diff --git a/test/e2e/network/service_cidrs.go b/test/e2e/network/service_cidrs.go new file mode 100644 index 00000000000..6338d83de9e --- /dev/null +++ b/test/e2e/network/service_cidrs.go @@ -0,0 +1,116 @@ +/* +Copyright 2023 The Kubernetes Authors. + +Licensed under the Apache License, Version 2.0 (the "License"); +you may not use this file except in compliance with the License. +You may obtain a copy of the License at + + http://www.apache.org/licenses/LICENSE-2.0 + +Unless required by applicable law or agreed to in writing, software +distributed under the License is distributed on an "AS IS" BASIS, +WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. +See the License for the specific language governing permissions and +limitations under the License. +*/ + +package network + +import ( + "context" + + "github.com/onsi/ginkgo/v2" + v1 "k8s.io/api/core/v1" + networkingv1alpha1 "k8s.io/api/networking/v1alpha1" + metav1 "k8s.io/apimachinery/pkg/apis/meta/v1" + "k8s.io/apimachinery/pkg/util/intstr" + "k8s.io/apimachinery/pkg/util/wait" + clientset "k8s.io/client-go/kubernetes" + "k8s.io/kubernetes/test/e2e/framework" + e2enode "k8s.io/kubernetes/test/e2e/framework/node" + e2epod "k8s.io/kubernetes/test/e2e/framework/pod" + e2eservice "k8s.io/kubernetes/test/e2e/framework/service" + e2eskipper "k8s.io/kubernetes/test/e2e/framework/skipper" + "k8s.io/kubernetes/test/e2e/network/common" + admissionapi "k8s.io/pod-security-admission/api" +) + +var _ = common.SIGDescribe("[Feature:ServiceCIDRs]", func() { + + fr := framework.NewDefaultFramework("servicecidrs") + fr.NamespacePodSecurityEnforceLevel = admissionapi.LevelPrivileged + + var ( + cs clientset.Interface + ns string + ) + + ginkgo.BeforeEach(func(ctx context.Context) { + cs = fr.ClientSet + ns = fr.Namespace.Name + + nodes, err := e2enode.GetBoundedReadySchedulableNodes(ctx, cs, 2) + framework.ExpectNoError(err) + if len(nodes.Items) < 2 { + e2eskipper.Skipf( + "Test requires >= 2 Ready nodes, but there are only %v nodes", + len(nodes.Items)) + } + + }) + + ginkgo.It("should create Services and servce on different Service CIDRs", func(ctx context.Context) { + // create a new service CIDR + svcCIDR := &networkingv1alpha1.ServiceCIDR{ + ObjectMeta: metav1.ObjectMeta{ + Name: "test-svc-cidr", + }, + Spec: networkingv1alpha1.ServiceCIDRSpec{ + IPv4: "10.196.196.0/24", + }, + } + _, err := cs.NetworkingV1alpha1().ServiceCIDRs().Create(context.TODO(), svcCIDR, metav1.CreateOptions{}) + framework.ExpectNoError(err, "error creating ServiceCIDR") + if pollErr := wait.PollUntilContextTimeout(ctx, framework.Poll, e2eservice.RespondingTimeout, false, func(ctx context.Context) (bool, error) { + svcCIDR, err := cs.NetworkingV1alpha1().ServiceCIDRs().Get(ctx, svcCIDR.Name, metav1.GetOptions{}) + if err != nil { + return false, nil + } + return isReady(svcCIDR), nil + }); pollErr != nil { + framework.Failf("Failed to wait for serviceCIDR to be ready: %v", pollErr) + } + + serviceName := "cidr1-test" + jig := e2eservice.NewTestJig(cs, ns, serviceName) + + ginkgo.By("creating service " + serviceName + " with type=NodePort in namespace " + ns) + nodePortService, err := jig.CreateTCPService(ctx, func(svc *v1.Service) { + svc.Spec.ClusterIP = "10.196.196.77" + svc.Spec.Type = v1.ServiceTypeNodePort + svc.Spec.Ports = []v1.ServicePort{ + {Port: 80, Name: "http", Protocol: v1.ProtocolTCP, TargetPort: intstr.FromInt(9376)}, + } + }) + framework.ExpectNoError(err) + err = jig.CreateServicePods(ctx, 2) + framework.ExpectNoError(err) + execPod := e2epod.CreateExecPodOrFail(ctx, cs, ns, "execpod", nil) + err = jig.CheckServiceReachability(ctx, nodePortService, execPod) + framework.ExpectNoError(err) + }) + +}) + +func isReady(serviceCIDR *networkingv1alpha1.ServiceCIDR) bool { + if serviceCIDR == nil { + return false + } + + for _, condition := range serviceCIDR.Status.Conditions { + if condition.Type == string(networkingv1alpha1.ServiceCIDRConditionReady) { + return condition.Status == metav1.ConditionStatus(metav1.ConditionTrue) + } + } + return false +}