vcloud-network-configurator 0.1.0

data/spec/integration/happy_path_nat_spec.rb

@@ -0,0 +1,78 @@
+require 'spec_helper'
+require 'vcloud_network_configurator'
+
+describe "happy path for nat configurations" do
+
+  before :each do
+    WebMock.disable_net_connect!
+    WebMock.reset!
+
+    session_url = "https://super%40preview:man@www.vcloud.eggplant.com/sessions"
+    edge_gateway_configure_url = "https://www.vcloud.eggplant.com/admin/edgeGateway/123321/action/configureServices"
+    task_url = "https://www.vcloud.eggplant.com/api/tasks/10"
+
+    stub_request(:post, session_url).
+      with(:headers => {'Accept'=>'application/*+xml;version=5.1', 'User-Agent'=>'Ruby'}).
+      to_return(:status => 200,
+                :body => File.read('spec/integration/test_data/happy_path_auth_response.xml'),
+                :headers => { 'x-vcloud-authorization' => '123321'})
+
+    stub_request(:post, edge_gateway_configure_url).
+      with(:body => configure_nat_xml,
+           :headers => { 'Accept'=>'application/*+xml;version=5.1',
+                         'Content-Type'=>'application/vnd.vmware.admin.edgeGatewayServiceConfiguration+xml',
+                         'User-Agent'=>'Ruby',
+                         'X-Vcloud-Authorization'=>'123321' }).
+      to_return(:status => 202, :body => configure_task_xml)
+
+    stub_request(:get, task_url).
+      with(:headers => {'Accept'=>'application/*+xml;version=5.1', 'User-Agent'=>'Ruby', 'X-Vcloud-Authorization'=>'123321'}).
+      to_return(:status => 200, :body => configure_task_xml, :headers => {})
+  end
+
+  it "should configure edgegateway successfully" do
+    args = ["-u", "super", "-p", "man", "-U", "123321", "-d",
+            "spec/integration/test_data/rules_dir", "-e", "preview",
+            "-c", "nat", "https://www.vcloud.eggplant.com"]
+
+    configurator = VcloudNetworkConfigurator.new(args)
+    configurator.execute.should be_true
+  end
+end
+
+def configure_task_xml
+%q{<Task href="https://www.vcloud.eggplant.com/api/tasks/10" status="success"></Task>}
+end
+
+def configure_nat_xml
+  %q{<?xml version="1.0" encoding="UTF-8"?>
+<EdgeGatewayServiceConfiguration xmlns="http://www.vmware.com/vcloud/v1.5" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.vmware.com/vcloud/v1.5 http://vendor-api-url.net/v1.5/schema/master.xsd">
+  <NatService>
+    <IsEnabled>true</IsEnabled>
+    <NatRule>
+      <RuleType>SNAT</RuleType>
+      <IsEnabled>true</IsEnabled>
+      <Id>65538</Id>
+      <GatewayNatRule>
+        <Interface type="application/vnd.vmware.admin.network+xml" name="VDC-1" href="http://interface.vdc-1/19237"/>
+        <OriginalIp>internal-ip</OriginalIp>
+        <TranslatedIp>external-ip</TranslatedIp>
+      </GatewayNatRule>
+    </NatRule>
+    <NatRule>
+      <RuleType>DNAT</RuleType>
+      <IsEnabled>true</IsEnabled>
+      <Id>65539</Id>
+      <GatewayNatRule>
+        <Interface type="application/vnd.vmware.admin.network+xml" name="VDC-1" href="http://interface.vdc-1/19237"/>
+        <OriginalIp>external-ip</OriginalIp>
+        <OriginalPort>22</OriginalPort>
+        <TranslatedIp>internal-ip</TranslatedIp>
+        <TranslatedPort>22</TranslatedPort>
+        <Protocol>tcp</Protocol>
+      </GatewayNatRule>
+    </NatRule>
+  </NatService>
+</EdgeGatewayServiceConfiguration>
+}
+end

