-
Notifications
You must be signed in to change notification settings - Fork 328
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
test(transparentproxy): add transparent proxy tests
These tests are using real docker containers. For now existing tests will test if tproxy installation in a container succeeds, and then compare golden files generated from iptables-save. Signed-off-by: Bart Smykla <bartek@smykla.com>
- Loading branch information
1 parent
aa2d1ee
commit 7c49f8b
Showing
46 changed files
with
3,304 additions
and
1 deletion.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,96 @@ | ||
| package framework | ||
|
|
||
| import ( | ||
| "fmt" | ||
| "os" | ||
| "path/filepath" | ||
| "runtime" | ||
|
|
||
| "github.com/pkg/errors" | ||
|
|
||
| "github.com/kumahq/kuma/pkg/config" | ||
| ) | ||
|
|
||
| var _ config.Config = TransparentProxyConfig{} | ||
|
|
||
| type TransparentProxyConfig struct { | ||
| config.BaseConfig | ||
|
|
||
| KumactlLinuxBin string `json:"kumactlLinuxBin,omitempty" envconfig:"KUMACTL_LINUX_BIN"` | ||
| DockerImagesToTest map[string]string `json:"dockerImagesToTest,omitempty" envconfig:"DOCKER_IMAGES_TO_TEST"` | ||
| DockerImagesToTestPaused map[string]string `json:"dockerImagesToTestPaused,omitempty" envconfig:"DOCKER_IMAGES_TO_TEST_PAUSED"` | ||
| InstallFlagsToTest []string `json:"additionalFlagsToTest,omitempty" envconfig:"ADDITIONAL_FLAGS_TO_TEST"` | ||
| IPV6 bool `json:"ipv6,omitempty" envconfig:"IPV6"` | ||
| } | ||
|
|
||
| func (c TransparentProxyConfig) Validate() error { | ||
| if TProxyConfig.KumactlLinuxBin != "" { | ||
| _, err := os.Stat(TProxyConfig.KumactlLinuxBin) | ||
| if os.IsNotExist(err) { | ||
| return errors.Wrapf( | ||
| err, | ||
| "unable to find kumactl for linux at: %s", | ||
| TProxyConfig.KumactlLinuxBin, | ||
| ) | ||
| } | ||
|
|
||
| return err | ||
| } | ||
|
|
||
| return nil | ||
| } | ||
|
|
||
| func (c TransparentProxyConfig) AutoConfigure() error { | ||
| absoluteKumactlPath, err := filepath.Abs(TProxyConfig.KumactlLinuxBin) | ||
| if err != nil { | ||
| return err | ||
| } | ||
|
|
||
| TProxyConfig.KumactlLinuxBin = absoluteKumactlPath | ||
|
|
||
| return nil | ||
| } | ||
|
|
||
| var TProxyConfig TransparentProxyConfig | ||
|
|
||
| var defaultTProxyConf = TransparentProxyConfig{ | ||
| KumactlLinuxBin: fmt.Sprintf( | ||
| "../../../build/artifacts-linux-%s/kumactl/kumactl", | ||
| runtime.GOARCH, | ||
| ), | ||
| DockerImagesToTest: map[string]string{ | ||
| "Ubuntu 24.04": "ubuntu:noble-20240605", | ||
| "Ubuntu 22.04": "ubuntu:jammy-20240530", | ||
| "Ubuntu 20.04": "ubuntu:focal-20240530", | ||
| "Debian 12": "debian:bookworm-20240612", | ||
| "Debian 11": "debian:bullseye-20240612", | ||
| "Debian 10": "debian:buster-20240612", | ||
| "RHEL 9": "redhat/ubi9:9.4-1123", | ||
| "Alpine 3": "alpine:3.20.1", | ||
| "Amazon Linux 2023": "amazonlinux:2023.4.20240611.0", | ||
| "Amazon Linux 2": "amazonlinux:2.0.20240610.1", | ||
| }, | ||
| DockerImagesToTestPaused: map[string]string{ | ||
| // Skipping RHEL 8 as our transparent proxy currently relies on | ||
| // iptables-nft or iptables-legacy binaries. RHEL 8 only provides the | ||
| // base iptables binary. Unpause these entries to include RHEL 8 once | ||
| // out transparent proxy is fixed to support base iptables binaries. | ||
| "RHEL 8": "redhat/ubi8:8.10-901.1717584420", | ||
| }, | ||
| InstallFlagsToTest: []string{ | ||
| "--redirect-all-dns-traffic", | ||
| }, | ||
| IPV6: false, | ||
| } | ||
|
|
||
| func init() { | ||
| TProxyConfig = defaultTProxyConf | ||
|
|
||
| if err := config.Load(os.Getenv("TPROXY_TESTS_CONFIG_FILE"), &TProxyConfig); err != nil { | ||
| panic(err) | ||
| } | ||
|
|
||
| if err := TProxyConfig.AutoConfigure(); err != nil { | ||
| panic(err) | ||
| } | ||
| } |
Oops, something went wrong.