764 lines
32 KiB
Python
764 lines
32 KiB
Python
# Copyright 2017 Red Hat, Inc.
|
|
#
|
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
|
# you may not use this file except in compliance with the License.
|
|
# You may obtain a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
# See the License for the specific language governing permissions and
|
|
# limitations under the License.
|
|
import six.moves
|
|
|
|
import json
|
|
from multiprocessing import pool
|
|
import time
|
|
|
|
from oslo_log import log as logging
|
|
|
|
import requests
|
|
|
|
import kubernetes
|
|
from kubernetes import client as k8s_client
|
|
from kubernetes import config as k8s_config
|
|
from kubernetes.stream import stream
|
|
from openshift import dynamic
|
|
|
|
from tempest import config
|
|
from tempest.lib.common.utils import data_utils
|
|
from tempest.lib.common.utils import test_utils
|
|
from tempest.lib import exceptions as lib_exc
|
|
from tempest.scenario import manager
|
|
|
|
CONF = config.CONF
|
|
LOG = logging.getLogger(__name__)
|
|
|
|
KURYR_CRD_GROUP = 'openstack.org'
|
|
KURYR_CRD_VERSION = 'v1'
|
|
KURYR_NET_CRD_PLURAL = 'kuryrnets'
|
|
KURYR_NET_POLICY_CRD_PLURAL = 'kuryrnetpolicies'
|
|
K8S_ANNOTATION_PREFIX = 'openstack.org/kuryr'
|
|
K8S_ANNOTATION_LBAAS_STATE = K8S_ANNOTATION_PREFIX + '-lbaas-state'
|
|
K8S_ANNOTATION_LBAAS_RT_STATE = K8S_ANNOTATION_PREFIX + '-lbaas-route-state'
|
|
KURYR_ROUTE_DEL_VERIFY_TIMEOUT = 30
|
|
KURYR_CONTROLLER = 'kuryr-controller'
|
|
|
|
|
|
class BaseKuryrScenarioTest(manager.NetworkScenarioTest):
|
|
|
|
@classmethod
|
|
def skip_checks(cls):
|
|
super(BaseKuryrScenarioTest, cls).skip_checks()
|
|
if not CONF.service_available.kuryr:
|
|
raise cls.skipException('Kuryr support is required')
|
|
|
|
@classmethod
|
|
def setup_clients(cls):
|
|
super(BaseKuryrScenarioTest, cls).setup_clients()
|
|
cls.k8s_client = k8s_client
|
|
|
|
@classmethod
|
|
def resource_setup(cls):
|
|
super(BaseKuryrScenarioTest, cls).resource_setup()
|
|
cls.pod_fips = []
|
|
# TODO(dmellado): Config k8s client in a cleaner way
|
|
k8s_config.load_kube_config()
|
|
cls.dyn_client = dynamic.DynamicClient(
|
|
k8s_config.new_client_from_config())
|
|
|
|
@classmethod
|
|
def resource_cleanup(cls):
|
|
super(BaseKuryrScenarioTest, cls).resource_cleanup()
|
|
for fip in cls.pod_fips:
|
|
cls.os_admin.floating_ips_client.delete_floatingip(
|
|
fip['floatingip']['id'])
|
|
|
|
@classmethod
|
|
def create_network_policy(cls, name=None, namespace='default'):
|
|
if not name:
|
|
name = data_utils.rand_name(prefix='kuryr-network-policy')
|
|
np = cls.k8s_client.V1NetworkPolicy()
|
|
np.kind = 'NetworkPolicy'
|
|
np.api_version = 'networking.k8s.io/v1'
|
|
np.metadata = cls.k8s_client.V1ObjectMeta(name=name,
|
|
namespace=namespace)
|
|
np.spec = cls.k8s_client.V1NetworkPolicySpec(
|
|
egress=[cls.k8s_client.V1NetworkPolicyEgressRule(ports=None,
|
|
to=None)],
|
|
ingress=[cls.k8s_client.V1NetworkPolicyIngressRule(_from=None,
|
|
ports=None)],
|
|
pod_selector=cls.k8s_client.V1LabelSelector(
|
|
match_expressions=None,
|
|
match_labels=None),
|
|
policy_types=['Ingress', 'Egress'])
|
|
return cls.k8s_client.NetworkingV1Api(
|
|
).create_namespaced_network_policy(namespace=namespace, body=np)
|
|
|
|
@classmethod
|
|
def create_pod(cls, name=None, labels=None, image='kuryr/demo',
|
|
