use of bio.terra.stairway.StepStatus in project terra-workspace-manager by DataBiosphere.
the class ControlledResourceServiceTest method deleteGcsBucketDo.
@Test
@DisabledIfEnvironmentVariable(named = "TEST_ENV", matches = BUFFER_SERVICE_DISABLED_ENVS_REG_EX)
void deleteGcsBucketDo() throws Exception {
ControlledGcsBucketResource createdBucket = createDefaultSharedGcsBucket(workspace, user);
// Test idempotency of bucket-specific delete step by retrying it once.
Map<String, StepStatus> retrySteps = new HashMap<>();
retrySteps.put(DeleteGcsBucketStep.class.getName(), StepStatus.STEP_RESULT_FAILURE_RETRY);
jobService.setFlightDebugInfoForTest(FlightDebugInfo.newBuilder().doStepFailures(retrySteps).build());
String jobId = controlledResourceService.deleteControlledResourceAsync(new ApiJobControl().id(UUID.randomUUID().toString()), workspace.getWorkspaceId(), createdBucket.getResourceId(), "fake result path", user.getAuthenticatedRequest(), true);
jobService.waitForJob(jobId);
assertEquals(FlightStatus.SUCCESS, stairwayComponent.get().getFlightState(jobId).getFlightStatus());
// Validate the bucket does not exist.
StorageCow storageCow = crlService.createStorageCow(projectId);
assertNull(storageCow.get(createdBucket.getBucketName()));
assertThrows(ResourceNotFoundException.class, () -> controlledResourceService.getControlledResource(workspace.getWorkspaceId(), createdBucket.getResourceId(), user.getAuthenticatedRequest()));
}
use of bio.terra.stairway.StepStatus in project terra-workspace-manager by DataBiosphere.
the class ControlledResourceServiceTest method createAiNotebookInstanceUndo.
@Test
@DisabledIfEnvironmentVariable(named = "TEST_ENV", matches = BUFFER_SERVICE_DISABLED_ENVS_REG_EX)
void createAiNotebookInstanceUndo() throws Exception {
String instanceId = "create-ai-notebook-instance-undo";
String name = "create-ai-notebook-instance-undo-name";
ApiGcpAiNotebookInstanceCreationParameters creationParameters = ControlledResourceFixtures.defaultNotebookCreationParameters().instanceId(instanceId).location(DEFAULT_NOTEBOOK_LOCATION);
ControlledAiNotebookInstanceResource resource = makeNotebookTestResource(workspace.getWorkspaceId(), name, instanceId);
// Test idempotency of undo steps by retrying them once.
Map<String, StepStatus> retrySteps = new HashMap<>();
retrySteps.put(GrantPetUsagePermissionStep.class.getName(), StepStatus.STEP_RESULT_FAILURE_RETRY);
retrySteps.put(CreateAiNotebookInstanceStep.class.getName(), StepStatus.STEP_RESULT_FAILURE_RETRY);
jobService.setFlightDebugInfoForTest(FlightDebugInfo.newBuilder().lastStepFailure(true).undoStepFailures(retrySteps).build());
// Revoke user's Pet SA access, if they have it. Because these tests re-use a common workspace,
// the user may have pet SA access enabled prior to this test.
String serviceAccountEmail = samService.getOrCreatePetSaEmail(projectId, user.getAuthenticatedRequest().getRequiredToken());
petSaService.disablePetServiceAccountImpersonation(workspace.getWorkspaceId(), user.getEmail(), user.getAuthenticatedRequest());
IamCow userIamCow = crlService.getIamCow(user.getAuthenticatedRequest());
// Assert the user does not have access to their pet SA before the flight
// Note this uses user credentials for the IAM cow to validate the user's access.
CloudUtils.runWithRetryOnException(() -> throwIfImpersonateSa(ServiceAccountName.builder().projectId(projectId).email(serviceAccountEmail).build(), userIamCow));
String jobId = controlledResourceService.createAiNotebookInstance(resource, creationParameters, DEFAULT_ROLE, new ApiJobControl().id(UUID.randomUUID().toString()), "fakeResultPath", user.getAuthenticatedRequest());
jobService.waitForJob(jobId);
assertEquals(FlightStatus.ERROR, stairwayComponent.get().getFlightState(jobId).getFlightStatus());
assertNotFound(resource.toInstanceName(projectId), crlService.getAIPlatformNotebooksCow());
assertThrows(ResourceNotFoundException.class, () -> controlledResourceService.getControlledResource(resource.getWorkspaceId(), resource.getResourceId(), user.getAuthenticatedRequest()));
// This check relies on cloud IAM propagation and is sometimes delayed.
CloudUtils.runWithRetryOnException(() -> throwIfImpersonateSa(ServiceAccountName.builder().projectId(projectId).email(serviceAccountEmail).build(), userIamCow));
}
use of bio.terra.stairway.StepStatus in project terra-workspace-manager by DataBiosphere.
the class ControlledResourceServiceTest method createGcsBucketDo.
