|
| 1 | +/* |
| 2 | + * Copyright The Kmesh Authors. |
| 3 | + * |
| 4 | + * Licensed under the Apache License, Version 2.0 (the "License"); |
| 5 | + * you may not use this file except in compliance with the License. |
| 6 | + * You may obtain a copy of the License at: |
| 7 | + * |
| 8 | + * http://www.apache.org/licenses/LICENSE-2.0 |
| 9 | + * |
| 10 | + * Unless required by applicable law or agreed to in writing, software |
| 11 | + * distributed under the License is distributed on an "AS IS" BASIS, |
| 12 | + * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. |
| 13 | + * See the License for the specific language governing permissions and |
| 14 | + * limitations under the License. |
| 15 | + */ |
| 16 | + |
| 17 | +package netns |
| 18 | + |
| 19 | +import ( |
| 20 | + "io/fs" |
| 21 | + "os" |
| 22 | + "path/filepath" |
| 23 | + "testing" |
| 24 | + "testing/fstest" |
| 25 | + |
| 26 | + "istio.io/istio/pkg/util/sets" |
| 27 | + corev1 "k8s.io/api/core/v1" |
| 28 | + metav1 "k8s.io/apimachinery/pkg/apis/meta/v1" |
| 29 | + "k8s.io/apimachinery/pkg/types" |
| 30 | +) |
| 31 | + |
| 32 | +func TestGetNodeNSpath(t *testing.T) { |
| 33 | + expected := "/host/proc/1/ns/net" |
| 34 | + result := GetNodeNSpath() |
| 35 | + |
| 36 | + if result != expected { |
| 37 | + t.Errorf("GetNodeNSpath() = %v, want %v", result, expected) |
| 38 | + } |
| 39 | +} |
| 40 | + |
| 41 | +func TestGetPodNSpath(t *testing.T) { |
| 42 | + tests := []struct { |
| 43 | + name string |
| 44 | + pod *corev1.Pod |
| 45 | + wantErr bool |
| 46 | + setup func() func() |
| 47 | + }{ |
| 48 | + { |
| 49 | + name: "valid pod with network namespace", |
| 50 | + pod: &corev1.Pod{ |
| 51 | + ObjectMeta: metav1.ObjectMeta{ |
| 52 | + UID: "test-uid-123", |
| 53 | + }, |
| 54 | + }, |
| 55 | + wantErr: true, // Will fail in test environment without proper /host/proc setup |
| 56 | + }, |
| 57 | + { |
| 58 | + name: "pod without UID", |
| 59 | + pod: &corev1.Pod{ |
| 60 | + ObjectMeta: metav1.ObjectMeta{}, |
| 61 | + }, |
| 62 | + wantErr: true, |
| 63 | + }, |
| 64 | + } |
| 65 | + |
| 66 | + for _, tt := range tests { |
| 67 | + t.Run(tt.name, func(t *testing.T) { |
| 68 | + if tt.setup != nil { |
| 69 | + cleanup := tt.setup() |
| 70 | + defer cleanup() |
| 71 | + } |
| 72 | + |
| 73 | + result, err := GetPodNSpath(tt.pod) |
| 74 | + if (err != nil) != tt.wantErr { |
| 75 | + t.Errorf("GetPodNSpath() error = %v, wantErr %v", err, tt.wantErr) |
| 76 | + return |
| 77 | + } |
| 78 | + |
| 79 | + if !tt.wantErr && result == "" { |
| 80 | + t.Error("GetPodNSpath() returned empty string for valid pod") |
| 81 | + } |
| 82 | + }) |
| 83 | + } |
| 84 | +} |
| 85 | + |
| 86 | +func TestBuiltinOrDir(t *testing.T) { |
| 87 | + tests := []struct { |
| 88 | + name string |
| 89 | + dir string |
| 90 | + }{ |
| 91 | + { |
| 92 | + name: "empty dir returns embedded FS", |
| 93 | + dir: "", |
| 94 | + }, |
| 95 | + { |
| 96 | + name: "non-empty dir returns DirFS", |
| 97 | + dir: "/tmp", |
| 98 | + }, |
| 99 | + } |
| 100 | + |
| 101 | + for _, tt := range tests { |
| 102 | + t.Run(tt.name, func(t *testing.T) { |
| 103 | + result := builtinOrDir(tt.dir) |
| 104 | + if result == nil { |
| 105 | + t.Error("builtinOrDir() returned nil") |
| 106 | + } |
| 107 | + }) |
| 108 | + } |
| 109 | +} |
| 110 | + |
| 111 | +func TestIsNotNumber(t *testing.T) { |
| 112 | + tests := []struct { |
| 113 | + name string |
| 114 | + r rune |
| 115 | + want bool |
| 116 | + }{ |
| 117 | + {name: "digit 0", r: '0', want: false}, |
| 118 | + {name: "digit 5", r: '5', want: false}, |
