package dualstack import ( "flag" "fmt" "os" "strings" "testing" "github.com/k3s-io/k3s/tests/e2e" . "github.com/onsi/ginkgo/v2" . "github.com/onsi/gomega" ) // Valid nodeOS: generic/ubuntu2004, opensuse/Leap-15.3.x86_64 var nodeOS = flag.String("nodeOS", "generic/ubuntu2004", "VM operating system") var serverCount = flag.Int("serverCount", 3, "number of server nodes") var agentCount = flag.Int("agentCount", 1, "number of agent nodes") var hardened = flag.Bool("hardened", false, "true or false") var ci = flag.Bool("ci", false, "running on CI") var local = flag.Bool("local", false, "deploy a locally built K3s binary") func Test_E2EDualStack(t *testing.T) { flag.Parse() RegisterFailHandler(Fail) suiteConfig, reporterConfig := GinkgoConfiguration() RunSpecs(t, "DualStack Test Suite", suiteConfig, reporterConfig) } var ( kubeConfigFile string serverNodeNames []string agentNodeNames []string ) var _ = ReportAfterEach(e2e.GenReport) var _ = Describe("Verify DualStack Configuration", Ordered, func() { It("Starts up with no issues", func() { var err error if *local { serverNodeNames, agentNodeNames, err = e2e.CreateLocalCluster(*nodeOS, *serverCount, *agentCount) } else { serverNodeNames, agentNodeNames, err = e2e.CreateCluster(*nodeOS, *serverCount, *agentCount) } Expect(err).NotTo(HaveOccurred(), e2e.GetVagrantLog(err)) fmt.Println("CLUSTER CONFIG") fmt.Println("OS:", *nodeOS) fmt.Println("Server Nodes:", serverNodeNames) fmt.Println("Agent Nodes:", agentNodeNames) kubeConfigFile, err = e2e.GenKubeConfigFile(serverNodeNames[0]) Expect(err).NotTo(HaveOccurred()) }) It("Checks Node Status", func() { Eventually(func(g Gomega) { nodes, err := e2e.ParseNodes(kubeConfigFile, false) g.Expect(err).NotTo(HaveOccurred()) for _, node := range nodes { g.Expect(node.Status).Should(Equal("Ready")) } }, "620s", "5s").Should(Succeed()) _, err := e2e.ParseNodes(kubeConfigFile, true) Expect(err).NotTo(HaveOccurred()) }) It("Checks Pod Status", func() { Eventually(func(g Gomega) { pods, err := e2e.ParsePods(kubeConfigFile, false) g.Expect(err).NotTo(HaveOccurred()) for _, pod := range pods { if strings.Contains(pod.Name, "helm-install") { g.Expect(pod.Status).Should(Equal("Completed"), pod.Name) } else { g.Expect(pod.Status).Should(Equal("Running"), pod.Name) } } }, "620s", "5s").Should(Succeed()) _, err := e2e.ParsePods(kubeConfigFile, true) Expect(err).NotTo(HaveOccurred()) }) It("Verifies that each node has IPv4 and IPv6", func() { nodeIPs, err := e2e.GetNodeIPs(kubeConfigFile) Expect(err).NotTo(HaveOccurred()) for _, node := range nodeIPs { Expect(node.IPv4).Should(ContainSubstring("10.10.10")) Expect(node.IPv6).Should(ContainSubstring("fd11:decf:c0ff")) } }) It("Verifies that each pod has IPv4 and IPv6", func() { podIPs, err := e2e.GetPodIPs(kubeConfigFile) Expect(err).NotTo(HaveOccurred()) for _, pod := range podIPs { Expect(pod.IPv4).Should(Or(ContainSubstring("10.10.10"), ContainSubstring("10.42.")), pod.Name) Expect(pod.IPv6).Should(Or(ContainSubstring("fd11:decf:c0ff"), ContainSubstring("2001:cafe:42")), pod.Name) } }) It("Verifies ClusterIP Service", func() { _, err := e2e.DeployWorkload("dualstack_clusterip.yaml", kubeConfigFile, *hardened) Expect(err).NotTo(HaveOccurred()) Eventually(func() (string, error) { cmd := "kubectl get pods -o=name -l k8s-app=nginx-app-clusterip --field-selector=status.phase=Running --kubeconfig=" + kubeConfigFile return e2e.RunCommand(cmd) }, "120s", "5s").Should(ContainSubstring("ds-clusterip-pod")) // Checks both IPv4 and IPv6 clusterips, err := e2e.FetchClusterIP(kubeConfigFile, "ds-clusterip-svc", true) Expect(err).NotTo(HaveOccurred()) for _, ip := range strings.Split(clusterips, ",") { if strings.Contains(ip, "::") { ip = "[" + ip + "]" } pods, err := e2e.ParsePods(kubeConfigFile, false) Expect(err).NotTo(HaveOccurred()) for _, pod := range pods { if !strings.HasPrefix(pod.Name, "ds-clusterip-pod") { continue } cmd := fmt.Sprintf("curl -L --insecure http://%s", ip) Eventually(func() (string, error) { return e2e.RunCmdOnNode(cmd, serverNodeNames[0]) }, "60s", "5s").Should(ContainSubstring("Welcome to nginx!"), "failed cmd: "+cmd) } } }) It("Verifies Ingress", func() { _, err := e2e.DeployWorkload("dualstack_ingress.yaml", kubeConfigFile, *hardened) Expect(err).NotTo(HaveOccurred(), "Ingress manifest not deployed") cmd := "kubectl get ingress ds-ingress --kubeconfig=" + kubeConfigFile + " -o jsonpath=\"{.spec.rules[*].host}\"" hostName, err := e2e.RunCommand(cmd) Expect(err).NotTo(HaveOccurred(), "failed cmd: "+cmd) nodeIPs, err := e2e.GetNodeIPs(kubeConfigFile) Expect(err).NotTo(HaveOccurred(), "failed cmd: "+cmd) for _, node := range nodeIPs { cmd := fmt.Sprintf("curl --header host:%s http://%s/name.html", hostName, node.IPv4) Eventually(func() (string, error) { return e2e.RunCommand(cmd) }, "10s", "2s").Should(ContainSubstring("ds-clusterip-pod"), "failed cmd: "+cmd) cmd = fmt.Sprintf("curl --header host:%s http://[%s]/name.html", hostName, node.IPv6) Eventually(func() (string, error) { return e2e.RunCommand(cmd) }, "5s", "1s").Should(ContainSubstring("ds-clusterip-pod"), "failed cmd: "+cmd) } }) It("Verifies NodePort Service", func() { _, err := e2e.DeployWorkload("dualstack_nodeport.yaml", kubeConfigFile, *hardened) Expect(err).NotTo(HaveOccurred()) cmd := "kubectl get service ds-nodeport-svc --kubeconfig=" + kubeConfigFile + " --output jsonpath=\"{.spec.ports[0].nodePort}\"" nodeport, err := e2e.RunCommand(cmd) Expect(err).NotTo(HaveOccurred(), "failed cmd: "+cmd) nodeIPs, err := e2e.GetNodeIPs(kubeConfigFile) Expect(err).NotTo(HaveOccurred()) for _, node := range nodeIPs { cmd = "curl -L --insecure http://" + node.IPv4 + ":" + nodeport + "/name.html" Eventually(func() (string, error) { return e2e.RunCommand(cmd) }, "10s", "1s").Should(ContainSubstring("ds-nodeport-pod"), "failed cmd: "+cmd) cmd = "curl -L --insecure http://[" + node.IPv6 + "]:" + nodeport + "/name.html" Eventually(func() (string, error) { return e2e.RunCommand(cmd) }, "10s", "1s").Should(ContainSubstring("ds-nodeport-pod"), "failed cmd: "+cmd) } }) It("Verifies podSelector Network Policy", func() { _, err := e2e.DeployWorkload("pod_client.yaml", kubeConfigFile, *hardened) Expect(err).NotTo(HaveOccurred()) cmd := "kubectl exec svc/client-curl --kubeconfig=" + kubeConfigFile + " -- curl -m7 ds-clusterip-svc/name.html" Eventually(func() (string, error) { return e2e.RunCommand(cmd) }, "20s", "3s").Should(ContainSubstring("ds-clusterip-pod"), "failed cmd: "+cmd) _, err = e2e.DeployWorkload("netpol-fail.yaml", kubeConfigFile, *hardened) Expect(err).NotTo(HaveOccurred()) cmd = "kubectl exec svc/client-curl --kubeconfig=" + kubeConfigFile + " -- curl -m7 ds-clusterip-svc/name.html" Eventually(func() error { _, err = e2e.RunCommand(cmd) Expect(err).To(HaveOccurred()) return err }, "20s", "3s") _, err = e2e.DeployWorkload("netpol-work.yaml", kubeConfigFile, *hardened) Expect(err).NotTo(HaveOccurred()) cmd = "kubectl exec svc/client-curl --kubeconfig=" + kubeConfigFile + " -- curl -m7 ds-clusterip-svc/name.html" Eventually(func() (string, error) { return e2e.RunCommand(cmd) }, "20s", "3s").Should(ContainSubstring("ds-clusterip-pod"), "failed cmd: "+cmd) }) }) var failed bool var _ = AfterEach(func() { failed = failed || CurrentSpecReport().Failed() }) var _ = AfterSuite(func() { if failed && !*ci { fmt.Println("FAILED!") } else { Expect(e2e.GetCoverageReport(append(serverNodeNames, agentNodeNames...))).To(Succeed()) Expect(e2e.DestroyCluster()).To(Succeed()) Expect(os.Remove(kubeConfigFile)).To(Succeed()) } })