121 lines
4.5 KiB
Python
121 lines
4.5 KiB
Python
"""vSphere seed profile shape tests (no database)."""
|
|
|
|
from app.vsphere.profiles import (
|
|
PROFILE_SIZES,
|
|
big_vsphere_profile,
|
|
build_vsphere_profile,
|
|
infer_profile_hint,
|
|
large_vsphere_profile,
|
|
minimal_vsphere_profile,
|
|
small_vsphere_profile,
|
|
)
|
|
from app.vsphere.security.authz import has_privilege, privileges_for_roles
|
|
|
|
|
|
def test_profile_sizes_table() -> None:
|
|
assert PROFILE_SIZES["minimal"].vm_count == 5
|
|
assert PROFILE_SIZES["small"].host_count == 3
|
|
assert PROFILE_SIZES["small"].vm_count == 50
|
|
assert PROFILE_SIZES["large"].host_count == 10
|
|
assert PROFILE_SIZES["large"].vm_count == 1000
|
|
assert PROFILE_SIZES["big"].host_count == 20
|
|
assert PROFILE_SIZES["big"].vm_count == 2000
|
|
|
|
|
|
def test_minimal_profile() -> None:
|
|
profile = minimal_vsphere_profile()
|
|
assert profile.name == "minimal"
|
|
assert profile.vm_count == 5
|
|
assert profile.host_count == 3
|
|
assert len([o for o in profile.objects if o.type == "Datastore"]) == 1
|
|
assert len([o for o in profile.objects if o.type == "Network"]) == 1
|
|
|
|
|
|
def test_small_profile_has_named_vms_and_scale() -> None:
|
|
profile = small_vsphere_profile()
|
|
assert profile.vm_count == 50
|
|
assert profile.host_count == 3
|
|
assert profile.extras_scale == 1
|
|
names = {obj.name for obj in profile.objects if obj.type == "VirtualMachine"}
|
|
assert {"web-01", "app-01", "db-01"} <= names
|
|
datastores = [obj for obj in profile.objects if obj.type == "Datastore"]
|
|
assert len(datastores) == 2
|
|
ds_ids = {d.moid for d in datastores}
|
|
for vm in profile.objects:
|
|
if vm.type != "VirtualMachine":
|
|
continue
|
|
assert vm.props.get("datastore") in ds_ids
|
|
|
|
|
|
def test_large_profile_1000_vms() -> None:
|
|
profile = large_vsphere_profile(host_count=10, vm_count=1000)
|
|
assert profile.vm_count == 1000
|
|
assert profile.host_count == 10
|
|
assert profile.extras_scale == 2
|
|
vms = [obj for obj in profile.objects if obj.type == "VirtualMachine"]
|
|
hosts = [obj for obj in profile.objects if obj.type == "HostSystem"]
|
|
folders = [obj for obj in profile.objects if obj.type == "Folder"]
|
|
assert len(vms) == 1000
|
|
assert len(hosts) == 10
|
|
assert len(folders) == 10 # 8 spine + 2 scaled
|
|
assert any(obj.name == "web-01" for obj in vms)
|
|
by_host: dict[str, int] = {}
|
|
for vm in vms:
|
|
host = str(vm.props.get("host"))
|
|
by_host[host] = by_host.get(host, 0) + 1
|
|
assert len(by_host) == 10
|
|
assert min(by_host.values()) >= 90
|
|
assert max(by_host.values()) <= 110
|
|
|
|
|
|
def test_big_profile_2000_vms() -> None:
|
|
profile = big_vsphere_profile()
|
|
assert profile.name == "big"
|
|
assert profile.vm_count == 2000
|
|
assert profile.host_count == 20
|
|
assert profile.extras_scale == 4
|
|
datastores = [obj for obj in profile.objects if obj.type == "Datastore"]
|
|
networks = [
|
|
obj
|
|
for obj in profile.objects
|
|
if obj.type in {"Network", "DistributedVirtualPortgroup"}
|
|
]
|
|
folders = [obj for obj in profile.objects if obj.type == "Folder"]
|
|
assert len(datastores) == 8
|
|
assert len(networks) == 8
|
|
assert len(folders) == 14 # 8 spine + 6 scaled
|
|
ds_ids = {d.moid for d in datastores}
|
|
for vm in profile.objects:
|
|
if vm.type != "VirtualMachine":
|
|
continue
|
|
assert vm.props.get("datastore") in ds_ids
|
|
|
|
|
|
def test_demo_cluster_aliases_big() -> None:
|
|
profile = build_vsphere_profile("demo-cluster")
|
|
assert profile.name == "big"
|
|
assert profile.vm_count == 2000
|
|
assert profile.host_count == 20
|
|
|
|
|
|
def test_infer_profile_hint() -> None:
|
|
assert infer_profile_hint(hosts=3, vms=5, datastores=1) == "minimal"
|
|
assert infer_profile_hint(hosts=3, vms=50, datastores=2) == "small"
|
|
assert infer_profile_hint(hosts=10, vms=1000, datastores=4) == "large"
|
|
assert infer_profile_hint(hosts=20, vms=2000, datastores=8) == "big"
|
|
|
|
|
|
def test_lab_credentials_include_readonly() -> None:
|
|
users = {c.username: c.roles for c in large_vsphere_profile().credentials}
|
|
assert "readonly@vsphere.local" in users
|
|
assert "ReadOnly" in users["readonly@vsphere.local"]
|
|
assert "Administrator" in users["administrator@vsphere.local"]
|
|
|
|
|
|
def test_readonly_cannot_power() -> None:
|
|
assert has_privilege(["ReadOnly"], "System.Read")
|
|
assert not has_privilege(["ReadOnly"], "VirtualMachine.Interact.PowerOn")
|
|
assert has_privilege(["VirtualMachinePowerUser"], "VirtualMachine.Interact.PowerOn")
|
|
assert "*" not in privileges_for_roles(["Administrator"])
|
|
assert "Authorization.ModifyPermissions" in privileges_for_roles(["Administrator"])
|