Add test case 9

Development of a new test that checks all
nodes and succeeds if all OVS br-int interfaces
have fail_mode=secure

JIRA: SDNVPN-168

Change-Id: Iff14f60e2d25c1769cdec7cec126425937780eb7
Signed-off-by: panageo2 <panageo@intracom-telecom.com>

3 files changed, 117 insertions, 0 deletions

diff --git a/sdnvpn/lib/utils.py b/sdnvpn/lib/utils.py
index e22e455..a7aa991 100644
--- a/sdnvpn/lib/utils.py
+++ b/sdnvpn/lib/utils.py
@@ -649,3 +649,37 @@ def create_router_association(neutron_client, bgpvpn_id, router_id):
 def create_network_association(neutron_client, bgpvpn_id, neutron_network_id):
     json_body = {"network_association": {"network_id": neutron_network_id}}
     return neutron_client.create_network_association(bgpvpn_id, json_body)
+
+
+def is_fail_mode_secure():
+    """
+    Checks the value of the attribute fail_mode,
+    if it is set to secure. This check is performed
+    on all OVS br-int interfaces, for all OpenStack nodes.
+    """
+    is_secure = {}
+    openstack_nodes = get_nodes()
+    get_ovs_int_cmd = ("sudo ovs-vsctl show | "
+                       "grep -i bridge | "
+                       "awk '{print $2}'")
+    # Define OVS get fail_mode command
+    get_ovs_fail_mode_cmd = ("sudo ovs-vsctl get-fail-mode br-int")
+    for openstack_node in openstack_nodes:
+        if not openstack_node.is_active():
+            continue
+
+        ovs_int_list = (openstack_node.run_cmd(get_ovs_int_cmd).
+                        strip().split('\n'))
+        if 'br-int' in ovs_int_list:
+            # Execute get fail_mode command
+            br_int_fail_mode = (openstack_node.
+                                run_cmd(get_ovs_fail_mode_cmd).strip())
+            if br_int_fail_mode == 'secure':
+                # success
+                is_secure[openstack_node.name] = True
+            else:
+                # failure
+                logging.error('The fail_mode for br-int was not secure '
+                              'in {} node'.format(openstack_node.name))
+                is_secure[openstack_node.name] = False
+    return is_secure
diff --git a/sdnvpn/test/functest/config.yaml b/sdnvpn/test/functest/config.yaml
index 6480c4c..3ffd215 100644
--- a/sdnvpn/test/functest/config.yaml
+++ b/sdnvpn/test/functest/config.yaml
@@ -153,3 +153,8 @@ testcases:
       secgroup_descr: Security group for SDNVPN test cases
       targets: '88:88'
       route_distinguishers: '18:18'
+
+  testcase_9:
+      enabled: true
+      description: Verify that all OpenStack nodes OVS br-int have fail_mode set to secure.
+      testname_db: functest_testcase_9
diff --git a/sdnvpn/test/functest/testcase_9.py b/sdnvpn/test/functest/testcase_9.py
new file mode 100644
index 0000000..482ff48
--- /dev/null
+++ b/sdnvpn/test/functest/testcase_9.py
@@ -0,0 +1,78 @@
+#!/usr/bin/python
+#
+# Copyright (c) 2017 All rights reserved
+# This program and the accompanying materials
+# are made available under the terms of the Apache License, Version 2.0
+# which accompanies this distribution, and is available at
+#
+# http://www.apache.org/licenses/LICENSE-2.0
+#
+# Tests performed:
+# - Peering OpenDaylight with Quagga:
+#   - Set up a Quagga instance in the functest container
+#   - Start a BGP router with OpenDaylight
+#   - Add the functest Quagga as a neighbor
+#   - Verify that the OpenDaylight and gateway Quagga peer
+import argparse
+import logging
+
+from sdnvpn.lib import utils as test_utils
+from sdnvpn.lib import config as sdnvpn_config
+
+from sdnvpn.lib.results import Results
+
+COMMON_CONFIG = sdnvpn_config.CommonConfig()
+TESTCASE_CONFIG = sdnvpn_config.TestcaseConfig("testcase_9")
+
+logger = logging.getLogger('sdnvpn-testcase-9')
+
+parser = argparse.ArgumentParser()
+
+parser.add_argument("-r", "--report",
+                    help="Create json result file",
+                    action="store_true")
+
+args = parser.parse_args()
+
+
+def main():
+    results = Results(COMMON_CONFIG.line_length)
+    results.add_to_summary(0, "=")
+    results.add_to_summary(2, "STATUS", "SUBTEST")
+    results.add_to_summary(0, "=")
+
+    openstack_nodes = test_utils.get_nodes()
+
+    # node.is_odl() doesn't work in Apex
+    # https://jira.opnfv.org/browse/RELENG-192
+    controllers = [node for node in openstack_nodes
+                   if "running" in
+                   node.run_cmd("sudo systemctl status opendaylight")]
+
+    msg = ("Verify that all OpenStack nodes OVS br-int have "
+           "fail_mode set to secure")
+    results.record_action(msg)
+    results.add_to_summary(0, "-")
+    if not controllers:
+        msg = ("Controller (ODL) list is empty. Skipping rest of tests.")
+        logger.info(msg)
+        results.add_failure(msg)
+        return results.compile_summary()
+    else:
+        msg = ("Controller (ODL) list is ready")
+        logger.info(msg)
+        results.add_success(msg)
+    # Get fail_mode status on all nodes
+    fail_mode_statuses = test_utils.is_fail_mode_secure()
+    for node_name, status in fail_mode_statuses.iteritems():
+        msg = 'Node {} br-int is fail_mode secure'.format(node_name)
+        if status:
+            results.add_success(msg)
+        else:
+            results.add_failure(msg)
+
+    return results.compile_summary()
+
+if __name__ == '__main__':
+    logging.basicConfig(level=logging.INFO)
+    main()