openshift-origin-controller 1.3.2

data/test/ddns/named.conf

@@ -0,0 +1,48 @@
+// named.conf
+
+options {
+	listen-on port 10053 { 127.0.0.1; };
+	directory 	".";
+	allow-query     { localhost; };
+        recursion no;
+
+	pid-file "tmp/named.pid";
+	session-keyfile "tmp/named.session.key";
+        managed-keys-directory "tmp";
+};
+
+// disable remote controls
+controls {};
+
+logging {
+        channel default_debug {
+                //file "data/named.run";
+                file "tmp/named.log";
+                severity dynamic;
+        };
+};
+
+zone "." IN {
+	type hint;
+	file "named.ca";
+};
+
+include "named.rfc1912.zones";
+
+//
+// Local customization
+//
+
+include "example.com.key";
+
+zone "example.com" IN {
+     type master;
+     file "tmp/example.com.db";
+     allow-update { key example.com ; };
+}; 
+
+zone "1.168.192.in-addr.arpa" {
+     type master;
+     file "tmp/1.168.192-rev.db";
+     allow-update { key example.com ; } ;
+};

data/test/ddns/named.empty

@@ -0,0 +1,10 @@
+$TTL 3H
+@	IN SOA	@ rname.invalid. (
+					0	; serial
+					1D	; refresh
+					1H	; retry
+					1W	; expire
+					3H )	; minimum
+	NS	@
+	A	127.0.0.1
+;;	AAAA	::1

data/test/ddns/named.localhost

@@ -0,0 +1,10 @@
+$TTL 1D
+@	IN SOA	@ rname.invalid. (
+					0	; serial
+					1D	; refresh
+					1H	; retry
+					1W	; expire
+					3H )	; minimum
+	NS	@
+	A	127.0.0.1
+;;	AAAA	::1

data/test/ddns/named.loopback

@@ -0,0 +1,11 @@
+$TTL 1D
+@	IN SOA	@ rname.invalid. (
+					0	; serial
+					1D	; refresh
+					1H	; retry
+					1W	; expire
+					3H )	; minimum
+	NS	@
+	A	127.0.0.1
+;;	AAAA	::1
+	PTR	localhost.

data/test/ddns/named.rfc1912.zones

@@ -0,0 +1,42 @@
+// named.rfc1912.zones:
+//
+// Provided by Red Hat caching-nameserver package 
+//
+// ISC BIND named zone configuration for zones recommended by
+// RFC 1912 section 4.1 : localhost TLDs and address zones
+// and http://www.ietf.org/internet-drafts/draft-ietf-dnsop-default-local-zones-02.txt
+// (c)2007 R W Franks
+// 
+// See /usr/share/doc/bind*/sample/ for example named configuration files.
+//
+
+zone "localhost.localdomain" IN {
+	type master;
+	file "named.localhost";
+	allow-update { none; };
+};
+
+zone "localhost" IN {
+	type master;
+	file "named.localhost";
+	allow-update { none; };
+};
+
+zone "1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ip6.arpa" IN {
+	type master;
+	file "named.loopback";
+	allow-update { none; };
+};
+
+zone "1.0.0.127.in-addr.arpa" IN {
+	type master;
+	file "named.loopback";
+	allow-update { none; };
+};
+
+zone "0.in-addr.arpa" IN {
+	type master;
+	file "named.empty";
+	allow-update { none; };
+};
+

data/test/ddns/named.root.key

@@ -0,0 +1,5 @@
+managed-keys {
+	# DNSKEY for the root zone.
+	# Updates are published on root-dnssec-announce@icann.org
+	. initial-key 257 3 8 "AwEAAagAIKlVZrpC6Ia7gEzahOR+9W29euxhJhVVLOyQbSEW0O8gcCjF FVQUTf6v58fLjwBd0YI0EzrAcQqBGCzh/RStIoO8g0NfnfL2MTJRkxoX bfDaUeVPQuYEhg37NZWAJQ9VnMVDxP/VHL496M/QZxkjf5/Efucp2gaD X6RS6CXpoY68LsvPVjR0ZSwzz1apAzvN9dlzEheX7ICJBBtuA6G3LQpz W5hOA2hzCTMjJPJ8LbqF6dsV6DoBQzgul0sGIcGOYl7OyQdXfZ57relS Qageu+ipAdTTJ25AsRTAoub8ONGcLmqrAmRLKBP1dfwhYB4N7knNnulq QxA+Uk1ihz0=";
+};

