[systest] Perform 'firewall test' for various network configurations

Bug #1393461 reported by Artem Panchenko
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Fuel for OpenStack
Fix Released
Medium
Artem Panchenko
5.1.x
Fix Released
Medium
Artem Panchenko
6.0.x
Fix Released
Medium
Artem Panchenko

Bug Description

In our system tests we have a check for firewall on slaves :

https://github.com/stackforge/fuel-main/blob/master/fuelweb_test/helpers/security.py#L85

which is currently performed only in non-HA test "deploy neurton gre":

https://github.com/stackforge/fuel-main/blob/master/fuelweb_test/tests/test_neutron.py#L78

That is not optimal place for that check, because "deploy_neutron_gre" test group is used in many important CI jobs, e.g. bvt, fueillib_review, etc. which are built very often, because firewall check rarely returns false-positive alert: https://bugs.launchpad.net/fuel/+bug/1378745 (most probably due to virtualization/performance issues) and introduces additional delays.

Also, we should perform this check in other tests which have different environment configurations (HA, NeutronVlan, NovaNetwork).

Tags: system-tests
description: updated
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to fuel-main (master)

Fix proposed to branch: master
Review: https://review.openstack.org/135004

Changed in fuel:
status: New → In Progress
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to fuel-main (stable/5.1)

Fix proposed to branch: stable/5.1
Review: https://review.openstack.org/135005

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to fuel-main (stable/5.1)

Reviewed: https://review.openstack.org/135005
Committed: https://git.openstack.org/cgit/stackforge/fuel-main/commit/?id=38df70aa6f7f642c611b30febe8d2ff0dd171309
Submitter: Jenkins
Branch: stable/5.1

commit 38df70aa6f7f642c611b30febe8d2ff0dd171309
Author: Artem Panchenko <email address hidden>
Date: Mon Nov 17 17:54:03 2014 +0200

    Check firewall on various cluster configurations

    For different environment configurations (simple/HA,
    NovaNetwork/Neutron) different puppet manifests and
    deployment scenarios can be used, so firewall config
    can also be varied. Firewall configuration could be
    distorted after HA failover, node addition or cluster
    restart. That's why it is necessary to perform
    firewall check in few system tests.

    Change-Id: I8d87a422399c423482886443bd3a32ff97befad5
    Closes-bug: #1393461

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to fuel-main (master)

Reviewed: https://review.openstack.org/135004
Committed: https://git.openstack.org/cgit/stackforge/fuel-main/commit/?id=6e1a258c3caaf1ecc8a2314b1f6623f0c28b5896
Submitter: Jenkins
Branch: master

commit 6e1a258c3caaf1ecc8a2314b1f6623f0c28b5896
Author: Artem Panchenko <email address hidden>
Date: Mon Nov 17 17:54:03 2014 +0200

    Check firewall on various cluster configurations

    For different environment configurations (simple/HA,
    NovaNetwork/Neutron) different puppet manifests and
    deployment scenarios can be used, so firewall config
    can also be varied. Firewall configuration could be
    distorted after HA failover, node addition or cluster
    restart. That's why it is necessary to perform
    firewall check in few system tests.

    Change-Id: I8d87a422399c423482886443bd3a32ff97befad5
    Closes-bug: #1393461

Changed in fuel:
status: In Progress → Fix Committed
Revision history for this message
Dennis Dmitriev (ddmitriev) wrote :

Released for 5.1.1 and 6.0

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.