sse s3 jumbo patch - all in one fixes for sse-s3 logic

original tests by Priya Sehgal <priya.sehgal@flipkart.com>:
rgw/s3_boto3: Tests added for SSE-S3 (GET, PUT, HEAD, MPU).

Additions by Casey Bodley <cbodley@redhat.com>:
add 'sse-s3' tag to test cases
sse: add _put_bucket_encryption() helper function
sse: document test cases with default bucket encryption
sse: expects encryption response header on put/get
sse: add 8MB default-encrypted upload
sse: test uploads that request x-amz-server-side-encryption=AES256

Lastly all my changes (Marcus Watts <mwatts@redhat.com>):

remove obsolete test - do it only in boto3 now.

Combine or rename duplicated function names.
Giving more than one test the same name is a Bad Thing(tm).

sse: expand test_bucket_policy_put_obj_enc, and _put_bucket_encryption

test_bucket_policy_put_obj_enc was testing too many things at once.
new tests:

* customer encryption and sse-s3: should fail
* customer encryption and sse-kms: should fail
* deny if not sse-s3: no-enc fails, sse-s3 succeeds.
* deny if not sse-s3: kms fails
  deny if not sse-ksm: no-enc fails, sse-kms succeeds.
  deny if not sse-ksm: s3 fails

_put_bucket_encryption was only testing sse-s3.
* test both these variations: sse-s3 and sse-kms

Note:
* these tests will fail on pre-sse-s3 ceph.

python3: comment out all boto3.set_stream_logger() calls
They made too much output.

Signed-off-by: Marcus Watts <mwatts@redhat.com>

Merge pull request #441 from soumyakoduri/dbstore-tests

Tag testcases failing on dbstore with 'fails_on_dbstore' attr

Tag testcases failing on dbstore with 'fails_on_dbstore' attr

To be able to successfully run s3tests on dbstore backend in teuthology,
mark all the s3-tests currently failing on it with 'fails_on_dbstore' attr

Signed-off-by: Soumya Koduri <skoduri@redhat.com>

Merge pull request #435 from soumyakoduri/lc_tests

lifecycle: Addressing lc spurious failures

lifecycle: Adjust lc wait time

Adjust wait time to fix spurious failures reported -
https://github.com/ceph/ceph/pull/40703#issuecomment-1060811704
http://qa-proxy.ceph.com/teuthology/mbenjamin-2022-02-23_15:42:19-rgw-wip-rgwlc-noreset-distro-basic-smithi/6703349/teuthology.log

Signed-off-by: Soumya Koduri <skoduri@redhat.com>

Merge pull request #429 from soumyakoduri/lc_tests

lifecycle/deletemarker_expiration: Increase timer window

lifecycle/deletemarker_expiration: Increase timer window

Increase wait time in test_lifecycle_deletemarker_expiration(..)
to avoid any spurious failure.

Signed-off-by: Soumya Koduri <skoduri@redhat.com>

Merge pull request #421 from soumyakoduri/lc_tests

Enable Lifecycle tests

Enable lifecycle tests

Add an option to configure lc debug interval and adjust lifecycle
tests sleep as per the value set.

Signed-off-by: Soumya Koduri <skoduri@redhat.com>

Add testcases for rgw cloudtransition feature

Feature PR: https://github.com/ceph/ceph/pull/35100

Also ported lc testcases from boto2 to boto3

Signed-off-by: Soumya Koduri <skoduri@redhat.com>

Merge pull request #424 from psathyan/fix_check_grants

Improving check_grants reliability

Merge pull request #428 from TRYTOBE8TME/wip-sts-error

s3tests_boto3/test_sts: Changing code for proper cleanup

test_sts: Changing code for proper cleanup

This solves: https://tracker.ceph.com/issues/53090

The solution is: We need to delete the role_policy and
user_policy attached user which was causing the failure.

