mirror of
https://github.com/optim-enterprises-bv/kubernetes.git
synced 2025-11-03 19:58:17 +00:00
ce8113d9a9
This change adds configuring the kube-proxy bind address to be an IPv6 address based on the whether the API server advertise address is IPv6.
295 lines
8.0 KiB
Go
295 lines
8.0 KiB
Go
/*
|
|
Copyright 2017 The Kubernetes Authors.
|
|
|
|
Licensed under the Apache License, Version 2.0 (the "License");
|
|
you may not use this file except in compliance with the License.
|
|
You may obtain a copy of the License at
|
|
|
|
http://www.apache.org/licenses/LICENSE-2.0
|
|
|
|
Unless required by applicable law or agreed to in writing, software
|
|
distributed under the License is distributed on an "AS IS" BASIS,
|
|
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
See the License for the specific language governing permissions and
|
|
limitations under the License.
|
|
*/
|
|
|
|
package proxy
|
|
|
|
import (
|
|
"strings"
|
|
"testing"
|
|
"time"
|
|
|
|
apierrors "k8s.io/apimachinery/pkg/api/errors"
|
|
metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
|
|
"k8s.io/apimachinery/pkg/runtime"
|
|
clientsetfake "k8s.io/client-go/kubernetes/fake"
|
|
core "k8s.io/client-go/testing"
|
|
kubeadmapiext "k8s.io/kubernetes/cmd/kubeadm/app/apis/kubeadm/v1alpha1"
|
|
kubeadmutil "k8s.io/kubernetes/cmd/kubeadm/app/util"
|
|
cmdutil "k8s.io/kubernetes/cmd/kubeadm/app/util/config"
|
|
api "k8s.io/kubernetes/pkg/apis/core"
|
|
kubeproxyconfigv1alpha1 "k8s.io/kubernetes/pkg/proxy/apis/kubeproxyconfig/v1alpha1"
|
|
"k8s.io/kubernetes/pkg/util/pointer"
|
|
)
|
|
|
|
func TestCreateServiceAccount(t *testing.T) {
|
|
tests := []struct {
|
|
name string
|
|
createErr error
|
|
expectErr bool
|
|
}{
|
|
{
|
|
"error-free case",
|
|
nil,
|
|
false,
|
|
},
|
|
{
|
|
"duplication errors should be ignored",
|
|
apierrors.NewAlreadyExists(api.Resource(""), ""),
|
|
false,
|
|
},
|
|
{
|
|
"unexpected errors should be returned",
|
|
apierrors.NewUnauthorized(""),
|
|
true,
|
|
},
|
|
}
|
|
|
|
for _, tc := range tests {
|
|
client := clientsetfake.NewSimpleClientset()
|
|
if tc.createErr != nil {
|
|
client.PrependReactor("create", "serviceaccounts", func(action core.Action) (bool, runtime.Object, error) {
|
|
return true, nil, tc.createErr
|
|
})
|
|
}
|
|
|
|
err := CreateServiceAccount(client)
|
|
if tc.expectErr {
|
|
if err == nil {
|
|
t.Errorf("CreateServiceAccounts(%s) wanted err, got nil", tc.name)
|
|
}
|
|
continue
|
|
} else if !tc.expectErr && err != nil {
|
|
t.Errorf("CreateServiceAccounts(%s) returned unexpected err: %v", tc.name, err)
|
|
}
|
|
|
|
wantResourcesCreated := 1
|
|
if len(client.Actions()) != wantResourcesCreated {
|
|
t.Errorf("CreateServiceAccounts(%s) should have made %d actions, but made %d", tc.name, wantResourcesCreated, len(client.Actions()))
|
|
}
|
|
|
|
for _, action := range client.Actions() {
|
|
if action.GetVerb() != "create" || action.GetResource().Resource != "serviceaccounts" {
