Bryan Boreham
c6d0d140a4
Use newest manifest in k8s tests
2020-12-17 12:49:27 +00:00
Bryan Boreham
414cbfb838
Simplify Kubernetes externalTrafficPolicy:local test
...
There's no point stopping and starting the daemons now "no-masq-local"
is the default.
2020-08-27 15:20:04 +00:00
Bryan Boreham
4d7e9931f9
Remove NO_MASQ_LOCAL setting from test 840
...
now it's the default
2020-08-04 16:21:30 +00:00
Murali Reddy
ce9d05e0bd
Allow kubeadm to install on nodes with 1 CPU, for smoke tests
2020-07-31 16:29:41 +00:00
Bryan Boreham
d45579bf82
Allow time for network policy changes to take effect
...
Also change from waiting longer to polling until connections are
established after restarting Weave Net.
2020-05-29 19:59:13 +00:00
Peeyush Gupta
991945081a
Move daemonset API to apps/v1
2019-08-29 13:57:16 +05:30
Murali Reddy
e0359a32f2
Merge pull request #3367 from weaveworks/issues/3168-ingress-ipblock
...
Add ipBlock support for Ingress netpol
2018-08-16 13:24:47 +05:30
Martynas Pumputis
aec8756151
npc: Add integration test case for ingress.ipBlock
2018-08-03 17:17:50 +02:00
Martynas Pumputis
b8bb7d7696
Sleep more in the 840 smoke test
2018-08-03 10:37:59 +02:00
Bryan Boreham
44e0c6add7
Try to fix failing test 840
2018-07-30 10:19:28 +00:00
Martynas Pumputis
07d31a8558
npc: Get rid of the legacy netpol
2018-07-24 10:06:55 +02:00
Martynas Pumputis
dee24aec65
npc: Add integration test for egress
...
Also, install dig (bind-tools) in the network-tester image.
2018-07-24 10:06:23 +02:00
Martynas Pumputis
be8298926a
npc: Pass --use-legacy-netpol to weaver in 840
2018-07-24 10:06:23 +02:00
Munro, Louis
b262a1eedc
Fix xtables.lock race condition between weave and kube-proxy.
...
Fixes #3351
2018-07-22 13:12:00 -04:00
Bryan Boreham
32a92a4695
Add --force flag to kubeadm reset
2018-06-28 10:26:09 +00:00
Martynas Pumputis
d15439aeac
Merge remote-tracking branch 'origin/2.3'
2018-06-11 16:39:03 +02:00
Martynas Pumputis
45a9ea666e
Add k8s integration test case for preserving client IP addr
...
Also, increase timeout for smoke tests to 360 sec.
2018-06-04 14:08:24 +02:00
Bryan Boreham
791d9aecfc
Extend k8s test to cover namespaceSelector and >10 Namespaces
2018-05-25 17:24:22 +00:00
Bryan Boreham
519c5d686a
Remove test for k8s 1.6 which breaks on 1.10
2018-04-04 12:26:18 +01:00
Martynas Pumputis
4261777613
Remove "-j KUBESERVICES" during teardown in 840 smoke test
...
Remove the rule to ensure that api-server is not accessible while
kube-proxy is not ready.
Otherwise, we have a race between "-j KUBE-FORWARD" and "-j WEAVE-NPC"
which makes the NodePort isolation test case to fail.
2018-01-29 16:20:22 +01:00
Martynas Pumputis
c46e3e8cf7
Skip CA verification in k8s smoke tests
2018-01-29 16:20:22 +01:00
Martynas Pumputis
180d554205
Do not pin k8s vsn in 840 smoke test
2018-01-29 16:20:22 +01:00
Bryan Boreham
4d5172f67e
Run test with Kubernetes 1.8.5 and --cluster-cidr
2018-01-11 15:24:25 +00:00
Bryan Boreham
6f01c31458
Extend kubernetes test to nodePort and virtual IP
2018-01-11 15:24:25 +00:00
Martynas Pumputis
cacc190764
npc: Extend NetworkPolicy test cases in 840
...
- Add a test case for default allow all ingress traffic.
