github.com/openshift/installer@v1.4.17/pkg/asset/agent/manifests/util_test.go

package manifests

import (
	"net"
	"strings"

	corev1 "k8s.io/api/core/v1"
	metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
	"k8s.io/utils/pointer"
	"sigs.k8s.io/yaml"

	hiveext "github.com/openshift/assisted-service/api/hiveextension/v1beta1"
	"github.com/openshift/assisted-service/api/v1beta1"
	hivev1 "github.com/openshift/hive/apis/hive/v1"
	"github.com/openshift/installer/pkg/asset/agent"
	"github.com/openshift/installer/pkg/asset/agent/agentconfig"
	"github.com/openshift/installer/pkg/asset/installconfig"
	"github.com/openshift/installer/pkg/ipnet"
	"github.com/openshift/installer/pkg/types"
	agenttypes "github.com/openshift/installer/pkg/types/agent"
	"github.com/openshift/installer/pkg/types/baremetal"
)

var (
	testSSHKey = `|
	ssh-rsa AAAAB3NzaC1y1LJe3zew1ghc= root@localhost.localdomain`
	testSecret = `{"auths":{"cloud.openshift.com":{"auth":"b3BlUTA=","email":"test@redhat.com"}}}` //nolint:gosec // not real credentials

	rawNMStateConfig = `
    interfaces:
      - name: eth0
        type: ethernet
        state: up
        mac-address: 52:54:01:aa:aa:a1
        ipv4:
          enabled: true
          address:
            - ip: 192.168.122.21
              prefix-length: 24
          dhcp: false
    dns-resolver:
      config:
        server:
          - 192.168.122.1
    routes:
      config:
        - destination: 0.0.0.0/0
          next-hop-address: 192.168.122.1
          next-hop-interface: eth0
          table-id: 254`

	rawNMStateConfigNoIP = `
    interfaces:
      - name: eth0
        type: ethernet
        state: up
        mac-address: 52:54:01:aa:aa:a1`

	// config with route but no interface is invalid.
	invalidRawNMStateConfig = `
    routes:
      config:
        - destination: 0.0.0.0/0
          next-hop-address: 192.168.122.1
          next-hop-interface: eth0
          table-id: 254`
)

// GetValidOptionalInstallConfig returns a valid optional install config
func getValidOptionalInstallConfig() *agent.OptionalInstallConfig {
	_, newCidr, _ := net.ParseCIDR("192.168.111.0/24")
	_, machineNetCidr, _ := net.ParseCIDR("10.10.11.0/24")

	return &agent.OptionalInstallConfig{
		AssetBase: installconfig.AssetBase{
			Config: &types.InstallConfig{
				ObjectMeta: metav1.ObjectMeta{
					Name:      "ocp-edge-cluster-0",
					Namespace: "cluster-0",
				},
				BaseDomain: "testing.com",
				PullSecret: testSecret,
				SSHKey:     testSSHKey,
				ControlPlane: &types.MachinePool{
					Name:     "master",
					Replicas: pointer.Int64Ptr(3),
					Platform: types.MachinePoolPlatform{},
				},
				Compute: []types.MachinePool{
					{
						Name:     "worker-machine-pool-1",
						Replicas: pointer.Int64Ptr(2),
					},
					{
						Name:     "worker-machine-pool-2",
						Replicas: pointer.Int64Ptr(3),
					},
				},
				Networking: &types.Networking{
					MachineNetwork: []types.MachineNetworkEntry{
						{
							CIDR: ipnet.IPNet{IPNet: *machineNetCidr},
						},
					},
					ClusterNetwork: []types.ClusterNetworkEntry{
						{
							CIDR:       ipnet.IPNet{IPNet: *newCidr},
							HostPrefix: 23,
						},
					},
					ServiceNetwork: []ipnet.IPNet{
						*ipnet.MustParseCIDR("172.30.0.0/16"),
					},
					NetworkType: "OVNKubernetes",
				},
				Platform: types.Platform{
					BareMetal: &baremetal.Platform{
						APIVIPs:     []string{"192.168.122.10"},
						IngressVIPs: []string{"192.168.122.11"},
					},
				},
			},
		},
		Supplied: true,
	}
}

