So far we did not have TERMINATED_HTTPS API tests in the listener API
tests (we only had scenario tests).
This patch adds the missing API tests.
Change-Id: I90b1c7c00e8642ef7d3b7af63c9bb90ba8855adb
In some of the tests, cleanups were missing after creating Octavia
resources.
This patch adds the missing cleanups.
Change-Id: I848e08295580709fa739df2d216dad0efd19a795
There has been a direction change in the "secure-RBAC" goal and scoped
tokens are no longer being implemented[1].
The Octavia tempest tests were updated for the new keystone roles and
scoped tokens at the same time with an (bad) assumption that they would be
turned on at the same time.
This patch updates the Octavia tempest plugin to not assume that scoped
tokens are in use when the RBAC type is set to keystone_default_roles.
[1] https://governance.openstack.org/tc/goals/selected/consistent-and-secure-rbac.html#direction-change
Depends-On: https://review.opendev.org/c/openstack/octavia/+/877433
Change-Id: Ia1c4ca0b675d39bd43640184d6d3deba823fd3f6
This patch adds API and scenario tests for PROMETHEUS listeners. This
includes scenario tests that connect to the metrics endpoint.
Depends-On: https://review.opendev.org/c/openstack/octavia/+/812258
Change-Id: Ia46d8c0967bc5b0f7cd11b6e3ca3a4e03c0bc138
Several tests are skipped because of story 2007979 [1] even though it
seems that the bug tracked by the story has already been resolved.
This patch removes the skip flag for these tests as the bug has already
been resolved.
[1] https://storyboard.openstack.org/#!/story/2007979
Change-Id: Ibec0bf4fba52a32dd1c9980c5d6bd7afc35d81a3
This patch fixes the check for listeners that
have been created with admin_state_up = False,
when running a driver in non-noop mode.
By error it is checking that the listener
is in ONLINE status, when this particular case
requires checking OFFLINE.
Change-Id: I07a9f6abdef29334d70e30755bb948c5b0b65d54
This commit fixes the situation when test _test_listener_list fails
because of a mismatch OPERATION_STATUS. This error can be reproduced
only in really slow environments.
Change-Id: Ie873a59fffda425c60e912abbb0d3aec68e134ed
Some checks were missing for the test_*_listener_update and
test_*_listener_delete tests in ListenerAPITest.
Change-Id: I1ee799c56286c687ea2d7c456f84f34103d58d91
All the load balancer service clients are registered via the plugin interface[1],
that way Tempest register and create the lazy initialization of registered clients
so that they can be access from there in consistent way.
But octavia-tempest-client create a separate instance of those and access instead of
accessing the registered service client in Tempest. This commit makes all the service clients
access from Tempest registry and remove the separate objects.
[1] cac3eefc44/octavia_tempest_plugin/plugin.py (L54)
Change-Id: Ie24909b49baf2c6a886e2ff711e641e36ffe6b50
lb_observer and lb_global_observer don't have any meaning when
admin_or_owner policy override in enabled.
This commit disables client creation for those roles and removes their
uses from API tests (the behavior of the owner_or_admin tests are now
similar to their behavior before the introduction of the new RBAC
tests).
Requires the following configuration in tempest.conf:
[load_balancer]
RBAC_test_type = owner_or_admin
member_role = member
admin_role = admin
Change-Id: I2231384933d5974b962a558e8c0b3bffb1140b5a
This patch refactors the RBAC enforcement checks in the API tests.
It also updates those test for keystone scoped tokens and default roles.
Change-Id: I6fad03f5a89c213562918ca258884aac34ba7ce7
Wait for the loadbalancer to become ACTIVE after deleting an
healthmonitor or a listener, to ensure the next test uses a LB in a
non-transitional state.
This also fixes the cidrs tests that were using the wrong waiter
timeouts.
This patch also moves individual deletion of children resources in class
tear down to a more performant way by cascade deleting the load
balancer.
Story: 2008219
Task: 41008
Depends-On: https://review.opendev.org/#/c/757604/
Depends-On: https://review.opendev.org/#/c/757840/
Depends-On: https://review.opendev.org/#/c/757841/
Depends-On: https://review.opendev.org/#/c/757842/
Co-Authored-By: Carlos Goncalves <cgoncalves@redhat.com>
Change-Id: I6a4eed7269e4f502bd0fc8613cb4ec4da13890e7
This is a patch to restructure the API tests to use the
new skip_if_not_implemented capability.
Depends-On: https://review.opendev.org/745239
Change-Id: I291488e1c9418e51d6fe7ea142eaca13e3c181a0
This patch adds API and scenario tests for testing allowed CIDRS in
listeners introduced in API version 2.12 (included in Train release).
Change-Id: Ibe677e046afc16f038ccacb10e5fe62802828581
The tags lists are compared unsorted which causes a MismatchError
in some cases.
This commit sorts the tags lists before the assertion.
Story 2008026
Task 40680
Change-Id: I4cc8a663d7d7c853e6286379eea74c90819209cd
This patch adds some API tests in the create, list and update methods
of the Octavia objects that support Tags.
Tags are supported on Octavia API version 2.5 or later.
Change-Id: Ib14852d57535508fecee2705e704954cfd078474
Added a test that:
- creates a UDP listener on port 80, after having created a HTTP
listener on port 80
- creates a second UDP listener on port 80, and ensures that it fails.
- creates a third listener on port 80 with a conflicting protocol over
TCP.
Story: 2005070
Task: 34781
Change-Id: I2d1d767c360b402bd1a2d924d75fc85279bf8f1d
This patch adds the listener stats service client and tempest API test.
Change-Id: I008204d5000c9a2fb4852021f0c759a2490c69b7
Story: 2004853
Task: 29079
Currently not all Provider drivers support L7 in Octavia.
Until the flavors option is not enabled, it is proposed to skip
L7 in favor of L4( specifically TCP ) protocol tests for the provider
drivers.
Change-Id: I07b4f7038d71d684c23885c89257af2711a442a0
This patch adds support for Octavia API endpoint versioning.
Previously Rocky API additions were being tested, regardless of the Octavia
API version.
It also fixes a potential race condition when testing the "ONLINE"
operating status.
The patch also makes sure that duplicate fixed IP addresses are not allocated
on subnets.
Story: 2003466
Task: 24726
Change-Id: If0ec777f34326c09c7215d9c7c2ed249571d779e
Currently we are waiting for the object to finish deleting, but
we are not waiting for the LB to go back to ACTIVE. On fast test
hosts this can lead to an immutable error on the shared parent objects.
This patch adds a "wait for active" after the object "wait for deleted".
Change-Id: Ie4c3ffeb194a779b2e4e04ef423d23e3891ad3ce
This patch implements listener tests for the Octavia
Tempest Plugin.
Co-Authored-By: Adam Harwell <flux.adam@gmail.com>
Change-Id: I5c0d3a737ff4cc929573c6fb7fbb5d46f1159d80
Story: 2001387
Task: 5965