There is a need for changing names again, since namespace id is no
longer stored in description and name for net/subnet is a compound of
name and uid.
Depends-On: https://review.opendev.org/c/openstack/kuryr-tempest-plugin/+/845745
Change-Id: Ib97a597f8afb47316e77154a9bf3ced41ce48468
As the K8s client is logging every response to every request, we're
starting to hit limits of tox' or Zuul's log side limit. This commit
attempts to limit number of requests by making sure that in case of
status checks we're iterating a list of pods instead of calling API for
every pod. Moreover many `time.sleep()` occurences are modified to
reduce the number of the requests made.
Change-Id: Ifc2dfce2405429bbcae8c01f13f06d4e9fae9c8a
With the handling of Namespaces now being
dependent on Pods creation, tempests tests
need to get updated to account for that.
Change-Id: Id0879f128ca8c057ea6ec540fec0e76d656e7b13
Check connectivity to the service from a pods within the namespace in
test_namespace instead from outisde
Change-Id: I5af7fc1be342d7fafa217347b1d84c3679c118c1
As this test recreates the namespace and a pod on it,
it could take a bit longer for the older KuryrNet CRD
to be removed and recreated, plus the pool to be populated
causing the pod creation to timeout. This commit reduce the
flakiness by increasing the timeout.
Change-Id: I31a874c5f1d0d134e555a32b09a71e9466daea77
Check from a pod the connectivity to the internal IP of
LB services instead of from an external node
Change-Id: I6ce0b16985de6cc7182026975a63f03844d9d9ee
We have issues with this test, most likely due to Neutron bug [1]. This
commit marks it as unstable, so it gets skipped on failure.
[1] https://bugzilla.redhat.com/show_bug.cgi?id=1688323
Change-Id: I8a1bfab6e4b6c0e08d8cd2b7e8c6a5efdd87bbd3
The error message retuned when a CRD is not validated has changed
on Kubernetes 1.16. We should also update the NP and Namespaces
tempests tests to match it, as the gate is using Kubernetes 1.16.
Change-Id: I4ed2bdbbc664579689763f2759741b0efced6db6
This commit adds test to the recreation of a namespace
and a pod without waiting for Kuryr generated resources,
which is the actual behavior expected by the user.
Change-Id: I082355b0414ee5308418c683fb133d67ea414d3f
This patch extends the current service isolation test with a service
of LoadBalancer type, checking that it has connectivity across
namespaces depite of the namespace isolation.
Depends-On: I35f3be8fc16d71d0d2ac01c5451d398dd631f118
Change-Id: I40bf39c4c1d0b43f5d83e6aed81786390753ce99
The service connectivity to ClusterIp service should be tested
from the pod in the same namespace
Depends-On: I35f3be8fc16d71d0d2ac01c5451d398dd631f118
Change-Id: Ife099f1d05c0cae954119f0ef4616c95076f83e7
CRD validation support was not added in previous releases.
We should ensure all tests related to it are only triggered
when crd validation is enabled in the tempest config.
Change-Id: I92f22827d4456e9a13b9a5b45d96babf4bf93451
This commit verifies if KuryrNetPolicy and KuryrNet CRD
are created with all the needed and correct fields.
Depends-On: https://review.opendev.org/#/c/665416/
Change-Id: Iab33a1d2cdef76981826c181cc44b074c921d2db
This commit removes the direct call to self.os_admin.security_groups_client
and uses the methods on the base test class.
Change-Id: I666a3046047d385818c57ea6aaa8182c1c669b1e
test_namespace got broken after merging:
https://review.openstack.org/#/c/590740/
This patch ensure the schema is provided
Change-Id: Ie0390e1839a55b01ca231247d1f59cb1e39f30e0
Use requests instead subprocess in namespace tests
Change-Id: Iba2d3f5bbad56e5306260d2eb673e6974703e3ee
Signed-off-by: Antoni Segura Puimedon <celebdor@gmail.com>
It extends the namespace tests to also ensure proper services isolation
between namespaces.
It creates pods and services in different namespaces and checks that
traffic is blocked between them, unless it is the default namespace,
which can reach all the services regardless of the namespaces.
Depends-On: I7b78e12cdf2bce5d0780e582814ef51ef0c459a7
Change-Id: I460eb37415fa6d864c68e29ee79abdc8d1760c61
Implements: blueprint openshift-project-isolation-support
It creates a new test to ensure proper isolation between namespaces.
It creates different pods in different namespaces and check that
traffic is block between them, unless it is the default namespace,
which can reach all the namespaces and be reached by all of them.
Depends-On: Ibf63841b2a6b0c339c4c76980f1489e26af016d7
Implements: blueprint openshift-project-isolation-support
Change-Id: Ie72c93564f38bc51a3abd009085beda92430daea
It adds checks for connectivity and namespace deletion, including
checking for resource leftovers.
Change-Id: Id08dfeb0d7423857cd471100410dabd71646b402
It adds coverage to test namespace creation when the namespace
handler and subnet driver are used. It checks the namespace gets
created but also that the related resources get created too, in this
case the Neutron Subnet, as well as the Kuryr Net CRD. In addition,
it check the KuryrNet CRD has the right information about the network
and subnet IDs created.
Depends-On: I84580201f38c219f1943510bb493da0f07e07153
Change-Id: Iafc08ede300aecf1dc52135c6e51b89875e729d6
Roman Dobosz