Signed-off-by: Kalpesh Pandya <kapandya@redhat.com>

Merge pull request #426 from galsalomon66/revert_install_arrow

revert the arrow installation(causing failure on some distro"s, such …

revert the arrow installation(causing failure on some distro"s, such as fedora)

Signed-off-by: gal salomon <gal.salomon@gmail.com>

Merge pull request #419 from galsalomon66/parquet_s3tests

parquet tests

fix output-serialization tests(upon comparing query results need to remove redundant columns)

skip output-serial test. the results from both queries are not equal, thus it raise an assert. the problem seems to be the formatting before the comparision

remove test_output_serial_expressions until fixing the test

experiment pyarrow for parquet testing, adding arrow/parquet to bootstrap, installing pyarrow,pandas for reading/writing parquet

Signed-off-by: gal salomon <gal.salomon@gmail.com>

Improving check_grants reliability

Signed-off-by: Pragadeeswaran Sathyanarayanan <psathyan@redhat.com>

merging master tests into parquet branch

Signed-off-by: gal salomon <gal.salomon@gmail.com>

fix for assert of error messages

Signed-off-by: gal salomon <gal.salomon@gmail.com>

remove redundant comma.  s3select-engine produced redundant result column before its last fix, s3tests should align with that

Signed-off-by: gal salomon <gal.salomon@gmail.com>

Merge pull request #402 from galsalomon66/progress-stats

s3select-tests:  new-s3select-responses, output-serialization, presto alignments

adding datatime queries from #395

Signed-off-by: galsalomon66 <gal.salomon@gmail.com>

Merge pull request #415 from cbodley/wip-list-multipart-owner

check Owner/Initiator fields of ListMultipartUploads response

rollback to use like without escape syntax (explore valgrind issue)

Signed-off-by: galsalomon66 <gal.salomon@gmail.com>

modify the queries syntax to like-escape; the queries semantics is the same; results are the same; it is a part of exploring valgrind issue around like-operator

Signed-off-by: galsalomon66 <gal.salomon@gmail.com>

check Owner/Initiator fields of ListMultipartUploads response

new test case test_list_multipart_upload_owner() uses two different
users to initiate multipart uploads, then tests that
list_multipart_uploads() shows the correct user ids and display names
for each upload

Signed-off-by: Casey Bodley <cbodley@redhat.com>

add output-serialization tests; add syntax-error tests; run_s3select_output should merge into run_s3select

Signed-off-by: galsalomon66 <gal.salomon@gmail.com>

remove comments from the like-expressions

Signed-off-by: gal salomon <gal.salomon@gmail.com>

Merge pull request #400 from iraj465/wip-new-multi-delete-objects-tests

rgw/s3_boto3:Adds new delete_objects tests

Merge pull request #411 from mkogan1/multipart-extra-complete2

test extra complete_multipart_upload()

test extra complete_multipart_upload()

After the 1st successfull one should also return 200 OK

related tracker issue: https://tracker.ceph.com/issues/50141
related pr: https://github.com/ceph/ceph/pull/40594

Signed-off-by: Mark Kogan <mkogan@redhat.com>

Merge pull request #410 from Rjerk/wip-fix-doc-example

docs: fix wrong example in README.rst

docs: fix wrong example in README.rst

Run: S3TEST_CONF=your.conf ./virtualenv/bin/nosetests s3tests.functional.test_s3:test_bucket_list_empty

But get an error: "ERROR: Failure: ValueError (No such test test_bucket_list_empty)".

Because test_bucket_list_empty is a test case in s3tests_boto3 directory.

Signed-off-by: Liu Lan <liulan_yewu@cmss.chinamobile.com>

Merge pull request #403 from pritha-srivastava/wip-rgw-sts-abac

rgw sts abac tests

rgw/sts: test to use role tag as iam:ResourceTag in
role's trust policy.

Signed-off-by: Pritha Srivastava <prsrivas@redhat.com>

rgw/sts: test for s3:ResourceTag in role's permission policy

Signed-off-by: Pritha Srivastava <prsrivas@redhat.com>

rgw/sts: adding test for aws:TagKeys that can be used in the
condition element of the role's trust policy and the role's
permission policy.

Signed-off-by: Pritha Srivastava <prsrivas@redhat.com>

rgw/sts: adding test for aws:PrincipalTag in role permission
policy.

