[Feat.] Hss Intrusion Detection (Events)

acceptance/openstack/apigw/v2/channel_test.go

@@ -108,6 +108,7 @@ func CreateChannel(client *golangsdk.ServiceClient, t *testing.T, id string) *ch
 		tools.RandomString("hss_group-member-", 3),
 		"Standard_Debian_10_latest",
 		"s2.large.2",
+		"",
 	)
 	th.AssertNoErr(t, err)
 

acceptance/openstack/common.go

@@ -241,7 +241,7 @@ func ValidIP(t *testing.T, networkID string) string {
 	return singleIP.String()
 }
 
-func CreateServer(t *testing.T, client *golangsdk.ServiceClient, ecsName, imageName, flavorId string) *servers.Server {
+func CreateServer(t *testing.T, client *golangsdk.ServiceClient, ecsName, imageName, flavorId, userData string) *servers.Server {
 	networkID := clients.EnvOS.GetEnv("NETWORK_ID")
 	if networkID == "" {
 		t.Skip("OS_NETWORK_ID env var is missing but ECS test requires using existing network")
@@ -275,6 +275,7 @@ func CreateServer(t *testing.T, client *golangsdk.ServiceClient, ecsName, imageN
 				UUID: networkID,
 			},
 		},
+		UserData: []byte(userData),
 	}
 
 	ecs, err := servers.Create(client, createOpts).Extract()

acceptance/openstack/hss/v5/event_test.go

@@ -0,0 +1,123 @@
+package v2
+
+import (
+	"os"
+	"testing"
+
+	golangsdk "github.com/opentelekomcloud/gophertelekomcloud"
+	"github.com/opentelekomcloud/gophertelekomcloud/acceptance/clients"
+	"github.com/opentelekomcloud/gophertelekomcloud/acceptance/openstack"
+	"github.com/opentelekomcloud/gophertelekomcloud/acceptance/tools"
+	"github.com/opentelekomcloud/gophertelekomcloud/openstack/compute/v2/servers"
+	"github.com/opentelekomcloud/gophertelekomcloud/openstack/hss/v5/event"
+	"github.com/opentelekomcloud/gophertelekomcloud/openstack/hss/v5/host"
+	"github.com/opentelekomcloud/gophertelekomcloud/openstack/hss/v5/quota"
+	th "github.com/opentelekomcloud/gophertelekomcloud/testhelper"
+)
+
+const userDataHssAgent = `#!/bin/bash
+curl -O 'https://hss-agent-podlb.eu-de.otc.t-systems.com:10180/package/agent/linux/x86/hostguard.x86_64.deb'
+echo 'MASTER_IP=hss-agent-podlb.eu-de.otc.t-systems.com:10180' > hostguard_setup_config.conf
+echo 'SLAVE_IP=hss-agent-slave.eu-de.otc-tsi.de:10180' >> hostguard_setup_config.conf
+echo 'ORG_ID=' >> hostguard_setup_config.conf
+dpkg -i hostguard.x86_64.deb
+rm -f hostguard_setup_config.conf
+rm -f hostguard.x86_64.deb`
+
+func TestEventsLifecycle(t *testing.T) {
+	if os.Getenv("RUN_HSS_LIFECYCLE") == "" {
+		t.Skip("too slow to run in zuul")
+	}
+	client, err := clients.NewHssClient()
+	th.AssertNoErr(t, err)
+
+	t.Logf("Attempting to Create member for Server group")
+	ecsClient, err := clients.NewComputeV2Client()
+	ecs := openstack.CreateServer(t, ecsClient,
+		tools.RandomString("hss-group-member-", 3),
+		"Standard_Debian_11_latest",
+		"s2.large.2",
+		userDataHssAgent,
+	)
+	th.AssertNoErr(t, err)
+
+	t.Cleanup(func() {
+		t.Logf("Attempting to delete Server: %s", ecs.ID)
+		th.AssertNoErr(t, servers.Delete(ecsClient, ecs.ID).ExtractErr())
+	})
+
+	err = golangsdk.WaitFor(1000, func() (bool, error) {
+		h, err := host.ListHost(client, host.ListHostOpts{HostID: ecs.ID})
+		if err != nil {
+			return false, err
+		}
+
+		if len(h) > 0 {
+			if h[0].AgentStatus == "online" {
+				return true, nil
+			}
+		}
+
+		return false, nil
+	})
+	th.AssertNoErr(t, err)
+
+	t.Logf("Attempting to Create Server group")
+	name := tools.RandomString("hss-group-", 3)
+	err = host.Create(client, host.CreateOpts{
+		Name: name,
+		HostIds: []string{
+			ecs.ID,
+		},
+	})
+	th.AssertNoErr(t, err)
+
+	t.Logf("Attempting to Obtain Server group")
+	getResp, err := host.List(client, host.ListOpts{
+		Name: name,
+	})
+	th.AssertNoErr(t, err)
+	th.AssertEquals(t, name, getResp[0].Name)
+
+	t.Cleanup(func() {
+		t.Logf("Attempting to Delete Server group")
+		th.AssertNoErr(t, host.Delete(client, host.DeleteOpts{GroupID: getResp[0].ID}))
+	})
+
+	t.Logf("Attempting to Change server Protection Status to null")
+	_, err = host.ChangeProtectionStatus(client, host.ProtectionOpts{
+		Version: "hss.version.null",
+		HostIds: []string{
+			ecs.ID,
+		},
+	})
+	th.AssertNoErr(t, err)
+
+	t.Logf("Attempting to Change server Protection Status to premium")
+	_, err = host.ChangeProtectionStatus(client, host.ProtectionOpts{
+		Version:      "hss.version.premium",
+		ChargingMode: "on_demand",
+		HostIds: []string{
+			ecs.ID,
+		},
+	})
+	th.AssertNoErr(t, err)
+
+	t.Logf("Attempting to get used quota details")
+	q, err := quota.List(client, quota.ListOpts{
+		HostName: ecs.Name,
+	})
+	th.AssertNoErr(t, err)
+	th.AssertEquals(t, "used", q[0].UsedStatus)
+	th.AssertEquals(t, "hss.version.premium", q[0].Version)
+
+	t.Logf("Attempting to get host events")
+	listEventsResp, err := event.List(client, event.ListOpts{Category: "host"})
+	th.AssertNoErr(t, err)
+	tools.PrintResource(t, listEventsResp)
+
+	t.Logf("Attempting to get alarm whitelist")
+	listWhitelistsResp, err := event.ListAlarmWhitelist(client, event.ListAlarmWhitelistOpts{})
+	th.AssertNoErr(t, err)
+	tools.PrintResource(t, listWhitelistsResp)
+}

acceptance/openstack/hss/v5/server_group_test.go

@@ -47,6 +47,7 @@ func TestServerLifecycle(t *testing.T) {
 		tools.RandomString("hss-group-member-", 3),
 		"Standard_Debian_11_latest",
 		"s2.large.2",
+		userDataHssAgent,
 	)
 	th.AssertNoErr(t, err)
 
@@ -61,8 +62,10 @@ func TestServerLifecycle(t *testing.T) {
 			return false, err
 		}
 
-		if len(h) == 1 {
-			return true, nil
+		if len(h) > 0 {
+			if h[0].AgentStatus == "online" {
+				return true, nil
+			}
 		}
 
 		return false, nil