1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
|
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
import ast
import json
from tempest.lib.common.utils import data_utils
from openstackclient.tests.functional.identity.v3 import common
class AccessRuleTests(common.IdentityTests):
ACCESS_RULE_FIELDS = [
'ID',
'Service',
'Method',
'Path',
]
ACCESS_RULE_LIST_HEADERS = [
'ID',
'Service',
'Method',
'Path',
]
def setUp(self):
super().setUp()
application_credential_name = data_utils.rand_name('name')
access_rules = json.dumps(
[
{
'method': 'GET',
'path': '/v2.1/servers',
'service': 'compute',
},
{
'method': 'GET',
'path': '/v2.0/networks',
'service': 'networking',
},
]
)
raw_output = self.openstack(
f"application credential create {application_credential_name} "
f"--access-rules '{access_rules}'"
)
# we immediately delete the application credential since it will leave
# the access rules around
self.openstack(
f'application credential delete {application_credential_name}'
)
items = self.parse_show_as_object(raw_output)
self.access_rule_ids = [
x['id'] for x in ast.literal_eval(items['access_rules'])
]
self.addCleanup(
self.openstack,
'access rule delete '
+ ' '.join([x for x in self.access_rule_ids]),
)
def test_access_rule(self):
# list
raw_output = self.openstack('access rule list')
items = self.parse_listing(raw_output)
self.assert_table_structure(items, self.ACCESS_RULE_LIST_HEADERS)
# show
raw_output = self.openstack(
f'access rule show {self.access_rule_ids[0]}'
)
items = self.parse_show(raw_output)
self.assert_show_fields(items, self.ACCESS_RULE_FIELDS)
|