data/test/ddns/named_service.rb

@@ -0,0 +1,127 @@
+#!/usr/bin/env oo-ruby
+#
+# Control a BIND DNS service for testing
+#
+
+
+require 'rubygems'
+require 'open4'
+require 'ftools' # adds File.cp
+require 'fileutils' # for change directory
+
+require 'dnsruby'
+
+named_dir = File.dirname(__FILE__)
+
+class BindTestService
+
+  attr_reader :testroot, :pid
+  def initialize(testroot=named_dir)
+
+    @testroot = testroot
+
+    # get server, port, keyname, keyvalue, zone, domain_suffix
+    reset
+  end
+
+  def clean
+    begin
+      cwd = FileUtils.pwd
+      FileUtils.cd @testroot
+
+      # delete all journal files
+      `rm -f tmp/*.jnl`
+
+      # delete the dynamic managed keys file
+      if File.exists? 'tmp/managed-keys.bind'
+        File.delete 'tmp/managed-keys.bind'
+      end
+
+    ensure
+      FileUtils.cd cwd
+    end
+  end
+
+  def reset
+    clean
+    begin
+      cwd = FileUtils.pwd
+      FileUtils.cd @testroot
+
+      # copy the initial example.db in place
+      File.copy("example.com.db.init", "tmp/example.com.db")
+      File.copy("1.168.192-rev.db.init", "tmp/1.168.192-rev.db")
+
+    ensure
+      FileUtils.cd cwd
+    end
+  end
+
+  # start the daemon
+  def start
+
+    if @pid != nil
+      raise "I think a named is already running with PID #{@pid}"
+    end
+
+    begin
+      cwd = FileUtils.pwd
+      FileUtils.cd @testroot
+
+      begin
+        pid, stdin, stdout, stderr = Open4::popen4 "/usr/sbin/named -c named.conf"
+     
+        # Need to check if there already is one
+
+        stdin.close
+        stdout.close
+        stderr.close
+
+        sleep 2
+        @pid = File.open("tmp/named.pid").read.to_i
+      ensure
+        FileUtils.cd cwd
+      end
+    end
+  end
+
+  def stop
+    if @pid == nil
+      raise "no PID: is there really a named running?"
+    end
+
+    Process.kill('INT', @pid)
+    @pid = nil
+  end
+
+  def self.stop(named_root)
+    pid = File.read("#{named_root}/tmp/named.pid").strip.to_i
+    Process.kill('INT', pid)
+  end
+
+  def self.clean(named_root)
+    FileUtils.cd named_root
+    `rm -f tmp/*`
+  end
+end
+
+if __FILE__ == $0
+  # UPDATE AS NEEDED
+
+  case ARGV[0]
+  when "start"
+    c = BindTestService.new named_dir
+
+    c.reset
+    c.start
+
+  when "stop"
+    BindTestService.stop named_dir
+
+  when "clean"
+    BindTestService.clean named_dir
+  else
+
+  end
+end
+

