USHIFT-6747: Migrate 14 QE networking/router tests to Robot Framework

test/assets/host-networking/hostport-pod.yaml

@@ -0,0 +1,27 @@
+kind: Pod
+apiVersion: v1
+metadata:
+  name: hostport-pod
+  labels:
+    app: hostport-pod
+spec:
+  terminationGracePeriodSeconds: 0
+  containers:
+  - name: hostport-pod
+    image: quay.io/microshift/busybox:1.36
+    command: ["/bin/sh"]
+    args: ["-c", "while true; do echo -ne \"HTTP/1.0 200 OK\r\nContent-Length: 16\r\n\r\nHello MicroShift\" | nc -l -p 8080 ; done"]
+    ports:
+    - containerPort: 8080
+      hostPort: 9500
+      protocol: TCP
+    securityContext:
+      allowPrivilegeEscalation: false
+      capabilities:
+        drop:
+        - ALL
+      runAsNonRoot: true
+      runAsUser: 1001
+      runAsGroup: 1001
+      seccompProfile:
+        type: RuntimeDefault

test/assets/host-networking/udp-listener-pod.yaml

@@ -0,0 +1,26 @@
+kind: Pod
+apiVersion: v1
+metadata:
+  name: udp-pod
+  labels:
+    app: udp-pod
+spec:
+  terminationGracePeriodSeconds: 0
+  containers:
+  - name: udp-listener
+    image: quay.io/microshift/busybox:1.36
+    command: ["/bin/sh"]
+    args: ["-c", "nc -u -l -p 8080 -e /bin/cat; sleep infinity"]
+    ports:
+    - containerPort: 8080
+      protocol: UDP
+    securityContext:
+      allowPrivilegeEscalation: false
+      capabilities:
+        drop:
+        - ALL
+      runAsNonRoot: true
+      runAsUser: 1001
+      runAsGroup: 1001
+      seccompProfile:
+        type: RuntimeDefault

test/assets/network-policy/netpol-allow-from-red.yaml

@@ -0,0 +1,11 @@
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+  name: allow-from-red
+spec:
+  podSelector: {}
+  ingress:
+  - from:
+    - podSelector:
+        matchLabels:
+          type: red

test/assets/network-policy/netpol-allow-same-namespace.yaml

@@ -0,0 +1,11 @@
+apiVersion: networking.k8s.io/v1
+kind: NetworkPolicy
+metadata:
+  name: allow-from-same-namespace
+spec:
+  podSelector: {}
+  ingress:
+  - from:
+    - podSelector: {}
+  policyTypes:
+  - Ingress

test/assets/network-policy/netpol-allow-to-blue.yaml

@@ -0,0 +1,10 @@
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+  name: allow-to-blue
+spec:
+  podSelector:
+    matchLabels:
+      type: blue
+  ingress:
+  - {}

test/assets/network-policy/netpol-default-deny-ingress.yaml

@@ -0,0 +1,8 @@
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+  name: default-deny-ingress
+spec:
+  podSelector: {}
+  policyTypes:
+  - Ingress

test/assets/network-policy/netpol-egress-ns-label.yaml

@@ -0,0 +1,15 @@
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+  name: egress-ns-label
+spec:
+  podSelector:
+    matchLabels:
+      name: hello-microshift
+  egress:
+  - to:
+    - namespaceSelector:
+        matchLabels:
+          team: openshift
+  policyTypes:
+  - Egress

test/assets/network-policy/netpol-ingress-pod-ns-label.yaml

@@ -0,0 +1,18 @@
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+  name: ingress-pod-ns-label
+spec:
+  podSelector:
+    matchLabels:
+      name: hello-microshift
+  ingress:
+  - from:
+    - namespaceSelector:
+        matchLabels:
+          team: operations
+      podSelector:
+        matchLabels:
+          name: test-pods
+  policyTypes:
+  - Ingress

test/assets/route-types/ingress-destca.yaml

@@ -0,0 +1,19 @@
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: ingress-reencrypt
+  annotations:
+    route.openshift.io/destination-ca-certificate-secret: service-secret
+    route.openshift.io/termination: reencrypt
+spec:
+  rules:
+  - host: service-secure-test.example.com
+    http:
+      paths:
+      - backend:
+          service:
+            name: service-secure
+            port:
+              number: 27443
+        path: "/"
+        pathType: Prefix

test/assets/route-types/ingress-http.yaml

@@ -0,0 +1,16 @@
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: ingress-http
+spec:
+  rules:
+  - host: service-unsecure-test.example.com
+    http:
+      paths:
+      - backend:
+          service:
+            name: service-unsecure
+            port:
+              number: 27017
+        path: "/"
+        pathType: Prefix