|
|
t.Errorf("CreateServiceAccounts(%s) called [%v %v], but wanted [create serviceaccounts]",
|
|
tc.name, action.GetVerb(), action.GetResource().Resource)
|
|
}
|
|
}
|
|
|
|
}
|
|
}
|
|
|
|
func TestGetClusterCIDR(t *testing.T) {
|
|
emptyClusterCIDR := getClusterCIDR("")
|
|
if emptyClusterCIDR != "" {
|
|
t.Errorf("Invalid format: %s", emptyClusterCIDR)
|
|
}
|
|
|
|
clusterCIDR := getClusterCIDR("10.244.0.0/16")
|
|
if clusterCIDR != "- --cluster-cidr=10.244.0.0/16" {
|
|
t.Errorf("Invalid format: %s", clusterCIDR)
|
|
}
|
|
|
|
clusterIPv6CIDR := getClusterCIDR("2001:db8::/64")
|
|
if clusterIPv6CIDR != "- --cluster-cidr=2001:db8::/64" {
|
|
t.Errorf("Invalid format: %s", clusterIPv6CIDR)
|
|
}
|
|
}
|
|
|
|
func TestCompileManifests(t *testing.T) {
|
|
var tests = []struct {
|
|
manifest string
|
|
data interface{}
|
|
expected bool
|
|
}{
|
|
{
|
|
manifest: KubeProxyConfigMap18,
|
|
data: struct {
|
|
MasterEndpoint, ProxyConfig string
|
|
}{
|
|
MasterEndpoint: "foo",
|
|
},
|
|
expected: true,
|
|
},
|
|
{
|
|
manifest: KubeProxyConfigMap19,
|
|
data: struct {
|
|
MasterEndpoint, ProxyConfig string
|
|
}{
|
|
MasterEndpoint: "foo",
|
|
ProxyConfig: " bindAddress: 0.0.0.0\n clusterCIDR: 192.168.1.1\n enableProfiling: false",
|
|
},
|
|
expected: true,
|
|
},
|
|
{
|
|
manifest: KubeProxyDaemonSet18,
|
|
data: struct{ ImageRepository, Arch, Version, ImageOverride, ExtraParams, ClusterCIDR, MasterTaintKey, CloudTaintKey string }{
|
|
ImageRepository: "foo",
|
|
Arch: "foo",
|
|
Version: "foo",
|
|
ImageOverride: "foo",
|
|
ExtraParams: "foo",
|
|
ClusterCIDR: "foo",
|
|
MasterTaintKey: "foo",
|
|
CloudTaintKey: "foo",
|
|
},
|
|
expected: true,
|
|
},
|
|
{
|
|
manifest: KubeProxyDaemonSet19,
|
|
data: struct{ ImageRepository, Arch, Version, ImageOverride, MasterTaintKey, CloudTaintKey string }{
|
|
ImageRepository: "foo",
|
|
Arch: "foo",
|
|
Version: "foo",
|
|
ImageOverride: "foo",
|
|
MasterTaintKey: "foo",
|
|
CloudTaintKey: "foo",
|
|
},
|
|
expected: true,
|
|
},
|
|
}
|
|
for _, rt := range tests {
|
|
_, actual := kubeadmutil.ParseTemplate(rt.manifest, rt.data)
|
|
if (actual == nil) != rt.expected {
|
|
t.Errorf(
|
|
"failed to compile %s manifest:\n\texpected: %t\n\t actual: %t",
|
|
rt.manifest,
|
|
rt.expected,
|
|
(actual == nil),
|
|
)
|
|
}
|
|
}
|
|
}
|
|
|
|
func TestEnsureProxyAddon(t *testing.T) {
|
|
type SimulatedError int
|
|
const (
|
|
NoError SimulatedError = iota
|
|
ServiceAccountError
|
|
InvalidMasterEndpoint
|
|
IPv6SetBindAddress
|
|
)
|
|
|
|
var testCases = []struct {
|
|
name string
|
|
simError SimulatedError
|
|
expErrString string
|
|
expBindAddr string
|
|
expClusterCIDR string
|
|
}{
|
|
{
|
|
name: "Successful proxy addon",
|
|
simError: NoError,
|
|
expErrString: "",
|
|
expBindAddr: "0.0.0.0",
|
|
expClusterCIDR: "5.6.7.8/24",
|
|
}, {
|
|
name: "Simulated service account error",
|
|
simError: ServiceAccountError,