| 119 | + {name: "digit 9", r: '9', want: false}, |
| 120 | + {name: "letter a", r: 'a', want: true}, |
| 121 | + {name: "letter Z", r: 'Z', want: true}, |
| 122 | + {name: "special char", r: '-', want: true}, |
| 123 | + {name: "space", r: ' ', want: true}, |
| 124 | + } |
| 125 | + |
| 126 | + for _, tt := range tests { |
| 127 | + t.Run(tt.name, func(t *testing.T) { |
| 128 | + if got := isNotNumber(tt.r); got != tt.want { |
| 129 | + t.Errorf("isNotNumber(%c) = %v, want %v", tt.r, got, tt.want) |
| 130 | + } |
| 131 | + }) |
| 132 | + } |
| 133 | +} |
| 134 | + |
| 135 | +func TestIsProcess(t *testing.T) { |
| 136 | + tests := []struct { |
| 137 | + name string |
| 138 | + entry fs.DirEntry |
| 139 | + want bool |
| 140 | + }{ |
| 141 | + { |
| 142 | + name: "numeric directory", |
| 143 | + entry: createMockDirEntry("1234", true), |
| 144 | + want: true, |
| 145 | + }, |
| 146 | + { |
| 147 | + name: "non-numeric directory", |
| 148 | + entry: createMockDirEntry("proc", true), |
| 149 | + want: false, |
| 150 | + }, |
| 151 | + { |
| 152 | + name: "file with numeric name", |
| 153 | + entry: createMockDirEntry("1234", false), |
| 154 | + want: false, |
| 155 | + }, |
| 156 | + { |
| 157 | + name: "directory with mixed name", |
| 158 | + entry: createMockDirEntry("123abc", true), |
| 159 | + want: false, |
| 160 | + }, |
| 161 | + { |
| 162 | + name: "empty name directory", |
| 163 | + entry: createMockDirEntry("", true), |
| 164 | + want: true, // strings.IndexFunc returns -1 for empty string, which means no non-numeric chars found |
| 165 | + }, |
| 166 | + } |
| 167 | + |
| 168 | + for _, tt := range tests { |
| 169 | + t.Run(tt.name, func(t *testing.T) { |
| 170 | + if got := isProcess(tt.entry); got != tt.want { |
| 171 | + t.Errorf("isProcess() = %v, want %v", got, tt.want) |
| 172 | + } |
| 173 | + }) |
| 174 | + } |
| 175 | +} |
| 176 | + |
| 177 | +func TestProcessEntry(t *testing.T) { |
| 178 | + // Create a mock filesystem |
| 179 | + mockFS := fstest.MapFS{ |
| 180 | + "1234/ns/net": &fstest.MapFile{ |
| 181 | + Mode: 0644, |
| 182 | + }, |
| 183 | + "1234/cgroup": &fstest.MapFile{ |
| 184 | + Data: []byte("12:pids:/kubepods/pod123-456-789\n"), |
| 185 | + Mode: 0644, |
| 186 | + }, |
| 187 | + "5678/ns/net": &fstest.MapFile{ |
| 188 | + Mode: 0644, |
| 189 | + }, |
| 190 | + "5678/cgroup": &fstest.MapFile{ |
| 191 | + Data: []byte("12:pids:/kubepods/pod987-654-321\n"), |
| 192 | + Mode: 0644, |
| 193 | + }, |
| 194 | + } |
| 195 | + |
| 196 | + tests := []struct { |
| 197 | + name string |
| 198 | + entry fs.DirEntry |
| 199 | + filter types.UID |
| 200 | + netnsObserved sets.Set[uint64] |
| 201 | + wantErr bool |
| 202 | + wantResult string |
| 203 | + }{ |
| 204 | + { |
| 205 | + name: "non-process entry", |
| 206 | + entry: createMockDirEntry("test", true), |
| 207 | + filter: "test-uid", |
| 208 | + netnsObserved: sets.New[uint64](), |
| 209 | + wantErr: false, |
| 210 | + wantResult: "", |
| 211 | + }, |
| 212 | + { |
| 213 | + name: "process entry - numeric dir", |
| 214 | + entry: createMockDirEntry("1234", true), |
| 215 | + filter: "test-uid", |
| 216 | + netnsObserved: sets.New[uint64](), |
| 217 | + wantErr: true, // Will fail without proper mock setup |
| 218 | + wantResult: "", |
| 219 | + }, |
| 220 | + } |
| 221 | + |
| 222 | + for _, tt := range tests { |
| 223 | + t.Run(tt.name, func(t *testing.T) { |
| 224 | + result, err := processEntry(mockFS, tt.netnsObserved, tt.filter, tt.entry) |
| 225 | + |
| 226 | + if (err != nil) != tt.wantErr { |