data/spec/integration/test_data/happy_path_auth_response.xml

@@ -0,0 +1,30 @@
+<?xml version="1.0" encoding="UTF-8" standalone="no"?>
+<Session
+    xmlns="http://www.vmware.com/vcloud/v1.5"
+    xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+    href="https://vcloud.example.com/api/session/"
+    org="System"
+    type="application/vnd.vmware.vcloud.session+xml"
+    user="vcloud"
+    xsi:schemaLocation="http://www.vmware.com/vcloud/v1.5 http://https://vcloud.example.com/api/v1.5/schema/master.xsd">
+    <Link
+        href="https://vcloud.example.com/api/org/"
+        rel="down"
+        type="application/vnd.vmware.vcloud.orgList+xml"/>
+    <Link
+        href="https://vcloud.example.com/api/admin/"
+        rel="down"
+        type="application/vnd.vmware.admin.vcloud+xml"/>
+    <Link
+        href="https://vcloud.example.com/api/admin/extension"
+        rel="down"
+        type="application/vnd.vmware.admin.vmwExtension+xml"/>
+    <Link
+        href="https://vcloud.example.com/api/query"
+        rel="down"
+        type="application/vnd.vmware.vcloud.query.queryList+xml"/>
+    <Link
+        href="https://vcloud.example.com/api/entity/"
+        rel="entityResolver"
+        type="application/vnd.vmware.vcloud.entity+xml"/>
+</Session>

data/spec/integration/test_data/rules_dir/common_firewall.rb

@@ -0,0 +1,6 @@
+firewall do
+  rule "allow all boxes to access peppers box on port 22" do
+    source :ip => '172.10.0.0/24'
+    destination :ip => '172.11.0.1', :port => 22
+  end
+end

data/spec/integration/test_data/rules_dir/common_lb.rb

@@ -0,0 +1,10 @@
+load_balancer do
+  configure "Frontend" do
+    pool ["20.2.0.1", "20.3.0.2"] do
+      http
+      https
+    end
+
+    virtual_server :name => "VDC-1", :interface => "VDC-1", :ip => "20.1.0.2"
+  end
+end

data/spec/integration/test_data/rules_dir/preview/interfaces.yaml

@@ -0,0 +1,2 @@
+interfaces:
+  VDC-1: http://interface.vdc-1/19237

data/spec/integration/test_data/rules_dir/preview/nat.rb

@@ -0,0 +1,4 @@
+nat do
+    snat :interface => "VDC-1", :original => { :ip => "internal-ip" }, :translated => { :ip => "external-ip" }, :desc => "description"
+    dnat :interface => "VDC-1", :original => { :ip => "external-ip", :port => 22 }, :translated => { :ip => "internal-ip", :port => 22 },  :desc => "SSH"
+end

data/spec/spec_helper.rb

@@ -0,0 +1,9 @@
+specdir=File.dirname(__FILE__)
+$:.unshift File.join(specdir, '../lib')
+$:.unshift File.join(specdir, '..')
+
+require 'webmock/rspec'
+require 'rspec'
+
+ENV["GEM_ENV"] = "test"
+

data/spec/vcloud_network_configurator/configure_task_spec.rb

@@ -0,0 +1,59 @@
+require 'spec_helper'
+require 'vcloud_network_configurator/configure_task'
+
+describe ConfigureTask do
+
+  describe "#url" do
+    it "should extract url from xml" do
+      ConfigureTask.new(fixture_xml).url.
+        should == "https://vendor-api-url.net/task/123321"
+    end
+  end
+
+  describe "#complete?" do
+    it "should return false id status not success" do
+      ConfigureTask.new(fixture_xml).should_not be_complete
+    end
+
+    it "should return false id status not success" do
+      success_xml = fixture_xml.gsub("status=\"running\"", "status=\"success\"")
+      ConfigureTask.new(success_xml).should be_complete
+    end
+  end
+
+  describe "#error?" do
+    it "should error out if error code provided" do
+      error_xml = fixture_xml.gsub("</Task>",
+                              "<Error majorErrorCode=\"Bazinga\"></Task>")
+      ConfigureTask.new(error_xml).should be_error
+    end
+
+  end
+
+end
+
+def fixture_xml
+  %q{
+<?xml version="1.0" encoding="UTF-8"?>
+<Task xmlns="http://www.vmware.com/vcloud/v1.5" status="running"
+  startTime="2013-07-19T14:46:52.943+01:00"
+  serviceNamespace="com.vmware.vcloud"
+  operationName="networkConfigureEdgeGatewayServices"
+  operation="Updating services EdgeGateway GDS Development Gateway"
+  expiryTime="2013-10-17T14:46:52.943+01:00" cancelRequested="false" name="task"
+  id="urn:vcloud:task:0e38b845-92fb-47e7-bc89-1fa29547f487"
+  type="application/vnd.vmware.vcloud.task+xml"
+  href="https://vendor-api-url.net/task/123321"
+  xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+  xsi:schemaLocation="http://www.vmware.com/vcloud/v1.5 http://vendor-api-url.net/v1.5/schema/master.xsd">
+    <Link rel="task:cancel"
+      href="https://vendor-api-url.net/task/123321/action/cancel"/>
+    <User type="application/vnd.vmware.admin.user+xml" name="gsingh"
+      href="https://vendor-api-url.net/admin/user/2020202"/>
+    <Organization type="application/vnd.vmware.vcloud.org+xml"
+      name="GDS-Development"
+      href="https://vendor-api-url.net/org/9999999"/>
+    <Progress>0</Progress>
+    <Details/>
+</Task>}
+end

