[6.15.z]Leapp client upgrade from non-admin user

tests/foreman/cli/test_leapp_client.py

@@ -12,6 +12,7 @@
 
 """
 from broker import Broker
+from fauxfactory import gen_string
 import pytest
 
 from robottelo.config import settings
@@ -77,14 +78,18 @@ def module_stash(request):
 
 
 @pytest.fixture(scope='module')
-def module_leapp_lce(module_target_sat, module_sca_manifest_org):
-    return module_target_sat.api.LifecycleEnvironment(organization=module_sca_manifest_org).create()
+def module_leapp_lce(module_target_sat, module_entitlement_manifest_org):
+    return module_target_sat.api.LifecycleEnvironment(
+        organization=module_entitlement_manifest_org
+    ).create()
 
 
 @pytest.fixture
-def function_leapp_cv(module_target_sat, module_sca_manifest_org, leapp_repos, module_leapp_lce):
+def function_leapp_cv(
+    module_target_sat, module_entitlement_manifest_org, leapp_repos, module_leapp_lce
+):
     function_leapp_cv = module_target_sat.api.ContentView(
-        organization=module_sca_manifest_org
+        organization=module_entitlement_manifest_org
     ).create()
     function_leapp_cv.repository = leapp_repos
     function_leapp_cv = function_leapp_cv.update(['repository'])
@@ -99,12 +104,12 @@ def function_leapp_ak(
     module_target_sat,
     function_leapp_cv,
     module_leapp_lce,
-    module_sca_manifest_org,
+    module_entitlement_manifest_org,
 ):
     return module_target_sat.api.ActivationKey(
         content_view=function_leapp_cv,
         environment=module_leapp_lce,
-        organization=module_sca_manifest_org,
+        organization=module_entitlement_manifest_org,
     ).create()
 
 
@@ -114,7 +119,7 @@ def leapp_repos(
     module_stash,
     upgrade_path,
     module_target_sat,
-    module_sca_manifest_org,
+    module_entitlement_manifest_org,
 ):
     """Enable and sync RHEL BaseOS, AppStream repositories"""
     source = upgrade_path['source_version']
@@ -130,7 +135,7 @@ def leapp_repos(
                 module_stash[synced_repos][rh_repo_key] = True
                 repo_id = module_target_sat.api_factory.enable_rhrepo_and_fetchid(
                     basearch=default_architecture.name,
-                    org_id=module_sca_manifest_org.id,
+                    org_id=module_entitlement_manifest_org.id,
                     product=PRDS[prod],
                     repo=RHEL_REPOS[rh_repo_key]['name'],
                     reposet=RHEL_REPOS[rh_repo_key]['reposet'],
@@ -146,7 +151,7 @@ def leapp_repos(
 def verify_target_repo_on_satellite(
     module_target_sat,
     function_leapp_cv,
-    module_sca_manifest_org,
+    module_entitlement_manifest_org,
     module_leapp_lce,
     upgrade_path,
 ):
@@ -156,7 +161,7 @@ def verify_target_repo_on_satellite(
         {
             'search': f'content_label ~ rhel-{target_rhel_major_ver}',
             'content-view-id': function_leapp_cv.id,
-            'organization-id': module_sca_manifest_org.id,
+            'organization-id': module_entitlement_manifest_org.id,
             'lifecycle-environment-id': module_leapp_lce.id,
         }
     )
@@ -170,7 +175,9 @@ def verify_target_repo_on_satellite(
 
 
 @pytest.fixture
-def custom_leapp_host(upgrade_path, module_target_sat, module_sca_manifest_org, function_leapp_ak):
+def custom_leapp_host(
+    upgrade_path, module_target_sat, module_entitlement_manifest_org, function_leapp_ak
+):
     """Checkout content host and register with satellite"""
     deploy_args = {}
     deploy_args['deploy_rhel_version'] = upgrade_path['source_version']
@@ -181,7 +188,7 @@ def custom_leapp_host(upgrade_path, module_target_sat, module_sca_manifest_org,
         deploy_flavor=settings.flavors.default,
     ) as chost:
         result = chost.register(
-            module_sca_manifest_org, None, function_leapp_ak.name, module_target_sat
+            module_entitlement_manifest_org, None, function_leapp_ak.name, module_target_sat
         )
         assert result.status == 0, f'Failed to register host: {result.stderr}'
         yield chost
@@ -199,6 +206,20 @@ def precondition_check_upgrade_and_install_leapp_tool(custom_leapp_host):
     assert custom_leapp_host.run('yum install leapp-upgrade -y').status == 0
     if custom_leapp_host.run('needs-restarting -r').status == 1:
         custom_leapp_host.power_control(state='reboot', ensure=True)
+    if custom_leapp_host.os_version.major == 8:
+        # Inhibitor - Firewalld Configuration AllowZoneDrifting Is Unsupported
+        assert (
+            custom_leapp_host.run(
+                'sed -i "s/^AllowZoneDrifting=.*/AllowZoneDrifting=no/" /etc/firewalld/firewalld.conf'
+            ).status
+            == 0
+        )
+        assert (
+            custom_leapp_host.run(
+                'echo -e "\nPermitRootLogin yes" >> /etc/ssh/sshd_config; systemctl restart sshd'
+            ).status
+            == 0
+        )
 
