123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246 |
- /*
- Copyright 2017 The Kubernetes Authors.
- Licensed under the Apache License, Version 2.0 (the "License");
- you may not use this file except in compliance with the License.
- You may obtain a copy of the License at
- http://www.apache.org/licenses/LICENSE-2.0
- Unless required by applicable law or agreed to in writing, software
- distributed under the License is distributed on an "AS IS" BASIS,
- WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
- See the License for the specific language governing permissions and
- limitations under the License.
- */
- package ipvs
- import (
- "testing"
- utilipset "k8s.io/kubernetes/pkg/util/ipset"
- fakeipset "k8s.io/kubernetes/pkg/util/ipset/testing"
- )
- func TestCheckIPSetVersion(t *testing.T) {
- testCases := []struct {
- name string
- vstring string
- valid bool
- }{
- {"4.0 < 6.0 is invalid", "4.0", false},
- {"5.1 < 6.0 is invalid", "5.1", false},
- {"5.2 < 6.0 is invalid", "5.1.2", false},
- {"7 is not a valid version", "7", false},
- {"6.0 is valid since >= 6.0", "6.0", true},
- {"6.1 is valid since >= 6.0", "6.1", true},
- {"6.19 is valid since >= 6.0", "6.19", true},
- {"7.0 is valid since >= 6.0", "7.0", true},
- {"8.1.2 is valid since >= 6.0", "8.1.2", true},
- {"9.3.4.0 is valid since >= 6.0", "9.3.4.0", true},
- {"not a valid semantic version", "total junk", false},
- }
- for _, testCase := range testCases {
- t.Run(testCase.name, func(t *testing.T) {
- valid := checkMinVersion(testCase.vstring)
- if testCase.valid != valid {
- t.Errorf("Expected result: %v, Got result: %v", testCase.valid, valid)
- }
- })
- }
- }
- const testIPSetVersion = "v6.19"
- func TestSyncIPSetEntries(t *testing.T) {
- testCases := []struct {
- name string
- set *utilipset.IPSet
- setType utilipset.Type
- ipv6 bool
- activeEntries []string
- currentEntries []string
- expectedEntries []string
- }{
- {
- name: "normal ipset sync",
- set: &utilipset.IPSet{
- Name: "foo",
- },
- setType: utilipset.HashIPPort,
- ipv6: false,
- activeEntries: []string{"172.17.0.4,tcp:80"},
- currentEntries: nil,
- expectedEntries: []string{"172.17.0.4,tcp:80"},
- },
- {
- name: "ipset IPv6 sync with no new entries",
- set: &utilipset.IPSet{
- Name: "abz",
- },
- setType: utilipset.HashIPPort,
- ipv6: true,
- activeEntries: []string{"FE80::0202:B3FF:FE1E:8329,tcp:80"},
- currentEntries: []string{"FE80::0202:B3FF:FE1E:8329,tcp:80"},
- expectedEntries: []string{"FE80::0202:B3FF:FE1E:8329,tcp:80"},
- },
- {
- name: "ipset sync with updated udp->tcp in hash",
- set: &utilipset.IPSet{
- Name: "bca",
- },
- setType: utilipset.HashIPPort,
- ipv6: false,
- activeEntries: []string{"172.17.0.4,tcp:80", "172.17.0.5,tcp:80"},
- currentEntries: []string{"172.17.0.5,udp:53"},
- expectedEntries: []string{"172.17.0.4,tcp:80", "172.17.0.5,tcp:80"},
- },
- {
- name: "ipset sync no updates required",
- set: &utilipset.IPSet{
- Name: "bar",
- },
- setType: utilipset.HashIPPortIP,
- ipv6: false,
- activeEntries: []string{"172.17.0.4,tcp:80:172.17.0.4"},
- currentEntries: []string{"172.17.0.4,tcp:80:172.17.0.4"},
- expectedEntries: []string{"172.17.0.4,tcp:80:172.17.0.4"},
- },
- {
- name: "ipset IPv6 sync, delete and add new entry",
- set: &utilipset.IPSet{
- Name: "baz",
- },
- setType: utilipset.HashIPPortIP,
- ipv6: true,
- activeEntries: []string{"FE80:0000:0000:0000:0202:B3FF:FE1E:8329,tcp:8080:FE80:0000:0000:0000:0202:B3FF:FE1E:8329"},
- currentEntries: []string{"1111:0000:0000:0000:0202:B3FF:FE1E:8329,tcp:8081:1111:0000:0000:0000:0202:B3FF:FE1E:8329:8081"},