data/spec/vcloud_network_configurator/edge_gateway_spec.rb

@@ -0,0 +1,41 @@
+require 'spec_helper'
+require 'vcloud_network_configurator/edge_gateway'
+
+describe EdgeGateway do
+  it "should abort if vcloud api couldn't authenticate" do
+    auth_request = mock(:authenticated? => false)
+    VcloudAuthRequest.should_receive(:new).and_return(auth_request)
+    auth_request.should_receive(:submit).and_return(mock())
+
+    eg = EdgeGateway.new({:api_url => 'eggplant.com', :edge_gateway_uuid => '123321'})
+    lambda { eg.apply_configuration }.should raise_error(SystemExit)
+  end
+
+  it "should authorize and configure changes" do
+    vs = mock()
+    VcloudSettings.should_receive(:new).
+      with({url: 'eggplant.com', edge_gateway_uuid: '123321' }).and_return(vs)
+
+    auth_request = mock(:authenticated? => true, :submit => true)
+    VcloudAuthRequest.should_receive(:new).with(vs, "bringle@gds-aubergine", "eggplant").
+      and_return(auth_request)
+    auth_request.should_receive(:auth_response).and_return({'x-vcloud-authorization' => '123213'})
+
+    VcloudConfigureRequest.should_receive(:new).
+      with(vs, '123213', 'farm', 'firewall', 'path/to/dir').
+      and_return(mock(:submit => true, :success? => true, :response_body => nil))
+
+    EdgeGateway.any_instance.stub(:check_for_success => true)
+
+    eg = EdgeGateway.new({:api_url => 'eggplant.com',
+                          :org_edgegateway_uuid => '123321',
+                          :username => 'bringle',
+                          :password => 'eggplant',
+                          :environment => 'farm',
+                          :organization => 'gds-aubergine',
+                          :component => 'firewall',
+                          :rules_directory => 'path/to/dir',
+    })
+    eg.apply_configuration
+  end
+end

data/spec/vcloud_network_configurator/vcloud_auth_request_spec.rb

@@ -0,0 +1,20 @@
+require 'spec_helper'
+require 'vcloud_network_configurator/vcloud_auth_request'
+
+describe VcloudAuthRequest do
+
+  context "submit an auth request" do
+    before :each do
+      stub_request(:post, "https://super:man@www.foo.bar/sessions").
+        with(:headers => { 'Accept' => 'application/*+xml;version=5.1' })
+    end
+
+    it "should return response received" do
+      vcloud_settings = VcloudSettings.new({ :url => "https://www.foo.bar" })
+      request = VcloudAuthRequest.new vcloud_settings, "super", "man"
+
+      request.submit
+      request.should be_authenticated
+    end
+  end
+end

data/spec/vcloud_network_configurator/vcloud_settings_spec.rb

@@ -0,0 +1,19 @@
+require 'spec_helper'
+require 'vcloud_network_configurator/vcloud_settings'
+
+describe VcloudSettings do
+
+  it "should return session url" do
+    settings = VcloudSettings.new({:url => 'www.abra.ka.dabra/api',
+                                   :edge_gateway_uuid => 'sad-123g-12eda-12enas'})
+    settings.sessions_url.should == 'www.abra.ka.dabra/api/sessions'
+  end
+
+  it "should return edge_gateway_config_url" do
+    settings = VcloudSettings.new({:url => 'www.abra.ka.dabra/api',
+                                   :edge_gateway_uuid => 'sad-123g-12eda-12enas'})
+
+    settings.edge_gateway_config_url.should == 'www.abra.ka.dabra/api/admin/edgeGateway/sad-123g-12eda-12enas/action/configureServices'
+  end
+
+end

