policy_test.go 9.8 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232
  1. /*
  2. Copyright 2017 The Kubernetes Authors.
  3. Licensed under the Apache License, Version 2.0 (the "License");
  4. you may not use this file except in compliance with the License.
  5. You may obtain a copy of the License at
  6. http://www.apache.org/licenses/LICENSE-2.0
  7. Unless required by applicable law or agreed to in writing, software
  8. distributed under the License is distributed on an "AS IS" BASIS,
  9. WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
  10. See the License for the specific language governing permissions and
  11. limitations under the License.
  12. */
  13. package upgrade
  14. import (
  15. "testing"
  16. "k8s.io/apimachinery/pkg/util/version"
  17. "k8s.io/kubernetes/cmd/kubeadm/app/constants"
  18. )
  19. func TestEnforceVersionPolicies(t *testing.T) {
  20. tests := []struct {
  21. name string
  22. vg *fakeVersionGetter
  23. expectedMandatoryErrs int
  24. expectedSkippableErrs int
  25. allowExperimental, allowRCs bool
  26. newK8sVersion string
  27. }{
  28. {
  29. name: "minor upgrade",
  30. vg: &fakeVersionGetter{
  31. clusterVersion: constants.MinimumControlPlaneVersion.WithPatch(3).String(),
  32. kubeletVersion: constants.MinimumControlPlaneVersion.WithPatch(3).String(),
  33. kubeadmVersion: constants.MinimumControlPlaneVersion.WithPatch(5).String(),
  34. },
  35. newK8sVersion: constants.MinimumControlPlaneVersion.WithPatch(5).String(),
  36. },
  37. {
  38. name: "major upgrade",
  39. vg: &fakeVersionGetter{
  40. clusterVersion: constants.MinimumControlPlaneVersion.WithPatch(3).String(),
  41. kubeletVersion: constants.MinimumControlPlaneVersion.WithPatch(2).String(),
  42. kubeadmVersion: constants.CurrentKubernetesVersion.WithPatch(1).String(),
  43. },
  44. newK8sVersion: constants.CurrentKubernetesVersion.String(),
  45. },
  46. {
  47. name: "downgrade",
  48. vg: &fakeVersionGetter{
  49. clusterVersion: constants.MinimumControlPlaneVersion.WithPatch(3).String(),
  50. kubeletVersion: constants.MinimumKubeletVersion.String(),
  51. kubeadmVersion: constants.MinimumControlPlaneVersion.WithPatch(3).String(),
  52. },
  53. newK8sVersion: constants.MinimumControlPlaneVersion.WithPatch(2).String(),
  54. },
  55. {
  56. name: "same version upgrade",
  57. vg: &fakeVersionGetter{
  58. clusterVersion: constants.MinimumControlPlaneVersion.WithPatch(3).String(),
  59. kubeletVersion: constants.MinimumKubeletVersion.WithPatch(3).String(),
  60. kubeadmVersion: constants.MinimumControlPlaneVersion.WithPatch(3).String(),
  61. },
  62. newK8sVersion: constants.MinimumControlPlaneVersion.WithPatch(3).String(),
  63. },
  64. {
  65. name: "new version must be higher than v1.12.0",
  66. vg: &fakeVersionGetter{
  67. clusterVersion: "v1.12.3",
  68. kubeletVersion: "v1.12.3",
  69. kubeadmVersion: "v1.12.3",
  70. },
  71. newK8sVersion: "v1.11.10",
  72. expectedMandatoryErrs: 1, // version must be higher than v1.12.0
  73. expectedSkippableErrs: 1, // can't upgrade old k8s with newer kubeadm
  74. },
  75. {
  76. name: "upgrading two minor versions in one go is not supported",
  77. vg: &fakeVersionGetter{
  78. clusterVersion: "v1.11.3",
  79. kubeletVersion: "v1.11.3",
  80. kubeadmVersion: constants.CurrentKubernetesVersion.String(),
  81. },
  82. newK8sVersion: constants.CurrentKubernetesVersion.String(),
  83. expectedMandatoryErrs: 1, // can't upgrade two minor versions
  84. expectedSkippableErrs: 1, // kubelet <-> apiserver skew too large
  85. },
  86. {
