fixup! Implement NetworkPolicy handling in controller

Add test for multiple port ranges
cloudandheat · Oct 19, 2022 · 5d732b1 · 5d732b1
1 parent 1a18d93
commit 5d732b1
Showing 1 changed file with 26 additions and 0 deletions.
diff --git a/internal/controller/model_pod_test.go b/internal/controller/model_pod_test.go
@@ -713,6 +713,20 @@ func TestNetworkPolicies(t *testing.T) {
 	np4.Spec.Ingress = []networkingv1.NetworkPolicyIngressRule{}
 	f.addNetworkPolicy(np4)
 
+	np5 := newNetworkPolicy("multiple-ports-with-ranges")
+	np5.Spec.PolicyTypes = []networkingv1.PolicyType{
+		"Ingress",
+	}
+	np5.Spec.Ingress = []networkingv1.NetworkPolicyIngressRule{
+		{
+			Ports: []networkingv1.NetworkPolicyPort{
+				newNetworkPolicyPort(corev1.ProtocolTCP, 2000, 3000),
+				newNetworkPolicyPort(corev1.ProtocolUDP, 2000, 3000),
+			},
+		},
+	}
+	f.addNetworkPolicy(np5)
+
 	f.runWith(func(g *PodLoadBalancerModelGenerator) {
 		m, err := g.GenerateModel(nil)
 
@@ -745,6 +759,18 @@ func TestNetworkPolicies(t *testing.T) {
 		anyNetworkPolicy(t, m.NetworkPolicies, "block-everything", func(t *testing.T, p model.NetworkPolicy) {
 			assert.Equal(t, 0, len(p.AllowedIngresses))
 		})
+
+		anyNetworkPolicy(t, m.NetworkPolicies, "multiple-ports-with-ranges", func(t *testing.T, p model.NetworkPolicy) {
+			assert.Equal(t, 1, len(p.AllowedIngresses))
+			assert.Equal(t, 0, len(p.AllowedIngresses[0].IPBlockFilters))
+			assert.Equal(t, 2, len(p.AllowedIngresses[0].PortFilters))
+			assert.Equal(t, corev1.ProtocolTCP, p.AllowedIngresses[0].PortFilters[0].Protocol)
+			assert.Equal(t, int32(2000), *p.AllowedIngresses[0].PortFilters[0].Port)
+			assert.Equal(t, int32(3000), *p.AllowedIngresses[0].PortFilters[0].EndPort)
+			assert.Equal(t, corev1.ProtocolUDP, p.AllowedIngresses[0].PortFilters[1].Protocol)
+			assert.Equal(t, int32(2000), *p.AllowedIngresses[0].PortFilters[1].Port)
+			assert.Equal(t, int32(3000), *p.AllowedIngresses[0].PortFilters[1].EndPort)
+		})
 	})
 }