kubeadm/cilium: add IPSec encryption test

we add a test case to cover cilium IPSec installation. Previous cilium deployment is deleted and a new one is done with `--encryption=ipsec` param. Signed-off-by: Mathieu Tortuyaux <[email protected]>
flatcar · Feb 15, 2022 · fca1f8f · fca1f8f
1 parent e7ac35d
commit fca1f8f
Showing 1 changed file with 14 additions and 1 deletion.
diff --git a/kola/tests/kubeadm/kubeadm.go b/kola/tests/kubeadm/kubeadm.go
@@ -45,7 +45,20 @@ type extraTest struct {
 
 var (
 	// extraTests can be used to extend the common tests for a given supported CNI.
-	extraTests = map[string][]extraTest{}
+	extraTests = map[string][]extraTest{
+		"cilium": []extraTest{
+			extraTest{
+				name: "IPSec encryption",
+				runFunc: func(controller platform.Machine, params map[string]interface{}, c cluster.TestCluster) {
+					_ = c.MustSSH(controller, "/opt/bin/cilium uninstall")
+					version := params["CiliumVersion"].(string)
+					cidr := params["PodSubnet"].(string)
+					cmd := fmt.Sprintf("/opt/bin/cilium install --config enable-endpoint-routes=true --config cluster-pool-ipv4-cidr=%s --version=%s --encryption=ipsec --wait --wait-duration 1m", cidr, version)
+					_ = c.MustSSH(controller, cmd)
+				},
+			},
+		},
+	}
 
 	// CNIs is the list of CNIs to deploy
 	// in the cluster setup