  87. name: "downgrading two minor versions in one go is not supported",
  88. vg: &fakeVersionGetter{
  89. clusterVersion: constants.CurrentKubernetesVersion.WithMinor(constants.CurrentKubernetesVersion.Minor() + 2).String(),
  90. kubeletVersion: constants.CurrentKubernetesVersion.WithMinor(constants.CurrentKubernetesVersion.Minor() + 2).String(),
  91. kubeadmVersion: constants.CurrentKubernetesVersion.String(),
  92. },
  93. newK8sVersion: constants.CurrentKubernetesVersion.String(),
  94. expectedMandatoryErrs: 1, // can't downgrade two minor versions
  95. },
  96. {
  97. name: "kubeadm version must be higher than the new kube version. However, patch version skews may be forced",
  98. vg: &fakeVersionGetter{
  99. clusterVersion: constants.MinimumControlPlaneVersion.WithPatch(3).String(),
  100. kubeletVersion: constants.MinimumKubeletVersion.WithPatch(3).String(),
  101. kubeadmVersion: constants.MinimumControlPlaneVersion.WithPatch(3).String(),
  102. },
  103. newK8sVersion: constants.MinimumControlPlaneVersion.WithPatch(5).String(),
  104. expectedSkippableErrs: 1,
  105. },
  106. {
  107. name: "kubeadm version must be higher than the new kube version. Trying to upgrade k8s to a higher minor version than kubeadm itself should never be supported",
  108. vg: &fakeVersionGetter{
  109. clusterVersion: constants.MinimumControlPlaneVersion.WithPatch(3).String(),
  110. kubeletVersion: constants.MinimumKubeletVersion.WithPatch(3).String(),
  111. kubeadmVersion: constants.MinimumControlPlaneVersion.WithPatch(3).String(),
  112. },
  113. newK8sVersion: constants.CurrentKubernetesVersion.String(),
  114. expectedMandatoryErrs: 1,
  115. },
  116. {
  117. name: "the maximum skew between the cluster version and the kubelet versions should be one minor version. This may be forced through though.",
  118. vg: &fakeVersionGetter{
  119. clusterVersion: constants.MinimumControlPlaneVersion.WithPatch(3).String(),
  120. kubeletVersion: "v1.12.8",
  121. kubeadmVersion: constants.CurrentKubernetesVersion.String(),
  122. },
  123. newK8sVersion: constants.CurrentKubernetesVersion.String(),
  124. expectedSkippableErrs: 1,
  125. },
  126. {
  127. name: "experimental upgrades supported if the flag is set",
  128. vg: &fakeVersionGetter{
  129. clusterVersion: constants.MinimumControlPlaneVersion.WithPatch(3).String(),
  130. kubeletVersion: constants.MinimumKubeletVersion.WithPatch(3).String(),
  131. kubeadmVersion: constants.CurrentKubernetesVersion.WithPreRelease("beta.1").String(),
  132. },
  133. newK8sVersion: constants.CurrentKubernetesVersion.WithPreRelease("beta.1").String(),
  134. allowExperimental: true,
  135. },
  136. {
  137. name: "release candidate upgrades supported if the flag is set",
  138. vg: &fakeVersionGetter{
  139. clusterVersion: constants.MinimumControlPlaneVersion.WithPatch(3).String(),
  140. kubeletVersion: constants.MinimumKubeletVersion.WithPatch(3).String(),
  141. kubeadmVersion: constants.CurrentKubernetesVersion.WithPreRelease("rc.1").String(),
  142. },
  143. newK8sVersion: constants.CurrentKubernetesVersion.WithPreRelease("rc.1").String(),
  144. allowRCs: true,
  145. },
  146. {
  147. name: "release candidate upgrades supported if the flag is set",
  148. vg: &fakeVersionGetter{
  149. clusterVersion: constants.MinimumControlPlaneVersion.WithPatch(3).String(),
  150. kubeletVersion: constants.MinimumKubeletVersion.WithPatch(3).String(),
  151. kubeadmVersion: constants.CurrentKubernetesVersion.WithPreRelease("rc.1").String(),
  152. },
