summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
-rw-r--r--sdnvpn/lib/utils.py34
-rw-r--r--sdnvpn/test/functest/config.yaml5
-rw-r--r--sdnvpn/test/functest/testcase_9.py78
3 files changed, 117 insertions, 0 deletions
diff --git a/sdnvpn/lib/utils.py b/sdnvpn/lib/utils.py
index e22e455..a7aa991 100644
--- a/sdnvpn/lib/utils.py
+++ b/sdnvpn/lib/utils.py
@@ -649,3 +649,37 @@ def create_router_association(neutron_client, bgpvpn_id, router_id):
def create_network_association(neutron_client, bgpvpn_id, neutron_network_id):
json_body = {"network_association": {"network_id": neutron_network_id}}
return neutron_client.create_network_association(bgpvpn_id, json_body)
+
+
+def is_fail_mode_secure():
+ """
+ Checks the value of the attribute fail_mode,
+ if it is set to secure. This check is performed
+ on all OVS br-int interfaces, for all OpenStack nodes.
+ """
+ is_secure = {}
+ openstack_nodes = get_nodes()
+ get_ovs_int_cmd = ("sudo ovs-vsctl show | "
+ "grep -i bridge | "
+ "awk '{print $2}'")
+ # Define OVS get fail_mode command
+ get_ovs_fail_mode_cmd = ("sudo ovs-vsctl get-fail-mode br-int")
+ for openstack_node in openstack_nodes:
+ if not openstack_node.is_active():
+ continue
+
+ ovs_int_list = (openstack_node.run_cmd(get_ovs_int_cmd).
+ strip().split('\n'))
+ if 'br-int' in ovs_int_list:
+ # Execute get fail_mode command
+ br_int_fail_mode = (openstack_node.
+ run_cmd(get_ovs_fail_mode_cmd).strip())
+ if br_int_fail_mode == 'secure':
+ # success
+ is_secure[openstack_node.name] = True
+ else:
+ # failure
+ logging.error('The fail_mode for br-int was not secure '
+ 'in {} node'.format(openstack_node.name))
+ is_secure[openstack_node.name] = False
+ return is_secure
diff --git a/sdnvpn/test/functest/config.yaml b/sdnvpn/test/functest/config.yaml
index 6480c4c..3ffd215 100644
--- a/sdnvpn/test/functest/config.yaml
+++ b/sdnvpn/test/functest/config.yaml
@@ -153,3 +153,8 @@ testcases:
secgroup_descr: Security group for SDNVPN test cases
targets: '88:88'
route_distinguishers: '18:18'
+
+ testcase_9:
+ enabled: true
+ description: Verify that all OpenStack nodes OVS br-int have fail_mode set to secure.
+ testname_db: functest_testcase_9
diff --git a/sdnvpn/test/functest/testcase_9.py b/sdnvpn/test/functest/testcase_9.py
new file mode 100644
index 0000000..482ff48
--- /dev/null
+++ b/sdnvpn/test/functest/testcase_9.py
@@ -0,0 +1,78 @@
+#!/usr/bin/python
+#
+# Copyright (c) 2017 All rights reserved
+# This program and the accompanying materials
+# are made available under the terms of the Apache License, Version 2.0
+# which accompanies this distribution, and is available at
+#
+# http://www.apache.org/licenses/LICENSE-2.0
+#
+# Tests performed:
+# - Peering OpenDaylight with Quagga:
+# - Set up a Quagga instance in the functest container
+# - Start a BGP router with OpenDaylight
+# - Add the functest Quagga as a neighbor
+# - Verify that the OpenDaylight and gateway Quagga peer
+import argparse
+import logging
+
+from sdnvpn.lib import utils as test_utils
+from sdnvpn.lib import config as sdnvpn_config
+
+from sdnvpn.lib.results import Results
+
+COMMON_CONFIG = sdnvpn_config.CommonConfig()
+TESTCASE_CONFIG = sdnvpn_config.TestcaseConfig("testcase_9")
+
+logger = logging.getLogger('sdnvpn-testcase-9')
+
+parser = argparse.ArgumentParser()
+
+parser.add_argument("-r", "--report",
+ help="Create json result file",
+ action="store_true")
+
+args = parser.parse_args()
+
+
+def main():
+ results = Results(COMMON_CONFIG.line_length)
+ results.add_to_summary(0, "=")
+ results.add_to_summary(2, "STATUS", "SUBTEST")
+ results.add_to_summary(0, "=")
+
+ openstack_nodes = test_utils.get_nodes()
+
+ # node.is_odl() doesn't work in Apex
+ # https://jira.opnfv.org/browse/RELENG-192
+ controllers = [node for node in openstack_nodes
+ if "running" in
+ node.run_cmd("sudo systemctl status opendaylight")]
+
+ msg = ("Verify that all OpenStack nodes OVS br-int have "
+ "fail_mode set to secure")
+ results.record_action(msg)
+ results.add_to_summary(0, "-")
+ if not controllers:
+ msg = ("Controller (ODL) list is empty. Skipping rest of tests.")
+ logger.info(msg)
+ results.add_failure(msg)
+ return results.compile_summary()
+ else:
+ msg = ("Controller (ODL) list is ready")
+ logger.info(msg)
+ results.add_success(msg)
+ # Get fail_mode status on all nodes
+ fail_mode_statuses = test_utils.is_fail_mode_secure()
+ for node_name, status in fail_mode_statuses.iteritems():
+ msg = 'Node {} br-int is fail_mode secure'.format(node_name)
+ if status:
+ results.add_success(msg)
+ else:
+ results.add_failure(msg)
+
+ return results.compile_summary()
+
+if __name__ == '__main__':
+ logging.basicConfig(level=logging.INFO)
+ main()