228 lines
8.4 KiB
Python
228 lines
8.4 KiB
Python
import boto3
|
|
import pytest
|
|
from botocore.exceptions import ClientError
|
|
|
|
from moto import mock_ec2, mock_route53
|
|
|
|
|
|
@mock_ec2
|
|
@mock_route53
|
|
def test_hosted_zone_private_zone_preserved():
|
|
# Create mock VPC so we can get a VPC ID
|
|
region = "us-east-1"
|
|
ec2c = boto3.client("ec2", region_name=region)
|
|
vpc_id = ec2c.create_vpc(CidrBlock="10.1.0.0/16").get("Vpc").get("VpcId")
|
|
|
|
# Create hosted_zone as a Private VPC Hosted Zone
|
|
conn = boto3.client("route53", region_name=region)
|
|
new_zone = conn.create_hosted_zone(
|
|
Name="testdns.aws.com.",
|
|
CallerReference=str(hash("foo")),
|
|
HostedZoneConfig=dict(PrivateZone=True, Comment="Test"),
|
|
VPC={"VPCRegion": region, "VPCId": vpc_id},
|
|
)
|
|
|
|
zone_id = new_zone["HostedZone"]["Id"].split("/")[-1]
|
|
hosted_zone = conn.get_hosted_zone(Id=zone_id)
|
|
assert hosted_zone["HostedZone"]["Config"]["PrivateZone"]
|
|
|
|
assert len(hosted_zone["VPCs"]) == 1
|
|
assert hosted_zone["VPCs"][0]["VPCId"] == vpc_id
|
|
assert hosted_zone["VPCs"][0]["VPCRegion"] == region
|
|
|
|
hosted_zones = conn.list_hosted_zones()
|
|
assert hosted_zones["HostedZones"][0]["Config"]["PrivateZone"]
|
|
|
|
hosted_zones = conn.list_hosted_zones_by_name(DNSName="testdns.aws.com.")
|
|
assert len(hosted_zones["HostedZones"]) == 1
|
|
assert hosted_zones["HostedZones"][0]["Config"]["PrivateZone"]
|
|
|
|
# create_hosted_zone statements with PrivateZone=True,
|
|
# but without a _valid_ vpc-id should NOT fail.
|
|
zone2_name = "testdns2.aws.com."
|
|
no_vpc_zone = conn.create_hosted_zone(
|
|
Name=zone2_name,
|
|
CallerReference=str(hash("foo")),
|
|
HostedZoneConfig=dict(PrivateZone=True, Comment="Test without VPC"),
|
|
)
|
|
|
|
zone_id = no_vpc_zone["HostedZone"]["Id"].split("/")[-1]
|
|
hosted_zone = conn.get_hosted_zone(Id=zone_id)
|
|
assert hosted_zone["HostedZone"]["Config"]["PrivateZone"]
|
|
|
|
assert len(hosted_zone["VPCs"]) == 0
|
|
|
|
hosted_zones = conn.list_hosted_zones()
|
|
assert len(hosted_zones["HostedZones"]) == 2
|
|
assert hosted_zones["HostedZones"][0]["Config"]["PrivateZone"]
|
|
assert hosted_zones["HostedZones"][1]["Config"]["PrivateZone"]
|
|
|
|
hosted_zones = conn.list_hosted_zones_by_name(DNSName=zone2_name)
|
|
assert len(hosted_zones["HostedZones"]) == 1
|
|
assert hosted_zones["HostedZones"][0]["Config"]["PrivateZone"]
|
|
assert hosted_zones["HostedZones"][0]["Name"] == zone2_name
|
|
|
|
|
|
@mock_ec2
|
|
@mock_route53
|
|
def test_list_hosted_zones_by_vpc_with_multiple_vpcs():
|
|
# Create mock VPC so we can get a VPC ID
|
|
ec2c = boto3.client("ec2", region_name="us-east-1")
|
|
vpc_id = ec2c.create_vpc(CidrBlock="10.1.0.0/16").get("Vpc").get("VpcId")
|
|
region = "us-east-1"
|
|
|
|
# Create 3 Zones associate with the VPC.
|
|
zones = {}
|
|
conn = boto3.client("route53", region_name=region)
|
|
for zone in ["a", "b", "c"]:
|
|
zone_name = f"test.{zone}.com."
