github-personal/kubernetes
1
0
Fork 0
mirror of https://github.com/outbackdingo/kubernetes.git synced 2026-01-27 10:19:35 +00:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #132708 from yashsingh74/conntrack-test

Browse Source 
cleanup conntrack entries test for UDP service
This commit is contained in:
Kubernetes Prow Robot
2025-07-08 21:51:27 -07:00
committed by GitHub
parent 4fedef93d1 1a62ade742
commit 9e204ba03c
1 changed files with 85 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

85
test/e2e/network/conntrack.go
View File

@@ -658,4 +658,89 @@ var _ = common.SIGDescribe("Conntrack", func() {
framework.Logf("boom-server pod logs: %s", logs)
framework.Logf("boom-server OK: did not receive any RST packet")
})
// This test checks that conntrack entries for old target ports are cleaned up when a UDP Service’s target port changes.
// It also covers cases where it prints the serverport entries, to make sure cleanup works correctly.
// This verifies the fix in https://pr.k8s.io/130542
ginkgo.It("should be able to cleanup conntrack entries when UDP service target port changes for a NodePort service", func(ctx context.Context) {
// Create a NodePort service
udpJig := e2eservice.NewTestJig(cs, ns, serviceName)
ginkgo.By("creating a UDP service " + serviceName + " with type=NodePort in " + ns)
udpService, err := udpJig.CreateUDPService(ctx, func(svc *v1.Service) {
svc.Spec.Type = v1.ServiceTypeNodePort
svc.Spec.Ports = []v1.ServicePort{
{Port: 80, Name: "udp", Protocol: v1.ProtocolUDP, TargetPort: intstr.FromInt32(8080)},
}
})
framework.ExpectNoError(err)
framework.Logf("Older Target Port: %v", udpService.Spec.Ports[0].TargetPort)
// Create a pod in one node to create the UDP traffic against the NodePort service every 5 seconds
ginkgo.By("creating a client pod for probing the service " + serviceName)
clientPod := e2epod.NewAgnhostPod(ns, podClient, nil, nil, nil)
nodeSelection := e2epod.NodeSelection{Name: clientNodeInfo.name}
e2epod.SetNodeSelection(&clientPod.Spec, nodeSelection)
cmd := fmt.Sprintf(`date; for i in $(seq 1 3000); do echo "$(date) Try: ${i}"; echo serverport | nc -u -w 5 -p %d %s %d; echo; done`, srcPort, serverNodeInfo.nodeIP, udpService.Spec.Ports[0].NodePort)
clientPod.Spec.Containers[0].Command = []string{"/bin/sh", "-c", cmd}
clientPod.Spec.Containers[0].Name = podClient
e2epod.NewPodClient(fr).CreateSync(ctx, clientPod)
// Add a backend pod to the service in the other node
ginkgo.By("creating a backend pod " + podBackend1 + " for the service " + serviceName)
// Add a backend pod with containers port
port8080 := []v1.ContainerPort{
{
ContainerPort: 8080,
Protocol: v1.ProtocolUDP,
},
}
port9090 := []v1.ContainerPort{
{
ContainerPort: 9090,
Protocol: v1.ProtocolUDP,
},
}
serverPod := e2epod.NewAgnhostPodFromContainers(
"", "conntrack-handle-target-ports", nil,
e2epod.NewAgnhostContainer("container-handle-8080-request", nil, port8080, "netexec", "--http-port", "8080", "--udp-port", "8080"),
e2epod.NewAgnhostContainer("container-handle-9090-request", nil, port9090, "netexec", "--http-port", "9090", "--udp-port", "9090"),
)
serverPod.Labels = udpJig.Labels
nodeSelection = e2epod.NodeSelection{Name: serverNodeInfo.name}
e2epod.SetNodeSelection(&serverPod.Spec, nodeSelection)
e2epod.NewPodClient(fr).CreateSync(ctx, serverPod)
validateEndpointsPortsOrFail(ctx, cs, ns, serviceName, portsByPodName{serverPod.Name: {8080}})
// Check that the first container of server pod keeps receiving traffic
// UDP conntrack entries timeout is 30 sec by default
ginkgo.By("checking client pod connected to the container 1 of backend pod on Node IP " + serverNodeInfo.nodeIP)
if err := wait.PollUntilContextTimeout(ctx, 5*time.Second, time.Minute, true, logContainsFn("8080", podClient)); err != nil {
logs, err := e2epod.GetPodLogs(ctx, cs, ns, podClient, podClient)
framework.ExpectNoError(err)
framework.Logf("Pod client logs: %s", logs)
framework.Failf("Failed to connect to backend 2")
}
// Update the NodePort Service TargetPort to 9090
service, err := udpJig.UpdateService(ctx, func(svc *v1.Service) {
svc.Spec.Ports[0].TargetPort = intstr.FromInt32(9090)
})
framework.ExpectNoError(err)
framework.Logf("Updated Target Port: %v", service.Spec.Ports[0].TargetPort)
validateEndpointsPortsOrFail(ctx, cs, ns, serviceName, portsByPodName{serverPod.Name: {9090}})
// Check that the second container of server pod keeps receiving traffic after clearing up the conntrack entries
// UDP conntrack entries timeout is 30 sec by default
// After clearing entries it should validate it serverport on NodePort matches with the container port
ginkgo.By("checking client pod connected to the container 2 of backend pod on Node IP " + serverNodeInfo.nodeIP)
if err := wait.PollUntilContextTimeout(ctx, 5*time.Second, time.Minute, true, logContainsFn("9090", podClient)); err != nil {
logs, err := e2epod.GetPodLogs(ctx, cs, ns, podClient, podClient)
framework.ExpectNoError(err)
framework.Logf("Pod client logs: %s", logs)
framework.Failf("Failed to connect to backend 2")
}
})
})