data/test/unit/bind_dns_service_test.rb

@@ -0,0 +1,167 @@
+require 'rubygems'
+require 'bundler'
+Bundler.setup
+require 'active_support'
+require 'test/unit'
+require 'mocha'
+
+require 'ddns/named_service'
+
+require 'dnsruby'
+require 'lib/openshift-origin-controller/lib/openshift/dns_service'
+require 'lib/openshift-origin-controller/lib/openshift/bind_dns_service'
+
+
+class BindDnsServiceTest < ActiveSupport::TestCase
+  include OpenShift
+
+  # this is here so I can comment tests out
+  def self.notest(t)
+
+  end
+
+  def setup
+    super
+    @dns_root = File.dirname(File.dirname(__FILE__)) + "/ddns"
+
+    load "#{@dns_root}/authconfig.rb" if not defined? $config
+    @config = {
+        :server => '127.0.0.1',
+        :port => 10053,
+        :keyname => 'example.com',
+        :keyvalue => 'H6NDDnTbNpcBrUM5c4BJtohyK2uuZ5Oi6jxg3ME+RJsNl5Wl2B87oL12YxWUR3Gp7FdZQojTKBSfs5ZjghYxGw==',
+        :zone => "example.com",
+        :domain_suffix => "example.com"
+    }
+
+    @named = BindTestService.new @dns_root
+    @named.start
+    sleep 2
+
+    #begin
+    #  puts "Checking presence of config information"
+    #  puts "Rails.application.config = #{Rails.application.config}"
+    #rescue
+    #  puts "Rails config is not present"
+    #end
+
+    @resolver = Dnsruby::Resolver.new(:nameserver => @config[:server],
+                                      :port => @config[:port])
+  end
+
+  # 
+  test "namespace is registered?" do
+    # verify that the namespace is not registered
+    client = BindDnsService.new @config
+    assert(client.server, "127.0.0.1")
+    assert(client.namespace_available?('missing'), 'namespace reported in use when available')
+    assert(!client.namespace_available?('testns1'), 'namespace reported available when in use')
+  end
+
+  test "register a namespace" do
+    client = BindDnsService.new @config
+    
+    testns = "testns2"
+    #assert(client.server, "127.0.0.1")
+    #assert(client.namespace_available?(namespace))
+
+    client.register_namespace(testns)
+
+    fqdn = "#{testns}.#{@config[:domain_suffix]}"
+
+    result = nil
+    assert_nothing_raised do
+      # request
+      result = @resolver.query(fqdn, Dnsruby::Types::TXT)
+    end
+
+    # check for success: result is Dnsruby::Message
+    assert_instance_of(Dnsruby::Message, result)
+
+    # result.answer.count = 1
+    assert_equal(1, result.answer.count, "expected 1 result, got #{result.answer.count}")
+    
+    # result.answer[0].name.to_s = fqdn
+    assert_equal(fqdn, result.answer[0].name.to_s, "expected FQDN #{fqdn}")
+
+  end
+
+  test "deregister a namespace" do
+    client = BindDnsService.new @config
+    
+    testns = "testns1"
+    fqdn = "#{testns}.#{@config[:domain_suffix]}"
+
+    #assert(client.server, "127.0.0.1")
+    #assert(client.namespace_available?(namespace))
+
+    client.deregister_namespace(testns)
+    
+    result = nil
+    assert_raise Dnsruby::NXDomain do
+      # request
+      result = @resolver.query(fqdn, Dnsruby::Types::TXT)
+    end
+    
+  end
+
+  test "register an application" do
+    client = BindDnsService.new @config
+    
+    testns = "testns3"
+    testapp = "testapp3"
+    fqdn = "#{testapp}-#{testns}.#{@config[:domain_suffix]}"
+    nodename = "node.#{@config[:domain_suffix]}"
+
+    # add the app
+    client.register_application(testapp, testns, nodename)
+    
+    # now check that it's there
+    result = nil
+    assert_nothing_raised do
+      # request
+      result = @resolver.query(fqdn, 'CNAME')
+    end
+
+    # check for success: result is Dnsruby::Message
+    assert_instance_of(Dnsruby::Message, result)
+
+    # result.answer.count = 1
+    assert_equal(1, result.answer.count, "expected 1 result, got #{result.answer.count}")
+
+    # result.answer[0].name.to_s = fqdn
+    assert_equal(nodename, result.answer[0].rdata.to_s, "expected FQDN #{nodename}")
+    
+  end
+
+  test "deregister an application" do
+    client = BindDnsService.new @config
+    
+    testns = "testns4"
+    testapp = "testapp4"
+    fqdn = "#{testapp}-#{testns}.#{@config[:domain_suffix]}"
+    nodename = "node.#{@config[:domain_suffix]}"
+
+    # add the app
+    client.deregister_application(testapp, testns)
+    sleep 2
+
+    lookup = Dnsruby::Resolver.new(
+                                   :nameserver => @config[:server],
+                                   :port => @config[:port])
+
+    result = nil
+    assert_raise Dnsruby::NXDomain do
+      # request
+      #result = resolver.query(fqdn, 'CNAME')
+      result = lookup.query(fqdn, 'CNAME')
+    end
+  end
+
+  def teardown
+    super
+    @named.stop
+    @named.clean
+  end
+
+end

data/test/unit/broker_auth_test.rb

@@ -0,0 +1,28 @@
+require 'test/unit'
+require 'test_helper'
+
+class BrokerAuthTest < Test::Unit::TestCase
+  def setup
+    test_key_dir = "#{File.dirname(__FILE__)}/../dummy/config/"
+    system "/usr/bin/openssl genrsa -out #{test_key_dir}/server_priv.pem 2048"
+    system "/usr/bin/openssl rsa    -in  #{test_key_dir}/server_priv.pem -pubout > #{test_key_dir}/server_pub.pem"
+    @auth_service = OpenShift::MongoAuthService.new
+  end
+
+  def test_broker_auth
+    app = Mocha::Mock.new
+    user = Mocha::Mock.new
+    t = Time.new
+
+    user.expects(:login).returns("foo@example.com")
+    app.expects(:name).at_least_once.returns("foo")
+    app.expects(:user).returns(user)
+    app.expects(:creation_time).at_least_once.returns(t)
+
+    CloudUser.expects(:find).at_least_once.returns(user)
+    user.expects(:applications).at_least_once.returns([app])
+
+    iv,token = @auth_service.generate_broker_key(app)
+    @auth_service.validate_broker_key(iv,token)
+  end
+end