test: add testcases

Signed-off-by: bitliu <bitliu@tencent.com>
envoyproxy · Jan 5, 2024 · 6322484 · 6322484
1 parent 9dd19ae
commit 6322484
Show file tree

Hide file tree

Showing 4 changed files with 345 additions and 0 deletions.
diff --git a/internal/infrastructure/kubernetes/proxy/resource_provider_test.go b/internal/infrastructure/kubernetes/proxy/resource_provider_test.go
@@ -16,6 +16,7 @@ import (
 	appsv1 "k8s.io/api/apps/v1"
 	autoscalingv2 "k8s.io/api/autoscaling/v2"
 	corev1 "k8s.io/api/core/v1"
+	v1 "k8s.io/apiextensions-apiserver/pkg/apis/apiextensions/v1"
 	"k8s.io/apimachinery/pkg/api/resource"
 	metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
 	"k8s.io/utils/ptr"
@@ -125,6 +126,18 @@ func TestDeployment(t *testing.T) {
 				},
 			},
 		},
+		{
+			caseName: "patch-deployment",
+			infra:    newTestInfra(),
+			deploy: &egv1a1.KubernetesDeploymentSpec{
+				Patch: &egv1a1.KubernetesPatchSpec{
+					Type: egv1a1.StrategicMerge,
+					Object: v1.JSON{
+						Raw: []byte("{\"spec\":{\"template\":{\"spec\":{\"hostNetwork\":true,\"dnsPolicy\":\"ClusterFirstWithHostNet\"}}}}"),
+					},
+				},
+			},
+		},
 		{
 			caseName:  "bootstrap",
 			infra:     newTestInfra(),