Signed-off-by: Pritha Srivastava <prsrivas@redhat.com>

rgw/sts: adding test to check for aws:RequestTag
in the condition element of a role's trust policy.

Signed-off-by: Pritha Srivastava <prsrivas@redhat.com>

rgw/sts: adding tests for testing assumerolewithwebidentity
using 'sub' and 'azp' fields in the web token.

Signed-off-by: Pritha Srivastava <prsrivas@redhat.com>

Merge pull request #408 from cbodley/wip-52037

object-lock: test changes between retention modes

Merge pull request #409 from ceph/wip-ssl-verify-fix

Disable ssl verify by default

disable ssl verify by default

Signed-off-by: Ali Maredia <amaredia@redhat.com>

Merge pull request #405 from psathyan/wip-ssl-verify

Add support for disabling SSL certificate verification

Add support for disabling SSL certificate verification

Signed-off-by: Pragadeeswaran Sathyanarayanan <psathyan@redhat.com>

Merge pull request #365 from markhoughton-microfocus/issue_47586_tests

Tests for multi-object delete with object lock

Add tests for issue 47586.

object-lock: test changes between retention modes

Signed-off-by: Casey Bodley <cbodley@redhat.com>

nuke_prefixed_buckets waits up to 60 seconds for object locks to expire

objects locked in GOVERNANCE mode can be removed with
BypassGovernanceRetention, but some tests may leave an object locked in
COMPLIANCE mode, which blocks deletion until the retention period
expires

nuke_prefixed_buckets now checks the retention policy of objects that it
fails to delete with AccessDenied, and will wait up to 60 seconds for
locks to expire before retrying the deletes. if the wait exceeds 60
seconds, it instead throws an error without deleting the bucket

instead of doing this in nuke_prefixed_buckets, we could potentially
have each object-lock test case handle this manually, but that would
add a separate delay to each test case

Signed-off-by: Casey Bodley <cbodley@redhat.com>

nuke_prefixed_buckets deletes objects in batches

speed up the cleanup by using delete_objects() with batches of 128

Signed-off-by: Casey Bodley <cbodley@redhat.com>

Merge pull request #397 from TRYTOBE8TME/wip-new-sts-tests

sts: Addition of new STS tests

Merge pull request #404 from flipkart-incubator/aws_sse_s3

rgw/s3_boto3: Add tests for bucket encryption APIs

search for the cause of the valgrind issue; remove the like expression that may cause it

Signed-off-by: galsalomon66 <gal.salomon@gmail.com>

rgw/s3_boto3: Add tests for bucket encryption APIs

Tests are added for GetBucketEncryption, PutBucketEncryption,
and DeleteBucketEncryption APIs.

Related PR: https://github.com/ceph/ceph/pull/42222

Signed-off-by: Rahul Dev Parashar <rahul.dev@flipkart.com>

rgw/sts: Addition of new STS tests for testing
session policies alongwith role's permission policy
and bucket policy.

Signed-off-by: Kalpesh Pandya <kapandya@redhat.com>
Signed-off-by: Pritha Srivastava <prsrivas@redhat.com>

Merge pull request #401 from SoftIron/object-retention-iso8601

Add test to check retain date is in iso 8601 format

chore:Removes unused scaffolds

rgw/boto3_s3:Adds delete_objects key limit for list-objects-v2

chore:Bump the list-objects to paginator

Merge pull request #399 from iraj465/wip-new-lifecycle-transition-tests

rgw/s3_boto3:Adds lifecycle transition tests

Add test to check retain date is in iso 8601 format

Signed-off-by: Danny Abukalam <danny@softiron.com>

rgw/s3_boto3:Adds new delete_objects tests for checking key delete limit

rgw/s3_boto3:Adds lifecycle transition test for invalid iso8601 date

s3select: test progress stats

Signed-off-by: Albin Antony <aantony@redhat.com>

s3select: align s3select tests with ceph

Update s3-tests to handle the error-response (return 400, and error-description)

