoffering, should list enabled offering
 | 
						|
        #  4. listPhysicalNetworks should return at least one active physical network
 | 
						|
        #  5. network creation should FAIL since there is no SecurityProvide in the network offering
 | 
						|
        
 | 
						|
        #Create admin account
 | 
						|
        self.admin_account = Account.create(
 | 
						|
                                     self.api_client,
 | 
						|
                                     self.services["account"],
 | 
						|
                                     admin=True,
 | 
						|
                                     domainid=self.domain.id
 | 
						|
                                     )
 | 
						|
        
 | 
						|
        self.cleanup_accounts.append(self.admin_account)
 | 
						|
        
 | 
						|
        #verify that the account got created with state enabled
 | 
						|
        list_accounts_response = Account.list(
 | 
						|
                                        self.api_client,
 | 
						|
                                        id=self.admin_account.id,
 | 
						|
                                        listall=True
 | 
						|
                                        )
 | 
						|
        self.assertEqual(
 | 
						|
            isinstance(list_accounts_response, list),
 | 
						|
            True,
 | 
						|
            "listAccounts returned invalid object in response."
 | 
						|
            )
 | 
						|
        self.assertNotEqual(
 | 
						|
            len(list_accounts_response),
 | 
						|
            0,
 | 
						|
            "listAccounts returned empty list."
 | 
						|
            )
 | 
						|
        self.assertEqual(
 | 
						|
            list_accounts_response[0].state,
 | 
						|
            "enabled",
 | 
						|
            "The admin account created is not enabled."
 | 
						|
            )
 | 
						|
        
 | 
						|
        self.debug("Domain admin account created: %s" % self.admin_account.id)
 | 
						|
        
 | 
						|
        #Verify that there should be at least one physical network present in zone.
 | 
						|
        list_physical_networks_response = PhysicalNetwork.list(
 | 
						|
                                                         self.api_client,
 | 
						|
                                                         zoneid=self.zone.id
 | 
						|
                                                         )
 | 
						|
        self.assertEqual(
 | 
						|
            isinstance(list_physical_networks_response, list),
 | 
						|
            True,
 | 
						|
            "listPhysicalNetworks returned invalid object in response."
 | 
						|
            )
 | 
						|
        self.assertNotEqual(
 | 
						|
            len(list_physical_networks_response),
 | 
						|
            0,
 | 
						|
            "listPhysicalNetworks should return at least one physical network."
 | 
						|
            )
 | 
						|
        
 | 
						|
        physical_network = list_physical_networks_response[0]
 | 
						|
        
 | 
						|
        self.debug("Physical Network found: %s" % physical_network.id)
 | 
						|
        
 | 
						|
        self.services["shared_network_offering"]["specifyVlan"] = "True"
 | 
						|
        self.services["shared_network_offering"]["specifyIpRanges"] = "True"
 | 
						|
        
 | 
						|
        #Create Network Offering
 | 
						|
        self.shared_network_offering = NetworkOffering.create(
 | 
						|
                                                 self.api_client,
 | 
						|
                                                 self.services["shared_network_offering"],
 | 
						|
                                                 conservemode=False
 | 
						|
                                                 )
 | 
						|
        
 | 
						|
        self.cleanup.append(self.shared_network_offering)
 | 
						|
        
 | 
						|
        #Verify that the network offering got created 
 | 
						|
        list_network_offerings_response = NetworkOffering.list(
 | 
						|
                                                         self.api_client,
 | 
						|
                                                         id=self.shared_network_offering.id
 | 
						|
                                                         )
 | 
						|
        self.assertEqual(
 | 
						|
            isinstance(list_network_offerings_response, list),
 | 
						|
            True,
 | 
						|
            "listNetworkOfferings returned invalid object in response."
 | 
						|
            )
 | 
						|
        self.assertNotEqual(
 | 
						|
            len(list_network_offerings_response),
 | 
						|
            0,
 | 
						|
            "listNetworkOfferings returned empty list."
 | 
						|
            )
 | 
						|
        self.assertEqual(
 | 
						|
            list_network_offerings_response[0].state,
 | 
						|
            "Disabled",
 | 
						|
            "The network offering created should be bydefault disabled."
 | 
						|
            )
 | 
						|
        
