mirror of
https://github.com/prowler-cloud/prowler.git
synced 2026-07-04 19:21:51 +00:00
Daniel Barranquero
246 lines
9.6 KiB
Python
246 lines
9.6 KiB
Python
"""Tests for OpenStack Provider CLI arguments."""
|
|
|
|
from argparse import ArgumentParser, Namespace
|
|
|
|
import pytest
|
|
|
|
from prowler.providers.openstack.lib.arguments.arguments import (
|
|
init_parser,
|
|
validate_arguments,
|
|
)
|
|
|
|
|
|
class TestOpenstackArguments:
|
|
"""Test suite for OpenStack Provider CLI arguments."""
|
|
|
|
@pytest.fixture
|
|
def parser(self):
|
|
"""Create a basic argument parser for testing."""
|
|
parser = ArgumentParser()
|
|
parser.common_providers_parser = ArgumentParser(add_help=False)
|
|
parser.subparsers = parser.add_subparsers(dest="provider")
|
|
init_parser(parser)
|
|
return parser
|
|
|
|
def test_init_parser_creates_openstack_subparser(self, parser):
|
|
"""Test that init_parser creates the OpenStack subparser."""
|
|
args = parser.parse_args(["openstack"])
|
|
assert args.provider == "openstack"
|
|
|
|
def test_clouds_yaml_file_argument(self, parser):
|
|
"""Test that --clouds-yaml-file argument is parsed correctly."""
|
|
args = parser.parse_args(
|
|
["openstack", "--clouds-yaml-file", "/path/to/clouds.yaml"]
|
|
)
|
|
assert args.clouds_yaml_file == "/path/to/clouds.yaml"
|
|
|
|
def test_clouds_yaml_cloud_argument(self, parser):
|
|
"""Test that --clouds-yaml-cloud argument is parsed correctly."""
|
|
args = parser.parse_args(["openstack", "--clouds-yaml-cloud", "production"])
|
|
assert args.clouds_yaml_cloud == "production"
|
|
|
|
def test_os_auth_url_argument(self, parser):
|
|
"""Test that --os-auth-url argument is parsed correctly."""
|
|
args = parser.parse_args(
|
|
["openstack", "--os-auth-url", "https://openstack.example.com:5000/v3"]
|
|
)
|
|
assert args.os_auth_url == "https://openstack.example.com:5000/v3"
|
|
|
|
def test_os_username_argument(self, parser):
|
|
"""Test that --os-username argument is parsed correctly."""
|
|
args = parser.parse_args(["openstack", "--os-username", "test-user"])
|
|
assert args.os_username == "test-user"
|
|
|
|
def test_os_password_argument(self, parser):
|
|
"""Test that --os-password argument is parsed correctly."""
|
|
args = parser.parse_args(["openstack", "--os-password", "test-password"])
|
|
assert args.os_password == "test-password"
|
|
|
|
def test_os_project_id_argument(self, parser):
|
|
"""Test that --os-project-id argument is parsed correctly."""
|
|
args = parser.parse_args(["openstack", "--os-project-id", "test-project-id"])
|
|
assert args.os_project_id == "test-project-id"
|
|
|
|
def test_os_region_name_argument(self, parser):
|
|
"""Test that --os-region-name argument is parsed correctly."""
|
|
args = parser.parse_args(["openstack", "--os-region-name", "RegionOne"])
|
|
assert args.os_region_name == "RegionOne"
|
|
|
|
def test_os_user_domain_name_argument(self, parser):
|
|
"""Test that --os-user-domain-name argument is parsed correctly."""
|
|
args = parser.parse_args(["openstack", "--os-user-domain-name", "CustomDomain"])
|
|
assert args.os_user_domain_name == "CustomDomain"
|
|
|
|
def test_os_project_domain_name_argument(self, parser):
|
|
"""Test that --os-project-domain-name argument is parsed correctly."""
|
|
args = parser.parse_args(
|
|
["openstack", "--os-project-domain-name", "CustomProjectDomain"]
|
|
)
|
|
assert args.os_project_domain_name == "CustomProjectDomain"
|
|
|
|
def test_os_identity_api_version_argument(self, parser):
|
|
"""Test that --os-identity-api-version argument is parsed correctly."""
|
|
args = parser.parse_args(["openstack", "--os-identity-api-version", "3"])
|
|
assert args.os_identity_api_version == "3"
|
|
|
|
|
|
class TestOpenstackArgumentsValidation:
|
|
"""Test suite for OpenStack Provider CLI arguments validation."""
|
|
|
|
def test_validate_arguments_with_no_options(self):
|
|
"""Test validation with no authentication options (should pass - env vars will be used)."""
|
|
args = Namespace(
|
|
clouds_yaml_file=None,
|
|
clouds_yaml_cloud=None,
|
|
os_auth_url=None,
|
|
os_username=None,
|
|
os_password=None,
|
|
os_project_id=None,
|
|
os_user_domain_name=None,
|
|
os_project_domain_name=None,
|
|
)
|
|
|
|
is_valid, error_message = validate_arguments(args)
|
|
assert is_valid is True
|
|
assert error_message == ""
|
|
|
|
def test_validate_arguments_with_clouds_yaml_only(self):
|
|
"""Test validation with only clouds.yaml options (should pass)."""