| 227 | + t.Errorf("processEntry() error = %v, wantErr %v", err, tt.wantErr) |
| 228 | + return |
| 229 | + } |
| 230 | + |
| 231 | + if result != tt.wantResult { |
| 232 | + t.Errorf("processEntry() = %v, want %v", result, tt.wantResult) |
| 233 | + } |
| 234 | + }) |
| 235 | + } |
| 236 | +} |
| 237 | + |
| 238 | +func TestFindNetnsForPod(t *testing.T) { |
| 239 | + tests := []struct { |
| 240 | + name string |
| 241 | + pod *corev1.Pod |
| 242 | + wantErr bool |
| 243 | + setup func() (string, func()) |
| 244 | + }{ |
| 245 | + { |
| 246 | + name: "pod not found", |
| 247 | + pod: &corev1.Pod{ |
| 248 | + ObjectMeta: metav1.ObjectMeta{ |
| 249 | + UID: "nonexistent-uid", |
| 250 | + }, |
| 251 | + }, |
| 252 | + wantErr: true, |
| 253 | + }, |
| 254 | + } |
| 255 | + |
| 256 | + for _, tt := range tests { |
| 257 | + t.Run(tt.name, func(t *testing.T) { |
| 258 | + var cleanup func() |
| 259 | + if tt.setup != nil { |
| 260 | + _, cleanup = tt.setup() |
| 261 | + defer cleanup() |
| 262 | + } |
| 263 | + |
| 264 | + result, err := FindNetnsForPod(tt.pod) |
| 265 | + |
| 266 | + if (err != nil) != tt.wantErr { |
| 267 | + t.Errorf("FindNetnsForPod() error = %v, wantErr %v", err, tt.wantErr) |
| 268 | + return |
| 269 | + } |
| 270 | + |
| 271 | + if !tt.wantErr && result == "" { |
| 272 | + t.Error("FindNetnsForPod() returned empty string for valid pod") |
| 273 | + } |
| 274 | + }) |
| 275 | + } |
| 276 | +} |
| 277 | + |
| 278 | +// Helper function to create mock DirEntry |
| 279 | +type mockDirEntry struct { |
| 280 | + name string |
| 281 | + isDir bool |
| 282 | +} |
| 283 | + |
| 284 | +func (m mockDirEntry) Name() string { return m.name } |
| 285 | +func (m mockDirEntry) IsDir() bool { return m.isDir } |
| 286 | +func (m mockDirEntry) Type() fs.FileMode { return 0 } |
| 287 | +func (m mockDirEntry) Info() (fs.FileInfo, error) { return nil, nil } |
| 288 | + |
| 289 | +func createMockDirEntry(name string, isDir bool) fs.DirEntry { |
| 290 | + return mockDirEntry{name: name, isDir: isDir} |
| 291 | +} |
| 292 | + |
| 293 | +// Integration test helper to create a temporary proc-like structure |
| 294 | +// nolint:unused |
| 295 | +func createMockProcFS(t *testing.T, podUID string) (string, func()) { |
| 296 | + tmpDir, err := os.MkdirTemp("", "mock-proc-*") |
| 297 | + if err != nil { |
| 298 | + t.Fatalf("Failed to create temp dir: %v", err) |
| 299 | + } |
| 300 | + |
| 301 | + // Create a mock process directory structure |
| 302 | + procDir := filepath.Join(tmpDir, "1234") |
| 303 | + nsDir := filepath.Join(procDir, "ns") |
| 304 | + |
| 305 | + if err := os.MkdirAll(nsDir, 0755); err != nil { |
| 306 | + _ = os.RemoveAll(tmpDir) |
| 307 | + t.Fatalf("Failed to create ns dir: %v", err) |
| 308 | + } |
| 309 | + |
| 310 | + // Create mock net namespace file |
| 311 | + netFile := filepath.Join(nsDir, "net") |
| 312 | + if err := os.WriteFile(netFile, []byte{}, 0644); err != nil { |
| 313 | + _ = os.RemoveAll(tmpDir) |
| 314 | + t.Fatalf("Failed to create net file: %v", err) |
| 315 | + } |
| 316 | + |
| 317 | + // Create mock cgroup file |
| 318 | + cgroupFile := filepath.Join(procDir, "cgroup") |
| 319 | + cgroupContent := "12:pids:/kubepods/pod" + string(podUID) + "\n" |
| 320 | + if err := os.WriteFile(cgroupFile, []byte(cgroupContent), 0644); err != nil { |
| 321 | + _ = os.RemoveAll(tmpDir) |
| 322 | + t.Fatalf("Failed to create cgroup file: %v", err) |
| 323 | + } |
| 324 | + |
| 325 | + cleanup := func() { |
| 326 | + _ = os.RemoveAll(tmpDir) |
| 327 | + } |
| 328 | + |
| 329 | + return tmpDir, cleanup |
| 330 | +} |
0 commit comments