Tests for Bug #8400

This patch tests the status of traffic when a releated rule
is removed when the communication is happening.

Change-Id: Ieb961a46606a11d86043c2d5fc2570e6a3954763
Signed-off-by: gvrangan <venkatrangang@hcl.com>

diff --git a/csit/suites/openstack/connectivity/security_group.robot b/csit/suites/openstack/connectivity/security_group.robot
index f79f4733faf45032a21666a454f2250d7819a93f..1ad77abb8d96e0382a948745c9e85b8952426011 100644 (file)
--- a/csit/suites/openstack/connectivity/security_group.robot
+++ b/csit/suites/openstack/connectivity/security_group.robot
@@ -16,6 +16,7 @@ Resource          ../../../libraries/KarafKeywords.robot
 Resource          ../../../libraries/OpenStackOperations.robot
 Resource          ../../../libraries/SetupUtils.robot
 Resource          ../../../libraries/Utils.robot
+Resource          ../../../libraries/RemoteBash.robot
 Resource          ../../../variables/netvirt/Variables.robot
 
 *** Variables ***
@@ -152,8 +153,17 @@ Repeat Ping From Vm Instance2 To Vm Instance1 With additional SG
     ${vm_ips}    BuiltIn.Create List    @{NET_1_VM_IPS}[0]
     OpenStackOperations.Test Operations From Vm Instance    @{NETWORKS}[0]    @{NET_1_VM_IPS}[1]    ${vm_ips}
 
-Remove The Rules From Additional Security Group
-    OpenStackOperations.Delete All Security Group Rules    additional-sg
+Test Connection when Rules Change Dynamically
+    [Documentation]    Initiate ping from DHCP to VM instance and remove security rules
+    ...    dynamically check the communication has stopped after removing the security group rules.
+    ${net_id}=    OpenstackOperations.Get Net Id    @{NETWORKS}[0]
+    Get ControlNode Connection
+    ${output}=    SSHLibrary.Write    sudo ip netns exec qdhcp-${net_id} ping @{NET_1_VM_IPS}[0]
+    Delete All Security Group Rules    additional-sg
+    Read    delay=10s
+    Write_Bare_Ctrl_C
+    ${output}=    Read Until    packet loss
+    Should Not Contain    ${output}    0% packet loss
 
 No Ping From DHCP To Vm Instance1 With Additional Security Group Rules Removed
     [Documentation]    Check non-reachability of vm instances by pinging to them.