namespace="default", annotations=None,
|
|
wait_for_status=True):
|
|
if not name:
|
|
name = data_utils.rand_name(prefix='kuryr-pod')
|
|
pod = cls.k8s_client.V1Pod()
|
|
pod.metadata = cls.k8s_client.V1ObjectMeta(name=name, labels=labels,
|
|
annotations=annotations)
|
|
|
|
container = cls.k8s_client.V1Container(name=name)
|
|
container.image = image
|
|
|
|
spec = cls.k8s_client.V1PodSpec(containers=[container])
|
|
|
|
pod.spec = spec
|
|
cls.k8s_client.CoreV1Api().create_namespaced_pod(namespace=namespace,
|
|
body=pod)
|
|
status = ""
|
|
while status != "Running" and wait_for_status:
|
|
# TODO(dmellado) add timeout config to tempest plugin
|
|
time.sleep(1)
|
|
status = cls.get_pod_status(name, namespace)
|
|
|
|
return name, pod
|
|
|
|
@classmethod
|
|
def delete_network_policy(cls, name, namespace='default'):
|
|
body = cls.k8s_client.V1DeleteOptions()
|
|
cls.k8s_client.NetworkingV1Api().delete_namespaced_network_policy(
|
|
name=name,
|
|
namespace=namespace,
|
|
body=body)
|
|
|
|
@classmethod
|
|
def delete_pod(cls, pod_name, body=None, namespace="default"):
|
|
if body is None:
|
|
body = {}
|
|
cls.k8s_client.CoreV1Api().delete_namespaced_pod(
|
|
name=pod_name,
|
|
body=body,
|
|
namespace=namespace)
|
|
# TODO(apuimedo) This sleep to be replaced with a polling with
|
|
# timeout for the pod object to be gone from k8s api.
|
|
time.sleep(30)
|
|
|
|
@classmethod
|
|
def wait_for_pod_status(cls, pod_name, namespace="default",
|
|
pod_status=None, retries=30):
|
|
while pod_status != cls.get_pod_status(
|
|
pod_name,
|
|
namespace=namespace):
|
|
time.sleep(1)
|
|
retries -= 1
|
|
if retries == 0:
|
|
raise lib_exc.TimeoutException()
|
|
|
|
@classmethod
|
|
def get_pod_ip(cls, pod_name, namespace="default"):
|
|
try:
|
|
pod = cls.k8s_client.CoreV1Api().read_namespaced_pod(pod_name,
|
|
namespace)
|
|
return pod.status.pod_ip
|
|
except kubernetes.client.rest.ApiException:
|
|
return None
|
|
|
|
@classmethod
|
|
def get_pod_status(cls, pod_name, namespace="default"):
|
|
try:
|
|
pod = cls.k8s_client.CoreV1Api().read_namespaced_pod(pod_name,
|
|
namespace)
|
|
return pod.status.phase
|
|
except kubernetes.client.rest.ApiException:
|
|
return None
|
|
|
|
@classmethod
|
|
def get_readiness_state(cls, pod_name, namespace="default",
|
|
container_name=None):
|
|
try:
|
|
pod = cls.k8s_client.CoreV1Api().read_namespaced_pod(pod_name,
|
|
namespace)
|
|
except kubernetes.client.rest.ApiException:
|
|
return None
|
|
|
|
if container_name:
|
|
for container in pod.status.container_statuses:
|
|
if container.name == container_name:
|
|
return container.ready
|
|
else:
|
|
for condition in pod.status.conditions:
|
|
if condition.type == 'Ready':
|
|
return condition.status
|
|
|
|
@classmethod
|
|
def get_pod_readiness(cls, pod_name, namespace="default"):
|
|
return cls.get_readiness_state(pod_name, namespace=namespace)
|
|
|
|
@classmethod
|
|
def get_container_readiness(cls, pod_name, namespace="default",
|
|
container_name=None):
|
|
return cls.get_readiness_state(pod_name, namespace=namespace,
|
|
container_name=container_name)
|
|
|
|
def get_pod_port(self, pod_name, namespace="default"):
|
|
pod = self.k8s_client.CoreV1Api().read_namespaced_pod_status(
|
|
namespace=namespace, name=pod_name)
|
|
kuryr_if = json.loads(pod.metadata.annotations[
|
|
'openstack.org/kuryr-vif'])
