Bug fix for the SFC-CI test case

A iteration is added so that the test is run several times.
We are experiencing that ODL requires one deployment for things
to work

Change-Id: Ic70e8f2dabbf03827dd6d7396d2ab8177140cc97
Signed-off-by: Manuel Buil <manuel.buil@ericsson.com>
(cherry picked from commit 89195402a303f6340b5f409b1df2e8bab1304270)

4 files changed, 516 insertions, 4 deletions

diff --git a/testcases/features/sfc/delete.sh b/testcases/features/sfc/delete.sh
new file mode 100755
index 000000000..b8d1fde1c
--- /dev/null
+++ b/testcases/features/sfc/delete.sh
@@ -0,0 +1,18 @@
+tacker sfc-classifier-delete red_http
+tacker sfc-classifier-delete blue_ssh
+tacker sfc-classifier-delete red_ssh
+tacker sfc-classifier-delete blue_http
+tacker sfc-delete red
+tacker sfc-delete blue
+tacker vnf-delete testVNF1
+tacker vnf-delete testVNF2
+tacker vnfd-delete test-vnfd1
+tacker vnfd-delete test-vnfd2
+#openstack stack delete sfc --y
+heat stack-delete sfc --y
+#openstack stack delete sfc_test1 --y
+heat stack-delete sfc_test1 --y
+#openstack stack delete sfc_test2 --y
+heat stack-delete sfc_test2 --y
+nova delete client
+nova delete server
diff --git a/testcases/features/sfc/set-up-tacker.sh b/testcases/features/sfc/set-up-tacker.sh
index 85832ab7f..5fba00955 100755
--- a/testcases/features/sfc/set-up-tacker.sh
+++ b/testcases/features/sfc/set-up-tacker.sh
@@ -18,11 +18,13 @@ tacker vnf-delete testVNF2
 tacker vnfd-delete test-vnfd1
 tacker vnfd-delete test-vnfd2
 #openstack stack delete sfc --y
-heat stack-delete sfc
+heat stack-delete sfc --y
 #openstack stack delete sfc_test1 --y
-heat stack-delete sfc_test1
+heat stack-delete sfc_test1 --y
 #openstack stack delete sfc_test2 --y
-heat stack-delete sfc_test2
+heat stack-delete sfc_test2 --y
+nova delete server
+nova delete client
 EOF
 
 chmod +x delete.sh
diff --git a/testcases/features/sfc/sfc.py b/testcases/features/sfc/sfc.py
index c73d8b230..e0bf4e8d7 100755
--- a/testcases/features/sfc/sfc.py
+++ b/testcases/features/sfc/sfc.py
@@ -140,7 +140,7 @@ def main():
     sg_id = os_utils.create_security_group_full(neutron_client,
                                                 SECGROUP_NAME, SECGROUP_DESCR)
 
-    # boot INTANCE
+    # boot INSTANCE
     logger.info("Creating instance '%s'..." % INSTANCE_NAME)
     logger.debug(
         "Configuration:\n name=%s \n flavor=%s \n image=%s \n "
diff --git a/testcases/features/sfc/sfc_colorado1.py b/testcases/features/sfc/sfc_colorado1.py
new file mode 100755
index 000000000..b8f6b9d75
--- /dev/null
+++ b/testcases/features/sfc/sfc_colorado1.py
@@ -0,0 +1,492 @@
+import os
+import subprocess
+import sys
+import time
+import argparse
+import paramiko
+
+import functest.utils.functest_logger as ft_logger
+import functest.utils.functest_utils as ft_utils
+import functest.utils.openstack_utils as os_utils
+
+parser = argparse.ArgumentParser()
+
+parser.add_argument("-r", "--report",
+                    help="Create json result file",
+                    action="store_true")
+
+args = parser.parse_args()
+
+""" logging configuration """
+logger = ft_logger.Logger("ODL_SFC").getLogger()
+
+FUNCTEST_REPO = ft_utils.FUNCTEST_REPO
+
+HOME = os.environ['HOME'] + "/"
+
+VM_BOOT_TIMEOUT = 180
+INSTANCE_NAME = "client"
+FLAVOR = "m1.small"
+IMAGE_NAME = "sf_nsh_colorado"
+IMAGE_FILENAME = "sf_nsh_colorado.qcow2"
+IMAGE_FORMAT = "qcow2"
+IMAGE_PATH = "/home/opnfv/functest/data" + "/" + IMAGE_FILENAME