  153. newK8sVersion: constants.CurrentKubernetesVersion.WithPreRelease("rc.1").String(),
  154. allowExperimental: true,
  155. },
  156. {
  157. name: "the user should not be able to upgrade to an experimental version if they haven't opted into that",
  158. vg: &fakeVersionGetter{
  159. clusterVersion: constants.MinimumControlPlaneVersion.WithPatch(3).String(),
  160. kubeletVersion: constants.MinimumKubeletVersion.WithPatch(3).String(),
  161. kubeadmVersion: constants.CurrentKubernetesVersion.WithPreRelease("beta.1").String(),
  162. },
  163. newK8sVersion: constants.CurrentKubernetesVersion.WithPreRelease("beta.1").String(),
  164. allowRCs: true,
  165. expectedSkippableErrs: 1,
  166. },
  167. {
  168. name: "the user should not be able to upgrade to an release candidate version if they haven't opted into that",
  169. vg: &fakeVersionGetter{
  170. clusterVersion: constants.MinimumControlPlaneVersion.WithPatch(3).String(),
  171. kubeletVersion: constants.MinimumKubeletVersion.WithPatch(3).String(),
  172. kubeadmVersion: constants.CurrentKubernetesVersion.WithPreRelease("rc.1").String(),
  173. },
  174. newK8sVersion: constants.CurrentKubernetesVersion.WithPreRelease("rc.1").String(),
  175. expectedSkippableErrs: 1,
  176. },
  177. {
  178. name: "the user can't use a newer minor version of kubeadm to upgrade an older version of kubeadm",
  179. vg: &fakeVersionGetter{
  180. clusterVersion: constants.MinimumControlPlaneVersion.WithPatch(3).String(),
  181. kubeletVersion: constants.MinimumKubeletVersion.WithPatch(3).String(),
  182. kubeadmVersion: constants.CurrentKubernetesVersion.String(),
  183. },
  184. newK8sVersion: constants.MinimumControlPlaneVersion.WithPatch(6).String(),
  185. expectedSkippableErrs: 1, // can't upgrade old k8s with newer kubeadm
  186. },
  187. {
  188. name: "build release supported at MinimumControlPlaneVersion",
  189. vg: &fakeVersionGetter{
  190. clusterVersion: constants.MinimumControlPlaneVersion.String(),
  191. kubeletVersion: constants.MinimumControlPlaneVersion.String(),
  192. kubeadmVersion: constants.MinimumControlPlaneVersion.WithBuildMetadata("build").String(),
  193. },
  194. newK8sVersion: constants.MinimumControlPlaneVersion.WithBuildMetadata("build").String(),
  195. },
  196. }
  197. for _, rt := range tests {
  198. t.Run(rt.name, func(t *testing.T) {
  199. newK8sVer, err := version.ParseSemantic(rt.newK8sVersion)
  200. if err != nil {
  201. t.Fatalf("couldn't parse version %s: %v", rt.newK8sVersion, err)
  202. }
  203. actualSkewErrs := EnforceVersionPolicies(rt.vg, rt.newK8sVersion, newK8sVer, rt.allowExperimental, rt.allowRCs)
  204. if actualSkewErrs == nil {
  205. // No errors were seen. Report unit test failure if we expected to see errors
  206. if rt.expectedMandatoryErrs+rt.expectedSkippableErrs > 0 {
  207. t.Errorf("failed TestEnforceVersionPolicies\n\texpected errors but got none")
  208. }
  209. // Otherwise, just move on with the next test
  210. return
  211. }
  212. if len(actualSkewErrs.Skippable) != rt.expectedSkippableErrs {
  213. t.Errorf("failed TestEnforceVersionPolicies\n\texpected skippable errors: %d\n\tgot skippable errors: %d\n%#v\n%#v", rt.expectedSkippableErrs, len(actualSkewErrs.Skippable), *rt.vg, actualSkewErrs)
  214. }
  215. if len(actualSkewErrs.Mandatory) != rt.expectedMandatoryErrs {
  216. t.Errorf("failed TestEnforceVersionPolicies\n\texpected mandatory errors: %d\n\tgot mandatory errors: %d\n%#v\n%#v", rt.expectedMandatoryErrs, len(actualSkewErrs.Mandatory), *rt.vg, actualSkewErrs)
  217. }
  218. })
  219. }
  220. }