Progress [7/7]

• APISnoop org-flow : PodProxyOptionsTest.org
• test approval issue : kubernetes/kubernetes#
• test pr : kuberenetes/kubernetes#94786
• N HOLD: Limit Apiserver Proxy Redirects #95128 needs to be resolved before a number of e2e tests can be completed.
• two weeks soak start date : testgrid-link 23 Oct 2021
• two weeks soak end date : 5 Nov 2021
• test promotion pr : kubernetes/kubernetes Promote Pod- & ServiceProxy Test to Conformance - +12 endpoint coverage #106880

Identifying an untested feature Using APISnoop

According to this APIsnoop query, there are still some remaining PodProxyOptions endpoints which are untested.

SELECT
  operation_id,
  -- k8s_action,
  -- path,
  description,
  kind
  FROM untested_stable_core_endpoints
  -- FROM untested_stable_endpoints
  where path not like '%volume%'
  and kind like 'PodProxyOptions'
  and operation_id like '%Proxy'
 ORDER BY kind,operation_id desc
 LIMIT 25
       ;

              operation_id              |               description                |      kind
----------------------------------------|------------------------------------------|-----------------
 connectCoreV1PutNamespacedPodProxy     | connect PUT requests to proxy of Pod     | PodProxyOptions
 connectCoreV1PostNamespacedPodProxy    | connect POST requests to proxy of Pod    | PodProxyOptions
 connectCoreV1PatchNamespacedPodProxy   | connect PATCH requests to proxy of Pod   | PodProxyOptions
 connectCoreV1OptionsNamespacedPodProxy | connect OPTIONS requests to proxy of Pod | PodProxyOptions
 connectCoreV1HeadNamespacedPodProxy    | connect HEAD requests to proxy of Pod    | PodProxyOptions
 connectCoreV1GetNamespacedPodProxy     | connect GET requests to proxy of Pod     | PodProxyOptions
 connectCoreV1DeleteNamespacedPodProxy  | connect DELETE requests to proxy of Pod  | PodProxyOptions
(7 rows)

As the Apiserver proxy requires a trailing slash #4958 these endpoints are redirected to their related PodProxyWithPath endpoints.

API Reference and feature documentation

• Kubernetes API Reference Docs
• Kubernetes API: v1.19 Pod v1 core Proxy Operations
• client-go

The mock test

Test outline

1. Create pod and confirm that the pod is running so that the tested endpoints can be found.

2. Create a http.Client that checks for a redirect so that status code can be checked

3. Loop through all http verbs, testing that the pod proxy endpoint returns the required 301 status code.

Test the functionality in Go

• e2e test: "proxy connection returns a series of 301 redirections for a pod"

Verifying increase in coverage with APISnoop

Discover useragents:

select distinct useragent from audit_event where bucket='apisnoop' and useragent not like 'kube%' and useragent not like 'coredns%' and useragent not like 'kindnetd%' and useragent like 'live%';

List endpoints hit by the test:

select * from endpoints_hit_by_new_test where useragent like 'live%';

Display endpoint coverage change:

select * from projected_change_in_coverage;

   category    | total_endpoints | old_coverage | new_coverage | change_in_number
---------------|-----------------|--------------|--------------|------------------
 test_coverage |             438 |          183 |          183 |                0
(1 row)

Final notes

If a test with these calls gets merged, test coverage will go up by 7 points

This test is also created with the goal of conformance promotion.

After the merger of #95128 the test was updated to cover both the Pod and Service Proxy endpoint. Therefore If a test with these calls gets merged, test coverage will go up by 12 points

connectCoreV1DeleteNamespacedPodProxy
connectCoreV1DeleteNamespacedServiceProxy
connectCoreV1OptionsNamespacedPodProxy
connectCoreV1OptionsNamespacedServiceProxy
connectCoreV1PatchNamespacedPodProxy
connectCoreV1PatchNamespacedServiceProxy
connectCoreV1PostNamespacedPodProxy
connectCoreV1PostNamespacedServiceProxy
connectCoreV1PutNamespacedPodProxy
connectCoreV1PutNamespacedServiceProxy
connectCoreV1HeadNamespacedPodProxy
onnectCoreV1HeadNamespacedServiceProxy

/sig testing
/sig architecture
/area conformance