+
+# NEUTRON Private Network parameters
+
+NET_NAME = "example-net"
+SUBNET_NAME = "example-subnet"
+SUBNET_CIDR = "11.0.0.0/24"
+ROUTER_NAME = "example-router"
+
+SECGROUP_NAME = "example-sg"
+SECGROUP_DESCR = "Example Security group"
+
+INSTANCE_NAME_2 = "server"
+
+# TEST_DB = ft_utils.get_parameter_from_yaml("results.test_db_url")
+
+PRE_SETUP_SCRIPT = 'sfc_pre_setup.bash'
+TACKER_SCRIPT = 'sfc_tacker.bash'
+TEARDOWN_SCRIPT = "sfc_teardown.bash"
+TACKER_CHANGECLASSI = "sfc_change_classi.bash"
+
+
+def main():
+
+    # Allow any port so that tacker commands reaches the server.
+    # This will be deleted when tacker is included in OPNFV installation
+
+    status = "PASS"
+    failures = 0
+    start_time = time.time()
+    json_results = {}
+
+    ssh_options = '-o UserKnownHostsFile=/dev/null -o StrictHostKeyChecking=no'
+    contr_cmd = ("sshpass -p r00tme ssh " + ssh_options + " root@10.20.0.2"
+                 " 'fuel node'|grep controller|awk '{print $10}'")
+    logger.info("Executing script to get ip_server: '%s'" % contr_cmd)
+    process = subprocess.Popen(contr_cmd,
+                               shell=True,
+                               stdout=subprocess.PIPE,
+                               stderr=subprocess.PIPE)
+    ip_server = process.stdout.readline().rstrip()
+
+    contr_cmd2 = ("sshpass -p r00tme ssh " + ssh_options + " root@10.20.0.2"
+                  " 'fuel node'|grep compute|awk '{print $10}'")
+    logger.info("Executing script to get ip_compute: '%s'" % contr_cmd2)
+    process = subprocess.Popen(contr_cmd2,
+                               shell=True,
+                               stdout=subprocess.PIPE,
+                               stderr=subprocess.PIPE)
+    ip_compute = process.stdout.readline().rstrip()
+
+    iptable_cmd1 = ("sshpass -p r00tme ssh " + ssh_options + " root@10.20.0.2"
+                    " ssh " + ip_server + " iptables -P INPUT ACCEPT ")
+    iptable_cmd2 = ("sshpass -p r00tme ssh " + ssh_options + " root@10.20.0.2"
+                    " ssh " + ip_server + " iptables -t nat -P INPUT ACCEPT ")
+    iptable_cmd3 = ("sshpass -p r00tme ssh " + ssh_options + " root@10.20.0.2"
+                    " ssh " + ssh_options + " " + ip_server +
+                    " iptables -A INPUT -m state"
+                    " --state NEW,ESTABLISHED,RELATED -j ACCEPT")
+
+    logger.info("Changing firewall policy in controller: '%s'" % iptable_cmd1)
+    subprocess.call(iptable_cmd1, shell=True, stderr=subprocess.PIPE)
+
+    logger.info("Changing firewall policy in controller: '%s'" % iptable_cmd2)
+    subprocess.call(iptable_cmd2, shell=True, stderr=subprocess.PIPE)
+
+    logger.info("Changing firewall policy in controller: '%s'" % iptable_cmd3)
+    subprocess.call(iptable_cmd2, shell=True, stderr=subprocess.PIPE)
+
+# Getting the different clients
+
+    nova_client = os_utils.get_nova_client()
+    neutron_client = os_utils.get_neutron_client()
+    glance_client = os_utils.get_glance_client()
+
+# Download the image
+
+    if not os.path.isfile(IMAGE_PATH):
+        logger.info("Downloading image")
+        ft_utils.download_url(
+            "http://artifacts.opnfv.org/sfc/demo/sf_nsh_colorado.qcow2",
+            "/home/opnfv/functest/data/")
+    else:
+        logger.info("Using old image")
+
+# Create glance image and the neutron network
+
+    image_id = os_utils.create_glance_image(glance_client,
