This patch modifies exisitng port_security_removed_added to be run
for both stateful and stateless SGs.
Change-Id: Idb49963618c45dbe5976e32d5db466f35ed534c8
Added extension "subnet-external-network" to:
* neutron-tempest-plugin-base
* neutron-tempest-plugin-openvswitch
* neutron-tempest-plugin-openvswitch-iptables_hybrid
The ``SubnetsSearchCriteriaTest.test_list_validation_filters`` test
case now filters the subnets by 'shared' and 'router:external' fields,
same as the network test case. It should behave the same with this
new extension.
Related-Bug: #2051831
Change-Id: I13144e3d722c06c918cd47860f378bf4bdaa0bf7
As our internal QE reported to us, ddt is producing more consistent
names of the same tests with different variables then testscenarios.
With testscenarios it is something like:
foo_tempest_plugin.tests.something.SomeClass.test_foo[id-123456](c1,c2)
and with ddt is more similar to tests without scenarios:
foo_tempest_plugin.tests.something.SomeClass.test_foo_1[id-123456]
Apparently due to this inconsistency results of some tests couldn't be
properly reported properly to some tools which we are using downstream.
So this patch proposes to remove usage of testscenarios in
neutron_tempest_plugin and replace it with ddt where it is needed.
Actually ddt was already used in some of the tests here so this will
make it also more consistent across the tests in that repo.
Also as part of this effort I relalised that in some cases testscenarios
where used, tests were running e.g. 2 times but actually variable set to
different value in different scenarios were not used at all. So in such
case I simply dropped usage of testscenarios and left only one variant
of the test to be run.
Change-Id: Ieabab4ccaa0e2a365939425dff0c0776839251eb
With [1], the ML2/OVN L3 plugin will have the "ha" API extension
enabled. The OVN L3 plugin does not have L3 agents; this check
should be skipped.
[1]https://review.opendev.org/c/openstack/neutron/+/910889
Related-Bug: #2020823
Change-Id: I09c12ba36b007d4f6fdd3723974ecfe9e4466b72
test_floatingip_port_details was checking device_owner port field
against a hard-coded default value of 'compute:nova'. This was
causing a MismatchError in case custom availability zones were
configured on openstack environment.
Resolves: https://bugzilla.redhat.com/show_bug.cgi?id=2247268
Change-Id: Ibdb8bf6f90818c74f1198cd89d24778c74739f50
Change is needed to check "l3-ha" extension with OVN router flavors.
This change allows to check if OVN backend or not, and add test skips
accordingly.
The tests used to run only against OVS driver, a subset of them was
found useful also with OVN, for instance this bug noticed by altered
tests:
https://bugzilla.redhat.com/show_bug.cgi?id=2263225
Change-Id: I7c2c2f23417b3b43a2788b3c4bca2f8b532b7974
Added a new test to ``RoutersTest``. If a subnet has a router
interface, the subnet gateway IP cannot be modified or deleted.
Both operations will raise a ``GatewayIpInUse`` exception.
Depends-On: https://review.opendev.org/c/openstack/neutron/+/904713
Related-Bug: #2036423
Change-Id: I46a39c53017589e23e03ceabc45c2f144ca2f3bb
These decorators were moved to the common module in tempest 17.0.0[1].
[1] cd36841ca25b39b9c8ad1b83e0abd0a191d538a0
Change-Id: Ic7a8ac8e98f4b56b2ae2b76071c6dc64c0f34066
There is a mismatch in some tests because sorted() sorts in ASCII
order - digits are followed by uppercase characters and then
lowercase characters. That doesn't work if a network's name starts
with a capital letter.
Closes-Bug: #2049211
Change-Id: I8328d7d8ca7b49b99feb24d77525abdc064aae80
This patch adds test which replaces fullstack test:
neutron.tests.fullstack.test_securitygroup.SecurityGroupRulesTest.test_normalized_cidr_in_rule
It is simple API test which can be done quickly in
neutron-tempest-plugin job. In fullstack instead it requires to prepare
whole environment with neutron-server, fake compute
node, agents, etc. so it takes much more time.
Change-Id: I4124f7f0a2edfe28c95693280b6490c8884fce11
This patch adds test which replaces fullstack test:
neutron.tests.fullstack.test_port_shut_down.PortShutDownTest
It is simple API test which can be done quickly in
neutron-tempest-plugin job. In fullstack instead it requires to prepare
whole environment with neutron-server, fake compute node, agents, etc.
so it takes much more time.
Change-Id: Ica5e72ab6d4c20fdcbd1f0dd38e6adcf627bcefd
This patch adds new test which checks if SG rules actually created
automatically for new default and non-default SG are matching template
rules from neutron DB.
Depends-On: https://review.opendev.org/c/openstack/neutron/+/884474
Related-bug: #1983053
Change-Id: Ica0810413bef7f0e3e6dff21f6c9e4cda1945a43
Importing StatelessSecGroupDualStackDHCPv6StatelessTest was causing
a type error in case CONF.neutron_plugin_options.firewall_driver
was set to 'openvswitch' [1]. This patch fixes the issue by
separation code to a class with base functions, that is never skipped
and classes with tests that optionally can be skipped.