|
|
zones[zone] = conn.create_hosted_zone(
|
|
Name=zone_name,
|
|
CallerReference=str(hash("foo")),
|
|
HostedZoneConfig=dict(PrivateZone=True, Comment=f"test {zone} com"),
|
|
VPC={"VPCRegion": region, "VPCId": vpc_id},
|
|
)
|
|
|
|
# List the zones associated with this vpc
|
|
response = conn.list_hosted_zones_by_vpc(VPCId=vpc_id, VPCRegion=region)
|
|
assert len(response["HostedZoneSummaries"]) == 3
|
|
|
|
# Loop through all zone summaries and verify they match what was created
|
|
for summary in response["HostedZoneSummaries"]:
|
|
# use the zone name as the index
|
|
index = summary["Name"].split(".")[1]
|
|
zone_id = zones[index]["HostedZone"]["Id"].split("/")[2]
|
|
assert summary["HostedZoneId"] == zone_id
|
|
assert summary["Name"] == zones[index]["HostedZone"]["Name"]
|
|
|
|
|
|
@mock_ec2
|
|
@mock_route53
|
|
def test_list_hosted_zones_by_vpc():
|
|
# Create mock VPC so we can get a VPC ID
|
|
ec2c = boto3.client("ec2", region_name="us-east-1")
|
|
vpc_id = ec2c.create_vpc(CidrBlock="10.1.0.0/16").get("Vpc").get("VpcId")
|
|
region = "us-east-1"
|
|
|
|
conn = boto3.client("route53", region_name=region)
|
|
zone_b = conn.create_hosted_zone(
|
|
Name="test.b.com.",
|
|
CallerReference=str(hash("foo")),
|
|
HostedZoneConfig=dict(PrivateZone=True, Comment="test com"),
|
|
VPC={"VPCRegion": region, "VPCId": vpc_id},
|
|
)
|
|
zone_id = zone_b["HostedZone"]["Id"].split("/")[2]
|
|
|
|
response = conn.list_hosted_zones_by_vpc(VPCId=vpc_id, VPCRegion=region)
|
|
assert len(response["HostedZoneSummaries"]) == 1
|
|
returned_zone = response["HostedZoneSummaries"][0]
|
|
assert returned_zone["HostedZoneId"] == zone_id
|
|
assert returned_zone["Name"] == zone_b["HostedZone"]["Name"]
|
|
|
|
|
|
@mock_ec2
|
|
@mock_route53
|
|
def test_route53_associate_vpc():
|
|
ec2c = boto3.client("ec2", region_name="us-east-1")
|
|
vpc_id = ec2c.create_vpc(CidrBlock="10.1.0.0/16")["Vpc"]["VpcId"]
|
|
conn = boto3.client("route53", region_name="us-east-1")
|
|
zone = conn.create_hosted_zone(
|
|
Name="test.b.com.",
|
|
CallerReference=str(hash("foo")),
|
|
HostedZoneConfig=dict(PrivateZone=True, Comment=""),
|
|
)
|
|
zone_id = zone["HostedZone"]["Id"].split("/")[2]
|
|
|
|
resp = conn.associate_vpc_with_hosted_zone(
|
|
HostedZoneId=zone_id,
|
|
VPC={"VPCId": vpc_id, "VPCRegion": "us-east-1"},
|
|
Comment="yolo",
|
|
)
|
|
assert resp["ChangeInfo"]["Comment"] == "yolo"
|
|
|
|
|
|
@mock_ec2
|
|
@mock_route53
|
|
def test_route53_associate_vpc_with_public_Zone():
|
|
ec2c = boto3.client("ec2", region_name="us-east-1")
|
|
vpc_id = ec2c.create_vpc(CidrBlock="10.1.0.0/16")["Vpc"]["VpcId"]
|
|
conn = boto3.client("route53", region_name="us-east-1")
|
|
zone = conn.create_hosted_zone(
|
|
Name="test.b.com.",
|
|
CallerReference=str(hash("foo")),
|
|
)
|
|
zone_id = zone["HostedZone"]["Id"].split("/")[2]
|
|
|
|
with pytest.raises(ClientError) as exc:
|
|
conn.associate_vpc_with_hosted_zone(
|
|
HostedZoneId=zone_id,
|
|
VPC={"VPCId": vpc_id, "VPCRegion": "us-east-1"},
|
|
Comment="yolo",
|
|
)
|
|
err = exc.value.response["Error"]
|
|
assert err["Code"] == "PublicZoneVPCAssociation"
|
|
assert (
|
|
err["Message"]
|
|
== "You're trying to associate a VPC with a public hosted zone. Amazon Route 53 doesn't support associating a VPC with a public hosted zone."
