vcloud-edge_gateway 0.0.1

data/spec/vcloud/edge_gateway/load_balancer_schema_validation_spec.rb

@@ -0,0 +1,153 @@
+require 'spec_helper'
+
+module Vcloud
+  describe "load balancer service schema validation" do
+
+    context "validate pool entry" do
+
+      valid_tests = [
+        {
+          name: 'should validate ok if only mandatory fields are provided',
+          input: {
+            name: 'pool entry 1',
+            members: [
+              { ip_address: "192.2.0.40" },
+              { ip_address: "192.2.0.41" },
+            ]
+          }
+        },
+        {
+          name: 'should validate a complete pool specification',
+          input: {
+            name: 'pool entry 1',
+            description: 'description of pool entry 1',
+            service: {
+              http: {
+                enabled: true,
+                port: 8080,
+                algorithm: 'ROUND_ROBIN',
+                health_check: {
+                  port: 80,
+                  protocol: 'HTTP',
+                  health_threshold: 4,
+                  unhealth_threshold: 10,
+                  interval: 10,
+                  timeout: 5,
+                },
+              },
+            },
+            members: [
+              { ip_address: "192.2.0.40",
+                weight: 2,
+                service_port: {
+                  http: {
+                    port: 8080,
+                    health_check_port: 8080,
+                  }
+                }
+              },
+            ]
+          }
+        },
+      ]
+
+      valid_tests.each do |test|
+        it "#{test[:name]}" do
+          validator = ConfigValidator.validate(:base, test[:input],
+              Vcloud::Schema::LOAD_BALANCER_POOL_ENTRY)
+          expect(validator.errors).to eq([])
+          expect(validator.valid?).to be_true
+        end
+      end
+
+    end
+
+    context "validate virtual_server entry" do
+
+      valid_tests = [
+        {
+          name: 'should validate ok if only mandatory fields are provided',
+          input: {
+            name: 'virtual_server entry 1',
+            ip_address: "192.2.0.40",
+            network: "TestNetwork",
+            pool: "TestPool",
+          }
+        },
+        {
+          name: 'should validate a complete virtual_server specification',
+          input: {
+            name: 'virtual_server entry 1',
+            ip_address: "192.2.0.40",
+            network: "TestNetwork",
+            pool: "TestPool",
+            logging: true,
+            service_profiles: {
+              http: { enabled: true, port: 8080 },
+              https: { enabled: false, port: 8443 },
+              tcp: { enabled: false },
+            },
+          }
+        },
+      ]
+
+      valid_tests.each do |test|
+        it "#{test[:name]}" do
+          validator = ConfigValidator.validate(:base, test[:input],
+              Vcloud::Schema::LOAD_BALANCER_VIRTUAL_SERVER_ENTRY)
+          expect(validator.errors).to eq([])
+          expect(validator.valid?).to be_true
+        end
+      end
+
+    end
+
+    context "check complete load balancer sections" do
+
+      it "validate ok if only mandatory fields are provided" do
+        input = {
+          pools: [
+            {
+              name: 'pool entry 1',
+              members: [
+                { ip_address: "192.2.0.40" },
+                { ip_address: "192.2.0.41" },
+              ]
+            },
+          ],
+          virtual_servers: [
+            {
+              name: 'virtual_server entry 1',
+              ip_address: "192.2.0.40",
+              network: "TestNetwork",
+              pool: "TestPool",
+            },
+          ],
+        }
+        validator = ConfigValidator.validate(:base, input, Vcloud::Schema::LOAD_BALANCER_SERVICE)
+        expect(validator.errors).to eq([])
+        expect(validator.valid?).to be_true
+      end
+
+      it "should fail to validate if no pools are specified" do
+        input = {
+          virtual_servers: []
+        }
+        validator = ConfigValidator.validate(:base, input, Vcloud::Schema::LOAD_BALANCER_SERVICE)
+        expect(validator.errors).to eq(["base: missing 'pools' parameter"])