diff --git a/internal/infrastructure/kubernetes/proxy/testdata/deployments/patch-deployment.yaml b/internal/infrastructure/kubernetes/proxy/testdata/deployments/patch-deployment.yaml
@@ -0,0 +1,205 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  labels:
+    app.kubernetes.io/name: envoy
+    app.kubernetes.io/component: proxy
+    app.kubernetes.io/managed-by: envoy-gateway
+    gateway.envoyproxy.io/owning-gateway-name: default
+    gateway.envoyproxy.io/owning-gateway-namespace: default
+  name: envoy-default-37a8eec1
+  namespace: envoy-gateway-system
+spec:
+  replicas: 1
+  strategy:
+    type: RollingUpdate
+  selector:
+    matchLabels:
+      app.kubernetes.io/name: envoy
+      app.kubernetes.io/component: proxy
+      app.kubernetes.io/managed-by: envoy-gateway
+      gateway.envoyproxy.io/owning-gateway-name: default
+      gateway.envoyproxy.io/owning-gateway-namespace: default
+  template:
+    metadata:
+      labels:
+        app.kubernetes.io/name: envoy
+        app.kubernetes.io/component: proxy
+        app.kubernetes.io/managed-by: envoy-gateway
+        gateway.envoyproxy.io/owning-gateway-name: default
+        gateway.envoyproxy.io/owning-gateway-namespace: default
+    spec:
+      automountServiceAccountToken: false
+      containers:
+        - args:
+            - --service-cluster default
+            - --service-node $(ENVOY_POD_NAME)
+            - |
+              --config-yaml admin:
+                access_log:
+                - name: envoy.access_loggers.file
+                  typed_config:
+                    "@type": type.googleapis.com/envoy.extensions.access_loggers.file.v3.FileAccessLog
+                    path: /dev/null
+                address:
+                  socket_address:
+                    address: 127.0.0.1
+                    port_value: 19000
+              layered_runtime:
+                layers:
+                - name: global_config
+                  static_layer:
+                    envoy.restart_features.use_eds_cache_for_ads: true
+              dynamic_resources:
+                ads_config:
+                  api_type: DELTA_GRPC
+                  transport_api_version: V3
+                  grpc_services:
+                  - envoy_grpc:
+                      cluster_name: xds_cluster
+                  set_node_on_first_message_only: true
+                lds_config:
+                  ads: {}
+                  resource_api_version: V3
+                cds_config:
+                  ads: {}
+                  resource_api_version: V3
+              static_resources:
+                listeners:
+                - name: envoy-gateway-proxy-ready-0.0.0.0-19001
+                  address:
+                    socket_address:
+                      address: 0.0.0.0
+                      port_value: 19001
+                      protocol: TCP
+                  filter_chains:
+                  - filters:
+                    - name: envoy.filters.network.http_connection_manager
+                      typed_config:
+                        "@type": type.googleapis.com/envoy.extensions.filters.network.http_connection_manager.v3.HttpConnectionManager
+                        stat_prefix: eg-ready-http
+                        route_config:
+                          name: local_route
+                        http_filters:
+                        - name: envoy.filters.http.health_check
+                          typed_config:
+                            "@type": type.googleapis.com/envoy.extensions.filters.http.health_check.v3.HealthCheck
+                            pass_through_mode: false
+                            headers:
+                            - name: ":path"
+                              string_match:
+                                exact: /ready
+                        - name: envoy.filters.http.router
+                          typed_config:
+                            "@type": type.googleapis.com/envoy.extensions.filters.http.router.v3.Router
+                clusters:
+                - connect_timeout: 10s
+                  load_assignment:
+                    cluster_name: xds_cluster
+                    endpoints:
+                    - load_balancing_weight: 1
+                      lb_endpoints:
+                      - load_balancing_weight: 1
+                        endpoint:
+                          address:
+                            socket_address:
+                              address: envoy-gateway
+                              port_value: 18000
+                  typed_extension_protocol_options:
+                    envoy.extensions.upstreams.http.v3.HttpProtocolOptions:
+                      "@type": "type.googleapis.com/envoy.extensions.upstreams.http.v3.HttpProtocolOptions"
+                      explicit_http_config:
+                        http2_protocol_options:
+                          connection_keepalive:
+                            interval: 30s
+                            timeout: 5s
+                  name: xds_cluster
+                  type: STRICT_DNS
+                  transport_socket:
+                    name: envoy.transport_sockets.tls
+                    typed_config:
+                      "@type": type.googleapis.com/envoy.extensions.transport_sockets.tls.v3.UpstreamTlsContext
+                      common_tls_context:
+                        tls_params:
+                          tls_maximum_protocol_version: TLSv1_3
+                        tls_certificate_sds_secret_configs:
+                        - name: xds_certificate
+                          sds_config:
+                            path_config_source:
+                              path: "/sds/xds-certificate.json"
+                            resource_api_version: V3
+                        validation_context_sds_secret_config:
+                          name: xds_trusted_ca
+                          sds_config:
+                            path_config_source:
+                              path: "/sds/xds-trusted-ca.json"
+                            resource_api_version: V3
+            - --log-level warn
+            - --cpuset-threads
+          command:
+            - envoy
+          env:
+            - name: ENVOY_GATEWAY_NAMESPACE
+              valueFrom:
+                fieldRef:
+                  apiVersion: v1
+                  fieldPath: metadata.namespace
+            - name: ENVOY_POD_NAME
+              valueFrom:
+                fieldRef:
+                  apiVersion: v1
+                  fieldPath: metadata.name
+          image: envoyproxy/envoy-dev:latest
+          imagePullPolicy: IfNotPresent
+          name: envoy
+          ports:
+            - containerPort: 8080
+              name: EnvoyH-d76a15e2
+              protocol: TCP
+            - containerPort: 8443
+              name: EnvoyH-6658f727
+              protocol: TCP
+          resources:
+            requests:
+              cpu: 100m
+              memory: 512Mi
+          readinessProbe:
+            httpGet:
+              path: /ready
+              port: 19001
+              scheme: HTTP
+            timeoutSeconds: 1
+            periodSeconds: 10
+            successThreshold: 1
+            failureThreshold: 3
+          terminationMessagePath: /dev/termination-log
+          terminationMessagePolicy: File
+          volumeMounts:
+            - mountPath: /certs
+              name: certs
+              readOnly: true
+            - mountPath: /sds
+              name: sds
+      dnsPolicy: ClusterFirstWithHostNet
+      hostNetwork: true
+      restartPolicy: Always
+      schedulerName: default-scheduler
+      serviceAccountName: envoy-default-37a8eec1
+      terminationGracePeriodSeconds: 300
+      volumes:
+        - name: certs
+          secret:
+            secretName: envoy
+            defaultMode: 420
+        - configMap:
+            defaultMode: 420
+            items:
+              - key: xds-trusted-ca.json
+                path: xds-trusted-ca.json
+              - key: xds-certificate.json
+                path: xds-certificate.json
+            name: envoy-default-37a8eec1
+            optional: false
+          name: sds
+  revisionHistoryLimit: 10
+  progressDeadlineSeconds: 600
diff --git a/internal/infrastructure/kubernetes/ratelimit/resource_provider_test.go b/internal/infrastructure/kubernetes/ratelimit/resource_provider_test.go
@@ -14,6 +14,7 @@ import (
 	"github.com/stretchr/testify/require"
 	appsv1 "k8s.io/api/apps/v1"
 	corev1 "k8s.io/api/core/v1"
+	v1 "k8s.io/apiextensions-apiserver/pkg/apis/apiextensions/v1"
 	"k8s.io/apimachinery/pkg/api/resource"
 	metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
 	"k8s.io/apimachinery/pkg/types"
@@ -146,6 +147,18 @@ func TestDeployment(t *testing.T) {
 			rateLimit: rateLimit,
 			deploy:    cfg.EnvoyGateway.GetEnvoyGatewayProvider().GetEnvoyGatewayKubeProvider().RateLimitDeployment,
 		},
+		{
+			caseName:  "patch-deployment",
+			rateLimit: rateLimit,
+			deploy: &egv1a1.KubernetesDeploymentSpec{
+				Patch: &egv1a1.KubernetesPatchSpec{
+					Type: egv1a1.StrategicMerge,
+					Object: v1.JSON{
+						Raw: []byte("{\"spec\":{\"template\":{\"spec\":{\"hostNetwork\":true,\"dnsPolicy\":\"ClusterFirstWithHostNet\"}}}}"),
+					},
+				},
+			},
+		},
 		{
 			caseName:  "custom",
 			rateLimit: rateLimit,