|
|
|
|
# FIXME(dulek): We need this compatibility code to run stable/queens.
|
|
# Remove this once it's no longer supported.
|
|
if 'eth0' in kuryr_if:
|
|
kuryr_if = kuryr_if['eth0']
|
|
elif kuryr_if.get('versioned_object.name') == 'PodState':
|
|
kuryr_if = kuryr_if['versioned_object.data']['default_vif']
|
|
|
|
return kuryr_if['versioned_object.data']['id']
|
|
|
|
def exec_command_in_pod(self, pod_name, command, namespace="default",
|
|
stderr=False, container=None):
|
|
api = self.k8s_client.CoreV1Api()
|
|
kwargs = dict(command=command, stdin=False, stdout=True, tty=False,
|
|
stderr=stderr)
|
|
if container is not None:
|
|
kwargs['container'] = container
|
|
if stderr:
|
|
kwargs['_preload_content'] = False
|
|
resp = stream(api.connect_get_namespaced_pod_exec, pod_name,
|
|
namespace, **kwargs)
|
|
# Run until completion
|
|
resp.run_forever()
|
|
return resp.read_stdout(), resp.read_stderr()
|
|
else:
|
|
return stream(api.connect_get_namespaced_pod_exec, pod_name,
|
|
namespace, **kwargs)
|
|
|
|
def assign_fip_to_pod(self, pod_name, namespace="default"):
|
|
ext_net_id = CONF.network.public_network_id
|
|
pod_fip = self.os_admin.floating_ips_client.create_floatingip(
|
|
floating_network_id=ext_net_id,
|
|
tenant_id=self.get_project_id(),
|
|
port_id=self.get_pod_port(pod_name, namespace))
|
|
self.pod_fips.append(pod_fip)
|
|
return pod_fip
|
|
|
|
def get_project_id(self):
|
|
project_name = CONF.kuryr_kubernetes.kubernetes_project_name
|
|
projects_list = self.os_admin.projects_client.list_projects()
|
|
for project in projects_list['projects']:
|
|
if project_name == project['name']:
|
|
return project['id']
|
|
|
|
@classmethod
|
|
def create_service(cls, pod_label, service_name=None, api_version="v1",
|
|
kind=None, protocol="TCP", port=80, target_port=8080,
|
|
spec_type='ClusterIP', namespace="default"):
|
|
if not service_name:
|
|
service_name = data_utils.rand_name(prefix='kuryr-service')
|
|
service = cls.k8s_client.V1Service()
|
|
service.api_version = api_version
|
|
service.kind = kind
|
|
service.metadata = cls.k8s_client.V1ObjectMeta(name=service_name)
|
|
|
|
spec = cls.k8s_client.V1ServiceSpec()
|
|
spec.ports = [cls.k8s_client.V1ServicePort(
|
|
protocol=protocol,
|
|
port=port,
|
|
target_port=target_port)]
|
|
spec.selector = pod_label
|
|
spec.type = spec_type
|
|
|
|
service.spec = spec
|
|
service_obj = cls.k8s_client.CoreV1Api().create_namespaced_service(
|
|
namespace=namespace, body=service)
|
|
return service_name, service_obj
|
|
|
|
@classmethod
|
|
def delete_service(cls, service_name, namespace="default"):
