|
|
|
|
# xDS Kubernetes Interop Tests
|
|
|
|
|
|
|
|
|
|
Proxyless Security Mesh Interop Tests executed on Kubernetes.
|
|
|
|
|
|
|
|
|
|
### Experimental
|
|
|
|
|
Work in progress. Internal APIs may and will change. Please refrain from making
|
|
|
|
|
changes to this codebase at the moment.
|
|
|
|
|
|
|
|
|
|
### Stabilization roadmap
|
|
|
|
|
- [ ] Replace retrying with tenacity
|
|
|
|
|
- [ ] Generate namespace for each test to prevent resource name conflicts and
|
|
|
|
|
allow running tests in parallel
|
|
|
|
|
- [ ] Security: run server and client in separate namespaces
|
|
|
|
|
- [ ] Make framework.infrastructure.gcp resources [first-class citizen](https://en.wikipedia.org/wiki/First-class_citizen),
|
|
|
|
|
support simpler CRUD
|
|
|
|
|
- [ ] Security: manage `roles/iam.workloadIdentityUser` role grant lifecycle
|
|
|
|
|
for dynamically-named namespaces
|
|
|
|
|
- [ ] Restructure `framework.test_app` and `framework.xds_k8s*` into a module
|
|
|
|
|
containing xDS-interop-specific logic
|
|
|
|
|
- [ ] Address inline TODOs in code
|
|
|
|
|
- [ ] Improve README.md documentation, explain helpers in bin/ folder
|
|
|
|
|
|
|
|
|
|
## Installation
|
|
|
|
|
|
|
|
|
|
#### Requirements
|
|
|
|
|
1. Python v3.6+
|
|
|
|
|
2. [Google Cloud SDK](https://cloud.google.com/sdk/docs/install)
|
|
|
|
|
|
|
|
|
|
#### Configure GKE cluster access
|
|
|
|
|
|
|
|
|
|
```sh
|
|
|
|
|
# Update gloud sdk
|
|
|
|
|
gcloud -q components update
|
|
|
|
|
|
|
|
|
|
# Configuring GKE cluster access for kubectl
|
|
|
|
|
gcloud container clusters get-credentials "your_gke_cluster_name" --zone "your_gke_cluster_zone"
|
|
|
|
|
|
|
|
|
|
# Save generated kube context name
|
|
|
|
|
KUBE_CONTEXT="$(kubectl config current-context)"
|
|
|
|
|
```
|
|
|
|
|
|
|
|
|
|
#### Install python dependencies
|
|
|
|
|
|
|
|
|
|
```sh
|
|
|
|
|
# Create python virtual environment
|
|
|
|
|
python3.6 -m venv venv
|
|
|
|
|
|
|
|
|
|
# Activate virtual environment
|
|
|
|
|
. ./venv/bin/activate
|
|
|
|
|
|
|
|
|
|
# Install requirements
|
|
|
|
|
pip install -r requirements.txt
|
|
|
|
|
|
|
|
|
|
# Generate protos
|
|
|
|
|
python -m grpc_tools.protoc --proto_path=../../../ \
|
|
|
|
|
--python_out=. --grpc_python_out=. \
|
|
|
|
|
src/proto/grpc/testing/empty.proto \
|
|
|
|
|
src/proto/grpc/testing/messages.proto \
|
|
|
|
|
src/proto/grpc/testing/test.proto
|
|
|
|
|
```
|
|
|
|
|
|
|
|
|
|
# Basic usage
|
|
|
|
|
|
|
|
|
|
### xDS Baseline Tests
|
|
|
|
|
|
|
|
|
|
Test suite meant to confirm that basic xDS features work as expected.
|
|
|
|
|
Executing it before other test suites will help to identify whether test failure
|
|
|
|
|
related to specific features under test, or caused by unrelated infrastructure
|
|
|
|
|
disturbances.
|
|
|
|
|
|
|
|
|
|
```sh
|
|
|
|
|
# Help
|
|
|
|
|
python -m tests.baseline_test --help
|
|
|
|
|
python -m tests.baseline_test --helpful
|
|
|
|
|
|
|
|
|
|
# Run on grpc-testing cluster
|
|
|
|
|
python -m tests.baseline_test \
|
|
|
|
|
--flagfile="config/grpc-testing.cfg" \
|
|
|
|
|
--kube_context="${KUBE_CONTEXT}" \
|
|
|
|
|
--server_image="gcr.io/grpc-testing/xds-k8s-test-server-java:latest" \
|
|
|
|
|
--client_image="gcr.io/grpc-testing/xds-k8s-test-client-java:latest" \
|
|
|
|
|
```
|
|
|
|
|
|
|
|
|
|
### xDS Security Tests
|
|
|
|
|
```sh
|
|
|
|
|
# Help
|
|
|
|
|
python -m tests.security_test --help
|
|
|
|
|
python -m tests.security_test --helpful
|
|
|
|
|
|
|
|
|
|
# Run on grpc-testing cluster
|
|
|
|
|
python -m tests.security_test \
|
|
|
|
|
--flagfile="config/grpc-testing.cfg" \
|
|
|
|
|
--kube_context="${KUBE_CONTEXT}" \
|
|
|
|
|
--server_image="gcr.io/grpc-testing/xds-k8s-test-server-java:latest" \
|
|
|
|
|
--client_image="gcr.io/grpc-testing/xds-k8s-test-client-java:latest" \
|
|
|
|
|
```
|