test/assets/route-types/web-server-deploy.yaml

@@ -0,0 +1,58 @@
+apiVersion: v1
+kind: List
+items:
+- apiVersion: apps/v1
+  kind: Deployment
+  metadata:
+    name: web-server-deploy
+    labels:
+      app: web-server-deploy
+  spec:
+    replicas: 1
+    selector:
+      matchLabels:
+        name: web-server-deploy
+    template:
+      metadata:
+        labels:
+          name: web-server-deploy
+      spec:
+        automountServiceAccountToken: false
+        containers:
+        - name: nginx
+          image: quay.io/microshift/hello-world:latest
+          ports:
+          - containerPort: 8080
+            name: http
+            protocol: TCP
+          - containerPort: 8443
+            name: https
+            protocol: TCP
+- kind: Service
+  apiVersion: v1
+  metadata:
+    labels:
+      name: service-secure
+    name: service-secure
+  spec:
+    ports:
+    - name: https
+      protocol: TCP
+      port: 27443
+      targetPort: 8443
+    selector:
+      name: web-server-deploy
+- apiVersion: v1
+  kind: Service
+  metadata:
+    labels:
+      name: service-unsecure
+    name: service-unsecure
+  spec:
+    ports:
+    - name: http
+      port: 27017
+      protocol: TCP
+      targetPort: 8080
+    selector:
+      name: web-server-deploy

test/assets/route-types/web-server-signed-deploy.yaml

@@ -0,0 +1,94 @@
+apiVersion: v1
+kind: List
+items:
+- apiVersion: v1
+  kind: ConfigMap
+  metadata:
+    name: nginx-config
+  data:
+    nginx.conf: |
+      events {
+          worker_connections 1024;
+      }
+
+      http {
+          server {
+              listen       8080;
+              listen       [::]:8080;
+              location / {
+                  root /data/http;
+              }
+          }
+
+          server {
+              listen               8443 ssl http2 default;
+              listen               [::]:8443 ssl http2 default;
+              server_name          _;
+              ssl_certificate      certs/tls.crt;
+              ssl_certificate_key  certs/tls.key;
+              location / {
+                  root /data/https-default;
+              }
+          }
+      }
+- apiVersion: apps/v1
+  kind: Deployment
+  metadata:
+    name: web-server-deploy
+    labels:
+      name: web-server-deploy
+  spec:
+    replicas: 1
+    selector:
+      matchExpressions:
+      - {key: name, operator: In, values: [web-server-deploy]}
+    template:
+      metadata:
+        labels:
+          name: web-server-deploy
+      spec:
+        containers:
+        - name: nginx
+          image: quay.io/microshift/hello-world:latest
+          volumeMounts:
+          - name: service-secret
+            mountPath: /etc/nginx/certs/
+          - name: nginx-config
+            mountPath: /etc/nginx/
+        volumes:
+        - name: service-secret
+          secret:
+            secretName: service-secret
+        - name: nginx-config
+          configMap:
+            name: nginx-config
+- kind: Service
+  apiVersion: v1
+  metadata:
+    annotations:
+      service.beta.openshift.io/serving-cert-secret-name: service-secret
+    labels:
+      name: service-secure
+    name: service-secure
+  spec:
+    ports:
+    - name: https
+      protocol: TCP
+      port: 27443
+      targetPort: 8443
+    selector:
+      name: web-server-deploy
+- apiVersion: v1
+  kind: Service
+  metadata:
+    labels:
+      name: service-unsecure
+    name: service-unsecure
+  spec:
+    ports:
+    - name: http
+      port: 27017
+      protocol: TCP
+      targetPort: 8080
+    selector:
+      name: web-server-deploy

test/assets/service-types/deployment-hello-2-replicas.yaml

@@ -0,0 +1,35 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: hello-deploy
+  labels:
+    app: hello-deploy
+spec:
+  replicas: 2
+  selector:
+    matchLabels:
+      app: hello-deploy
+  template:
+    metadata:
+      labels:
+        app: hello-deploy
+    spec:
+      terminationGracePeriodSeconds: 0
+      containers:
+      - name: hello-microshift
+        image: quay.io/microshift/busybox:1.36
+        command: ["/bin/sh"]
+        args: ["-c", "while true; do echo -ne \"HTTP/1.0 200 OK\r\nContent-Length: 16\r\n\r\nHello MicroShift\" | nc -l -p 8080 ; done"]
+        ports:
+        - containerPort: 8080
+          protocol: TCP
+        securityContext:
+          allowPrivilegeEscalation: false
+          capabilities:
+            drop:
+            - ALL
+          runAsNonRoot: true
+          runAsUser: 1001
+          runAsGroup: 1001
+          seccompProfile:
+            type: RuntimeDefault

test/assets/service-types/service-clusterip.yaml

@@ -0,0 +1,14 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: hello-deploy
+  labels:
+    app: hello-deploy
+spec:
+  type: ClusterIP
+  ports:
+  - port: 8080
+    targetPort: 8080
+    protocol: TCP
+  selector:
+    app: hello-deploy