+                                            IMAGE_NAME,
+                                            IMAGE_PATH,
+                                            disk=IMAGE_FORMAT,
+                                            container="bare",
+                                            public=True)
+
+    network_dic = os_utils.create_network_full(neutron_client,
+                                               NET_NAME,
+                                               SUBNET_NAME,
+                                               ROUTER_NAME,
+                                               SUBNET_CIDR)
+    if not network_dic:
+        logger.error(
+            "There has been a problem when creating the neutron network")
+        sys.exit(-1)
+
+    network_id = network_dic["net_id"]
+
+    sg_id = os_utils.create_security_group_full(neutron_client,
+                                                SECGROUP_NAME, SECGROUP_DESCR)
+
+    iterator = 0
+    while(iterator < 6):
+        # boot INSTANCE
+        logger.info("Creating instance '%s'..." % INSTANCE_NAME)
+        logger.debug(
+            "Configuration:\n name=%s \n flavor=%s \n image=%s \n "
+            "network=%s \n" % (INSTANCE_NAME, FLAVOR, image_id, network_id))
+        instance = os_utils.create_instance_and_wait_for_active(FLAVOR,
+                                                                image_id,
+                                                                network_id,
+                                                                INSTANCE_NAME)
+
+        if instance is None:
+            logger.error("Error while booting instance.")
+            sys.exit(-1)
+        # Retrieve IP of INSTANCE
+        instance_ip = instance.networks.get(NET_NAME)[0]
+        logger.debug("Instance '%s' got private ip '%s'." %
+                     (INSTANCE_NAME, instance_ip))
+
+        logger.info("Adding '%s' to security group '%s'..."
+                    % (INSTANCE_NAME, SECGROUP_NAME))
+        os_utils.add_secgroup_to_instance(nova_client, instance.id, sg_id)
+
+        logger.info("Creating floating IP for VM '%s'..." % INSTANCE_NAME)
+        floatip_dic = os_utils.create_floating_ip(neutron_client)
+        floatip_client = floatip_dic['fip_addr']
+        # floatip_id = floatip_dic['fip_id']
+
+        if floatip_client is None:
+            logger.error("Cannot create floating IP.")
+            sys.exit(-1)
+        logger.info("Floating IP created: '%s'" % floatip_client)
+
+        logger.info("Associating floating ip: '%s' to VM '%s' "
+                    % (floatip_client, INSTANCE_NAME))
+        if not os_utils.add_floating_ip(nova_client,
+                                        instance.id,
+                                        floatip_client):
+            logger.error("Cannot associate floating IP to VM.")
+            sys.exit(-1)
+
+    # STARTING SECOND VM (server) ###
+
+        # boot INTANCE
+        logger.info("Creating instance '%s'..." % INSTANCE_NAME)
+        logger.debug(
+            "Configuration:\n name=%s \n flavor=%s \n image=%s \n "
+            "network=%s \n" % (INSTANCE_NAME, FLAVOR, image_id, network_id))
+        instance_2 = os_utils.create_instance_and_wait_for_active(
+            FLAVOR,
+            image_id,
+            network_id,
+            INSTANCE_NAME_2)
+
+        if instance_2 is None:
+            logger.error("Error while booting instance.")