|
|
expErrString: "error when creating kube-proxy service account",
|
|
expBindAddr: "0.0.0.0",
|
|
expClusterCIDR: "5.6.7.8/24",
|
|
}, {
|
|
name: "IPv6 AdvertiseAddress address",
|
|
simError: IPv6SetBindAddress,
|
|
expErrString: "",
|
|
expBindAddr: "::",
|
|
expClusterCIDR: "2001:101::/96",
|
|
},
|
|
}
|
|
|
|
for _, tc := range testCases {
|
|
|
|
// Create a fake client and set up default test configuration
|
|
client := clientsetfake.NewSimpleClientset()
|
|
|
|
masterConfig := &kubeadmapiext.MasterConfiguration{
|
|
API: kubeadmapiext.API{
|
|
AdvertiseAddress: "1.2.3.4",
|
|
BindPort: 1234,
|
|
},
|
|
KubeProxy: kubeadmapiext.KubeProxy{
|
|
Config: &kubeproxyconfigv1alpha1.KubeProxyConfiguration{
|
|
BindAddress: "",
|
|
HealthzBindAddress: "0.0.0.0:10256",
|
|
MetricsBindAddress: "127.0.0.1:10249",
|
|
Conntrack: kubeproxyconfigv1alpha1.KubeProxyConntrackConfiguration{
|
|
Max: pointer.Int32Ptr(2),
|
|
MaxPerCore: pointer.Int32Ptr(1),
|
|
Min: pointer.Int32Ptr(1),
|
|
TCPEstablishedTimeout: &metav1.Duration{Duration: 5 * time.Second},
|
|
TCPCloseWaitTimeout: &metav1.Duration{Duration: 5 * time.Second},
|
|
},
|
|
},
|
|
},
|
|
Networking: kubeadmapiext.Networking{
|
|
PodSubnet: "5.6.7.8/24",
|
|
},
|
|
ImageRepository: "someRepo",
|
|
KubernetesVersion: "v1.9.0",
|
|
UnifiedControlPlaneImage: "someImage",
|
|
}
|
|
|
|
// Simulate an error if neccessary
|
|
switch tc.simError {
|
|
case ServiceAccountError:
|
|
client.PrependReactor("create", "serviceaccounts", func(action core.Action) (bool, runtime.Object, error) {
|
|
return true, nil, apierrors.NewUnauthorized("")
|
|
})
|
|
case InvalidMasterEndpoint:
|
|
masterConfig.API.AdvertiseAddress = "1.2.3"
|
|
case IPv6SetBindAddress:
|
|
masterConfig.API.AdvertiseAddress = "1:2::3:4"
|
|
masterConfig.Networking.PodSubnet = "2001:101::/96"
|
|
}
|
|
|
|
kubeadmapiext.SetDefaults_MasterConfiguration(masterConfig)
|
|
intMaster, err := cmdutil.ConfigFileAndDefaultsToInternalConfig("", masterConfig)
|
|
if err != nil {
|
|
t.Errorf(" test failed to convert v1alpha1 to internal version")
|
|
break
|
|
}
|
|
err = EnsureProxyAddon(intMaster, client)
|
|
|
|
// Compare actual to expected errors
|
|
actErr := "No error"
|
|
if err != nil {
|
|
actErr = err.Error()
|
|
}
|
|
expErr := "No error"
|
|
if tc.expErrString != "" {
|
|
expErr = tc.expErrString
|
|
}
|
|
if !strings.Contains(actErr, expErr) {
|
|
t.Errorf(
|
|
"%s test failed, expected: %s, got: %s",
|
|
tc.name,
|
|
expErr,
|
|
actErr)
|
|
}
|
|
if intMaster.KubeProxy.Config.BindAddress != tc.expBindAddr {
|
|
t.Errorf("%s test failed, expected: %s, got: %s",
|
|
tc.name,
|
|
tc.expBindAddr,
|
|
intMaster.KubeProxy.Config.BindAddress)
|
|
}
|
|
if intMaster.KubeProxy.Config.ClusterCIDR != tc.expClusterCIDR {
|
|
t.Errorf("%s test failed, expected: %s, got: %s",
|
|
tc.name,
|
|
tc.expClusterCIDR,
|
|
intMaster.KubeProxy.Config.ClusterCIDR)
|
|
}
|
|
}
|
|
}
|