@Test
@DisabledIfEnvironmentVariable(named = "TEST_ENV", matches = BUFFER_SERVICE_DISABLED_ENVS_REG_EX)
void createGcsBucketDo() throws Exception {
ControlledGcsBucketResource resource = ControlledResourceFixtures.makeDefaultControlledGcsBucketBuilder(workspace.getWorkspaceId()).build();
// Test idempotency of bucket-specific steps by retrying them once.
Map<String, StepStatus> retrySteps = new HashMap<>();
retrySteps.put(CreateGcsBucketStep.class.getName(), StepStatus.STEP_RESULT_FAILURE_RETRY);
retrySteps.put(GcsBucketCloudSyncStep.class.getName(), StepStatus.STEP_RESULT_FAILURE_RETRY);
jobService.setFlightDebugInfoForTest(FlightDebugInfo.newBuilder().doStepFailures(retrySteps).build());
ControlledGcsBucketResource createdBucket = controlledResourceService.createControlledResourceSync(resource, null, user.getAuthenticatedRequest(), ControlledResourceFixtures.getGoogleBucketCreationParameters()).castByEnum(WsmResourceType.CONTROLLED_GCP_GCS_BUCKET);
assertEquals(resource, createdBucket);
StorageCow storageCow = crlService.createStorageCow(projectId);
BucketInfo cloudBucket = storageCow.get(resource.getBucketName()).getBucketInfo();
assertEquals(DEFAULT_REGION, cloudBucket.getLocation().toLowerCase());
assertEquals(resource, controlledResourceService.getControlledResource(workspace.getWorkspaceId(), resource.getResourceId(), user.getAuthenticatedRequest()));
}
use of bio.terra.stairway.StepStatus in project terra-workspace-manager by DataBiosphere.
the class ControlledResourceServiceTest method createGcsBucketUndo.
@Test
@DisabledIfEnvironmentVariable(named = "TEST_ENV", matches = BUFFER_SERVICE_DISABLED_ENVS_REG_EX)
void createGcsBucketUndo() throws Exception {
ControlledGcsBucketResource resource = ControlledResourceFixtures.makeDefaultControlledGcsBucketBuilder(workspace.getWorkspaceId()).build();
// Test idempotency of bucket-specific undo steps by retrying them once. Fail at the end of
// the flight to ensure undo steps work properly.
Map<String, StepStatus> retrySteps = new HashMap<>();
retrySteps.put(CreateGcsBucketStep.class.getName(), StepStatus.STEP_RESULT_FAILURE_RETRY);
retrySteps.put(GcsBucketCloudSyncStep.class.getName(), StepStatus.STEP_RESULT_FAILURE_RETRY);
jobService.setFlightDebugInfoForTest(FlightDebugInfo.newBuilder().undoStepFailures(retrySteps).lastStepFailure(true).build());
// Service methods which wait for a flight to complete will throw an
// InvalidResultStateException when that flight fails without a cause, which occurs when a
// flight fails via debugInfo.
assertThrows(InvalidResultStateException.class, () -> controlledResourceService.createControlledResourceSync(resource, null, user.getAuthenticatedRequest(), ControlledResourceFixtures.getGoogleBucketCreationParameters()));
// Validate the bucket does not exist.
StorageCow storageCow = crlService.createStorageCow(projectId);
assertNull(storageCow.get(resource.getBucketName()));
assertThrows(ResourceNotFoundException.class, () -> controlledResourceService.getControlledResource(workspace.getWorkspaceId(), resource.getResourceId(), user.getAuthenticatedRequest()));
}
use of bio.terra.stairway.StepStatus in project terra-workspace-manager by DataBiosphere.
the class WorkspaceServiceTest method createRawlsWorkspaceDoSteps.
@Test
void createRawlsWorkspaceDoSteps() throws InterruptedException {
Workspace request = defaultRequestBuilder(UUID.randomUUID()).workspaceStage(WorkspaceStage.RAWLS_WORKSPACE).build();
// Ensure the auth check in CheckSamWorkspaceAuthzStep always succeeds.
doReturn(true).when(mockSamService).isAuthorized(any(), any(), any(), any());
Map<String, StepStatus> retrySteps = new HashMap<>();
retrySteps.put(CheckSamWorkspaceAuthzStep.class.getName(), StepStatus.STEP_RESULT_FAILURE_RETRY);
retrySteps.put(CreateWorkspaceStep.class.getName(), StepStatus.STEP_RESULT_FAILURE_RETRY);
FlightDebugInfo debugInfo = FlightDebugInfo.newBuilder().doStepFailures(retrySteps).build();
jobService.setFlightDebugInfoForTest(debugInfo);
UUID createdId = workspaceService.createWorkspace(request, USER_REQUEST);
assertEquals(createdId, request.getWorkspaceId());
}
Aggregations