Initial commit: stateful OpenStack API laboratory simulator.

Ship Keystone auth, multi-service handlers (Yoga→Dalmatian), Compose/Helm packaging, API contract packs, and pytest/Pulumi coverage labs.
2026-07-18 04:26:48 +03:00
commit 6033967e6a
509 changed files with 464404 additions and 0 deletions
@@ -0,0 +1,157 @@
+"""Maximize pulumi_openstack coverage against the OpenStack API simulator.
+
+Creates / looks up resources via the official provider, then exports IDs so
+the suite can assert every stack output is non-empty.
+
+Notes vs simulator limits:
+- flavor_id is seeded ``1`` (get_flavor fails on extra_specs shape)
+- skip Heat/Designate/Swift/Octavia creates (status codes or catalog URL
+  shapes the lab does not yet match)
+"""
+
+from __future__ import annotations
+
+import os
+import uuid
+
+import pulumi
+from pulumi_openstack import blockstorage, compute, identity, images, networking
+
+series = os.environ.get("OPENSTACK_SERIES", "dalmatian")
+tag = f"pu-{series}-{uuid.uuid4().hex[:6]}"
+
+# --- Data sources (reads) ---
+auth = identity.get_auth_scope(name="lab-token")
+image = images.get_image(name="cirros", most_recent=True)
+demo_net = networking.get_network(name="demo-net")
+flavor_id = "1"  # seeded m1.tiny
+
+# --- Identity (writes) ---
+project = identity.Project(
+    f"{tag}-project",
+    name=f"{tag}-project",
+    description=f"pulumi coverage {series}",
+    enabled=True,
+)
+user = identity.User(
+    f"{tag}-user",
+    name=f"{tag}-user",
+    password="pulumi-lab-secret",
+    description=f"pulumi coverage {series}",
+    enabled=True,
+)
+
+# --- Networking ---
+app_net = networking.Network(f"{tag}-net", name=f"{tag}-net", admin_state_up=True)
+app_subnet = networking.Subnet(
+    f"{tag}-subnet",
+    name=f"{tag}-subnet",
+    network_id=app_net.id,
+    cidr="10.88.0.0/24",
+    ip_version=4,
+    enable_dhcp=True,
+)
+router = networking.Router(f"{tag}-router", name=f"{tag}-router", admin_state_up=True)
+router_iface = networking.RouterInterface(
+    f"{tag}-rtr-if",
+    router_id=router.id,
+    subnet_id=app_subnet.id,
+)
+sg = networking.SecGroup(
+    f"{tag}-sg",
+    name=f"{tag}-sg",
+    description=f"pulumi {series}",
+    delete_default_rules=True,
+)
+sg_rule = networking.SecGroupRule(
+    f"{tag}-sg-ssh",
+    direction="ingress",
+    ethertype="IPv4",
+    protocol="tcp",
+    port_range_min=22,
+    port_range_max=22,
+    remote_ip_prefix="0.0.0.0/0",
+    security_group_id=sg.id,
+)
+port = networking.Port(
+    f"{tag}-port",
+    name=f"{tag}-port",
+    network_id=app_net.id,
+    admin_state_up=True,
+    security_group_ids=[sg.id],
+    fixed_ips=[networking.PortFixedIpArgs(subnet_id=app_subnet.id)],
+)
+
+# --- Compute ---
+keypair = compute.Keypair(f"{tag}-kp", name=f"{tag}-kp")
+server_group = compute.ServerGroup(
+    f"{tag}-sgroup",
+    name=f"{tag}-sgroup",
+    policies="anti-affinity",
+)
+server = compute.Instance(
+    f"{tag}-vm",
+    name=f"{tag}-vm",
+    flavor_id=flavor_id,
+    image_id=image.id,
+    key_pair=keypair.name,
+    security_groups=[sg.name],
+    networks=[compute.InstanceNetworkArgs(uuid=demo_net.id)],
+    scheduler_hints=[compute.InstanceSchedulerHintArgs(group=server_group.id)],
+    metadata={"managed_by": "pulumi", "series": series, "tag": tag},
+)
+iface = compute.InterfaceAttach(
+    f"{tag}-iface",
+    instance_id=server.id,
+    port_id=port.id,
+)
+
+# --- Block storage ---
+volume = blockstorage.Volume(
+    f"{tag}-vol",
+    name=f"{tag}-vol",
+    size=1,
+    description=f"pulumi coverage {series}",
+)
+vol_attach = compute.VolumeAttach(
+    f"{tag}-attach",
+    instance_id=server.id,
+    volume_id=volume.id,
+)
+volume2 = blockstorage.Volume(
+    f"{tag}-vol2",
+    name=f"{tag}-vol2",
+    size=1,
+    description=f"pulumi second volume {series}",
+)
+
+# Octavia / Designate / Swift / Heat omitted: catalog paths or status codes
+# in the lab gateway do not yet match what pulumi_openstack expects.
+
+# --- Exports (all must be non-empty; suite requires >= 25) ---
+pulumi.export("series", series)
+pulumi.export("tag", tag)
+pulumi.export("auth_user_id", auth.user_id)
+pulumi.export("auth_project_id", auth.project_id)
+pulumi.export("project_name", auth.project_name)
+pulumi.export("flavor_id", flavor_id)
+pulumi.export("image_id", image.id)
+pulumi.export("image_name", image.name)
+pulumi.export("demo_net_id", demo_net.id)
+pulumi.export("created_project_id", project.id)
+pulumi.export("created_user_id", user.id)
+pulumi.export("network_id", app_net.id)
+pulumi.export("subnet_id", app_subnet.id)
+pulumi.export("router_id", router.id)
+pulumi.export("router_iface_id", router_iface.id)
+pulumi.export("secgroup_id", sg.id)
+pulumi.export("secgroup_rule_id", sg_rule.id)
+pulumi.export("port_id", port.id)
+pulumi.export("keypair_name", keypair.name)
+pulumi.export("server_group_id", server_group.id)
+pulumi.export("server_id", server.id)
+pulumi.export("server_name", server.name)
+pulumi.export("interface_id", iface.id)
+pulumi.export("volume_id", volume.id)
+pulumi.export("volume2_id", volume2.id)
+pulumi.export("volume_attach_id", vol_attach.id)