[1] https://bugzilla.redhat.com/show_bug.cgi?id=2249407
Change-Id: I90b9cf495f35aca7a9171dc685696ae4cdd4d0f2
NetworksTestDHCPv6 [1] has better
functionality in tempest than in neutron-tempest-plugin, so with
removing these tests from neutron-tempest-plugin we can get rid
of whole module, reducing the test duplications.
[1]cc0e9b1817/tempest/api/network/test_dhcp_ipv6.py (L31)
Change-Id: I080b83965acd69c3d1b4693527c1be0b730e80a6
We should add the segmentation_id as tempest option,
so that it can be changed to match the deployment if needed.
Change-Id: I42bea9217462226e8650e55997449e1cc05f085c
Add a new test job to test VPNaaS on OVN, that will be picked up
by the proposed patch [1] in neutron-vpnaas.
Since VPNaaS for OVN doesn't support IPv6 VMs, skip 6in4 and 6in6 tests.
[1] https://review.opendev.org/c/openstack/neutron-vpnaas/+/765353
Related-Bug: #1905391
Change-Id: I9e9e8e78fd22b5edbc794ec68dbe40302ed0f3fd
This patch adds some basic API tests for the new API for default SG
rules templates. Those new tests are checking if by default SG rules are
set in the same way as legacy rules which were there since "forever".
Second test checks basic lifecycle of the SG rule template.
Depends-On: https://review.opendev.org/c/openstack/neutron/+/883246/
Related-Bug: #1983053
Change-Id: I458f54ff6b73e277fe9506e90fa6af44d9c51101
ExtraDHCPOptionsIpV6TestJSON and ExtraDHCPOptionsTestJSON -
https://opendev.org/openstack/tempest/src/branch/master/tempest/\
api/network/test_dhcp_ipv6.py has same functionality in tempest
and neutron-tempest-plugin, so with removing these tests from
neutron-tempest-plugin we can get rid of whole module, reducing
the test duplications.
Change-Id: I111eeba5c29cd7d703e6663be12e8e7e7659919e
RoutersDVRTest -https://opendev.org/openstack/tempest/src/branch\
/master/tempest/api/network/admin/test_routers_dvr.py has same
functionality in tempest and neutron-tempest-plugin, so with
removing these tests from tempest we can get rid of whole module,
reducing the test duplications.
Change-Id: Ie7d37def794a3cbdb2444ebbeba237fd58ddfb8a
There is a condition when rhel is used as default image
in tempest, so default_image_is_advanced set as true
and validation.image_ssh_user is set but
advanced_image_ssh_user is not set.
test_fragmented_traffic_is_accepted was failing
because advanced_image_ssh_user was empty.
Change-Id: I7fa5b167ba27cc78e017765eca927a1dfb24825e
Openvswitch firewall driver does not support stateless SG so tests from
classes:
StatelessSecGroupDualStackDHCPv6StatelessTest
StatelessSecGroupDualStackSlaacTest
from the module neutron_tempest_plugin.scenario.test_security_groups
should be skipped in such case.
Closes-bz: https://bugzilla.redhat.com/show_bug.cgi?id=2227138
Change-Id: Ice0f3573dd51851752c745c0b1d35c82bd7808fd
As of now the only validation done in Neutron&Designate E2E scenario
test cases is based on DNS query client only.
As a result, we don't really know what's happens on the Designate side,
for example, we wouldn't expect to see the recordset on Backend if it
wasn't previously created on the Designate.
This patch improves the situation and it will definitely help on debugging.
It will use "Designate APIs" when "query client" throws an assertion.
For example, if "A" type recordset wasn't detected on backend (as expected
by test), "Designate APIs" will be used to provide more details on failure.
Change-Id: Ie2093e457e0b664f36204d61f3020ef84ef15a3e
In nc run as client, when it is provided by the nmap (nmap-ncat package
in Centos/RHEL for example) it could happend that client which was
started with input string given through pipe (echo "test" | nc ... ) was
closed sooner than it received response from the nc server. In such case
nc client was finished without error (exit code 0) but also without
printing any message from server and that causes tests failures.
To avoid that there is option "-d 1" (--delay) added. According to the
nc man page [1] this option can be used to configure "Wait between
read/writes".
[1] https://man7.org/linux/man-pages/man1/ncat.1.html
Change-Id: Id49654aa5ca59eeb0585646d3fd5aa0de22337b5
The tenant_id property of RestClient in tempest was deprecated in
25.0.0. This replaces the deprecated property by the new project_id
property to avoid the following warning.
WARNING tempest.lib.common.rest_client [-] Deprecated: "tenant_id"
property is deprecated for removal, use "project_id" instead
Depends-on: https://review.opendev.org/c/openstack/tempest/+/707938
Change-Id: Ie3c32f9f2278b78603a4214c5717df8691ba490a
Slawek Kaplonski