diff --git a/internal/infrastructure/kubernetes/ratelimit/testdata/deployments/patch-deployment.yaml b/internal/infrastructure/kubernetes/ratelimit/testdata/deployments/patch-deployment.yaml
@@ -0,0 +1,114 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  labels:
+    app.kubernetes.io/name: envoy-ratelimit
+    app.kubernetes.io/component: ratelimit
+    app.kubernetes.io/managed-by: envoy-gateway
+  name: envoy-ratelimit
+  namespace: envoy-gateway-system
+  ownerReferences:
+  - apiVersion: apps/v1
+    kind: Deployment
+    name: envoy-gateway
+    uid: test-owner-reference-uid-for-deployment
+spec:
+  replicas: 1
+  strategy:
+    type: RollingUpdate
+  selector:
+    matchLabels:
+      app.kubernetes.io/name: envoy-ratelimit
+      app.kubernetes.io/component: ratelimit
+      app.kubernetes.io/managed-by: envoy-gateway
+  template:
+    metadata:
+      labels:
+        app.kubernetes.io/name: envoy-ratelimit
+        app.kubernetes.io/component: ratelimit
+        app.kubernetes.io/managed-by: envoy-gateway
+    spec:
+      automountServiceAccountToken: false
+      containers:
+      - command:
+        - /bin/ratelimit
+        env:
+        - name: REDIS_SOCKET_TYPE
+          value: tcp
+        - name: REDIS_URL
+          value: redis.redis.svc:6379
+        - name: RUNTIME_ROOT
+          value: /data
+        - name: RUNTIME_SUBDIRECTORY
+          value: ratelimit
+        - name: RUNTIME_IGNOREDOTFILES
+          value: "true"
+        - name: RUNTIME_WATCH_ROOT
+          value: "false"
+        - name: LOG_LEVEL
+          value: info
+        - name: USE_STATSD
+          value: "false"
+        - name: CONFIG_TYPE
+          value: GRPC_XDS_SOTW
+        - name: CONFIG_GRPC_XDS_SERVER_URL
+          value: envoy-gateway:18001
+        - name: CONFIG_GRPC_XDS_NODE_ID
+          value: envoy-ratelimit
+        - name: GRPC_SERVER_USE_TLS
+          value: "true"
+        - name: GRPC_SERVER_TLS_CERT
+          value: "/certs/tls.crt"
+        - name: GRPC_SERVER_TLS_KEY
+          value: "/certs/tls.key"
+        - name: GRPC_SERVER_TLS_CA_CERT
+          value: "/certs/ca.crt"
+        - name: CONFIG_GRPC_XDS_SERVER_USE_TLS
+          value: "true"
+        - name: CONFIG_GRPC_XDS_CLIENT_TLS_CERT
+          value: "/certs/tls.crt"
+        - name: CONFIG_GRPC_XDS_CLIENT_TLS_KEY
+          value: "/certs/tls.key"
+        - name: CONFIG_GRPC_XDS_SERVER_TLS_CACERT
+          value: "/certs/ca.crt"
+        - name: FORCE_START_WITHOUT_INITIAL_CONFIG
+          value: "true"
+        image: envoyproxy/ratelimit:master
+        imagePullPolicy: IfNotPresent
+        name: envoy-ratelimit
+        ports:
+        - containerPort: 8081
+          name: grpc
+          protocol: TCP
+        resources:
+          requests:
+            cpu: 100m
+            memory: 512Mi
+        terminationMessagePath: /dev/termination-log
+        terminationMessagePolicy: File
+        volumeMounts:
+        - mountPath: /certs
+          name: certs
+          readOnly: true
+        readinessProbe:
+          failureThreshold: 3
+          httpGet:
+            path: /healthcheck
+            port: 8080
+            scheme: HTTP
+          periodSeconds: 10
+          successThreshold: 1
+          timeoutSeconds: 1
+      dnsPolicy: ClusterFirstWithHostNet
+      hostNetwork: true
+      restartPolicy: Always
+      schedulerName: default-scheduler
+      serviceAccountName: envoy-ratelimit
+      terminationGracePeriodSeconds: 300
+      volumes:
+      - name: certs
+        secret:
+          secretName: envoy-rate-limit
+          defaultMode: 420
+  revisionHistoryLimit: 10
+  progressDeadlineSeconds: 600