istio
1815 строк · 63.3 Кб
1// Copyright Istio Authors2//3// Licensed under the Apache License, Version 2.0 (the "License");4// you may not use this file except in compliance with the License.5// You may obtain a copy of the License at6//7// http://www.apache.org/licenses/LICENSE-2.08//9// Unless required by applicable law or agreed to in writing, software10// distributed under the License is distributed on an "AS IS" BASIS,11// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.12// See the License for the specific language governing permissions and13// limitations under the License.14)64)71}76}104}114}155}184}259}291}495// TODO(nmittler): Consider splitting this into multiple, smaller tests.497func TestAmbientIndex_Policy(t *testing.T) {498s := newAmbientTestServer(t, testC, testNW)499}946}965}995}1043}1062// assertWaypointAddressForPod takes a pod name for key and the expected waypoint IP Address1064// if the IP is empty we assume you're asserting that the pod's waypoint address is nil1065// will assert that the GW address for the pod's waypoint is the expected address1066// nolint: unparam1067func (s *ambientTestServer) assertWaypointAddressForPod(t *testing.T, key, expectedIP string) {1068t.Helper()1069var expectedAddress *workloadapi.GatewayAddress1070if expectedIP != "" { // "" is assumed to mean a nil address1071expectedAddress = &workloadapi.GatewayAddress{1072Destination: &workloadapi.GatewayAddress_Address{1073Address: &workloadapi.NetworkAddress{1074Address: netip.MustParseAddr(expectedIP).AsSlice(),1075},1076},1077HboneMtlsPort: 15008,1078}1079}1080workloads := s.lookup(s.podXdsName(key))1081if len(workloads) < 1 {1082t.Log("no workloads provided, assertion must fail")1083t.Fail()1084}1085for _, workload := range workloads {1086assert.Equal(t, expectedAddress.String(), workload.GetWorkload().GetWaypoint().String())1087}1088}1089}1170}1219}1269// This is a regression test for a case where policies added after pods were not applied when1271// querying by service1272func TestPolicyAfterPod(t *testing.T) {1273s := newAmbientTestServer(t, testC, testNW)1274}1286}1302}1364}1418}1423}1450// just overwrites the annotations1452// nolint: unparam1453func (s *ambientTestServer) annotatePod(t *testing.T, name, ns string, annotations map[string]string) {1454t.Helper()1455}1463}1468}1484}1489}1511}1547}1552}1570}1588// Make sure there are no two workloads in the index with similar UIDs1590func (s *ambientTestServer) assertUniqueWorkloads(t *testing.T) {1591t.Helper()1592uids := sets.New[string]()1593workloads := s.lookup("")1594for _, wl := range workloads {1595if wl.GetWorkload() != nil && uids.InsertContains(wl.GetWorkload().GetUid()) {1596t.Fatal("Index has workloads with the same UID")1597}1598}1599}1600}1610}1652}1657}1662}1671}1676}1681}1689}1696}1700// Returns the XDS resource name for the given pod.1702func (s *ambientTestServer) podXdsName(name string) string {1703return fmt.Sprintf("%s//Pod/%s/%s",1704s.clusterID, testNS, name)1705}1706// Returns the XDS resource name for the given address.1708func (s *ambientTestServer) addrXdsName(addr string) string {1709return string(s.network) + "/" + addr1710}1711// Returns the XDS resource name for the given service.1713func (s *ambientTestServer) svcXdsName(serviceName string) string {1714return fmt.Sprintf("%s/%s", testNS, s.hostnameForService(serviceName))1715}1716// Returns the hostname for the given service.1718func (s *ambientTestServer) hostnameForService(serviceName string) string {1719return fmt.Sprintf("%s.%s.svc.company.com", serviceName, testNS)1720}1721// Returns the XDS resource name for the given WorkloadEntry.1723func (s *ambientTestServer) wleXdsName(wleName string) string {1724return fmt.Sprintf("%s/networking.istio.io/WorkloadEntry/%s/%s",1725s.clusterID, testNS, wleName)1726}1727// Returns the XDS resource name for the given ServiceEntry IP address.1729func (s *ambientTestServer) seIPXdsName(name string, ip string) string {1730return fmt.Sprintf("%s/networking.istio.io/ServiceEntry/%s/%s/%s",1731s.clusterID, testNS, name, ip)1732}1733}1778}1788}1816