blob: 441f10f62555e56f5c9bab6fb2e49ddea0fd9a9e [file] [log] [blame]
nayna-patel914b4712013-07-16 08:29:05 +00001# Copyright 2013 OpenStack Foundation
2# All Rights Reserved.
3#
4# Licensed under the Apache License, Version 2.0 (the "License"); you may
5# not use this file except in compliance with the License. You may obtain
6# a copy of the License at
7#
8# http://www.apache.org/licenses/LICENSE-2.0
9#
10# Unless required by applicable law or agreed to in writing, software
11# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
12# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
13# License for the specific language governing permissions and limitations
14# under the License.
ghanshyam9507e6b2016-09-15 17:34:24 +090015from oslo_serialization import jsonutils as json
nayna-patel914b4712013-07-16 08:29:05 +000016
17from tempest.api.identity import base
Ken'ichi Ohmichi7bd25752017-03-10 10:45:39 -080018from tempest.lib.common.utils import data_utils
Ken'ichi Ohmichieeabdd22017-01-27 17:46:00 -080019from tempest.lib import decorators
nayna-patel914b4712013-07-16 08:29:05 +000020
21
Matthew Treinishdb2c5972014-01-31 22:18:59 +000022class CredentialsTestJSON(base.BaseIdentityV3AdminTest):
zhufl23925882020-04-29 08:42:40 +080023 """Test keystone credentials"""
24
mccasland, trevor (tm2086)c59d1132018-07-11 16:36:04 -050025 # NOTE: force_tenant_isolation is true in the base class by default but
26 # overridden to false here to allow test execution for clouds using the
27 # pre-provisioned credentials provider.
28 force_tenant_isolation = False
nayna-patel914b4712013-07-16 08:29:05 +000029
30 @classmethod
Andrea Frittoli7688e742014-09-15 12:38:22 +010031 def resource_setup(cls):
32 super(CredentialsTestJSON, cls).resource_setup()
nayna-patel914b4712013-07-16 08:29:05 +000033 cls.projects = list()
34 cls.creds_list = [['project_id', 'user_id', 'id'],
35 ['access', 'secret']]
zhufl8e9a0732017-01-26 16:15:21 +080036 for _ in range(2):
Andrea Frittoli7f60fa62017-09-09 16:31:34 +020037 project = cls.projects_client.create_project(
Ken'ichi Ohmichi96508472015-03-23 01:43:42 +000038 data_utils.rand_name('project'),
John Warren56317e02015-08-12 20:48:32 +000039 description=data_utils.rand_name('project-desc'))['project']
Andrea Frittoli7f60fa62017-09-09 16:31:34 +020040 cls.addClassResourceCleanup(
41 cls.projects_client.delete_project, project['id'])
42 cls.projects.append(project['id'])
mccasland, trevor (tm2086)c59d1132018-07-11 16:36:04 -050043 cls.user_body = cls.users_client.show_user(
44 cls.os_primary.credentials.user_id)['user']
nayna-patel914b4712013-07-16 08:29:05 +000045
46 def _delete_credential(self, cred_id):
David Kranz2aaf5312014-08-29 09:22:10 -040047 self.creds_client.delete_credential(cred_id)
nayna-patel914b4712013-07-16 08:29:05 +000048
Jordan Pittier3b46d272017-04-12 16:17:28 +020049 @decorators.attr(type='smoke')
Ken'ichi Ohmichieeabdd22017-01-27 17:46:00 -080050 @decorators.idempotent_id('7cd59bf9-bda4-4c72-9467-d21cab278355')
nayna-patel914b4712013-07-16 08:29:05 +000051 def test_credentials_create_get_update_delete(self):
zhufl23925882020-04-29 08:42:40 +080052 """Test creating, getting, updating, deleting of credentials"""
Yaroslav Lobankov17e8c852015-11-09 14:03:50 +030053 blob = '{"access": "%s", "secret": "%s"}' % (
54 data_utils.rand_name('Access'), data_utils.rand_name('Secret'))
David Kranzd8ccb792014-12-29 11:32:05 -050055 cred = self.creds_client.create_credential(
