Feature 11046: Security Group Name as Ns Config Template - RO
Change-Id: I53f910669d1de5863afa151eb2d2a0a68cede53f
Signed-off-by: kayal2001 <kayalvizhi.v@tataelxsi.co.in>
diff --git a/RO-VIM-openstack/osm_rovim_openstack/tests/test_vimconn_openstack.py b/RO-VIM-openstack/osm_rovim_openstack/tests/test_vimconn_openstack.py
index 44b63d2..1dd1c6a 100644
--- a/RO-VIM-openstack/osm_rovim_openstack/tests/test_vimconn_openstack.py
+++ b/RO-VIM-openstack/osm_rovim_openstack/tests/test_vimconn_openstack.py
@@ -60,6 +60,7 @@
]
availability_zone_index = 0
availability_zone_list = ["nova"]
+security_group_name = None
floating_network_vim_id = "108b73-e9cc-5a6a-t270-82cc4811bd4a"
net_id = "83372685-f67f-49fd-8722-eabb7692fc22"
net2_id = "46472685-f67f-49fd-8722-eabb7692fc22"
@@ -521,6 +522,7 @@
"name": "management",
"admin_state_up": True,
}
+ security_group_name = None
new_port_result, port_result = self.vimconn._create_port(
net, name, created_items
@@ -529,7 +531,9 @@
self.assertDictEqual(new_port_result, new_port)
self.assertDictEqual(port_result, expected_port)
- mock_prepare_port_dict_security_groups.assert_called_once_with(net, port_dict)
+ mock_prepare_port_dict_security_groups.assert_called_once_with(
+ net, port_dict, security_group_name
+ )
mock_prepare_port_dict_binding.assert_called_once_with(net, port_dict)
mock_prepare_port_dict_mac_ip_addr.assert_called_once_with(net, port_dict)
mock_create_new_port.assert_called_once_with(port_dict, created_items, net)
@@ -572,6 +576,7 @@
"admin_state_up": True,
"name": name,
}
+ security_group_name = None
new_port_result, port_result = self.vimconn._create_port(
net, name, created_items
@@ -580,7 +585,9 @@
self.assertDictEqual(new_port_result, new_port)
self.assertDictEqual(port_result, expected_port)
- mock_prepare_port_dict_security_groups.assert_called_once_with(net, port_dict)
+ mock_prepare_port_dict_security_groups.assert_called_once_with(
+ net, port_dict, security_group_name
+ )
mock_prepare_port_dict_binding.assert_called_once_with(net, port_dict)
mock_prepare_port_dict_mac_ip_addr.assert_called_once_with(net, port_dict)
mock_create_new_port.assert_called_once_with(port_dict, created_items, net)
@@ -623,6 +630,7 @@
"admin_state_up": True,
"name": name,
}
+ security_group_name = None
new_port_result, port_result = self.vimconn._create_port(
net, name, created_items
@@ -631,7 +639,9 @@
self.assertDictEqual(new_port_result, new_port)
self.assertDictEqual(port_result, expected_port)
- mock_prepare_port_dict_security_groups.assert_called_once_with(net, port_dict)
+ mock_prepare_port_dict_security_groups.assert_called_once_with(
+ net, port_dict, security_group_name
+ )
mock_prepare_port_dict_binding.assert_called_once_with(net, port_dict)
mock_prepare_port_dict_mac_ip_addr.assert_called_once_with(net, port_dict)
mock_create_new_port.assert_called_once_with(port_dict, created_items, net)
@@ -662,11 +672,14 @@
"admin_state_up": True,
"name": name,
}
+ security_group_name = None
with self.assertRaises(Exception):
self.vimconn._create_port(net, name, created_items)
- mock_prepare_port_dict_security_groups.assert_called_once_with(net, port_dict)
+ mock_prepare_port_dict_security_groups.assert_called_once_with(
+ net, port_dict, security_group_name
+ )
mock_prepare_port_dict_binding.assert_called_once_with(net, port_dict)
mock_prepare_port_dict_mac_ip_addr.assert_called_once_with(net, port_dict)
mock_create_new_port.assert_called_once_with(port_dict, created_items, net)
@@ -697,11 +710,14 @@
"admin_state_up": True,
"name": name,
}
+ security_group_name = None
with self.assertRaises(Exception):
self.vimconn._create_port(net, name, created_items)
- mock_prepare_port_dict_security_groups.assert_called_once_with(net, port_dict)
+ mock_prepare_port_dict_security_groups.assert_called_once_with(
+ net, port_dict, security_group_name
+ )
mock_prepare_port_dict_binding.assert_not_called()
mock_prepare_port_dict_mac_ip_addr.assert_not_called()
@@ -734,11 +750,14 @@
"admin_state_up": True,
"name": name,
}
+ security_group_name = None
with self.assertRaises(Exception):
self.vimconn._create_port(net, name, created_items)
- mock_prepare_port_dict_security_groups.assert_called_once_with(net, port_dict)
+ mock_prepare_port_dict_security_groups.assert_called_once_with(
+ net, port_dict, security_group_name
+ )