// GetValidOptionalInstallConfigDualStack returns a valid optional install config for dual stack
func getValidOptionalInstallConfigDualStack() *agent.OptionalInstallConfig {
	_, newCidr, _ := net.ParseCIDR("192.168.111.0/24")
	_, newCidrIPv6, _ := net.ParseCIDR("2001:db8:1111:2222::/64")
	_, machineNetCidr, _ := net.ParseCIDR("10.10.11.0/24")
	_, machineNetCidrIPv6, _ := net.ParseCIDR("2001:db8:5dd8:c956::/64")

	return &agent.OptionalInstallConfig{
		AssetBase: installconfig.AssetBase{
			Config: &types.InstallConfig{
				ObjectMeta: metav1.ObjectMeta{
					Name:      "ocp-edge-cluster-0",
					Namespace: "cluster-0",
				},
				BaseDomain: "testing.com",
				PullSecret: testSecret,
				SSHKey:     testSSHKey,
				ControlPlane: &types.MachinePool{
					Name:     "master",
					Replicas: pointer.Int64Ptr(3),
					Platform: types.MachinePoolPlatform{},
				},
				Compute: []types.MachinePool{
					{
						Name:     "worker-machine-pool-1",
						Replicas: pointer.Int64Ptr(2),
					},
					{
						Name:     "worker-machine-pool-2",
						Replicas: pointer.Int64Ptr(3),
					},
				},
				Networking: &types.Networking{
					MachineNetwork: []types.MachineNetworkEntry{
						{
							CIDR: ipnet.IPNet{IPNet: *machineNetCidr},
						},
						{
							CIDR: ipnet.IPNet{IPNet: *machineNetCidrIPv6},
						},
					},
					ClusterNetwork: []types.ClusterNetworkEntry{
						{
							CIDR:       ipnet.IPNet{IPNet: *newCidr},
							HostPrefix: 23,
						},
						{
							CIDR:       ipnet.IPNet{IPNet: *newCidrIPv6},
							HostPrefix: 64,
						},
					},
					ServiceNetwork: []ipnet.IPNet{
						*ipnet.MustParseCIDR("172.30.0.0/16"), *ipnet.MustParseCIDR("fd02::/112"),
					},
				},
				Platform: types.Platform{
					BareMetal: &baremetal.Platform{
						APIVIPs:     []string{"192.168.122.10"},
						IngressVIPs: []string{"192.168.122.11"},
					},
				},
			},
		},
		Supplied: true,
	}
}

func getValidOptionalInstallConfigDualStackDualVIPs() *agent.OptionalInstallConfig {
	installConfig := getValidOptionalInstallConfigDualStack()
	installConfig.Config.Platform.BareMetal.APIVIPs = append(installConfig.Config.Platform.BareMetal.APIVIPs, "2001:db8:1111:2222:ffff:ffff:ffff:cafe")
	installConfig.Config.Platform.BareMetal.IngressVIPs = append(installConfig.Config.Platform.BareMetal.IngressVIPs, "2001:db8:1111:2222:ffff:ffff:ffff:dead")
	return installConfig
}

// getProxyValidOptionalInstallConfig returns a valid optional install config for proxied installation
func getProxyValidOptionalInstallConfig() *agent.OptionalInstallConfig {
	validIC := getValidOptionalInstallConfig()
	validIC.Config.Proxy = &types.Proxy{
		HTTPProxy:  "http://10.10.10.11:80",
		HTTPSProxy: "http://my-lab-proxy.org:443",
		NoProxy:    "internal.com",
	}
	return validIC
}

// getAdditionalTrustBundleValidOptionalInstallConfig returns a valid optional install config with AdditonalTrustBundle.
func getAdditionalTrustBundleValidOptionalInstallConfig() *agent.OptionalInstallConfig {
	validIC := getValidOptionalInstallConfig()
	validIC.Config.AdditionalTrustBundle = `-----BEGIN CERTIFICATE-----MIIDZTCCAk2gAwIBAgIURbA8lR+5xlJZUoOXK66AHFWd3uswDQYJKoZIhvcNAQELBQAwQjELMAkGA1UEBhMCWFgxFTATBgNVBAcMDERlZmF1bHQgQ2l0eTEcMBoGA1UECgwTRGVmYXVsdCBDb21wYW55IEx0ZDAeFw0yMjA3MDgxOTUzMTVaFw0yMjA4MDcxOTUzMTVaMEIxCzAJBgNVBAYTAlhYMRUwEwYDVQQHDAxEZWZhdWx0IENpdHkxHDAaBgNVBAoME0RlZmF1bHQgQ29tcGFueSBMdGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCroH9c2PLWI0O/nBrmKtS2IuReyWaR0DOMJY7C/vc12l9zlH0DxTOUfEtdqRktjVsUn1vIIiFakxd0QLIPcMyKplmbavIBUQp+MZr0pNVX+lwcctbA7FVHEnbWYNVepoV7kZkTVvMXAqFylMXU4gDmuZzIxhVMMxjialJNED+3ngqvX4w34q4KSk1ytaHGwjREIErwPJjv5PK48KVJL2nlCuA+tbxu1r8eVkOUvZlxAuNNXk/Umf3QX5EiUlTtsmRAct6fIUT3jkrsHSS/tZ66EYJ9Q0OBoX2lL/Msmi27OQvA7uYnuqYlwJzU43tCsiip9E9z/UrLcMYyXx3oPJyPAgMBAAGjUzBRMB0GA1UdDgQWBBTIahE8DDT4T1vta6cXVVaRjnel0zAfBgNVHSMEGDAWgBTIahE8DDT4T1vta6cXVVaRjnel0zAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQCQbsMtPFkqPxwOAIds3IoupuyIKmsF32ECEH/OlS+7Sj7MUJnGTQrwgjrsVS5sl8AmnGx4hPdLVX98nEcKMNkph3Hkvh4EvgjSfmYGUXuJBcYU5jqNQrlrGv37rEf5FnvdHV1F3MG8A0Mj0TLtcTdtaJFoOrnQuD/k0/1d+cMiYGTSaT5XK/unARqGEMd4BlWPh5P3SflV/Vy2hHlMpv7OcZ8yaAI3htENZLus+L5kjHWKu6dxlPHKu6ef5k64su2LTNE07Vr9S655uiFW5AX2wDVUcQEDCOiEn6SI9DTt5oQjWPMxPf+rEyfQ2f1QwVez7cyr6Qc5OIUk31HnM/Fj-----END CERTIFICATE-----`
	return validIC
}