 | 
						|
        self.debug("Shared Network Offering created: %s" % self.shared_network_offering.id)
 | 
						|
        
 | 
						|
        #Update network offering state from disabled to enabled.
 | 
						|
        network_offering_update_response = NetworkOffering.update(
 | 
						|
                                                           self.shared_network_offering,
 | 
						|
                                                           self.api_client,
 | 
						|
                                                           id=self.shared_network_offering.id,
 | 
						|
                                                           state="enabled"
 | 
						|
                                                           )
 | 
						|
        
 | 
						|
        #Verify that the state of the network offering is updated
 | 
						|
        list_network_offerings_response = NetworkOffering.list(
 | 
						|
                                                         self.api_client,
 | 
						|
                                                         id=self.shared_network_offering.id
 | 
						|
                                                         )
 | 
						|
        self.assertEqual(
 | 
						|
            isinstance(list_network_offerings_response, list),
 | 
						|
            True,
 | 
						|
            "listNetworkOfferings returned invalid object in response."
 | 
						|
            )
 | 
						|
        self.assertNotEqual(
 | 
						|
            len(list_network_offerings_response),
 | 
						|
            0,
 | 
						|
            "listNetworkOfferings returned empty list."
 | 
						|
            )
 | 
						|
        self.assertEqual(
 | 
						|
            list_network_offerings_response[0].state,
 | 
						|
            "Enabled",
 | 
						|
            "The network offering state should get updated to Enabled."
 | 
						|
            )
 | 
						|
        
 | 
						|
        #create network using the shared network offering created
 | 
						|
        self.services["shared_network"]["acltype"] = "domain"
 | 
						|
        self.services["shared_network"]["networkofferingid"] = self.shared_network_offering.id
 | 
						|
        self.services["shared_network"]["physicalnetworkid"] = physical_network.id
 | 
						|
        
 | 
						|
        try:
 | 
						|
            self.shared_network = Network.create(
 | 
						|
                         self.api_client,
 | 
						|
                         self.services["shared_network"],
 | 
						|
                         networkofferingid=self.shared_network_offering.id,
 | 
						|
                         zoneid=self.zone.id
 | 
						|
                         )
 | 
						|
            self.cleanup_networks.append(self.shared_network)
 | 
						|
            self.fail("Network created without SecurityProvider , which is invalid")
 | 
						|
        except Exception as e:
 | 
						|
            self.debug("Network creation failed because there is no SecurityProvider in the network offering.")
 | 
						|
    
 | 
						|
    @attr(tags = ["advancedsg"])
 | 
						|
    def test_deployVM_SharedwithSG(self):
 | 
						|
        """ Test VM deployment in shared networks with SecurityProvider """
 | 
						|
        
 | 
						|
        # Steps,
 | 
						|
        #  0. create a user account
 | 
						|
        #  1. Create one shared Network (scope=ALL, different IP ranges)
 | 
						|
        #  2. deployVirtualMachine in the above networkid within the user account
 | 
						|
        #  3. delete the user account
 | 
						|
        # Validations,
 | 
						|
        #  1. shared network should be created successfully
 | 
						|
        #  2. VM should deploy successfully
 | 
						|
        
 | 
						|
        #Create admin account
 | 
						|
        self.admin_account = Account.create(
 | 
						|
                                     self.api_client,
 | 
						|
                                     self.services["account"],
 | 
						|
                                     admin=True,
 | 
						|
                                     domainid=self.domain.id
 | 
						|
                                     )
 | 
						|
        