Yaroslav Lobankov17e8c852015-11-09 14:03:50 +030056 user_id=self.user_body['id'], project_id=self.projects[0],
57 blob=blob, type='ec2')['credential']
nayna-patel914b4712013-07-16 08:29:05 +000058 self.addCleanup(self._delete_credential, cred['id'])
nayna-patel914b4712013-07-16 08:29:05 +000059 for value1 in self.creds_list[0]:
60 self.assertIn(value1, cred)
61 for value2 in self.creds_list[1]:
62 self.assertIn(value2, cred['blob'])
63
Ken'ichi Ohmichi96508472015-03-23 01:43:42 +000064 new_keys = [data_utils.rand_name('NewAccess'),
65 data_utils.rand_name('NewSecret')]
Yaroslav Lobankov17e8c852015-11-09 14:03:50 +030066 blob = '{"access": "%s", "secret": "%s"}' % (new_keys[0], new_keys[1])
David Kranzd8ccb792014-12-29 11:32:05 -050067 update_body = self.creds_client.update_credential(
Yaroslav Lobankov17e8c852015-11-09 14:03:50 +030068 cred['id'], blob=blob, project_id=self.projects[1],
69 type='ec2')['credential']
ghanshyam9507e6b2016-09-15 17:34:24 +090070 update_body['blob'] = json.loads(update_body['blob'])
nayna-patel914b4712013-07-16 08:29:05 +000071 self.assertEqual(cred['id'], update_body['id'])
72 self.assertEqual(self.projects[1], update_body['project_id'])
73 self.assertEqual(self.user_body['id'], update_body['user_id'])
74 self.assertEqual(update_body['blob']['access'], new_keys[0])
75 self.assertEqual(update_body['blob']['secret'], new_keys[1])
76
lei zhangf7169e22015-11-28 22:51:36 +080077 get_body = self.creds_client.show_credential(cred['id'])['credential']
ghanshyam9507e6b2016-09-15 17:34:24 +090078 get_body['blob'] = json.loads(get_body['blob'])
nayna-patel914b4712013-07-16 08:29:05 +000079 for value1 in self.creds_list[0]:
80 self.assertEqual(update_body[value1],
81 get_body[value1])
82 for value2 in self.creds_list[1]:
83 self.assertEqual(update_body['blob'][value2],
84 get_body['blob'][value2])
85
Ken'ichi Ohmichieeabdd22017-01-27 17:46:00 -080086 @decorators.idempotent_id('13202c00-0021-42a1-88d4-81b44d448aab')
nayna-patel914b4712013-07-16 08:29:05 +000087 def test_credentials_list_delete(self):
zhufl23925882020-04-29 08:42:40 +080088 """Test listing credentials"""
nayna-patel914b4712013-07-16 08:29:05 +000089 created_cred_ids = list()
90 fetched_cred_ids = list()
91
zhufl8e9a0732017-01-26 16:15:21 +080092 for _ in range(2):
Yaroslav Lobankov17e8c852015-11-09 14:03:50 +030093 blob = '{"access": "%s", "secret": "%s"}' % (
94 data_utils.rand_name('Access'), data_utils.rand_name('Secret'))
David Kranzd8ccb792014-12-29 11:32:05 -050095 cred = self.creds_client.create_credential(
Yaroslav Lobankov17e8c852015-11-09 14:03:50 +030096 user_id=self.user_body['id'], project_id=self.projects[0],
97 blob=blob, type='ec2')['credential']
nayna-patel914b4712013-07-16 08:29:05 +000098 created_cred_ids.append(cred['id'])
99 self.addCleanup(self._delete_credential, cred['id'])
100
John Warrenf3ac5cc2015-08-10 18:06:43 +0000101 creds = self.creds_client.list_credentials()['credentials']
nayna-patel914b4712013-07-16 08:29:05 +0000102
103 for i in creds:
104 fetched_cred_ids.append(i['id'])
105 missing_creds = [c for c in created_cred_ids
106 if c not in fetched_cred_ids]
Masayuki Igawaf9009b42017-04-10 14:49:29 +0900107 self.assertEmpty(missing_creds,
nayna-patel914b4712013-07-16 08:29:05 +0000108 "Failed to find cred %s in fetched list" %
DennyZhangb432bac2013-09-17 16:24:12 +0000109 ', '.join(m_cred for m_cred in missing_creds))