+        expect(validator.valid?).to be_false
+      end
+
+      it "should fail to validate if virtual_servers section is missing" do
+        input = {
+          pools: []
+        }
+        validator = ConfigValidator.validate(:base, input, Vcloud::Schema::LOAD_BALANCER_SERVICE)
+        expect(validator.errors).to eq(["base: missing 'virtual_servers' parameter"])
+        expect(validator.valid?).to be_false
+      end
+
+    end
+
+  end
+end

data/spec/vcloud/edge_gateway/nat_schema_validation_spec.rb

@@ -0,0 +1,93 @@
+require 'spec_helper'
+
+module Vcloud
+  describe "nat service schema validation" do
+    let(:network_uuid){ SecureRandom.uuid }
+    context "validate nat rule" do
+      it "validate ok if only mandatory fields are provided" do
+        snat_rule = {
+          id: '999',
+          rule_type: 'DNAT',
+          network_id: network_uuid,
+          original_ip: "192.0.2.2",
+          translated_ip: "10.10.20.20",
+
+        }
+        validator = ConfigValidator.validate(:base, snat_rule, Vcloud::Schema::NAT_RULE)
+        expect(validator.valid?).to be_true
+        expect(validator.errors).to be_empty
+
+      end
+
+      context "mandatory field validation" do
+        before(:each) do
+          @snat_rule = {
+            id: '999',
+            rule_type: 'DNAT',
+            network_id: network_uuid,
+            original_ip: "192.0.2.2",
+            translated_ip: "10.10.20.20",
+          }
+        end
+        mandatory_fields = [:network_id, :original_ip, :translated_ip, :rule_type]
+        mandatory_fields.each do |mandatory_field|
+          it "should error since mandatory field #{mandatory_field} is missing" do
+            @snat_rule.delete(mandatory_field)
+            validator = ConfigValidator.validate(:base, @snat_rule, Vcloud::Schema::NAT_RULE)
+            expect(validator.valid?).to be_false
+            expect(validator.errors).to eq(["base: missing '#{mandatory_field}' parameter"])
+          end
+        end
+      end
+
+      it "should accept optional fields: original_port, translated_port and protocol as input" do
+        snat_rule = {
+          id: '999',
+          rule_type: 'DNAT',
+          network_id: network_uuid,
+          original_ip: "192.0.2.2",
+          original_port: "22",
+          translated_ip: "10.10.20.20",
+          translated_port: "22",
+          protocol: 'tcp'
+
+        }
+        validator = ConfigValidator.validate(:base, snat_rule, Vcloud::Schema::NAT_RULE)
+        expect(validator.valid?).to be_true
+        expect(validator.errors).to be_empty
+      end
+    end
+
+    context 'validate nat service config' do
+      it "should validate both snat and dnat rules" do
+        nat_service = {
+          :enabled => true,
+          :nat_rules => [
+            {
+              id: '999',
+              enabled: true,
+              rule_type: 'DNAT',
+              network_id: network_uuid,
+              original_ip: "192.0.2.2",
+              original_port: "22",
+              translated_ip: "10.10.20.20",
+              translated_port: "22",
+              protocol: 'tcp',
+            },
+            {
+              id: '999',
+              rule_type: 'SNAT',
+              network_id: network_uuid,
+              original_ip: "192.0.2.2",
+              translated_ip: "10.10.20.20",
+              protocol: 'tcp',
+            }
+          ]
+        }
+        validator = ConfigValidator.validate(:base, nat_service, Vcloud::Schema::NAT_SERVICE)
+        expect(validator.valid?).to be_true
+        expect(validator.errors).to be_empty
+      end
+    end
+  end
+end

data/vcloud-edge_gateway.gemspec

@@ -0,0 +1,32 @@
+# -*- encoding: utf-8 -*-
+
+lib = File.expand_path('../lib/', __FILE__)
+$LOAD_PATH.unshift lib unless $LOAD_PATH.include?(lib)
+
+require 'vcloud/edge_gateway/version'
+Gem::Specification.new do |s|
+  s.name        = 'vcloud-edge_gateway'
+  s.version     = Vcloud::EdgeGateway::VERSION
+  s.authors     = ['Anna Shipman']
+  s.email       = ['anna.shipman@digital.cabinet-office.gov.uk']
+  s.summary     = 'Tool to configure a VMware vCloud Edge Gateway'
+  s.description = 'Tool to configure a VMware vCloud Edge Gateway. Uses vcloud-core.'