 
 @pytest.mark.parametrize(
@@ -233,12 +254,6 @@ def test_leapp_upgrade_rhel(
     :expectedresults:
         1. Update RHEL OS major version to another major version
     """
-    # Fixing known inhibitors for source rhel version 8
-    if custom_leapp_host.os_version.major == 8:
-        # Inhibitor - Firewalld Configuration AllowZoneDrifting Is Unsupported
-        custom_leapp_host.run(
-            'sed -i "s/^AllowZoneDrifting=.*/AllowZoneDrifting=no/" /etc/firewalld/firewalld.conf'
-        )
     # Run LEAPP-PREUPGRADE Job Template-
     template_id = (
         module_target_sat.api.JobTemplate()
@@ -285,3 +300,83 @@ def test_leapp_upgrade_rhel(
     custom_leapp_host.clean_cached_properties()
     new_ver = str(custom_leapp_host.os_version)
     assert new_ver == upgrade_path['target_version']
+
+
+@pytest.mark.parametrize(
+    'upgrade_path',
+    [
+        {'source_version': RHEL8_VER, 'target_version': RHEL9_VER},
+    ],
+    ids=lambda upgrade_path: f'{upgrade_path["source_version"]}'
+    f'_to_{upgrade_path["target_version"]}',
+)
+def test_leapp_upgrade_rhel_non_admin(
+    module_target_sat,
+    module_entitlement_manifest_org,
+    default_location,
+    custom_leapp_host,
+    upgrade_path,
+    verify_target_repo_on_satellite,
+    precondition_check_upgrade_and_install_leapp_tool,
+):
+    """Test to upgrade RHEL host to next major RHEL release using leapp preupgrade and leapp upgrade
+    job templates
+
+    :id: afd295ca-4b0e-439f-b880-ae92c300fd9f
+
+    :BZ: 2257302
+
+    :customerscenario: true
+
+    :steps:
+        1. Import a subscription manifest and enable, sync source & target repositories
+        2. Create LCE, Create CV, add repositories to it, publish and promote CV, Create AK, etc.
+        3. Register content host with AK
+        4. Verify that target rhel repositories are enabled on Satellite
+        5. Update all packages, install leapp tool and fix inhibitors
+        6. Create a non-admin user with "Organization admin", "Remote Execution Manager" and "Remote Execution User" role assigned to it.
+        7. Run Leapp Preupgrade and Leapp Upgrade job template from the user created in step 6.
+
+    :expectedresults:
+        1. Update RHEL OS major version to another major version from non-admin user role.
+    """
+    login = gen_string('alpha')
+    password = gen_string('alpha')
+    roles = ['Organization admin', 'Remote Execution Manager', 'Remote Execution User']
+    user = module_target_sat.cli_factory.user(
+        {
+            'admin': False,
+            'login': login,
+            'password': password,
+            'organization-ids': module_entitlement_manifest_org.id,
+            'location-ids': default_location.id,
+        }
+    )
+    for role in roles:
+        module_target_sat.cli.User.add_role({'id': user['id'], 'login': login, 'role': role})
+
+    invocation_command = module_target_sat.cli_factory.job_invocation_with_credentials(
+        {
+            'job-template': 'Run preupgrade via Leapp',
+            'search-query': f'name = {custom_leapp_host.hostname}',
+            'organization-id': module_entitlement_manifest_org.id,
+            'location-id': default_location.id,
+        },
+        (login, password),
+    )
+    result = module_target_sat.cli.JobInvocation.info({'id': invocation_command['id']})
+    assert result['success'] == '1'
+
+    invocation_command = module_target_sat.cli_factory.job_invocation_with_credentials(
+        {
+            'job-template': 'Run upgrade via Leapp',
+            'search-query': f'name = {custom_leapp_host.hostname}',
+            'organization-id': module_entitlement_manifest_org.id,
+            'location-id': default_location.id,
+            'inputs': 'Reboot=false',
+        },
+        (login, password),
+    )
+    custom_leapp_host.power_control(state='reboot')
+    result = module_target_sat.cli.JobInvocation.info({'id': invocation_command['id']})
+    assert result['success'] == '1'