openstack
/
keystone
Code Issues Proposed changes

Test for fernet rotation recovery after disk full 

This expanded test illustrates that the key rotation mechanism can
recover from repeated rotation attempts while the disk was full.

Change-Id: I042a15929c5e61aeaf357d88f224cdc026b5a5ed
This commit is contained in:
Dolph Mathews 2017-03-07 15:16:32 +00:00
parent 1ec73f3b97
commit 41fdcf78b0
1 changed files with 14 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

14
keystone/tests/unit/token/test_fernet_provider.py
View File

@ -621,6 +621,20 @@ class TestFernetKeyRotation(unit.TestCase):
# Assert that the key repository is unchanged
self.assertEqual(self.key_repository_size, 2)
with mock.patch('keystone.common.fernet_utils.open', mock_open):
self.assertRaises(IOError, key_utils.rotate_keys)
# Assert that the key repository is still unchanged, even after
# repeated rotation attempts.
self.assertEqual(self.key_repository_size, 2)
# Rotate the keys normally, without any mocking, to show that the
# system can recover.
key_utils.rotate_keys()
# Assert that the key repository is now expanded.
self.assertEqual(self.key_repository_size, 3)
def test_non_numeric_files(self):
self.useFixture(
ksfixtures.KeyRepository(