+  s.homepage    = 'http://github.com/alphagov/vcloud-edge_gateway'
+  s.license     = 'MIT'
+
+  s.files         = `git ls-files`.split($/)
+  s.executables   = s.files.grep(%r{^bin/}) {|f| File.basename(f)}
+  s.test_files    = s.files.grep(%r{^(test|spec|features)/})
+  s.require_paths = ['lib']
+
+  s.required_ruby_version = '>= 1.9.2'
+
+  s.add_runtime_dependency 'fog', '>= 1.19.0'
+  s.add_runtime_dependency 'vcloud-core'
+  s.add_runtime_dependency 'hashdiff'
+  s.add_development_dependency 'rake'
+  s.add_development_dependency 'rspec', '~> 2.14.1'
+  s.add_development_dependency 'simplecov', '~> 0.8.2'
+  s.add_development_dependency 'gem_publisher', '1.2.0'
+end
+

metadata

@@ -0,0 +1,252 @@
+--- !ruby/object:Gem::Specification
+name: vcloud-edge_gateway
+version: !ruby/object:Gem::Version
+  version: 0.0.1
+  prerelease: 
+platform: ruby
+authors:
+- Anna Shipman
+autorequire: 
+bindir: bin
+cert_chain: []
+date: 2014-02-14 00:00:00.000000000 Z
+dependencies:
+- !ruby/object:Gem::Dependency
+  name: fog
+  requirement: !ruby/object:Gem::Requirement
+    none: false
+    requirements:
+    - - ! '>='
+      - !ruby/object:Gem::Version
+        version: 1.19.0
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    none: false
+    requirements:
+    - - ! '>='
+      - !ruby/object:Gem::Version
+        version: 1.19.0
+- !ruby/object:Gem::Dependency
+  name: vcloud-core
+  requirement: !ruby/object:Gem::Requirement
+    none: false
+    requirements:
+    - - ! '>='
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    none: false
+    requirements:
+    - - ! '>='
+      - !ruby/object:Gem::Version
+        version: '0'
+- !ruby/object:Gem::Dependency
+  name: hashdiff
+  requirement: !ruby/object:Gem::Requirement
+    none: false
+    requirements:
+    - - ! '>='
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    none: false
+    requirements:
+    - - ! '>='
+      - !ruby/object:Gem::Version
+        version: '0'
+- !ruby/object:Gem::Dependency
+  name: rake
+  requirement: !ruby/object:Gem::Requirement
+    none: false
+    requirements:
+    - - ! '>='
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    none: false
+    requirements:
+    - - ! '>='
+      - !ruby/object:Gem::Version
+        version: '0'
+- !ruby/object:Gem::Dependency
+  name: rspec
+  requirement: !ruby/object:Gem::Requirement
+    none: false
+    requirements:
+    - - ~>
+      - !ruby/object:Gem::Version
+        version: 2.14.1
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    none: false
+    requirements:
+    - - ~>
+      - !ruby/object:Gem::Version
+        version: 2.14.1
+- !ruby/object:Gem::Dependency
+  name: simplecov
+  requirement: !ruby/object:Gem::Requirement
+    none: false
+    requirements:
+    - - ~>
+      - !ruby/object:Gem::Version
+        version: 0.8.2
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    none: false
+    requirements:
+    - - ~>
+      - !ruby/object:Gem::Version
+        version: 0.8.2
+- !ruby/object:Gem::Dependency
+  name: gem_publisher
+  requirement: !ruby/object:Gem::Requirement
+    none: false
+    requirements:
+    - - '='
+      - !ruby/object:Gem::Version
+        version: 1.2.0
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    none: false
+    requirements:
+    - - '='
+      - !ruby/object:Gem::Version
+        version: 1.2.0
+description: Tool to configure a VMware vCloud Edge Gateway. Uses vcloud-core.
