Neutron Allowed Address Pair API test

Adds a script to test the Neutron API extension for Allowed Address Pair.

Also adds to the xml ReST clent for Neutron the plurals definition for allowed
address pairs

Change-Id: I1dd1e299f4436f5a613351f612cb078e630c7026
orchestration: Add test for resource_registry environment

Adds support for passing files argument to the create/update
calls in the json client, and adds a simple test of defining
a provider resource, which is a user-defined resource type,
mapped via the "resource_registry" section of the environment
file, with the filename looked up by a key in the files map.

Change-Id: I87fd1f2b1cf2c68c22d53891d99c8cd6b6b7c777
Partial-Bug: #1317095
orchestration: add test for untyped provider resources

It's also possible to specify the filename directly in the template
without adding the type alias to resource_registry, then heat looks
up the provider/nested-stack resource in the "files" map passed when
creating the stack.

Change-Id: Idce23021dd4ddcedef61ffdd39d6abb16885e1be
Partial-Bug: #1317095
Split large-ops into three tests so each has its own timeout

In the gate OS_TEST_TIMEOUT is 500 seconds, which is a per test timeout.
large-ops is run one test three times, so split it out to three tests so
each has its own OS_TEST_TIMEOUT.

This works because the cleanup of resources is done in tearDownClass and
tests inside a class are run serially (although order cannot be guaranteed).

Note: the image will be re-created for each test and destroyed on
tearDown from each test.

Change-Id: Iefa6f0fec9b3eea587b1437b47cce81e1a9c242c
Verify more information in floating ip tests(part2)

Add checks for:

- creating/updating a floating ip with an internal port with
  multiple ip addresses, specifying the one that must be
  associated with the floating ip;

partially implement bp: improve-neutron-test-coverage

Change-Id: Ie05eb6924e908da5b89cf5434e8365dd2485b6d2
Add hacking import exception for service clients

This commit adds import exceptions to the service client imports.
The service clients are imported at the class level and it would be
a major effort to change this. However, we want to be enforcing H302
everywhere else. This commit adds an exception to allow importing the
service clients as classes.

Change-Id: Ife74539fe04e97740e45325140f407fd7476e1c7
Fix test_create_show_delete_security_group_rule

test_create_show_delete_security_group_rule is validating only
icmp protocol and not tcp/udp protocols. This patch does the
necessary change.

Change-Id: I63b79e5016a718bf3af6e1194a994ec68f6c0c4e
Closes-Bug: #1319176
Enable H302 rule everywhere

This patch enables the use of the H302 hacking rule everywhere. With
one exception of the client class imports in clients.py, this
is intentionally ignored.

Change-Id: Ia0ef5e44a411ccd6e6c12f9cf64427a96e021b47
Fix alt tenant id's issue in BaseV2MemberImageTest

BaseV2MemberImageTest gets alt_tenant_id in the wrong way when tenant
isolation is off. commit 9612e81d142e88782d4faf6a85e81967b5323908
introduced getting the tenant_id from credentials instance. This case
was missed. Fixing this involves completely removing the code that
caused lp#1320079.

Change-Id: Ic8585077b876f70353202f0f47184a18bca8083d
Closes-bug: #1320079
Fix security_group_create_get_delete testcase

As per the description of test_security_group_create_get_delete,
the test case is supposed to check the security group creation,
followed by retrieval and then deletion of security group.
Deletion of security group is missing in the testcase.

This patch also addresses the issue in the test case,
test_security_groups_create_list_delete operating on
self.security_groups which includes all the security_groups
created by previous test-cases. self.security_groups is not
updated when a security_group is deleted, as we use
self.client.delete_security_group for deletion. OTOH relying
on self.security_groups is wrong because the objective of test
case is to validate only the security_groups that are created in
the current testcase and not the global list of Security_groups.

Change-Id: I3221d41003b577f0a49a7515f1c90e8328cb0dd1
Closes-Bug: #1318644
Merge "Fix test_create_show_delete_security_group_rule"
Merge "Add hacking import exception for service clients"
Merge "Enable H302 rule everywhere"
Merge "Fix alt tenant id's issue in BaseV2MemberImageTest"
Merge "orchestration: Add test for resource_registry environment"
Merge "orchestration: add test for untyped provider resources"
Merge "Split large-ops into three tests so each has its own timeout"
Make sure image exists in test

The heat bug/1312564 to add constraints to check whether image/keypair
exists for "AWS::AutoScaling::LaunchConfiguration" resource. So if the
image/keypair doesn't exist, the validate will fail. 

In tempest, there is a test which the "image" is invalid makes the 
Heat API test fail.

The property "ImageId" which defined in the non_empty_stack.yaml doesn't
exist. So to pass the parameter "image" to the property "ImageId" and
then bug/1312564 will successful in jenkins.

Related-Bug: #1312564
Change-Id: I4351930309c45c7fcb8a521ea0697b62153da5c7
Merge "Neutron Allowed Address Pair API test"
Revert "Adds certificate tests for keystone v3"

The tests caused technical issues on the stable/icheouse
gate with stable/havana -> stable/icehouse grenade/upgrade jobs.

Please resubmit the patch after the issue is resolved.

This reverts commit 1b560b239be149f8b8b3c99b723875a2c81ac85e.

Change-Id: I0ced519b68ef1e55a0f56af58a518d77f18b2adc