+            sys.exit(-1)
+        # Retrieve IP of INSTANCE
+        instance_ip_2 = instance_2.networks.get(NET_NAME)[0]
+        logger.debug("Instance '%s' got private ip '%s'." %
+                     (INSTANCE_NAME_2, instance_ip_2))
+
+        logger.info("Adding '%s' to security group '%s'..."
+                    % (INSTANCE_NAME_2, SECGROUP_NAME))
+        os_utils.add_secgroup_to_instance(nova_client, instance_2.id, sg_id)
+
+        logger.info("Creating floating IP for VM '%s'..." % INSTANCE_NAME_2)
+        floatip_dic = os_utils.create_floating_ip(neutron_client)
+        floatip_server = floatip_dic['fip_addr']
+        # floatip_id = floatip_dic['fip_id']
+
+        if floatip_server is None:
+            logger.error("Cannot create floating IP.")
+            sys.exit(-1)
+        logger.info("Floating IP created: '%s'" % floatip_server)
+
+        logger.info("Associating floating ip: '%s' to VM '%s' "
+                    % (floatip_server, INSTANCE_NAME_2))
+
+        if not os_utils.add_floating_ip(nova_client,
+                                        instance_2.id,
+                                        floatip_server):
+            logger.error("Cannot associate floating IP to VM.")
+            sys.exit(-1)
+
+        # CREATION OF THE 2 SF ####
+
+        tacker_script = "%s/testcases/features/sfc/%s" % \
+                        (FUNCTEST_REPO, TACKER_SCRIPT)
+        logger.info("Executing tacker script: '%s'" % tacker_script)
+        subprocess.call(tacker_script, shell=True)
+
+        # SSH CALL TO START HTTP SERVER
+        ssh = paramiko.SSHClient()
+        ssh.set_missing_host_key_policy(paramiko.AutoAddPolicy())
+
+        try:
+            ssh.connect(floatip_server, username="root",
+                        password="opnfv", timeout=2)
+            command = "python -m SimpleHTTPServer 80 > /dev/null 2>&1 &"
+            logger.info("Starting HTTP server")
+            (stdin, stdout, stderr) = ssh.exec_command(command)
+        except:
+            logger.debug("Waiting for %s..." % floatip_server)
+            time.sleep(6)
+            # timeout -= 1
+
+        instances = nova_client.servers.list(search_opts={'all_tenants': 1})
+        ips = []
+        try:
+            for instance in instances:
+                if "server" not in instance.name:
+                    if "client" not in instance.name:
+                        logger.debug(
+                            "This is the instance name: %s " % instance.name)
+                        floatip_dic = os_utils.create_floating_ip(
+                            neutron_client)
+                        floatip = floatip_dic['fip_addr']
+                        ips.append(floatip)
+                        instance.add_floating_ip(floatip)
+        except:
+            logger.debug("Problems assigning floating IP to SFs")
+
+        # If no IPs were obtained, then we cant continue
+        if not ips:
+            logger.error('Failed to obtain IPs, cant continue, exiting')
+            return
+
+        logger.info("Waiting 60 seconds for floating IP assignment")
+        for j in range(0, 6):
+            logger.debug("Test starting in"
+                         " {0} seconds".format(str((6 - j) * 10)))
+            time.sleep(10)
+
+        logger.debug("Floating IPs for SFs: %s..." % ips)
+
+        # SSH TO START THE VXLAN_TOOL ON SF1
+        logger.info("Configuring the SFs")
+        try:
+            ssh.connect(ips[0], username="root",
+                        password="opnfv", timeout=2)
+            command = ("nohup python vxlan_tool.py -i eth0 "
+                       "-d forward -v off -b 80 > /dev/null 2>&1 &")
+            (stdin, stdout, stderr) = ssh.exec_command(command)
+        except:
+            logger.debug("Waiting for %s..." % ips[0])
+            time.sleep(6)
+            # timeout -= 1
+
+        try:
+            n = 0
+            while 1:
+                (stdin, stdout, stderr) = ssh.exec_command(