+email:
+- anna.shipman@digital.cabinet-office.gov.uk
+executables:
+- vcloud-edge
+extensions: []
+extra_rdoc_files: []
+files:
+- .gitignore
+- Gemfile
+- LICENSE.txt
+- README.md
+- Rakefile
+- bin/vcloud-edge
+- jenkins.sh
+- lib/vcloud/config_loader.rb
+- lib/vcloud/config_validator.rb
+- lib/vcloud/edge_gateway.rb
+- lib/vcloud/edge_gateway/configuration_differ.rb
+- lib/vcloud/edge_gateway/configuration_generator/firewall_service.rb
+- lib/vcloud/edge_gateway/configuration_generator/id_ranges.rb
+- lib/vcloud/edge_gateway/configuration_generator/load_balancer_service.rb
+- lib/vcloud/edge_gateway/configuration_generator/nat_service.rb
+- lib/vcloud/edge_gateway/edge_gateway_configuration.rb
+- lib/vcloud/edge_gateway/version.rb
+- lib/vcloud/edge_gateway_services.rb
+- lib/vcloud/schema/edge_gateway.rb
+- lib/vcloud/schema/firewall_service.rb
+- lib/vcloud/schema/load_balancer_service.rb
+- lib/vcloud/schema/nat_service.rb
+- scripts/generate_fog_conf_file.sh
+- spec/erb_helper.rb
+- spec/integration/edge_gateway/data/firewall_config.yaml.erb
+- spec/integration/edge_gateway/data/firewall_config_updated_rule.yaml.erb
+- spec/integration/edge_gateway/data/firewall_rule_order_test.yaml.erb
+- spec/integration/edge_gateway/data/hairpin_nat_config.yaml.erb
+- spec/integration/edge_gateway/data/incorrect_firewall_config.yaml
+- spec/integration/edge_gateway/data/nat_and_firewall_config.yaml.erb
+- spec/integration/edge_gateway/data/nat_config.yaml.erb
+- spec/integration/edge_gateway/edge_gateway_services_spec.rb
+- spec/integration/edge_gateway/firewall_service_spec.rb
+- spec/integration/edge_gateway/nat_service_spec.rb
+- spec/spec_helper.rb
+- spec/vcloud/config_loader_spec.rb
+- spec/vcloud/config_validator_spec.rb
+- spec/vcloud/data/basic_preamble_test.erb
+- spec/vcloud/data/basic_preamble_test.erb.OUT
+- spec/vcloud/data/working.json
+- spec/vcloud/data/working.yaml
+- spec/vcloud/data/working_with_defaults.yaml
+- spec/vcloud/edge_gateway/configuration_differ_spec.rb
+- spec/vcloud/edge_gateway/configuration_generator/data/load_balancer_http-input.yaml
+- spec/vcloud/edge_gateway/configuration_generator/data/load_balancer_http-output.yaml
+- spec/vcloud/edge_gateway/configuration_generator/data/load_balancer_https-input.yaml
+- spec/vcloud/edge_gateway/configuration_generator/data/load_balancer_https-output.yaml
+- spec/vcloud/edge_gateway/configuration_generator/data/load_balancer_mixed_complex-input.yaml
+- spec/vcloud/edge_gateway/configuration_generator/data/load_balancer_mixed_complex-output.yaml
+- spec/vcloud/edge_gateway/configuration_generator/firewall_service_spec.rb
+- spec/vcloud/edge_gateway/configuration_generator/load_balancer_service_spec.rb
+- spec/vcloud/edge_gateway/configuration_generator/nat_service_spec.rb
+- spec/vcloud/edge_gateway/edge_gateway_configuration_spec.rb
+- spec/vcloud/edge_gateway/firewall_schema_validation_spec.rb