- expectedEntries: []string{"FE80:0000:0000:0000:0202:B3FF:FE1E:8329,tcp:8080:FE80:0000:0000:0000:0202:B3FF:FE1E:8329"},
- },
- {
- name: "ipset sync, no current entries",
- set: &utilipset.IPSet{
- Name: "NOPE",
- },
- setType: utilipset.HashIPPortIP,
- ipv6: false,
- activeEntries: []string{"172.17.0.4,tcp:80,172.17.0.9", "172.17.0.5,tcp:80,172.17.0.10"},
- currentEntries: nil,
- expectedEntries: []string{"172.17.0.4,tcp:80,172.17.0.9", "172.17.0.5,tcp:80,172.17.0.10"},
- },
- {
- name: "ipset sync, no current entries with /16 subnet",
- set: &utilipset.IPSet{
- Name: "ABC-DEF",
- },
- setType: utilipset.HashIPPortNet,
- ipv6: false,
- activeEntries: []string{"172.17.0.4,tcp:80,172.17.0.0/16", "172.17.0.5,tcp:80,172.17.0.0/16"},
- currentEntries: nil,
- expectedEntries: []string{"172.17.0.4,tcp:80,172.17.0.0/16", "172.17.0.5,tcp:80,172.17.0.0/16"},
- },
- {
- name: "ipset IPv6 sync, no updates required with /32 subnet",
- set: &utilipset.IPSet{
- Name: "zar",
- },
- setType: utilipset.HashIPPortNet,
- ipv6: true,
- activeEntries: []string{"FE80::8329,tcp:8800,2001:db8::/32"},
- currentEntries: []string{"FE80::8329,tcp:8800,2001:db8::/32"},
- expectedEntries: []string{"FE80::8329,tcp:8800,2001:db8::/32"},
- },
- {
- name: "ipset IPv6 sync, current entries removed",
- set: &utilipset.IPSet{
- Name: "bbb",
- },
- setType: utilipset.HashIPPortNet,
- ipv6: true,
- activeEntries: nil,
- currentEntries: []string{"FE80::8329,udp:8801,2001:db8::/32"},
- expectedEntries: nil,
- },
- {
- name: "ipset sync, port entry removed",
- set: &utilipset.IPSet{
- Name: "AAA",
- },
- setType: utilipset.BitmapPort,
- activeEntries: nil,
- currentEntries: []string{"80"},
- expectedEntries: nil,
- },
- {
- name: "ipset sync, remove old and add new",
- set: &utilipset.IPSet{
- Name: "c-c-c",
- },
- setType: utilipset.BitmapPort,
- activeEntries: []string{"8080", "9090"},
- currentEntries: []string{"80"},
- expectedEntries: []string{"8080", "9090"},
- },
- {
- name: "ipset sync, remove many stale ports",
- set: &utilipset.IPSet{
- Name: "NODE-PORT",
- },
- setType: utilipset.BitmapPort,
- activeEntries: []string{"8080"},
- currentEntries: []string{"80", "9090", "8081", "8082"},
- expectedEntries: []string{"8080"},
- },
- {
- name: "ipset sync, add sctp entry",
- set: &utilipset.IPSet{
- Name: "sctp-1",
- },
- setType: utilipset.HashIPPort,
- ipv6: false,
- activeEntries: []string{"172.17.0.4,sctp:80"},
- currentEntries: nil,
- expectedEntries: []string{"172.17.0.4,sctp:80"},
- },
- {
- name: "ipset sync, add IPV6 sctp entry",
- set: &utilipset.IPSet{
- Name: "sctp-2",
- },
- setType: utilipset.HashIPPort,
- ipv6: true,
- activeEntries: []string{"FE80::0202:B3FF:FE1E:8329,sctp:80"},
- currentEntries: []string{"FE80::0202:B3FF:FE1E:8329,sctp:80"},
- expectedEntries: []string{"FE80::0202:B3FF:FE1E:8329,sctp:80"},
- },
- }
- for _, testCase := range testCases {
- t.Run(testCase.name, func(t *testing.T) {
- set := NewIPSet(fakeipset.NewFake(testIPSetVersion), testCase.set.Name, testCase.setType, testCase.ipv6, "comment-"+testCase.set.Name)
- if err := set.handle.CreateSet(&set.IPSet, true); err != nil {
- t.Errorf("Unexpected error: %v", err)
- }
- for _, entry := range testCase.currentEntries {
- set.handle.AddEntry(entry, testCase.set, true)
- }
- set.activeEntries.Insert(testCase.activeEntries...)
- set.syncIPSetEntries()
- for _, entry := range testCase.expectedEntries {
- found, err := set.handle.TestEntry(entry, testCase.set.Name)
- if err != nil {
- t.Errorf("Unexpected error: %v", err)
- }
- if !found {
- t.Errorf("Unexpected entry %q not found in set foo", entry)
- }
- }
- })
- }
- }
|