+                    "ps aux | grep \"vxlan_tool.py\" | grep -v grep")
+                if len(stdout.readlines()) > 0:
+                    logger.debug("HTTP firewall started")
+                    break
+                else:
+                    n += 1
+                    if (n > 7):
+                        break
+                    logger.debug("HTTP firewall not started")
+                    time.sleep(3)
+        except Exception:
+            logger.exception("vxlan_tool not started in SF1")
+
+        # SSH TO START THE VXLAN_TOOL ON SF2
+        try:
+            ssh.connect(ips[1], username="root",
+                        password="opnfv", timeout=2)
+            command = ("nohup python vxlan_tool.py -i eth0 "
+                       "-d forward -v off -b 22 > /dev/null 2>&1 &")
+            (stdin, stdout, stderr) = ssh.exec_command(command)
+        except:
+            logger.debug("Waiting for %s..." % ips[1])
+            time.sleep(6)
+            # timeout -= 1
+
+        try:
+            n = 0
+            while 1:
+                (stdin, stdout, stderr) = ssh.exec_command(
+                    "ps aux | grep \"vxlan_tool.py\" | grep -v grep")
+                if len(stdout.readlines()) > 0:
+                    logger.debug("SSH firewall started")
+                    break
+                else:
+                    n += 1
+                    if (n > 7):
+                        break
+                    logger.debug("SSH firewall not started")
+                    time.sleep(3)
+        except Exception:
+            logger.exception("vxlan_tool not started in SF2")
+
+        # SSH to modify the classification flows in compute
+
+        contr_cmd3 = ("sshpass -p r00tme ssh " + ssh_options + " "
+                      "root@10.20.0.2 'ssh " + ip_compute + " "
+                      "'bash correct_classifier.bash''")
+        logger.info("Executing script to modify the classi: '%s'" % contr_cmd3)
+        process = subprocess.Popen(contr_cmd3,
+                                   shell=True,
+                                   stdout=subprocess.PIPE)
+
+        i = 0
+
+        # SSH TO EXECUTE cmd_client
+        logger.info("TEST STARTED")
+        try:
+            ssh.connect(floatip_client, username="root",
+                        password="opnfv", timeout=2)
+            command = "nc -w 5 -zv " + instance_ip_2 + " 22 2>&1"
+            (stdin, stdout, stderr) = ssh.exec_command(command)
+
+            # WRITE THE CORRECT WAY TO DO LOGGING
+            if "timed out" in stdout.readlines()[0]:
+                logger.info('\033[92m' + "TEST 1 [PASSED] "
+                            "==> SSH BLOCKED" + '\033[0m')
+                i = i + 1
+                json_results.update({"Test 1: SSH Blocked": "Passed"})
+            else:
+                logger.error('\033[91m' + "TEST 1 [FAILED] "
+                             "==> SSH NOT BLOCKED" + '\033[0m')
+                status = "FAIL"
+                json_results.update({"Test 1: SSH Blocked": "Failed"})
+                failures += 1
+        except:
+            logger.debug("Waiting for %s..." % floatip_client)
+            time.sleep(6)
+            # timeout -= 1
+
+        # SSH TO EXECUTE cmd_client
+        try:
+            ssh.connect(floatip_client, username="root",
+                        password="opnfv", timeout=2)
+            command = "nc -w 5 -zv " + instance_ip_2 + " 80 2>&1"
+            (stdin, stdout, stderr) = ssh.exec_command(command)
+
+            if "succeeded" in stdout.readlines()[0]:
+                logger.info('\033[92m' + "TEST 2 [PASSED] "
+                            "==> HTTP WORKS" + '\033[0m')
+                i = i + 1
+                json_results.update({"Test 2: HTTP works": "Passed"})
+            else:
+                logger.error('\033[91m' + "TEST 2 [FAILED] "
+                             "==> HTTP BLOCKED" + '\033[0m')
+                status = "FAIL"
+                json_results.update({"Test 2: HTTP works": "Failed"})