|
|
# FIXME(dulek): This is needed to support tempest plugin on
|
|
# stable/queens as kubernetes package is constrainted to
|
|
# 4.0.0 there and it doesn't accept ``body`` parameter.
|
|
# Remove this once stable/queens becomes unsupported.
|
|
if kubernetes.__version__ == '4.0.0':
|
|
cls.k8s_client.CoreV1Api().delete_namespaced_service(
|
|
name=service_name,
|
|
namespace=namespace)
|
|
else:
|
|
delete_options = cls.k8s_client.V1DeleteOptions()
|
|
cls.k8s_client.CoreV1Api().delete_namespaced_service(
|
|
name=service_name,
|
|
namespace=namespace,
|
|
body=delete_options)
|
|
|
|
@classmethod
|
|
def get_service_ip(
|
|
cls, service_name, spec_type="ClusterIP", namespace="default"):
|
|
api = cls.k8s_client.CoreV1Api()
|
|
while True:
|
|
time.sleep(5)
|
|
service = api.read_namespaced_service(service_name, namespace)
|
|
if spec_type == "LoadBalancer":
|
|
# NOTE(yboaron): In some cases, OpenShift may overwrite
|
|
# LB's IP stored at service.status, we need to make sure that
|
|
# this function will return the IP that was annotated by
|
|
# Kuryr controller
|
|
if service.status.load_balancer.ingress:
|
|
endpoints = api.read_namespaced_endpoints(
|
|
service_name, namespace)
|
|
annotations = endpoints.metadata.annotations
|
|
try:
|
|
ann_dict = json.loads(
|
|
annotations[K8S_ANNOTATION_LBAAS_STATE])
|
|
ann_lb_ip = (
|
|
ann_dict["versioned_object.data"]
|
|
["service_pub_ip_info"]
|
|
["versioned_object.data"]
|
|
["ip_addr"])
|
|
except KeyError:
|
|
LOG.info("Waiting till LB's IP appears in annotation "
|
|
"(ingress.ip=%s)",
|
|
service.status.load_balancer.ingress[0].ip)
|
|
continue
|
|
if ann_lb_ip != service.status.load_balancer.ingress[0].ip:
|
|
LOG.warning(
|
|
'Annotated pub_ip(%s) != ingress.ip(%s).',
|
|
ann_lb_ip,
|
|
service.status.load_balancer.ingress[0].ip)
|
|
return ann_lb_ip
|
|
return service.status.load_balancer.ingress[0].ip
|
|
elif spec_type == "ClusterIP":
|
|
return service.spec.cluster_ip
|
|
else:
|
|
raise lib_exc.NotImplemented()
|
|
|
|
@classmethod
|
|
def wait_kuryr_annotation(cls, api_version, kind, annotation,
|
|
timeout_period, name, namespace='default'):
|
|
dyn_resource = cls.dyn_client.resources.get(
|
|
api_version=api_version, kind=kind)
|
|
start = time.time()
|
|
while time.time() - start < timeout_period:
|
|
time.sleep(1)
|
|
resource = dyn_resource.get(name, namespace=namespace)
|
|
if resource.metadata.annotations is None:
|
|
continue
|
|
for resp_annotation in resource.metadata.annotations:
|
|
if annotation in resp_annotation:
|
|
return
|
|
LOG.info("Waiting till %s will appear "
|
|
"in %s/%s annotation ", annotation, kind, name)
|
|
raise lib_exc.ServerFault()
|
|
|
|
@classmethod
|
|
def wait_service_status(cls, service_ip, timeout_period):
|
|
session = requests.Session()
|
|
start = time.time()
|
|
while time.time() - start < timeout_period:
|
|
try:
|
|
time.sleep(5)
|
|
session.get("http://{0}".format(service_ip), timeout=2)
|
|
|
|
return
|
|
except Exception:
|
|
LOG.warning('No initial traffic is passing through.')
|
|
time.sleep(5)
|
|
LOG.error(
|
|
"Traffic didn't pass within the period of %s" % timeout_period)
|
|
raise lib_exc.ServerFault()