// getValidOptionalInstallConfigWithProvisioning returns a valid optional install config with baremetal provisioning network settings.
func getValidOptionalInstallConfigWithProvisioning() *agent.OptionalInstallConfig {
	installConfig := getValidOptionalInstallConfig()
	installConfig.Config.Platform.BareMetal.ClusterProvisioningIP = "172.22.0.3"
	installConfig.Config.Platform.BareMetal.ProvisioningNetwork = "Managed"
	installConfig.Config.Platform.BareMetal.ProvisioningBridge = "ostestpr"
	installConfig.Config.Platform.BareMetal.ProvisioningMACAddress = "52:54:00:a6:e6:87"
	installConfig.Config.Platform.BareMetal.ProvisioningNetworkInterface = "eth0"
	installConfig.Config.Platform.BareMetal.ProvisioningNetworkCIDR = ipnet.MustParseCIDR("172.22.0.0/24")
	installConfig.Config.Platform.BareMetal.ProvisioningDHCPRange = "172.22.0.10,172.22.0.254"
	return installConfig
}

func getValidAgentConfig() *agentconfig.AgentConfig {
	return &agentconfig.AgentConfig{
		Config: &agenttypes.Config{
			ObjectMeta: metav1.ObjectMeta{
				Name:      "ocp-edge-cluster-0",
				Namespace: "cluster-0",
			},
			RendezvousIP: "192.168.122.2",
		},
	}
}

func getValidAgentHostsConfig() *agentconfig.AgentHosts {
	return &agentconfig.AgentHosts{
		Hosts: []agenttypes.Host{
			{
				Hostname: "control-0.example.org",
				Role:     "master",
				RootDeviceHints: baremetal.RootDeviceHints{
					DeviceName:         "/dev/sda",
					HCTL:               "hctl-value",
					Model:              "model-value",
					Vendor:             "vendor-value",
					SerialNumber:       "serial-number-value",
					MinSizeGigabytes:   20,
					WWN:                "wwn-value",
					WWNWithExtension:   "wwn-with-extension-value",
					WWNVendorExtension: "wwn-vendor-extension-value",
					Rotational:         new(bool),
				},
				Interfaces: []*v1beta1.Interface{
					{
						Name:       "enp2s0",
						MacAddress: "98:af:65:a5:8d:01",
					},
					{
						Name:       "enp3s1",
						MacAddress: "28:d2:44:d2:b2:1a",
					},
				},
				NetworkConfig: v1beta1.NetConfig{
					Raw: unmarshalJSON([]byte(rawNMStateConfig)),
				},
			},
			{
				Hostname: "control-1.example.org",
				Role:     "master",
				RootDeviceHints: baremetal.RootDeviceHints{
					DeviceName:         "/dev/sdb",
					HCTL:               "hctl-value",
					Model:              "model-value",
					Vendor:             "vendor-value",
					SerialNumber:       "serial-number-value",
					MinSizeGigabytes:   40,
					WWN:                "wwn-value",
					WWNWithExtension:   "wwn-with-extension-value",
					WWNVendorExtension: "wwn-vendor-extension-value",
					Rotational:         new(bool),
				},
				Interfaces: []*v1beta1.Interface{
					{
						Name:       "enp2t0",
						MacAddress: "98:af:65:a5:8d:02",
					},
				},
				NetworkConfig: v1beta1.NetConfig{
					Raw: unmarshalJSON([]byte(rawNMStateConfig)),
				},
			},
			{
				Hostname: "control-2.example.org",
				Role:     "master",
				RootDeviceHints: baremetal.RootDeviceHints{
					DeviceName:         "/dev/sdc",
					HCTL:               "hctl-value",
					Model:              "model-value",
					Vendor:             "vendor-value",
					SerialNumber:       "serial-number-value",
					MinSizeGigabytes:   60,
					WWN:                "wwn-value",
					WWNWithExtension:   "wwn-with-extension-value",
					WWNVendorExtension: "wwn-vendor-extension-value",
					Rotational:         new(bool),
				},
				Interfaces: []*v1beta1.Interface{
					{
						Name:       "enp2u0",
						MacAddress: "98:af:65:a5:8d:03",
					},
				},
				NetworkConfig: v1beta1.NetConfig{
					Raw: unmarshalJSON([]byte(rawNMStateConfig)),
				},
			},
		},
	}
}

