tests

Documentation

Index

• func CiliumHealth() check.Scenario
• func ClientToClient() check.Scenario
• func Dummy(name string) check.Scenario
• func EgressGateway() check.Scenario
• func FromCIDRToPod() check.Scenario
• func NetperfPodtoPod(n string) check.Scenario
• func NodeToNodeEncryption() check.Scenario
• func OutsideToNodePort() check.Scenario
• func PodToCIDR(opts ...RetryOption) check.Scenario
• func PodToExternalWorkload() check.Scenario
• func PodToHost() check.Scenario
• func PodToHostPort() check.Scenario
• func PodToIngress(opts ...Option) check.Scenario
• func PodToLocalNodePort() check.Scenario
• func PodToPod(opts ...Option) check.Scenario
• func PodToPodEncryption() check.Scenario
• func PodToPodWithEndpoints(opts ...Option) check.Scenario
• func PodToRemoteNodePort() check.Scenario
• func PodToService(opts ...Option) check.Scenario
• func PodToWorld(opts ...RetryOption) check.Scenario
• func PodToWorld2() check.Scenario
• func PodToWorldWithTLSIntercept(curlOpts ...string) check.Scenario
• type Option
  • func WithDestinationLabelsOption(destinationLabels map[string]string) Option
  • func WithMethod(method string) Option
  • func WithPath(path string) Option
  • func WithSourceLabelsOption(sourceLabels map[string]string) Option
• type RetryOption
  • func WithRetryAll() RetryOption
  • func WithRetryDestIP(ip string) RetryOption
  • func WithRetryDestPort(port uint32) RetryOption
  • func WithRetryPodLabel(name, val string) RetryOption

Functions

func CiliumHealth

func CiliumHealth() check.Scenario

func ClientToClient

func ClientToClient() check.Scenario

ClientToClient sends an ICMP packet from each client Pod to each client Pod in the test context.

func Dummy

func Dummy(name string) check.Scenario

func EgressGateway

func EgressGateway() check.Scenario

EgressGateway is a test case which, given the cegp-sample CiliumEgressGatewayPolicy targeting: - a couple of client pods (kind=client) as source - the 0.0.0.0/0 destination CIDR - kind-worker2 as gateway node

ensures that traffic from both clients reaches the echo-external service with the egress IP of the gateway node.

func FromCIDRToPod

func FromCIDRToPod() check.Scenario

FromCIDRToPod generates HTTP request from each node without Cilium to the echo pods within the Cilium / K8s cluster.

func NetperfPodtoPod

func NetperfPodtoPod(n string) check.Scenario

Network Performance

func NodeToNodeEncryption

func NodeToNodeEncryption() check.Scenario

func OutsideToNodePort

func OutsideToNodePort() check.Scenario

OutsideToNodePort sends an HTTP request from client pod running on a node w/o Cilium to NodePort services.

func PodToCIDR

func PodToCIDR(opts ...RetryOption) check.Scenario

PodToCIDR sends an HTTPS request from each client Pod to ExternalIP and ExternalOtherIP

func PodToExternalWorkload

func PodToExternalWorkload() check.Scenario

func PodToHost

func PodToHost() check.Scenario

PodToHost sends an ICMP ping from all client Pods to all nodes in the test context.

func PodToHostPort

func PodToHostPort() check.Scenario

PodToHostPort sends an HTTP request from all client Pods to all echo Services' HostPorts.

func PodToIngress

func PodToIngress(opts ...Option) check.Scenario

PodToIngress sends an HTTP request from all client Pods to all Ingress service in the test context.

func PodToLocalNodePort

func PodToLocalNodePort() check.Scenario

PodToLocalNodePort sends an HTTP request from all client Pods to all echo Services' NodePorts, but only on the same node as the client Pods.

func PodToPod

func PodToPod(opts ...Option) check.Scenario

PodToPod generates one HTTP request from each client pod to each echo (server) pod in the test context. The remote Pod is contacted directly, no DNS is involved.

func PodToPodEncryption

func PodToPodEncryption() check.Scenario

PodToPodEncryption is a test case which checks the following:

• There is a connectivity between pods on different nodes when any encryption mode is on (either WireGuard or IPsec).
• No unencrypted packet is leaked.

The checks are implemented by curl'ing a server pod from a client pod, and then inspecting tcpdump captures from the client pod's node.

func PodToPodWithEndpoints

func PodToPodWithEndpoints(opts ...Option) check.Scenario

func PodToRemoteNodePort

func PodToRemoteNodePort() check.Scenario

PodToRemoteNodePort sends an HTTP request from all client Pods to all echo Services' NodePorts, but only to other nodes.

func PodToService

func PodToService(opts ...Option) check.Scenario

PodToService sends an HTTP request from all client Pods to all Services in the test context.

func PodToWorld

func PodToWorld(opts ...RetryOption) check.Scenario

PodToWorld sends multiple HTTP(S) requests to ExternalTarget from each client Pods.

func PodToWorld2

func PodToWorld2() check.Scenario

PodToWorld2 sends an HTTPS request to cilium.io from from random client Pods.

func PodToWorldWithTLSIntercept

func PodToWorldWithTLSIntercept(curlOpts ...string) check.Scenario

PodToWorldWithTLSIntercept sends an HTTPS request to one.one.one.one (default value of ExternalTarget) from from random client

Types

type Option

type Option func(*labelsOption)

func WithDestinationLabelsOption

func WithDestinationLabelsOption(destinationLabels map[string]string) Option

func WithMethod

func WithMethod(method string) Option

func WithPath

func WithPath(path string) Option

func WithSourceLabelsOption

func WithSourceLabelsOption(sourceLabels map[string]string) Option

type RetryOption

type RetryOption func(*retryCondition)

func WithRetryAll

func WithRetryAll() RetryOption

WithRetryAll sets all condition, returns retry options in every case

func WithRetryDestIP

func WithRetryDestIP(ip string) RetryOption

WithRetryDestIP sets ip address condition

func WithRetryDestPort

func WithRetryDestPort(port uint32) RetryOption

WithRetryDestPort sets port condition

func WithRetryPodLabel

func WithRetryPodLabel(name, val string) RetryOption

WithRetryPodLabel sets pod label condition