 | 
						|
        self.cleanup_accounts.append(self.admin_account)
 | 
						|
        
 | 
						|
        #verify that the account got created with state enabled
 | 
						|
        list_accounts_response = Account.list(
 | 
						|
                                        self.api_client,
 | 
						|
                                        id=self.admin_account.id,
 | 
						|
                                        liistall=True
 | 
						|
                                        )
 | 
						|
        self.assertEqual(
 | 
						|
            isinstance(list_accounts_response, list),
 | 
						|
            True,
 | 
						|
            "listAccounts returned invalid object in response."
 | 
						|
            )
 | 
						|
        self.assertNotEqual(
 | 
						|
            len(list_accounts_response),
 | 
						|
            0,
 | 
						|
            "listAccounts returned empty list."
 | 
						|
            )
 | 
						|
        self.assertEqual(
 | 
						|
            list_accounts_response[0].state,
 | 
						|
            "enabled",
 | 
						|
            "The admin account created is not enabled."
 | 
						|
            )
 | 
						|
        
 | 
						|
        self.debug("Admin type account created: %s" % self.admin_account.name)
 | 
						|
        
 | 
						|
        self.services["shared_network_offering_sg"]["specifyVlan"] = "True"
 | 
						|
        self.services["shared_network_offering_sg"]["specifyIpRanges"] = "True"
 | 
						|
        
 | 
						|
        #Create Network Offering
 | 
						|
        self.shared_network_offering_sg = NetworkOffering.create(
 | 
						|
                                                 self.api_client,
 | 
						|
                                                 self.services["shared_network_offering_sg"],
 | 
						|
                                                 conservemode=False
 | 
						|
                                                 )
 | 
						|
        
 | 
						|
        self.cleanup.append(self.shared_network_offering_sg)
 | 
						|
        
 | 
						|
        #Verify that the network offering got created 
 | 
						|
        list_network_offerings_response = NetworkOffering.list(
 | 
						|
                                                         self.api_client,
 | 
						|
                                                         id=self.shared_network_offering_sg.id
 | 
						|
                                                         )
 | 
						|
        self.assertEqual(
 | 
						|
            isinstance(list_network_offerings_response, list),
 | 
						|
            True,
 | 
						|
            "listNetworkOfferings returned invalid object in response."
 | 
						|
            )
 | 
						|
        self.assertNotEqual(
 | 
						|
            len(list_network_offerings_response),
 | 
						|
            0,
 | 
						|
            "listNetworkOfferings returned empty list."
 | 
						|
            )
 | 
						|
        self.assertEqual(
 | 
						|
            list_network_offerings_response[0].state,
 | 
						|
            "Disabled",
 | 
						|
            "The network offering created should be bydefault disabled."
 | 
						|
            )
 | 
						|
        
 | 
						|
        self.debug("Shared Network offering created: %s" % self.shared_network_offering_sg.id)
 | 
						|
        
 | 
						|
        #Update network offering state from disabled to enabled.
 | 
						|
        network_offering_update_response = NetworkOffering.update(
 | 
						|
                                                           self.shared_network_offering_sg,
 | 
						|
                                                           self.api_client,
 | 
						|
                                                           id=self.shared_network_offering_sg.id,
 | 
						|
                                                           state="enabled"
 | 
						|
                                                           )
 | 
						|
        
 | 
						|
        #Verify that the state of the network offering is updated
 | 
						|
        list_network_offerings_response = NetworkOffering.list(
 | 
						|
                                                         self.api_client,
 | 
						|
                                                         id=self.shared_network_offering_sg.id
 | 
						|
                                                         )
 | 
						|
        self.assertEqual(
 | 
						|
            isinstance(list_network_offerings_response, list),
 | 
						|
            True,
 | 
						|
            "listNetworkOfferings returned invalid object in response."
 | 
						|
            )
 | 
						|
        self.assertNotEqual(
 | 
						|
            len(list_network_offerings_response),
 | 
						|
            0,
 | 
						|
            "listNetworkOfferings returned empty list."
 | 
						|
            )
 | 
						|
        self.assertEqual(
 | 
						|
            list_network_offerings_response[0].state,
 | 
						|
            "Enabled",
 | 
						|
            "The network offering state should get updated to Enabled."
 | 
						|
            )
 | 
						|
        