|
|
|
|
@classmethod
|
|
def create_setup_for_service_test(cls, pod_num=2, spec_type="ClusterIP",
|
|
protocol="TCP", label=None,
|
|
namespace="default", get_ip=True,
|
|
service_name=None):
|
|
|
|
label = label or data_utils.rand_name('kuryr-app')
|
|
for i in range(pod_num):
|
|
pod_name, pod = cls.create_pod(
|
|
labels={"app": label}, namespace=namespace)
|
|
cls.addClassResourceCleanup(cls.delete_pod, pod_name,
|
|
namespace=namespace)
|
|
cls.pod_num = pod_num
|
|
service_name, service_obj = cls.create_service(
|
|
pod_label=pod.metadata.labels, spec_type=spec_type,
|
|
protocol=protocol, namespace=namespace, service_name=service_name)
|
|
if get_ip:
|
|
cls.service_ip = cls.get_service_ip(
|
|
service_name, spec_type=spec_type, namespace=namespace)
|
|
cls.verify_lbaas_endpoints_configured(service_name, pod_num)
|
|
cls.service_name = service_name
|
|
cls.wait_service_status(
|
|
cls.service_ip, CONF.kuryr_kubernetes.lb_build_timeout)
|
|
|
|
cls.addClassResourceCleanup(cls.delete_service, service_name,
|
|
namespace=namespace)
|
|
|
|
@classmethod
|
|
def create_namespace(cls, name=None):
|
|
if not name:
|
|
name = data_utils.rand_name(prefix='kuryr-namespace')
|
|
kuryr_crd_annotation = K8S_ANNOTATION_PREFIX + "-net-crd"
|
|
|
|
namespace = cls.k8s_client.V1Namespace()
|
|
namespace.metadata = cls.k8s_client.V1ObjectMeta(name=name)
|
|
namespace_obj = cls.k8s_client.CoreV1Api().create_namespace(
|
|
body=namespace)
|
|
|
|
# wait until namespace gets created
|
|
while True:
|
|
time.sleep(1)
|
|
ns = cls.k8s_client.CoreV1Api().read_namespace_status(name)
|
|
if (ns.metadata.annotations and
|
|
ns.metadata.annotations.get(kuryr_crd_annotation)):
|
|
break
|
|
|
|
return name, namespace_obj
|
|
|
|
@classmethod
|
|
def delete_namespace(cls, name, **kwargs):
|
|
body = cls.k8s_client.V1DeleteOptions(**kwargs)
|
|
cls.k8s_client.CoreV1Api().delete_namespace(name=name, body=body)
|
|
|
|
@classmethod
|
|
def list_namespaces(cls, **kwargs):
|
|
return cls.k8s_client.CoreV1Api().list_namespace(**kwargs)
|
|
|
|
@classmethod
|
|
def list_network_policies(cls, namespace='default', **kwargs):
|
|
network_policies_names = []
|
|
k8s = cls.k8s_client.NetworkingV1Api()
|
|
for np in k8s.list_namespaced_network_policy(namespace,
|
|
**kwargs).items:
|
|
network_policies_names.append(np.metadata.name)
|
|
return network_policies_names
|
|
|
|
@classmethod
|
|
def list_security_groups(cls, **filters):
|
|
sgs = cls.os_admin.security_groups_client.list_security_groups(
|
|
**filters)['security_groups']
|
|
return sgs
|
|
|
|
@classmethod
|
|
def get_kuryr_net_crds(cls, name):
|
|
return cls.k8s_client.CustomObjectsApi().get_cluster_custom_object(
|
|
group=KURYR_CRD_GROUP, version=KURYR_CRD_VERSION,
|
|
plural=KURYR_NET_CRD_PLURAL, name=name)
|
|
|
|
@classmethod
|
|
def get_kuryr_netpolicy_crds(cls, name, namespace='default', **kwargs):
|
|
return cls.k8s_client.CustomObjectsApi().get_namespaced_custom_object(
|
|
group=KURYR_CRD_GROUP, version=KURYR_CRD_VERSION,
|
|
namespace=namespace, plural=KURYR_NET_POLICY_CRD_PLURAL,
|
|
name=name, **kwargs)
|
|
|
|
def get_pod_name_list(self, namespace="default"):
