This patch updates the Designate tempest plugin to accommodate stable
branches that still have keystone scoped tokens. The "Direction
change"[1] means scoped tokens were dropped in the Bobcat (2023.2)
release. However the stable branches back to Wallaby will still have
scoped tokens available as a configuration option.
[1] https://governance.openstack.org/tc/goals/selected/consistent-and-secure-rbac.html#direction-change
Change-Id: Ia57b5126dbc9fbe98cbcaa7ad0e11d36c21a14da
Tempest is fixing the bug#1964509 (depends-on) where
project_reader user will be created under the same project
as primary, project_member, project_admin users.
'primary', 'project_admin', 'project_member', and 'project_reader'
creds will be created in same projects. All the alt creds will be
created under the new projects. non alt and alt creds will use
different project, for example, 'project_alt_member' and
'project_member' creds will be created in different project.
Related-Bug: #1964509
Depends-On: https://review.opendev.org/c/openstack/tempest/+/871018
Change-Id: I143e69c1e150ddf7fa1757dea7bced6bff6739a9
This patch adds a method that allows us to get the current Designate API version under test for use in test classes to skip tests against new features introduced in a specific API version.
This patch also centralizes the "primary" zones client to be instantiated once and updates the tests to use a standardized name for the client.
Finally, it adds a missing requirement of oslo.serialization to requirements.txt.
Change-Id: I240911c0ab9b9bad7851268865d6a8e867627673
1) Refactoring:
- Replace Python underscore variable with indexing.
- Use constants.
- Move negative test cases to dedicated "Negative" class.
- Client's "create_zone_import" had to be improved.
- Using provided "wait_until" in the existing tests.
2) "test_create_zone_import_invalid_file_data"
Try to create a zone import using invalid zone file data.
Expected: zone gets into the ERROR status.
3) "test_zone_cannot_be_update_by_import"
Try to update an existing zone using Zone import.
Expected: zone import gets into the ERROR status.
4) "test_create_zone_import_invalid_content_type" to test
"415 unsupported_content_type" error response.
Change-Id: Ifce7e6ed910c43aacc566cdf692eec45779811e4
This patch adds RBAC testing for allowed and disallowed credentials.
This is one of a series of patches adding testing. This patch covers the
zones import API.
Change-Id: I3b7f7eb00a31da5d9f26e71f961ca5300ec17bd2
Currently there are intermittent test failures due to inconsistent
management of TLDs across the test classes. This is due to some test
classes using the same TLD and cleaning them up or cases where a TLD is
expected to exist, but may not have been created yet.
This patch established a dedicated TLD for each test class that creates
zones. Inside each test case, a zone name will be created with the test
name and the test class TLD. This creates the required TLD isolation to
allow successful test concurrency.
The patch also changes the base TLD from 'org' to the RFC 2606 reserved 'test'.
This should allow for easier identification of test related resources.
Change-Id: I3509767ec0ce6be6b6f15a1bc15a730a4a144b09
This patch makes the API tests compatible with keystone scoped
tokens and the new RBAC defaults.
For example, admin system scoped tokens do not have a project_id associated
with them requiring some tests to be updated to not assume the admin
credential always has a project_id.
This patch also makes some sections consistently ordered across files.
Change-Id: Ie2c7402967f40bb90e0d97dad1c3d59f82cb6d80
All the Designate service clients are registered via the plugin interface[1],
that way Tempest register and create the lazy initialization of registered
clients so that they can be access from there in consistent way.
But designate-tempest-client create a separate instance of those and access
instead of accessing the registered service client in Tempest. This commit
makes all the service clients access from Tempest registry and remove the
separate objects.
[1] https://github.com/openstack/designate-tempest-plugin/blob/master/designate_tempest_plugin/plugin.py#L78
Change-Id: I4b65ca16cd53ff4c6bece642764a4abe2a469c01
Designate has a fairly small default pagination limit of 20.
Some tests were making list API calls with the all-projects header,
which with parallel test execution could cause the list to exceed the
default pagination limit of 20. This would cause the tests to intermittently
fail.
This patch sets the request parameter "limit" to 1000 for these tests
to allow for parallel test execution which may cause lists to include
more than twenty entries.
Change-Id: Ic074c2c4dc5a5f97c609aac5992f78557722bb71
This patch improves the zone import API tests such that they will
wait for a completed status before advancing. This not only insures
the test didn't get stuck in "PENDING", but also assures the import
record has been updated with the zone ID allowing the zone to be
cleaned up at test completion.
Change-Id: Ied4d4d37b3e5428f69b6ba2b0cfecb99d7125f2c
- Fixed multiple issues with cleanups.
- Fixed tld never being removed.
- Added some additional waiters.
Change-Id: I2a83c7c2c276be6c0d4fac82e0beaa157362dca0
1) "test_create_zone_import_invalid_ttl"
Use invalid TTL value to create zone import.
Expected: should fail.
2) "test_create_zone_import_invalid_name"
Use invalid name to create zone import.
Expected: should fail
3) "test_show_import_impersonate_another_project"
Use admin client to impersonate another project and to
show created zone imports.
Note: test is based on "x-auth-sudo-project-id" HTTP header.
4) "test_list_import_zones_all_projects"
Use admin client to list all created zone imports.
Note: test is based on "x-auth-all-projects" HTTP header.
Change-Id: Icca248d21ccb495d438ff828a79c0894690792f1
these tests create zones as part of the test but do clean them up
afterward slowly. This leads to these and following tests in the thread
to fail with over quota when default zone quota is sufficiently low.
Change-Id: Iebe15ca6d0d3101237a92e011b081c38647a8de6
We need to call set_network_resources() from class with API tests, to
avoid creating network resources. Which are not needed for API tests.
Change-Id: Ia93303390d9887722fa2cfde7757e5e9103ae585
Closes-Bug: #1689415
If the import is fast, it can be done by the show, so we can't compare
zone_id.
Closes-Bug: #1734868
Change-Id: I291155304a36142ec2fd2f772215bb10f2dbae11
Tempest has deprecated decorator 'tempest.test.attr' and
moved the same as stable interface to 'tempest.lib.decorators
.attr' in version 16.1.0.
Let's use the stable interface for attr decorator.
This will help Tempest to remove the deprecated decorator.
Change-Id: If72deb25a1438470442b153a41303ca6c7cbd22b
This reduces the number of smoke tests to < 10. It includes v1 tests, v2
tests and one scenario test to check that a zone goes to active.
Change-Id: I9233a5d783649fe2bfad8e772f4165bdc4e1c619
Useage of the tempest.lib version is preferred, as it's considered
API stable, unlike the tempest.test version.
Change-Id: Ida2efd9fdd9ce095aaa33ce41c90f93efbcf0970
These are a close to a straight port as was possible, no cleanup was
performed where it wasn't absolutly necessary.
In addition, we add flags to enable V1, V2, Admin API tests, and a
V1 servers API flag, as these tests have proved particularly
susceptible to race conditions.
Change-Id: Idc31c00c95fde96087f4f222ae9c17e554e6b1fc
Michael Johnson