data/vcloud-network-configurator.gemspec

@@ -0,0 +1,33 @@
+# -*- encoding: utf-8 -*-
+$:.push File.expand_path("../lib", __FILE__)
+require "vcloud_network_configurator/version"
+
+Gem::Specification.new do |s|
+  s.name        = "vcloud-network-configurator"
+  s.version     = VERSION
+  s.authors     = ["Garima Singh"]
+  s.email       = ["igarimasingh@gmail.com"]
+  s.homepage    = "https://github.com/alphagov/vcloud-network-configurator"
+  s.summary     = %q{Configure firewall, NAT and load balancer for vcloud}
+  s.description = "It allows one to right rules for firewall, NAT and load " +
+    "balancer using vcloud API and configure them on the vendor end"
+
+  s.rubyforge_project = "vcloud-network-configurator"
+
+  s.files         = `git ls-files`.split("\n")
+  s.test_files    = `git ls-files -- {test,spec,features}/*`.split("\n")
+  s.executables   = `git ls-files -- bin/*`.split("\n").map{ |f| File.basename(f) }
+  s.require_paths = ["lib"]
+
+  s.add_development_dependency "rake"
+  s.add_development_dependency "minitest"
+  s.add_development_dependency "mocha"
+  s.add_development_dependency "webmock"
+  s.add_development_dependency "rspec", "~> 2.11.0"
+  s.add_development_dependency "equivalent-xml", "~> 0.2.9"
+  s.add_development_dependency "gem_publisher", "~> 1.3.0"
+  s.add_runtime_dependency "parallel"
+  s.add_runtime_dependency "highline"
+  s.add_runtime_dependency "nokogiri", "~> 1.5.0"
+end
+