mock_prepare_port_dict_binding.assert_called_once_with(net, port_dict)
@@ -771,11 +790,14 @@
"admin_state_up": True,
"name": name,
}
+ security_group_name = None
with self.assertRaises(Exception):
self.vimconn._create_port(net, name, created_items)
- mock_prepare_port_dict_security_groups.assert_called_once_with(net, port_dict)
+ mock_prepare_port_dict_security_groups.assert_called_once_with(
+ net, port_dict, security_group_name
+ )
mock_prepare_port_dict_binding.assert_called_once_with(net, port_dict)
mock_prepare_port_dict_mac_ip_addr.assert_called_once_with(net, port_dict)
@@ -817,12 +839,15 @@
"fixed_ips": [{"ip_address": ip_addr1}],
},
}
+ security_group_name = None
mock_create_new_port.return_value = new_port
with self.assertRaises(VimConnException):
self.vimconn._create_port(net, name, created_items)
- mock_prepare_port_dict_security_groups.assert_called_once_with(net, port_dict)
+ mock_prepare_port_dict_security_groups.assert_called_once_with(
+ net, port_dict, security_group_name
+ )
mock_prepare_port_dict_binding.assert_called_once_with(net, port_dict)
mock_prepare_port_dict_mac_ip_addr.assert_called_once_with(net, port_dict)
mock_create_new_port.assert_called_once_with(port_dict, created_items, net)
@@ -938,6 +963,7 @@
self.assertEqual(external_network, expected_external_network)
self.assertEqual(expected_no_secured_ports, no_secured_ports)
+ security_group_name = None
mock_create_port.assert_called_once_with(
{
"net_id": net2_id,
@@ -946,6 +972,7 @@
},
name,
created_items,
+ security_group_name,
)
@patch.object(vimconnector, "_reload_connection")
@@ -1001,6 +1028,7 @@
self.assertEqual(external_network, expected_external_network)
self.assertEqual(expected_no_secured_ports, no_secured_ports)
+ security_group_name = None
mock_create_port.assert_called_once_with(
{
"net_id": net2_id,
@@ -1009,6 +1037,7 @@
},
name,
created_items,
+ security_group_name,
)
@patch.object(vimconnector, "_reload_connection")
@@ -1067,6 +1096,7 @@
no_secured_ports,
)
+ security_group_name = None
mock_create_port.assert_called_once_with(
{
"net_id": net2_id,
@@ -1077,6 +1107,7 @@
},
name,
created_items,
+ security_group_name,
)
self.assertEqual(expected_net_list_vim, net_list_vim)
self.assertEqual(external_network, expected_external_network)
@@ -1128,6 +1159,7 @@
no_secured_ports,
)
+ security_group_name = None
mock_create_port.assert_called_once_with(
{
"net_id": net2_id,
@@ -1137,6 +1169,7 @@
},
name,
created_items,
+ security_group_name,
)
self.assertEqual(expected_net_list_vim, net_list_vim)
self.assertEqual(external_network, expected_external_network)
@@ -1188,6 +1221,7 @@
no_secured_ports,
)
+ security_group_name = None
mock_create_port.assert_called_once_with(
{
"net_id": net2_id,
@@ -1197,6 +1231,7 @@
},
name,
created_items,
+ security_group_name,
)
self.assertEqual(expected_net_list_vim, net_list_vim)
self.assertEqual(external_network, expected_external_network)
@@ -1240,6 +1275,7 @@
self.assertEqual(type(err.exception), KeyError)
+ security_group_name = None
mock_create_port.assert_called_once_with(
{
"net_id": net2_id,
@@ -1249,6 +1285,7 @@
},
name,
created_items,
+ security_group_name,
)
self.assertEqual(expected_net_list_vim, net_list_vim)
self.assertEqual(external_network, expected_external_network)
@@ -3285,6 +3322,7 @@
disk_list2,
availability_zone_index,
availability_zone_list,
+ security_group_name,
)
self.assertEqual(result, expected_result)
@@ -3296,6 +3334,7 @@
net_list_vim=[],
external_network=[],
no_secured_ports=[],
+ security_group_name=security_group_name,
)
mock_create_user_data.assert_called_once_with(cloud_config)
mock_get_vm_availability_zone.assert_called_once_with(
@@ -3385,6 +3424,7 @@
disk_list,
availability_zone_index,
availability_zone_list,
+ security_group_name,
)
mock_reload_connection.assert_called_once()
@@ -3395,6 +3435,7 @@
net_list_vim=[],
external_network=[],
no_secured_ports=[],
+ security_group_name=security_group_name,
)
mock_create_user_data.assert_called_once_with(cloud_config)
mock_get_vm_availability_zone.assert_not_called()
@@ -3473,6 +3514,7 @@
net_list_vim=[],
external_network=[],
no_secured_ports=[],
+ security_group_name=security_group_name,
)
mock_create_user_data.assert_called_once_with(cloud_config)
mock_get_vm_availability_zone.assert_called_once_with(
@@ -3560,6 +3602,7 @@
disk_list2,
availability_zone_index,
availability_zone_list,