|
|
)
|
|
|
|
|
|
@mock_ec2
|
|
@mock_route53
|
|
def test_route53_associate_and_disassociate_vpc():
|
|
ec2c = boto3.client("ec2", region_name="us-east-1")
|
|
vpc_id1 = ec2c.create_vpc(CidrBlock="10.1.0.0/16").get("Vpc").get("VpcId")
|
|
vpc_id2 = ec2c.create_vpc(CidrBlock="10.1.0.1/16").get("Vpc").get("VpcId")
|
|
region = "us-east-1"
|
|
|
|
conn = boto3.client("route53", region_name=region)
|
|
zone = conn.create_hosted_zone(
|
|
Name="test.b.com.",
|
|
CallerReference=str(hash("foo")),
|
|
HostedZoneConfig=dict(PrivateZone=True, Comment="test com"),
|
|
VPC={"VPCRegion": region, "VPCId": vpc_id1},
|
|
)
|
|
zone_id = zone["HostedZone"]["Id"].split("/")[2]
|
|
|
|
conn.associate_vpc_with_hosted_zone(
|
|
HostedZoneId=zone_id,
|
|
VPC={"VPCId": vpc_id2, "VPCRegion": region},
|
|
)
|
|
|
|
zone_vpcs = conn.get_hosted_zone(Id=zone_id)["VPCs"]
|
|
assert len(zone_vpcs) == 2
|
|
assert {"VPCRegion": region, "VPCId": vpc_id1} in zone_vpcs
|
|
assert {"VPCRegion": region, "VPCId": vpc_id2} in zone_vpcs
|
|
|
|
conn.disassociate_vpc_from_hosted_zone(HostedZoneId=zone_id, VPC={"VPCId": vpc_id1})
|
|
|
|
zone_vpcs = conn.get_hosted_zone(Id=zone_id)["VPCs"]
|
|
assert len(zone_vpcs) == 1
|
|
assert {"VPCRegion": region, "VPCId": vpc_id2} in zone_vpcs
|
|
|
|
|
|
@mock_ec2
|
|
@mock_route53
|
|
def test_route53_disassociate_last_vpc():
|
|
ec2c = boto3.client("ec2", region_name="us-east-1")
|
|
vpc_id = ec2c.create_vpc(CidrBlock="10.1.0.0/16")["Vpc"]["VpcId"]
|
|
conn = boto3.client("route53", region_name="us-east-1")
|
|
zone = conn.create_hosted_zone(
|
|
Name="test.b.com.",
|
|
CallerReference=str(hash("foo")),
|
|
HostedZoneConfig=dict(PrivateZone=True, Comment="test com"),
|
|
VPC={"VPCRegion": "us-east-1", "VPCId": vpc_id},
|
|
)
|
|
zone_id = zone["HostedZone"]["Id"].split("/")[2]
|
|
|
|
with pytest.raises(ClientError) as exc:
|
|
conn.disassociate_vpc_from_hosted_zone(
|
|
HostedZoneId=zone_id, VPC={"VPCId": vpc_id}
|
|
)
|
|
err = exc.value.response["Error"]
|
|
assert err["Code"] == "LastVPCAssociation"
|
|
assert (
|
|
err["Message"]
|
|
== "The VPC that you're trying to disassociate from the private hosted zone is the last VPC that is associated with the hosted zone. Amazon Route 53 doesn't support disassociating the last VPC from a hosted zone."
|
|
)
|