- Fix misleading comment.
2017-11-13 09:40:07 +02:00
Martynas Pumputis
b605b832ed
npc: Extend k8s NetworkPolicy smoke tests
...
- Test that pods not matching ingress rules are not able to access
the nettest pods.
- Test upgrading of NPC (from legacy to non-legacy).
- Test new semantics of k8s netpol.
2017-11-07 14:55:03 +02:00
Bryan Boreham
c16653a396
Mount iptables lock file in weave-kube ( #3134 )
...
Mount iptables lock file in weave-kube
iptables uses the file `/run/xtables.lock` so that if changes are
under way, another instance of the iptables command can wait till it
is finished.
We need to mount the lock file from the host to the container in order
for this mechanism to work at all.
Note we rely on kubelet touching the file before running any pods -
see https://github.com/kubernetes/kubernetes/pull/47212
2017-10-03 14:52:49 +01:00
Bryan Boreham
527bcffe3b
Extend weave-kube smoke test: add a policy with blank 'from'
...
Per issue #3095 this crashes the commenting code.
Also added check to see if the pods are still running.
2017-08-23 09:42:51 +00:00
Bryan Boreham
b86fc67adf
Extend test to include a network policy
2017-06-22 14:16:53 +00:00
Bryan Boreham
31a4657467
Update COVERAGE sed to latest daemonset which has nonempty env
2017-06-12 13:55:21 +00:00
Marc CARRE
067ce6de9f
Update Weave-Kube daemonset YAML files using Launch Generator.
...
Note that given the YAML's structure is different from previous version, indentation of `COVERAGE_ARGS` had to change (+4 whitespaces to each line).
Commands used:
```
$ curl -fsS https://frontend.dev.weave.works/k8s/v1.5/net?v=latest > prog/weave-kube/weave-daemonset.yaml
$ curl -fsS https://frontend.dev.weave.works/k8s/v1.6/net?v=latest > prog/weave-kube/weave-daemonset-k8s-1.6.yaml
```
Annotations removed from Launch Generator's files:
```
annotations:
cloud.weave.works/launcher-info: |-
{
"server-version": "master-050965d",
"original-request": {
"url": "/k8s/v1.6/net?v=latest",
"date": "Thu May 25 2017 13:16:43 GMT+0000 (UTC)"
},
"email-address": "support@weave.works "
}
```
and
```
annotations:
cloud.weave.works/launcher-info: |-
{
"server-version": "master-050965d",
"original-request": {
"url": "/k8s/v1.5/net?v=latest",
"date": "Thu May 25 2017 13:16:43 GMT+0000 (UTC)"
},
"email-address": "support@weave.works "
}
```
2017-05-26 14:19:26 +01:00
Bryan Boreham
508b424234
Add test for outward traffic from weave-kube
2017-05-19 15:16:02 +00:00
Bryan Boreham
535e22e5f8
Wait for nodes to be ready before starting pods
...
Otherwise we can schedule all pods on the same node, which isn't such a good test
2017-05-19 11:47:57 +00:00
Bryan Boreham
348a926af4
Use network-tester image in Kubernetes test
2017-05-19 11:47:57 +00:00
Bryan Boreham
66293e8caa
Factor out 'wait_for_x' loop to reduce duplication
2017-05-19 11:47:57 +00:00
Bryan Boreham
5e290aa11f
Don't halt kubernetes test script if 'weave expose' fails
...
it's better to carry on so k8s gets cleaned down
2017-04-11 16:31:52 +00:00
Bryan Boreham
74a7bef472
Use 'kubeadm reset' instead of replicating it
2017-04-10 09:02:45 +00:00
Bryan Boreham
fc78bf4d11
Update test script to work with kubeadm 1.6
2017-04-10 09:02:45 +00:00
Marc CARRE
3e030f7971
Merge branch '1.9'
2017-04-06 14:50:21 +01:00
Marc CARRE
520a72c8e6
Lock kubeadm's Kubernetes version.
...
Without this commit, `kubeadm` typically upgrades whichever version of Kubernetes is installed, sometimes leading to conflicts in between components' version.