metadata

@@ -0,0 +1,212 @@
+--- !ruby/object:Gem::Specification 
+name: vcloud-network-configurator
+version: !ruby/object:Gem::Version 
+  prerelease: 
+  version: 0.1.0
+platform: ruby
+authors: 
+- Garima Singh
+autorequire: 
+bindir: bin
+cert_chain: []
+
+date: 2013-08-07 00:00:00 Z
+dependencies: 
+- !ruby/object:Gem::Dependency 
+  name: rake
+  requirement: &id001 !ruby/object:Gem::Requirement 
+    none: false
+    requirements: 
+    - - ">="
+      - !ruby/object:Gem::Version 
+        version: "0"
+  type: :development
+  prerelease: false
+  version_requirements: *id001
+- !ruby/object:Gem::Dependency 
+  name: minitest
+  requirement: &id002 !ruby/object:Gem::Requirement 
+    none: false
+    requirements: 
+    - - ">="
+      - !ruby/object:Gem::Version 
+        version: "0"
+  type: :development
+  prerelease: false
+  version_requirements: *id002
+- !ruby/object:Gem::Dependency 
+  name: mocha
+  requirement: &id003 !ruby/object:Gem::Requirement 
+    none: false
+    requirements: 
+    - - ">="
+      - !ruby/object:Gem::Version 
+        version: "0"
+  type: :development
+  prerelease: false
+  version_requirements: *id003
+- !ruby/object:Gem::Dependency 
+  name: webmock
+  requirement: &id004 !ruby/object:Gem::Requirement 
+    none: false
+    requirements: 
+    - - ">="
+      - !ruby/object:Gem::Version 
+        version: "0"
+  type: :development
+  prerelease: false
+  version_requirements: *id004
+- !ruby/object:Gem::Dependency 
+  name: rspec
+  requirement: &id005 !ruby/object:Gem::Requirement 
+    none: false
+    requirements: 
+    - - ~>
+      - !ruby/object:Gem::Version 
+        version: 2.11.0
+  type: :development
+  prerelease: false
+  version_requirements: *id005
+- !ruby/object:Gem::Dependency 
+  name: equivalent-xml
+  requirement: &id006 !ruby/object:Gem::Requirement 
+    none: false
+    requirements: 
+    - - ~>
+      - !ruby/object:Gem::Version 
+        version: 0.2.9
+  type: :development
+  prerelease: false
+  version_requirements: *id006
+- !ruby/object:Gem::Dependency 
+  name: gem_publisher
+  requirement: &id007 !ruby/object:Gem::Requirement 
+    none: false
+    requirements: 
+    - - ~>
+      - !ruby/object:Gem::Version 
+        version: 1.3.0
+  type: :development
+  prerelease: false
+  version_requirements: *id007
+- !ruby/object:Gem::Dependency 
+  name: parallel
+  requirement: &id008 !ruby/object:Gem::Requirement 
+    none: false
+    requirements: 
+    - - ">="
+      - !ruby/object:Gem::Version 
+        version: "0"
+  type: :runtime
+  prerelease: false
+  version_requirements: *id008
+- !ruby/object:Gem::Dependency 
+  name: highline
+  requirement: &id009 !ruby/object:Gem::Requirement 
+    none: false
+    requirements: 
+    - - ">="
+      - !ruby/object:Gem::Version 
+        version: "0"
+  type: :runtime
+  prerelease: false
+  version_requirements: *id009
+- !ruby/object:Gem::Dependency 
+  name: nokogiri
+  requirement: &id010 !ruby/object:Gem::Requirement 
+    none: false
+    requirements: 
+    - - ~>
+      - !ruby/object:Gem::Version 
+        version: 1.5.0
+  type: :runtime
+  prerelease: false
+  version_requirements: *id010
+description: It allows one to right rules for firewall, NAT and load balancer using vcloud API and configure them on the vendor end
+email: 
+- igarimasingh@gmail.com
+executables: 
+- vcloud_configure_edge_gateway
+extensions: []
+
+extra_rdoc_files: []
+
+files: 
+- .gitignore
+- Gemfile
+- README.md
+- Rakefile
+- bin/vcloud_configure_edge_gateway
+- docs/find_network_url.md
+- docs/find_organisation_edgegateway_uuid.md
+- jenkins.sh
+- lib/component/firewall.rb
+- lib/component/load_balancer.rb
+- lib/component/nat.rb
+- lib/vcloud_network_configurator.rb
+- lib/vcloud_network_configurator/configure_task.rb
+- lib/vcloud_network_configurator/edge_gateway.rb
+- lib/vcloud_network_configurator/vcloud_auth_request.rb
+- lib/vcloud_network_configurator/vcloud_check_for_configure_task_request.rb
+- lib/vcloud_network_configurator/vcloud_configure_request.rb
+- lib/vcloud_network_configurator/vcloud_settings.rb
+- lib/vcloud_network_configurator/version.rb
+- spec/component/firewall.xml
+- spec/component/firewall_spec.rb
+- spec/component/lb.xml
+- spec/component/load_balancer_spec.rb
+- spec/component/nat.xml
+- spec/component/nat_spec.rb
+- spec/integration/authorization_failed_spec.rb
+- spec/integration/happy_path_firewall_spec.rb
+- spec/integration/happy_path_loadbalancer_spec.rb
+- spec/integration/happy_path_nat_spec.rb
+- spec/integration/test_data/happy_path_auth_response.xml
+- spec/integration/test_data/rules_dir/common_firewall.rb
+- spec/integration/test_data/rules_dir/common_lb.rb
+- spec/integration/test_data/rules_dir/common_nat.rb
+- spec/integration/test_data/rules_dir/preview/firewall.rb
+- spec/integration/test_data/rules_dir/preview/interfaces.yaml
+- spec/integration/test_data/rules_dir/preview/lb.rb
+- spec/integration/test_data/rules_dir/preview/nat.rb
+- spec/spec_helper.rb
+- spec/vcloud_network_configurator/configure_task_spec.rb
+- spec/vcloud_network_configurator/edge_gateway_spec.rb
+- spec/vcloud_network_configurator/vcloud_auth_request_spec.rb
+- spec/vcloud_network_configurator/vcloud_settings_spec.rb
+- vcloud-network-configurator.gemspec
+homepage: https://github.com/alphagov/vcloud-network-configurator
+licenses: []
+
+post_install_message: 
+rdoc_options: []
+
+require_paths: 
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement 
+  none: false
+  requirements: 
+  - - ">="
+    - !ruby/object:Gem::Version 
+      hash: -3951837720681967727
+      segments: 
+      - 0
+      version: "0"
+required_rubygems_version: !ruby/object:Gem::Requirement 
+  none: false
+  requirements: 
+  - - ">="
+    - !ruby/object:Gem::Version 
+      hash: -3951837720681967727
+      segments: 
+      - 0
+      version: "0"
+requirements: []
+
+rubyforge_project: vcloud-network-configurator
+rubygems_version: 1.8.24
+signing_key: 
+specification_version: 3
+summary: Configure firewall, NAT and load balancer for vcloud
+test_files: []
+