 | 
						|
        physical_network = PhysicalNetwork.list(self.api_client)[0]
 | 
						|
 | 
						|
	    #create network using the shared network offering created
 | 
						|
        self.services["shared_network_sg"]["acltype"] = "domain"
 | 
						|
        self.services["shared_network_sg"]["networkofferingid"] = self.shared_network_offering_sg.id
 | 
						|
        self.services["shared_network_sg"]["physicalnetworkid"] = physical_network.id
 | 
						|
        self.shared_network_sg = Network.create(
 | 
						|
                         self.api_client,
 | 
						|
                         self.services["shared_network_sg"],
 | 
						|
                         domainid=self.admin_account.domainid,
 | 
						|
                         networkofferingid=self.shared_network_offering_sg.id,
 | 
						|
                         zoneid=self.zone.id
 | 
						|
                         )
 | 
						|
        
 | 
						|
        self.cleanup_networks.append(self.shared_network_sg)
 | 
						|
        
 | 
						|
        list_networks_response = Network.list(
 | 
						|
                                        self.api_client,
 | 
						|
                                        id=self.shared_network_sg.id
 | 
						|
                                        )
 | 
						|
        self.assertEqual(
 | 
						|
            isinstance(list_networks_response, list),
 | 
						|
            True,
 | 
						|
            "listNetworks returned invalid object in response."
 | 
						|
            )
 | 
						|
        self.assertNotEqual(
 | 
						|
            len(list_networks_response),
 | 
						|
            0,
 | 
						|
            "listNetworks returned empty list."
 | 
						|
            )
 | 
						|
        self.assertEqual(
 | 
						|
            list_networks_response[0].specifyipranges,
 | 
						|
            True,
 | 
						|
            "The network is created with ip range but the flag is set to False."
 | 
						|
            )
 | 
						|
 | 
						|
        self.debug("Shared Network created: %s" % self.shared_network_sg.id)
 | 
						|
        
 | 
						|
        self.shared_network_admin_account_virtual_machine = VirtualMachine.create(
 | 
						|
                                                                     self.api_client,
 | 
						|
                                                                     self.services["virtual_machine"],
 | 
						|
                                                                     accountid=self.admin_account.name,
 | 
						|
                                                                     domainid=self.admin_account.domainid,
 | 
						|
                                                                     networkids=self.shared_network_sg.id,
 | 
						|
								     serviceofferingid=self.service_offering.id
 | 
						|
                                                                     )
 | 
						|
        self.cleanup_vms.append(self.shared_network_admin_account_virtual_machine)
 | 
						|
        vms = VirtualMachine.list(
 | 
						|
                            self.api_client,
 | 
						|
                            id=self.shared_network_admin_account_virtual_machine.id,
 | 
						|
                            listall=True
 | 
						|
                            )
 | 
						|
        self.assertEqual(
 | 
						|
            isinstance(vms, list),
 | 
						|
            True,
 | 
						|
            "listVirtualMachines returned invalid object in response."
 | 
						|
            )
 | 
						|
        self.assertNotEqual(
 | 
						|
            len(vms),
 | 
						|
            0,
 | 
						|
            "listVirtualMachines returned empty list."
 | 
						|
            )
 | 
						|
        self.debug("Virtual Machine created: %s" % self.shared_network_admin_account_virtual_machine.id)
 | 
						|
        
 | 
						|
        ip_range = list(netaddr.iter_iprange(unicode(self.services["shared_network_sg"]["startip"]), unicode(self.services["shared_network_sg"]["endip"])))
 | 
						|
        if netaddr.IPAddress(unicode(vms[0].nic[0].ipaddress)) not in ip_range:
 | 
						|
            self.fail("Virtual machine ip should be from the ip range assigned to network created.")
 | 
						|
 |