+- spec/vcloud/edge_gateway/load_balancer_schema_validation_spec.rb
+- spec/vcloud/edge_gateway/nat_schema_validation_spec.rb
+- vcloud-edge_gateway.gemspec
+homepage: http://github.com/alphagov/vcloud-edge_gateway
+licenses:
+- MIT
+post_install_message: 
+rdoc_options: []
+require_paths:
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement
+  none: false
+  requirements:
+  - - ! '>='
+    - !ruby/object:Gem::Version
+      version: 1.9.2
+required_rubygems_version: !ruby/object:Gem::Requirement
+  none: false
+  requirements:
+  - - ! '>='
+    - !ruby/object:Gem::Version
+      version: '0'
+      segments:
+      - 0
+      hash: -4334320355473709900
+requirements: []
+rubyforge_project: 
+rubygems_version: 1.8.23
+signing_key: 
+specification_version: 3
+summary: Tool to configure a VMware vCloud Edge Gateway
+test_files:
+- spec/erb_helper.rb
+- spec/integration/edge_gateway/data/firewall_config.yaml.erb
+- spec/integration/edge_gateway/data/firewall_config_updated_rule.yaml.erb
+- spec/integration/edge_gateway/data/firewall_rule_order_test.yaml.erb
+- spec/integration/edge_gateway/data/hairpin_nat_config.yaml.erb
+- spec/integration/edge_gateway/data/incorrect_firewall_config.yaml
+- spec/integration/edge_gateway/data/nat_and_firewall_config.yaml.erb
+- spec/integration/edge_gateway/data/nat_config.yaml.erb
+- spec/integration/edge_gateway/edge_gateway_services_spec.rb
+- spec/integration/edge_gateway/firewall_service_spec.rb
+- spec/integration/edge_gateway/nat_service_spec.rb
+- spec/spec_helper.rb
+- spec/vcloud/config_loader_spec.rb
+- spec/vcloud/config_validator_spec.rb
+- spec/vcloud/data/basic_preamble_test.erb
+- spec/vcloud/data/basic_preamble_test.erb.OUT
+- spec/vcloud/data/working.json
+- spec/vcloud/data/working.yaml
+- spec/vcloud/data/working_with_defaults.yaml
+- spec/vcloud/edge_gateway/configuration_differ_spec.rb
+- spec/vcloud/edge_gateway/configuration_generator/data/load_balancer_http-input.yaml
+- spec/vcloud/edge_gateway/configuration_generator/data/load_balancer_http-output.yaml
+- spec/vcloud/edge_gateway/configuration_generator/data/load_balancer_https-input.yaml
+- spec/vcloud/edge_gateway/configuration_generator/data/load_balancer_https-output.yaml
+- spec/vcloud/edge_gateway/configuration_generator/data/load_balancer_mixed_complex-input.yaml
+- spec/vcloud/edge_gateway/configuration_generator/data/load_balancer_mixed_complex-output.yaml
+- spec/vcloud/edge_gateway/configuration_generator/firewall_service_spec.rb
+- spec/vcloud/edge_gateway/configuration_generator/load_balancer_service_spec.rb
+- spec/vcloud/edge_gateway/configuration_generator/nat_service_spec.rb
+- spec/vcloud/edge_gateway/edge_gateway_configuration_spec.rb
+- spec/vcloud/edge_gateway/firewall_schema_validation_spec.rb
+- spec/vcloud/edge_gateway/load_balancer_schema_validation_spec.rb
+- spec/vcloud/edge_gateway/nat_schema_validation_spec.rb