github/kubernetes
1
0
Fork 0
mirror of https://github.com/k3s-io/kubernetes.git synced 2025-07-24 20:24:09 +00:00
Code Issues Projects Releases Wiki Activity

wait until the iptables rules are programmed

Browse Source
This commit is contained in:
Antonio Ojea 2020-09-16 12:20:42 +02:00
parent 3eeed2f7fe
commit 1dbf915e7b
1 changed files with 33 additions and 32 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

65
test/e2e/network/service.go
View File

@ -3998,27 +3998,28 @@ var _ = SIGDescribe("SCTP [Feature:SCTP] [LinuxOnly]", func() {
err := cs.CoreV1().Pods(f.Namespace.Name).Delete(context.TODO(), podName, metav1.DeleteOptions{}) err := cs.CoreV1().Pods(f.Namespace.Name).Delete(context.TODO(), podName, metav1.DeleteOptions{})
framework.ExpectNoError(err, "failed to delete pod: %s in namespace: %s", podName, f.Namespace.Name) framework.ExpectNoError(err, "failed to delete pod: %s in namespace: %s", podName, f.Namespace.Name)
}() }()
// wait until host port manager syncs rules
ginkgo.By("dumping iptables rules on the node")
cmd = "sudo iptables-save" cmd = "sudo iptables-save"
if framework.TestContext.ClusterIsIPv6() { if framework.TestContext.ClusterIsIPv6() {
cmd = "sudo ip6tables-save" cmd = "sudo ip6tables-save"
} }
framework.Logf("Executing cmd %q on node %v", cmd, node.Name) err = wait.PollImmediate(framework.Poll, framework.PollShortTimeout, func() (bool, error) {
result, err := hostExec.IssueCommandWithResult(cmd, node) framework.Logf("Executing cmd %q on node %v", cmd, node.Name)
if err != nil { result, err := hostExec.IssueCommandWithResult(cmd, node)
framework.Failf("Interrogation of iptables rules failed on node %v", node.Name) if err != nil {
} framework.Logf("Interrogation of iptables rules failed on node %v", node.Name)
return false, nil
ginkgo.By("checking that iptables contains the necessary iptables rules")
found := false
for _, line := range strings.Split(result, "\n") {
if strings.Contains(line, "-p sctp") && strings.Contains(line, "--dport 5060") {
found = true
break
} }
}
if !found { for _, line := range strings.Split(result, "\n") {
if strings.Contains(line, "-p sctp") && strings.Contains(line, "--dport 5060") {
return true, nil
}
}
framework.Logf("retrying ... not hostport sctp iptables rules found on node %v", node.Name)
return false, nil
})
if err != nil {
framework.Failf("iptables rules are not set for a pod with sctp hostport") framework.Failf("iptables rules are not set for a pod with sctp hostport")
} }
ginkgo.By("validating sctp module is still not loaded") ginkgo.By("validating sctp module is still not loaded")
@ -4057,8 +4058,6 @@ var _ = SIGDescribe("SCTP [Feature:SCTP] [LinuxOnly]", func() {
err = e2enetwork.WaitForService(f.ClientSet, ns, serviceName, true, 5*time.Second, e2eservice.TestTimeout) err = e2enetwork.WaitForService(f.ClientSet, ns, serviceName, true, 5*time.Second, e2eservice.TestTimeout)
framework.ExpectNoError(err, fmt.Sprintf("error while waiting for service:%s err: %v", serviceName, err)) framework.ExpectNoError(err, fmt.Sprintf("error while waiting for service:%s err: %v", serviceName, err))
ginkgo.By("dumping iptables rules on a node")
hostExec := utils.NewHostExec(f) hostExec := utils.NewHostExec(f)
defer hostExec.Cleanup() defer hostExec.Cleanup()
node, err := e2enode.GetRandomReadySchedulableNode(cs) node, err := e2enode.GetRandomReadySchedulableNode(cs)
@ -4067,21 +4066,23 @@ var _ = SIGDescribe("SCTP [Feature:SCTP] [LinuxOnly]", func() {
if framework.TestContext.ClusterIsIPv6() { if framework.TestContext.ClusterIsIPv6() {
cmd = "sudo ip6tables-save" cmd = "sudo ip6tables-save"
} }
framework.Logf("Executing cmd %q on node %v", cmd, node.Name) err = wait.PollImmediate(framework.Poll, e2eservice.KubeProxyLagTimeout, func() (bool, error) {
result, err := hostExec.IssueCommandWithResult(cmd, node) framework.Logf("Executing cmd %q on node %v", cmd, node.Name)
if err != nil { result, err := hostExec.IssueCommandWithResult(cmd, node)
framework.Failf("Interrogation of iptables rules failed on node %v", node.Name) if err != nil {
} framework.Logf("Interrogation of iptables rules failed on node %v", node.Name)
return false, nil
ginkgo.By("checking that iptables contains the necessary iptables rules")
kubeService := false
for _, line := range strings.Split(result, "\n") {
if strings.Contains(line, "-A KUBE-SERVICES") && strings.Contains(line, "-p sctp") {
kubeService = true
break
} }
}
if !kubeService { for _, line := range strings.Split(result, "\n") {
if strings.Contains(line, "-A KUBE-SERVICES") && strings.Contains(line, "-p sctp") {
return true, nil
}
}
framework.Logf("retrying ... no iptables rules found for service with sctp ports on node %v", node.Name)
return false, nil
})
if err != nil {
framework.Failf("iptables rules are not set for a clusterip service with sctp ports") framework.Failf("iptables rules are not set for a clusterip service with sctp ports")
} }
ginkgo.By("validating sctp module is still not loaded") ginkgo.By("validating sctp module is still not loaded")