+                failures += 1
+        except:
+            logger.debug("Waiting for %s..." % floatip_client)
+            time.sleep(6)
+            # timeout -= 1
+
+        # CHANGE OF CLASSIFICATION #
+        logger.info("Changing the classification")
+        tacker_classi = "%s/testcases/features/sfc/%s" % \
+                        (FUNCTEST_REPO, TACKER_CHANGECLASSI)
+        subprocess.call(tacker_classi, shell=True)
+
+        logger.info("Wait for ODL to update the classification rules in OVS")
+        time.sleep(10)
+
+        # SSH to modify the classification flows in compute
+
+        contr_cmd4 = ("sshpass -p r00tme ssh " + ssh_options + " "
+                      "root@10.20.0.2 'ssh " + ip_compute + " "
+                      "'bash correct_classifier.bash''")
+        logger.info("Executing script to modify the classi: '%s'" % contr_cmd4)
+        process = subprocess.Popen(contr_cmd4,
+                                   shell=True,
+                                   stdout=subprocess.PIPE)
+
+        # SSH TO EXECUTE cmd_client
+
+        try:
+            ssh.connect(floatip_client, username="root",
+                        password="opnfv", timeout=2)
+            command = "nc -w 5 -zv " + instance_ip_2 + " 80 2>&1"
+            (stdin, stdout, stderr) = ssh.exec_command(command)
+
+            if "timed out" in stdout.readlines()[0]:
+                logger.info('\033[92m' + "TEST 3 [PASSED] "
+                            "==> HTTP BLOCKED" + '\033[0m')
+                i = i + 1
+                json_results.update({"Test 3: HTTP Blocked": "Passed"})
+            else:
+                logger.error('\033[91m' + "TEST 3 [FAILED] "
+                             "==> HTTP NOT BLOCKED" + '\033[0m')
+                status = "FAIL"
+                json_results.update({"Test 3: HTTP Blocked": "Failed"})
+                failures += 1
+        except:
+            logger.debug("Waiting for %s..." % floatip_client)
+            time.sleep(6)
+            # timeout -= 1
+
+        # SSH TO EXECUTE cmd_client
+        try:
+            ssh.connect(floatip_client, username="root",
+                        password="opnfv", timeout=2)
+            command = "nc -w 5 -zv " + instance_ip_2 + " 22 2>&1"
+            (stdin, stdout, stderr) = ssh.exec_command(command)
+
+            if "succeeded" in stdout.readlines()[0]:
+                logger.info('\033[92m' + "TEST 4 [PASSED] "
+                            "==> SSH WORKS" + '\033[0m')
+                i = i + 1
+                json_results.update({"Test 4: SSH works": "Passed"})
+            else:
+                logger.error('\033[91m' + "TEST 4 [FAILED] "
+                             "==> SSH BLOCKED" + '\033[0m')
+                status = "FAIL"
+                json_results.update({"Test 4: SSH works": "Failed"})
+                failures += 1
+        except:
+            logger.debug("Waiting for %s..." % floatip_client)
+            time.sleep(6)
+            # timeout -= 1
+
+        iterator += 1
+        if i == 4:
+            for x in range(0, 5):
+                logger.info('\033[92m' + "SFC TEST WORKED"
+                            " :) \n" + '\033[0m')
+            break
+        else:
+            logger.debug("Iterating again!")
+            delete = ("bash delete.sh")
+            subprocess.call(delete, shell=True, stderr=subprocess.PIPE)
+            time.sleep(10)
+
+    if args.report:
+        stop_time = time.time()
+        json_results.update({"tests": "4", "failures": int(failures)})
+        logger.debug("Promise Results json: " + str(json_results))
+        ft_utils.push_results_to_db("sfc",
+                                    "functest-odl-sfc",
+                                    start_time,
+                                    stop_time,
+                                    status,
+                                    json_results)
+    if status == "PASS":
+        sys.exit(0)
+    else:
+        sys.exit(1)
+
+if __name__ == '__main__':
+    main()