package e2e import ( "errors" "fmt" "os" "testing" "time" . "github.com/onsi/ginkgo" . "github.com/onsi/gomega" "k8s.io/apimachinery/pkg/apis/meta/v1/unstructured" ) var ( // Namespace GVR nsGVR = GetGVR("", "v1", "namespaces") // Chaos service account GVR saGVR = GetGVR("", "v1", "serviceaccounts") // Role GVR rGVR = GetGVR("rbac.authorization.k8s.io", "v1", "roles") // RoleBinding GVR rbGVR = GetGVR("rbac.authorization.k8s.io", "v1", "rolebindings") // PodCPUHogExperiment GVR cpuGVR = GetGVR("litmuschaos.io", "v1alpha1", "chaosexperiments") // ChaosEngine GVR ceGVR = GetGVR("litmuschaos.io", "v1alpha1", "chaosengines") // Chaos Result GVR crGVR = GetGVR("litmuschaos.io", "v1alpha1", "chaosresults") // Cluster Policy GVR clPolGVR = GetGVR("kyverno.io", "v1", "clusterpolicies") // Kyverno disallow_cri_sock_mount Policy GVR dcsmPolGVR = GetGVR("", "v1", "pods") // ClusterPolicy Namespace clPolNS = "" // Namespace Name // Hardcoded in YAML Definition nspace = "test-litmus" ) func Test_Pod_CPU_Hog(t *testing.T) { RegisterTestingT(t) if os.Getenv("E2E") == "" { t.Skip("Skipping E2E Test") } // Generate E2E Client e2eClient, err := NewE2EClient() Expect(err).To(BeNil()) for _, resource := range PodCPUHogTest.TestData { // CleanUp Resources By(fmt.Sprintf("Cleaning Cluster Policies in %s", nspace)) e2eClient.CleanClusterPolicies(clPolGVR) //Clean Cluster Policy By(fmt.Sprintf("Deleting Namespace : %s", nspace)) e2eClient.DeleteClusteredResource(nsGVR, nspace) // Clear Namespace e2eClient.DeleteNamespacedResource(dcsmPolGVR, nspace, resource.testResourceName) GetWithRetry(1*time.Second, 15, func() error { // Wait Till Deletion of Namespace _, err := e2eClient.GetClusteredResource(nsGVR, nspace) if err != nil { return nil } return errors.New("Deleting Namespace") }) // Create Namespace By(fmt.Sprintf("Creating Namespace %s", saGVR)) _, err = e2eClient.CreateClusteredResourceYaml(nsGVR, LitmusChaosnamespaceYaml) Expect(err).NotTo(HaveOccurred()) GetWithRetry(1*time.Second, 15, func() error { // Wait Till Creation of Namespace _, err := e2eClient.GetClusteredResource(nsGVR, resource.namespace) if err != nil { return err } return nil }) // ================== Litmus Chaos Experiment ================== // Prepare chaosServiceAccount By(fmt.Sprintf("\nPrepareing Chaos Service Account in %s", nspace)) _, err = e2eClient.CreateNamespacedResourceYaml(saGVR, nspace, "", ChaosServiceAccountYaml) Expect(err).NotTo(HaveOccurred()) _, err = e2eClient.CreateNamespacedResourceYaml(rGVR, nspace, "", ChaosRoleYaml) Expect(err).NotTo(HaveOccurred()) _, err = e2eClient.CreateNamespacedResourceYaml(rbGVR, nspace, "", ChaosRoleBindingYaml) Expect(err).NotTo(HaveOccurred()) // Deploy Pod CPU Hog Experiment By(fmt.Sprintf("\nInstalling Litmus Chaos Experiment in %s", nspace)) _, err = e2eClient.CreateNamespacedResourceYaml(cpuGVR, nspace, "", PodCPUHogExperimentYaml) Expect(err).NotTo(HaveOccurred()) // Prepare Chaos Engine By(fmt.Sprintf("\nCreating ChaosEngine Resource in %s", nspace)) _, err = e2eClient.CreateNamespacedResourceYaml(ceGVR, nspace, "", ChaosEngineYaml) Expect(err).NotTo(HaveOccurred()) By(fmt.Sprintf("\nMonitoring status from ChaosResult in %s", nspace)) GetWithRetry(1*time.Second, 120, func() error { // Wait Till preparing Chaos engine chaosresult, err := e2eClient.GetNamespacedResource(crGVR, nspace, "kind-chaos-pod-cpu-hog") if err != nil { return fmt.Errorf("Unable to fatch ChaosResult: %v", err) } chaosVerdict, _, err := unstructured.NestedString(chaosresult.UnstructuredContent(), "status", "experimentStatus", "verdict") if err != nil { By(fmt.Sprintf("\nUnable to fatch the status.verdict from ChaosResult: %v", err)) } By(fmt.Sprintf("\nChaos verdict %s", chaosVerdict)) if chaosVerdict == "Pass" { return nil } return errors.New("Chaos result is not passed") }) // Create disallow_cri_sock_mount policy By(fmt.Sprintf("\nCreating Enforce Policy in %s", clPolNS)) _, err = e2eClient.CreateNamespacedResourceYaml(clPolGVR, clPolNS, "", DisallowAddingCapabilitiesYaml) Expect(err).NotTo(HaveOccurred()) // Deploy disallow_cri_sock_mount policy By(fmt.Sprintf("\nDeploying Enforce Policy in %s", nspace)) _, err = e2eClient.CreateNamespacedResourceYaml(dcsmPolGVR, nspace, "", resource.manifest) Expect(err).To(HaveOccurred()) //CleanUp Resources e2eClient.CleanClusterPolicies(clPolGVR) //Clean Cluster Policy e2eClient.CleanClusterPolicies(saGVR) e2eClient.DeleteClusteredResource(nsGVR, nspace) // Clear Namespace GetWithRetry(1*time.Second, 15, func() error { // Wait Till Deletion of Namespace _, err := e2eClient.GetClusteredResource(nsGVR, nspace) if err != nil { return nil } return errors.New("Deleting Namespace") }) By(fmt.Sprintf("Test %s Completed. \n\n\n", PodCPUHogTest.TestName)) } }