|
|
return [pod.metadata.name for pod in
|
|
self.k8s_client.CoreV1Api().list_namespaced_pod(
|
|
namespace=namespace).items]
|
|
|
|
def _run_and_assert_fn(self, fn, repeats=10, responses_num=2):
|
|
cmd_outputs = set()
|
|
for i in range(repeats):
|
|
cmd_outputs.add(fn())
|
|
self.assertEqual(responses_num, len(cmd_outputs),
|
|
'Number of exclusive responses is incorrect. '
|
|
'Got %s.' % cmd_outputs)
|
|
|
|
def assert_backend_amount(self, url, amount, headers=None,
|
|
repetitions=100, threads=8, request_timeout=5):
|
|
def req():
|
|
resp = requests.get(url, headers=headers)
|
|
self.assertEqual(requests.codes.OK, resp.status_code,
|
|
'Non-successful request to {}'.format(url))
|
|
return resp
|
|
|
|
def pred(tester, responses):
|
|
unique_resps = set(resp.content for resp in responses)
|
|
tester.assertEqual(amount, len(unique_resps),
|
|
'Incorrect amount of unique backends. '
|
|
'Got {}'.format(unique_resps))
|
|
|
|
self._run_threaded_and_assert(req, pred, repetitions=repetitions,
|
|
threads=threads,
|
|
fn_timeout=request_timeout)
|
|
|
|
def assert_backend_amount_from_pod(self, url, amount, pod, repetitions=100,
|
|
threads=8, request_timeout=7):
|
|
def req():
|
|
stdout, stderr = self.exec_command_in_pod(
|
|
pod, ['/usr/bin/curl', '-Ss', '-w "\n%{http_code}"', url],
|
|
stderr=True)
|
|
# check if the curl command succeeded
|
|
if stderr:
|
|
LOG.error('Failed to curl the service at {}. '
|
|
'Err: {}'.format(url, stderr))
|
|
raise lib_exc.UnexpectedResponseCode()
|
|
delimiter = stdout.rfind('\n')
|
|
content = stdout[:delimiter]
|
|
status_code = int(stdout[delimiter + 1:].split('"')[0])
|
|
self.assertEqual(requests.codes.OK, status_code,
|
|
'Non-successful request to {}'.format(url))
|
|
return content
|
|
|
|
def pred(tester, responses):
|
|
unique_resps = set(resp for resp in responses)
|
|
tester.assertEqual(amount, len(unique_resps),
|
|
'Incorrect amount of unique backends. '
|
|
'Got {}'.format(unique_resps))
|
|
|
|
self._run_threaded_and_assert(req, pred, repetitions=repetitions,
|
|
threads=threads,
|
|
fn_timeout=request_timeout)
|
|
|
|
def _run_threaded_and_assert(self, fn, predicate, repetitions=100,
|
|
threads=8, fn_timeout=1):
|
|
tp = pool.ThreadPool(processes=threads)
|
|
results = [tp.apply_async(fn) for _ in range(repetitions)]
|
|
resps = [result.get(timeout=fn_timeout) for result in results]
|
|
predicate(self, resps)
|
|
|
|
@classmethod
|
|
def verify_lbaas_endpoints_configured(cls, ep_name, pod_num,
|
|
namespace='default'):
|
|
cls._verify_endpoints_annotation(
|
|
ep_name=ep_name, ann_string=K8S_ANNOTATION_LBAAS_STATE,
|
|
poll_interval=10, pod_num=pod_num)
|
|
|
|
@classmethod
|
|
def _verify_endpoints_annotation(cls, ep_name, ann_string,
|
|
poll_interval=1, namespace='default',
|
|
pod_num=None):
|
|
LOG.info("Look for %s string in ep=%s annotation ",
|
|
ann_string, ep_name)
|
|
# wait until endpoint annotation created
|
|
while True:
|
|
time.sleep(poll_interval)
|
|
ep = cls.k8s_client.CoreV1Api().read_namespaced_endpoints(
|
|
ep_name, namespace)
|
|
annotations = ep.metadata.annotations
|
|
try:
|
|
annotation = json.loads(annotations[ann_string])