|
|
args = Namespace(
|
|
clouds_yaml_file="/path/to/clouds.yaml",
|
|
clouds_yaml_cloud="production",
|
|
os_auth_url=None,
|
|
os_username=None,
|
|
os_password=None,
|
|
os_project_id=None,
|
|
os_user_domain_name=None,
|
|
os_project_domain_name=None,
|
|
)
|
|
|
|
is_valid, error_message = validate_arguments(args)
|
|
assert is_valid is True
|
|
assert error_message == ""
|
|
|
|
def test_validate_arguments_with_explicit_credentials_only(self):
|
|
"""Test validation with only explicit credentials (should pass)."""
|
|
args = Namespace(
|
|
clouds_yaml_file=None,
|
|
clouds_yaml_cloud=None,
|
|
os_auth_url="https://openstack.example.com:5000/v3",
|
|
os_username="test-user",
|
|
os_password="test-password",
|
|
os_project_id="test-project-id",
|
|
os_user_domain_name="Default",
|
|
os_project_domain_name="Default",
|
|
)
|
|
|
|
is_valid, error_message = validate_arguments(args)
|
|
assert is_valid is True
|
|
assert error_message == ""
|
|
|
|
def test_validate_arguments_mutual_exclusivity_clouds_yaml_file_and_explicit(self):
|
|
"""Test validation fails when both clouds_yaml_file and explicit credentials are provided."""
|
|
args = Namespace(
|
|
clouds_yaml_file="/path/to/clouds.yaml",
|
|
clouds_yaml_cloud="production",
|
|
os_auth_url="https://openstack.example.com:5000/v3",
|
|
os_username="test-user",
|
|
os_password="test-password",
|
|
os_project_id="test-project-id",
|
|
os_user_domain_name=None,
|
|
os_project_domain_name=None,
|
|
)
|
|
|
|
is_valid, error_message = validate_arguments(args)
|
|
assert is_valid is False
|
|
assert "Cannot use clouds.yaml options" in error_message
|
|
assert "together with explicit credential parameters" in error_message
|
|
|
|
def test_validate_arguments_mutual_exclusivity_clouds_yaml_cloud_and_explicit(self):
|
|
"""Test validation fails when both clouds_yaml_cloud and explicit credentials are provided."""
|
|
args = Namespace(
|
|
clouds_yaml_file=None,
|
|
clouds_yaml_cloud="production",
|
|
os_auth_url="https://openstack.example.com:5000/v3",
|
|
os_username="test-user",
|
|
os_password=None,
|
|
os_project_id=None,
|
|
os_user_domain_name=None,
|
|
os_project_domain_name=None,
|
|
)
|
|
|
|
is_valid, error_message = validate_arguments(args)
|
|
assert is_valid is False
|
|
assert "Cannot use clouds.yaml options" in error_message
|
|
|
|
def test_validate_arguments_mutual_exclusivity_with_partial_explicit_credentials(
|
|
self,
|
|
):
|
|
"""Test validation fails when clouds.yaml and partial explicit credentials are provided."""
|
|
args = Namespace(
|
|
clouds_yaml_file="/path/to/clouds.yaml",
|
|
clouds_yaml_cloud=None,
|
|
os_auth_url=None,
|
|
os_username="test-user", # Only one explicit credential
|
|
os_password=None,
|
|
os_project_id=None,
|
|
os_user_domain_name=None,
|
|
os_project_domain_name=None,
|
|
)
|
|
|
|
is_valid, error_message = validate_arguments(args)
|
|
assert is_valid is False
|
|
assert "Cannot use clouds.yaml options" in error_message
|
|
|
|
def test_validate_arguments_clouds_yaml_file_only(self):
|
|
"""Test validation passes with only clouds_yaml_file (cloud name defaults to 'envvars')."""
|
|
args = Namespace(
|
|
clouds_yaml_file="/path/to/clouds.yaml",
|
|
clouds_yaml_cloud=None,
|
|
os_auth_url=None,
|
|
os_username=None,
|
|
os_password=None,
|
|
os_project_id=None,
|
|
os_user_domain_name=None,
|
|
os_project_domain_name=None,
|
|
)
|
|
|
|
is_valid, error_message = validate_arguments(args)
|
|
assert is_valid is True
|
|
assert error_message == ""
|
|
|
|
def test_validate_arguments_clouds_yaml_cloud_only(self):
|
|
"""Test validation passes with only clouds_yaml_cloud (file searched in standard locations)."""
|
|
args = Namespace(
|
|
clouds_yaml_file=None,
|
|
clouds_yaml_cloud="production",
|
|
os_auth_url=None,
|
|
os_username=None,
|
|
os_password=None,
|
|
os_project_id=None,
|
|
os_user_domain_name=None,
|
|
os_project_domain_name=None,
|
|
)
|
|
|
|
is_valid, error_message = validate_arguments(args)
|
|
assert is_valid is True
|
|
assert error_message == ""
|
|
|
|
def test_validate_arguments_with_domain_names_only(self):
|
|
"""Test validation passes with only domain names (not considered explicit credentials)."""
|
|
args = Namespace(
|
|
clouds_yaml_file=None,
|
|
clouds_yaml_cloud=None,
|
|
os_auth_url=None,
|
|
os_username=None,
|
|
os_password=None,
|
|
os_project_id=None,
|
|
os_user_domain_name="CustomUserDomain",
|
|
os_project_domain_name="CustomProjectDomain",
|
|
)
|
|
|
|
# Domain names alone don't trigger mutual exclusivity
|
|
is_valid, error_message = validate_arguments(args)
|
|
assert is_valid is True
|
|
assert error_message == ""
|