+ security_group_name,
)
self.assertEqual(result, expected_result)
@@ -3571,6 +3614,7 @@
net_list_vim=[],
external_network=[],
no_secured_ports=[],
+ security_group_name=security_group_name,
)
mock_create_user_data.assert_called_once_with(cloud_config)
mock_get_vm_availability_zone.assert_called_once_with(
@@ -3660,6 +3704,7 @@
disk_list2,
availability_zone_index,
availability_zone_list,
+ security_group_name,
)
mock_reload_connection.assert_called_once()
@@ -3670,6 +3715,7 @@
net_list_vim=[],
external_network=[],
no_secured_ports=[],
+ security_group_name=security_group_name,
)
mock_create_user_data.assert_called_once_with(cloud_config)
mock_get_vm_availability_zone.assert_called_once_with(
diff --git a/RO-VIM-openstack/osm_rovim_openstack/vimconn_openstack.py b/RO-VIM-openstack/osm_rovim_openstack/vimconn_openstack.py
index e9d4062..501c692 100644
--- a/RO-VIM-openstack/osm_rovim_openstack/vimconn_openstack.py
+++ b/RO-VIM-openstack/osm_rovim_openstack/vimconn_openstack.py
@@ -637,7 +637,7 @@
type(exception).__name__ + ": " + message_error
)
- def _get_ids_from_name(self):
+ def _get_ids_from_name(self, security_group_name=None):
"""
Obtain ids from name of tenant and security_groups. Store at self .security_groups_id"
:return: None
@@ -652,11 +652,15 @@
)
)
+ neutron_sg_list = self.neutron.list_security_groups(
+ tenant_id=self.my_tenant_id
+ )["security_groups"]
+
if self.config.get("security_groups") and not self.security_groups_id:
# convert from name to id
- neutron_sg_list = self.neutron.list_security_groups(
- tenant_id=self.my_tenant_id
- )["security_groups"]
+ # neutron_sg_list = self.neutron.list_security_groups(
+ # tenant_id=self.my_tenant_id
+ # )["security_groups"]
self.security_groups_id = []
for sg in self.config.get("security_groups"):
@@ -671,6 +675,18 @@
"Not found security group {} for this tenant".format(sg)
)
+ if security_group_name is not None:
+ self.security_groups_id = []
+ for neutron_sg in neutron_sg_list:
+ if security_group_name in (neutron_sg["id"], neutron_sg["name"]):
+ self.security_groups_id.append(neutron_sg["id"])
+ break
+ else:
+ self.security_groups_id = None
+ raise vimconn.VimConnConnectionException(
+ "Not found security group {} for this tenant".format(sg)
+ )
+
def _find_nova_server(self, vm_id):
"""
Returns the VM instance from Openstack and completes it with flavor ID
@@ -1933,7 +1949,9 @@
"No enough availability zones at VIM for this deployment"
)
- def _prepare_port_dict_security_groups(self, net: dict, port_dict: dict) -> None:
+ def _prepare_port_dict_security_groups(
+ self, net: dict, port_dict: dict, security_group_name=None
+ ) -> None:
"""Fill up the security_groups in the port_dict.
Args:
@@ -1951,6 +1969,10 @@
port_dict["security_groups"] = self.security_groups_id
+ if security_group_name is not None:
+ self._get_ids_from_name(security_group_name)
+ port_dict["security_groups"] = self.security_groups_id
+
def _prepare_port_dict_binding(self, net: dict, port_dict: dict) -> None:
"""Fill up the network binding depending on network type in the port_dict.
@@ -2038,7 +2060,7 @@
return new_port
def _create_port(
- self, net: dict, name: str, created_items: dict
+ self, net: dict, name: str, created_items: dict, security_group_name=None
) -> Tuple[dict, dict]:
"""Create port using net details.
@@ -2061,7 +2083,7 @@
if not port_dict["name"]:
port_dict["name"] = name
- self._prepare_port_dict_security_groups(net, port_dict)
+ self._prepare_port_dict_security_groups(net, port_dict, security_group_name)
self._prepare_port_dict_binding(net, port_dict)
@@ -2086,6 +2108,7 @@
net_list_vim: list,
external_network: list,
no_secured_ports: list,
+ security_group_name=None,
) -> None:
"""Create port and fill up net dictionary for new VM instance creation.
@@ -2105,7 +2128,9 @@
if not net.get("net_id"):
continue
- new_port, port = self._create_port(net, name, created_items)
+ new_port, port = self._create_port(
+ net, name, created_items, security_group_name
+ )
net_list_vim.append(port)
@@ -2760,6 +2785,7 @@
disk_list=None,
availability_zone_index=None,
availability_zone_list=None,
+ security_group_name=None,
) -> tuple:
"""Adds a VM instance to VIM.
@@ -2842,6 +2868,7 @@
net_list_vim=net_list_vim,
external_network=external_network,
no_secured_ports=no_secured_ports,
+ security_group_name=security_group_name,
)
# Cloud config