Signed-off-by: Albin Antony <aantony@redhat.com>

Merge pull request #389 from cbodley/wip-test-49780

sts: test role policy around nonexistent objects

Merge pull request #386 from cbodley/wip-bucket-ctime

test that listed buckets have creation time

Merge pull request #393 from ofriedma/wip-ofriedma-mp-upload-bucket-policy

test multipart upload with bucket policy

Merge pull request #391 from ceph/tethology_s3select_apr19

modifying tests to be align with change of s3select compare sign( == …

test multipart upload with bucket policy

Signed-off-by: Or Friedmann <ofriedma@redhat.com>

modifying tests to be align with change of s3select compare sign( == -> = )

Signed-off-by: gal salomon <gal.salomon@gmail.com>

Merge pull request #382 from albin-antony/master

s3select: align s3-tests with new changes in s3select

tests

Signed-off-by: Albin Antony <aantony@redhat.com>

sts: test role policy around nonexistent objects

Signed-off-by: Casey Bodley <cbodley@redhat.com>

tests

Signed-off-by: Albin Antony <aantony@redhat.com>

tests

Signed-off-by: Albin Antony <aantony@redhat.com>

s3select: align s3-tests with new changes in s3select

Fix when then, date functions and NULL, add escape, trim tests

Signed-off-by: Albin Antony <aantony@redhat.com>

test that listed buckets have creation time

Signed-off-by: Casey Bodley <cbodley@redhat.com>

Merge pull request #381 from ceph/fix_test_file_permission_add_attrib

change test_s3select.py permission; add s3select attribute

change test_s3select.py permission; add s3select attribute

Signed-off-by: galsalomon66 <gal.salomon@gmail.com>

Merge pull request #373 from ceph/fix_function_names

rename charlength and character_length function names

reduce object size for test_like_expression, it may cause timeouts in teuthology runs

Signed-off-by: galsalomon66 <gal.salomon@gmail.com>

rename charlength and character_length function names

Signed-off-by: galsalomon66 <gal.salomon@gmail.com>

Merge pull request #371 from ofriedma/wip-ofriedma-test-usage-api

Add test for GetUsage api

Reviewed-by: Ali Maredia <amaredia@redhat.com>

Add test for head bucket usage headers

Signed-off-by: Or Friedmann <ofriedma@redhat.com>

Add test for GetUsage api

Signed-off-by: Or Friedmann <ofriedma@redhat.com>

Merge pull request #363 from linuxbox2/master-headbucket-dne

Add test for HeadBucket on a non-existent bucket

Merge pull request #367 from IlsooByun/check_invalid_payload

Check if invalid payload is added after serving errordoc

Merge pull request #364 from albin-antony/when-than

s3select tests for coalesce and case

s3select tests for coalesce and case

Signed-off-by: Albin Antony <aantony@redhat.com>

Check if invalid payload is added after serving errordoc

Signed-off-by: Ilsoo Byun <ilsoobyun@linecorp.com>

Merge pull request #360 from TRYTOBE8TME/wip-sts-webidentity

Webidentity Test addition to test_sts.py

Merge pull request #358 from albin-antony/predicates

s3select predicate tests

Webidentity Test addition to test_sts.py

Signed-off-by: Kalpesh Pandya <kapandya@redhat.com>
Few main changes/additions:
1. Webidentity test addition to test_sts.py.
2. A function named check_webidentity() added to __init__.py in order to check for section presence.
3. Few lines shifted from setup() to get_iam_client() to make them execute only when sts-tests run.
4. Documentation update (for sts section)
5. Changes in s3tests.conf.SAMPLE regarding sts sections

Merge pull request #361 from ofriedma/wip-lc-expr-hdr-tags

Test expiration header for lc rules with tags

Test expiration header for lc rules with tags

Signed-off-by: Or Friedmann <ofriedma@redhat.com>

s3select predicate tests

Signed-off-by: Albin Antony <aantony@redhat.com>

Merge pull request #356 from cbodley/wip-test-bucket-recreate-acl

test bucket recreation with different acls

Add test for HeadBucket on a non-existent bucket

n.b., RGW does not send a response document for this operation,
which seems consistent with
https://docs.aws.amazon.com/AmazonS3/latest/API/API_HeadBucket.html

Signed-off-by: Matt Benjamin <mbenjamin@redhat.com>