This fixes the issue behind #2876 and should avoid build failures like [weave/8373](https://circleci.com/gh/weaveworks/weave/8373 ).
2017-04-06 13:49:48 +01:00
Marc CARRE
98fec7e5aa
Revert "Disable temporary 840 smoke tests"
...
This reverts commit b687484dda .
2017-04-06 10:43:56 +01:00
Martynas Pumputis
b687484dda
Disable temporary 840 smoke tests
...
To trigger doc publishing
2017-03-30 17:45:20 +01:00
Bryan Boreham
f9f3b18ce4
Test whether non-weave ipsets get blown away
2017-03-14 17:56:59 +00:00
Marc CARRE
673d0af97d
Add failing test catching defunct launch.sh processses.
...
Reproduces issue #2836 , i.e.:
- during initialisation:
```
$ ps auxf
[...]
root 1380 0.4 1.6 879660 60732 ? Ssl Mar13 5:54 /usr/bin/docker daemon -H fd:// -H unix:///
root 1664 0.0 0.4 502116 18540 ? Ssl Mar13 0:06 \_ docker-containerd -l /var/run/docker/li
root 12615 0.0 0.1 200496 5424 ? Sl 14:38 0:00 \_ docker-containerd-shim c5637e5bbdcb
root 12629 6.2 1.6 296400 62312 ? Ssl 14:38 0:00 | \_ /home/weave/weaver --port=6783
root 12910 0.0 0.0 1524 68 ? S 14:38 0:00 | \_ /bin/sh /home/weave/launch.
root 13002 0.0 0.0 1772 1232 ? S 14:38 0:00 | \_ /bin/sh /home/weave/wea
root 13027 0.0 0.0 1772 320 ? S 14:38 0:00 | \_ /bin/sh /home/weave
root 13028 0.0 0.0 14656 2708 ? S 14:38 0:00 | \_ curl -o /tmp/we
[...]
```
- after initialisation:
```
$ ps auxf
[...]
root 1380 0.4 1.6 879660 60732 ? Ssl Mar13 5:54 /usr/bin/docker daemon -H fd:// -H unix:///
root 1664 0.0 0.4 502116 18540 ? Ssl Mar13 0:06 \_ docker-containerd -l /var/run/docker/li
root 12615 0.0 0.1 200496 5424 ? Sl 14:38 0:00 \_ docker-containerd-shim c5637e5bbdcb
root 12629 3.5 1.6 297460 63340 ? Ssl 14:38 0:00 | \_ /home/weave/weaver --port=6783
root 12910 0.0 0.0 0 0 ? Z 14:38 0:00 | \_ [launch.sh] <defunct>
[...]
```
Sample output:
```
test #5 "run_on mct-0.us-central1-a.weave-net ps aux | grep -c '[d]efunct'" failed:
expected "0"
got "1"
test #6 "run_on mct-1.us-central1-a.weave-net ps aux | grep -c '[d]efunct'" failed:
expected "0"
got "1"
test #7 "run_on mct-2.us-central1-a.weave-net ps aux | grep -c '[d]efunct'" failed:
expected "0"
got "1"
3 of 8 tests failed in 62.012s.
```
2017-03-14 14:39:34 +00:00
Marc CARRE
487ebfb514
Increased timeout for test #840 .
...
Reason: test is periodically failing because of the timeout being too aggressive, especially when using Google Cloud Platform together with Terraform and Ansible.
2017-02-08 14:15:02 +00:00
Marc CARRE
fe75047988
weave-daemonset.yaml is now referred to using relative paths.
2017-01-09 10:08:38 +00:00
Marc CARRE
0dff07dc8b
Scripts now source dependencies using relative paths (previously breaking make depending on current directory).
2016-12-13 16:00:37 +00:00
Bryan Boreham
dff14c19f8
Don't remove base CNI plugins in test
2016-11-23 10:38:23 +00:00
Bryan Boreham
cbec624cd8
Remove CNI files when tearing down Kubernetes
2016-11-21 16:08:50 +00:00
Bryan Boreham
10baab38d3
Extend smoke-test to include pinging
2016-11-14 12:37:42 +00:00