|
|
# NOTE(yboaron): In some cases (depends on pod
|
|
# creation time) K8S-Endpoints will be created in two steps.
|
|
# The first step will be the creation of EP with a single pod,
|
|
# and the next step will be updating EP with the second pod.
|
|
# To handle this case properly, we need to verify not just
|
|
# Kuryr controller annotates LBaaS state In EP but that Kuryr
|
|
# controller annotates all members(pods).
|
|
if (ann_string == K8S_ANNOTATION_LBAAS_STATE and
|
|
pod_num is not None):
|
|
members_num = len(annotation.get('versioned_object.data')
|
|
.get('members'))
|
|
if pod_num != members_num:
|
|
LOG.info("Found %s string in ep=%s annotation but "
|
|
"members num(%d) != pod_num(%d)",
|
|
ann_string, ep_name, members_num, pod_num)
|
|
continue
|
|
LOG.info("Found %s string in ep=%s annotation ",
|
|
ann_string, ep_name)
|
|
return
|
|
except KeyError:
|
|
LOG.info("Waiting till %s will appears "
|
|
"in ep=%s annotation ", ann_string, ep_name)
|
|
continue
|
|
|
|
def create_vm_for_connectivity_test(self):
|
|
keypair = self.create_keypair()
|
|
sec_grp = self._create_security_group()
|
|
security_groups = [
|
|
{'name': sec_grp['name']}
|
|
]
|
|
server = self.create_server(name=data_utils.rand_name(prefix='kuryr'),
|
|
key_name=keypair['name'],
|
|
security_groups=security_groups)
|
|
fip = self.create_floating_ip(server)
|
|
ssh_client = self.get_remote_client(fip['floating_ip_address'],
|
|
private_key=keypair['private_key'])
|
|
return ssh_client, fip
|
|
|
|
def check_controller_pod_status_for_time_period(self, retry_attempts=20,
|
|
time_between_attempts=5,
|
|
status='Running'):
|
|
# Check that the controller pod status doesn't change from provided
|
|
# status parameter, so for example it should stay in Running state when
|
|
# the service with incorrect parameters was created
|
|
|
|
controller_pods = [
|
|
pod.metadata.name for pod in
|
|
self.k8s_client.CoreV1Api().list_namespaced_pod(
|
|
namespace=CONF.kuryr_kubernetes.kube_system_namespace).items
|
|
if pod.metadata.name.startswith(KURYR_CONTROLLER)]
|
|
|
|
while retry_attempts != 0:
|
|
time.sleep(time_between_attempts)
|
|
for controller_pod in controller_pods:
|
|
self.assertEqual("Running", self.get_pod_status(
|
|
controller_pod,
|
|
CONF.kuryr_kubernetes.kube_system_namespace),
|
|
'Kuryr controller is not in the %s state' % status
|
|
)
|
|
retry_attempts -= 1
|
|
|
|
@classmethod
|
|
def create_route(cls, name, hostname, target_svc, namespace='default'):
|
|
route_manifest = {
|
|
'apiVersion': 'v1',
|
|
'kind': 'Route',
|
|
'metadata':
|
|
{
|
|
'name': name,
|
|
},
|
|
'spec':
|
|
{
|
|
'host': hostname,
|
|
'to':
|
|
{
|
|
'kind': 'Service',
|
|
'name': target_svc
|
|
}
|
|
}
|
|
}
|
|
|
|
v1_routes = cls.dyn_client.resources.get(api_version='v1',
|
|
kind='Route')
|
|
v1_routes.create(body=route_manifest, namespace=namespace)
|
|
|
|
LOG.info("Route=%s created, wait for kuryr-annotation", name)
|
|
cls.wait_kuryr_annotation(
|
|
api_version='route.openshift.io/v1', kind='Route',
|
|
annotation='openstack.org/kuryr-route-state',
|
|
timeout_period=90, name=name)
|
|
LOG.info("Found %s string in Route=%s annotation ",
|
|
'openstack.org/kuryr-route-state', name)
|
|
|
|
@classmethod
|
|
def verify_route_endpoints_configured(cls, ep_name, namespace='default'):
|
|
cls._verify_endpoints_annotation(
|
|
ep_name=ep_name, ann_string=K8S_ANNOTATION_LBAAS_RT_STATE,
|
|
poll_interval=3)
|
|
|
|
@classmethod
|
|
def delete_route(cls, name, namespace='default'):
|
|
v1_routes = cls.dyn_client.resources.get(api_version='v1',
|
|
kind='Route')
|
|
try:
|
|
v1_routes.delete(name, namespace=namespace)
|
|
except Exception as e:
|
|
if e.status == 404:
|
|
return
|
|
raise
|
|
|
|
# FIXME(yboaron): Use other method (instead of constant delay)
|
|
# to verify that route was deleted
|
|
time.sleep(KURYR_ROUTE_DEL_VERIFY_TIMEOUT)
|
|
|
|
def verify_route_http(self, router_fip, hostname, amount,
|
|
should_succeed=True):
|
|
LOG.info("Trying to curl the route, Router_FIP=%s, hostname=%s, "
|
|
"should_succeed=%s", router_fip, hostname, should_succeed)
|
|
|
|
def req():
|
|
if should_succeed:
|
|
# FIXME(yboaron): From some reason for route use case,
|
|
# sometimes only one of service's pods is responding to CURL
|
|
# although all members and L7 policy were created at Octavia.
|
|
# so as workaround - I added a constant delay
|
|
time.sleep(1)
|
|
|
|
resp = requests.get('http://{}'.format(router_fip),
|
|
headers={'Host': hostname})
|
|
return resp.status_code, resp.content
|
|
|
|
def pred(tester, responses):
|
|
contents = []
|
|
for resp in responses:
|
|
status_code, content = resp
|
|
if should_succeed:
|
|
contents.append(content)
|
|
else:
|
|
tester.assertEqual(requests.codes.SERVICE_UNAVAILABLE,
|
|
status_code)
|
|
if should_succeed:
|
|
unique_resps = set(contents)
|
|
tester.assertEqual(amount, len(unique_resps),
|
|
'Incorrect amount of unique backends. '
|
|
'Got {}'.format(unique_resps))
|
|
|
|
self._run_threaded_and_assert(req, pred, fn_timeout=10)
|
|
|
|
def create_and_ping_pod(self):
|
|
name, pod = self.create_pod()
|
|
self.addCleanup(self.delete_pod, name)
|
|
ip = self.get_pod_ip(name)
|
|
self.assertIsNotNone(ip)
|
|
self.assertTrue(self.ping_ip_address(ip))
|
|
|
|
def update_config_map_ini_section(
|
|
self, name, conf_to_update, section,
|
|
namespace=CONF.kuryr_kubernetes.kube_system_namespace, **kwargs):
|
|
# TODO(gcheresh): Check what happens if two tests try to update
|
|
# the config map simultaneously.
|
|
|
|
# update the config map ini part with the new values
|
|
conf_map = self.k8s_client.CoreV1Api().read_namespaced_config_map(
|
|
namespace=namespace, name=name)
|
|
data_to_update = conf_map.data[conf_to_update]
|
|
conf_parser = six.moves.configparser.ConfigParser()
|
|
conf_parser.readfp(six.moves.StringIO(data_to_update))
|
|
for key, value in kwargs.iteritems():
|
|
conf_parser.set(section, key, value)
|
|
# TODO(gcheresh): Create a function that checks all empty string values
|
|
# At the moment only api_root has such a value ('')
|
|
conf_parser.set('kubernetes', 'api_root', '""')
|
|
str_obj = six.moves.StringIO()
|
|
conf_parser.write(str_obj)
|
|
updated_string = str_obj.getvalue()
|
|
conf_map.data[conf_to_update] = updated_string
|
|
self.k8s_client.CoreV1Api().replace_namespaced_config_map(
|
|
namespace=namespace, name=name, body=conf_map)
|
|
|
|
def restart_kuryr_controller(self):
|
|
system_namespace = CONF.kuryr_kubernetes.kube_system_namespace
|
|
kube_system_pods = self.get_pod_name_list(
|
|
namespace=system_namespace)
|
|
for kuryr_pod_name in kube_system_pods:
|
|
if kuryr_pod_name.startswith(KURYR_CONTROLLER):
|
|
self.delete_pod(
|
|
pod_name=kuryr_pod_name,
|
|
body={"kind": "DeleteOptions",
|
|
"apiVersion": "v1",
|
|
"gracePeriodSeconds": 0},
|
|
namespace=system_namespace)
|
|
|
|
# make sure the kuryr pod was deleted
|
|
self.wait_for_pod_status(
|
|
kuryr_pod_name,
|
|
namespace=system_namespace)
|
|
|
|
# Check that new kuryr-controller is up and running
|
|
kube_system_pods = self.get_pod_name_list(
|
|
namespace=system_namespace)
|
|
for kube_system_pod in kube_system_pods:
|
|
if kube_system_pod.startswith(KURYR_CONTROLLER):
|
|
self.wait_for_pod_status(
|
|
kube_system_pod,
|
|
namespace=system_namespace,
|
|
pod_status='Running',
|
|
retries=120)
|
|
|
|
# Wait until kuryr-controller pools are reloaded, i.e.,
|
|
# kuryr-controller is ready
|
|
res = test_utils.call_until_true(
|
|
self.get_pod_readiness, 30, 1, kube_system_pod,
|
|
namespace=system_namespace)
|
|
self.assertTrue(res, 'Timed out waiting for '
|
|
'kuryr-controller to reload pools.')
|
|
|
|
def update_config_map_ini_section_and_restart(
|
|
self, name, conf_to_update, section,
|
|
namespace=CONF.kuryr_kubernetes.kube_system_namespace, **kwargs):
|
|
self.update_config_map_ini_section(
|
|
name, conf_to_update, section,
|
|
namespace, **kwargs)
|
|
self.restart_kuryr_controller()
|