func getValidAgentConfigWithAdditionalNTPSources() *agentconfig.AgentConfig {
	validAC := getValidAgentConfig()
	validAC.Config.AdditionalNTPSources = []string{
		"0.fedora.pool.ntp.org",
		"1.fedora.pool.ntp.org",
	}
	return validAC
}

func getAgentHostsWithSomeHostsWithoutNetworkConfig() *agentconfig.AgentHosts {
	return &agentconfig.AgentHosts{
		Hosts: []agenttypes.Host{
			{
				Hostname: "control-0.example.org",
				Role:     "master",
				RootDeviceHints: baremetal.RootDeviceHints{
					DeviceName:         "/dev/sda",
					HCTL:               "hctl-value",
					Model:              "model-value",
					Vendor:             "vendor-value",
					SerialNumber:       "serial-number-value",
					MinSizeGigabytes:   20,
					WWN:                "wwn-value",
					WWNWithExtension:   "wwn-with-extension-value",
					WWNVendorExtension: "wwn-vendor-extension-value",
					Rotational:         new(bool),
				},
				Interfaces: []*v1beta1.Interface{
					{
						Name:       "enp2t0",
						MacAddress: "98:af:65:a5:8d:02",
					},
				},
				NetworkConfig: v1beta1.NetConfig{
					Raw: unmarshalJSON([]byte(rawNMStateConfigNoIP)),
				},
			},
			{
				Hostname: "control-1.example.org",
				Role:     "master",
				RootDeviceHints: baremetal.RootDeviceHints{
					DeviceName:         "/dev/sdb",
					HCTL:               "hctl-value",
					Model:              "model-value",
					Vendor:             "vendor-value",
					SerialNumber:       "serial-number-value",
					MinSizeGigabytes:   40,
					WWN:                "wwn-value",
					WWNWithExtension:   "wwn-with-extension-value",
					WWNVendorExtension: "wwn-vendor-extension-value",
					Rotational:         new(bool),
				},
				Interfaces: []*v1beta1.Interface{
					{
						Name:       "enp2t0",
						MacAddress: "98:af:65:a5:8d:03",
					},
				},
			},
		},
	}
}

func getAgentHostsNoHosts() *agentconfig.AgentHosts {
	return &agentconfig.AgentHosts{}
}

func getAgentHostsWithBMCConfig() *agentconfig.AgentHosts {
	return &agentconfig.AgentHosts{
		Hosts: []agenttypes.Host{
			{
				Hostname: "control-0.example.org",
				Role:     "master",
				Interfaces: []*v1beta1.Interface{
					{
						Name:       "enp2s0",
						MacAddress: "98:af:65:a5:8d:01",
					},
				},
				BMC: baremetal.BMC{
					Username:                       "bmc-user",
					Password:                       "password",
					Address:                        "172.22.0.10",
					DisableCertificateVerification: true,
				},
			},
			{
				Hostname: "control-1.example.org",
				Role:     "master",
				Interfaces: []*v1beta1.Interface{
					{
						Name:       "enp2s0",
						MacAddress: "98:af:65:a5:8d:02",
					},
				},
				BMC: baremetal.BMC{
					Username:                       "user2",
					Password:                       "foo",
					Address:                        "172.22.0.11",
					DisableCertificateVerification: false,
				},
			},
			{
				Hostname: "control-2.example.org",
				Role:     "master",
				Interfaces: []*v1beta1.Interface{
					{
						Name:       "enp2s0",
						MacAddress: "98:af:65:a5:8d:03",
					},
				},
				BMC: baremetal.BMC{
					Username:                       "admin",
					Password:                       "bar",
					Address:                        "172.22.0.12",
					DisableCertificateVerification: true,
				},
			},
		},
	}
}

func getGoodACI() *hiveext.AgentClusterInstall {
	goodACI := &hiveext.AgentClusterInstall{
		TypeMeta: metav1.TypeMeta{
			Kind:       "AgentClusterInstall",
			APIVersion: "extensions.hive.openshift.io/v1beta1",
		},
		ObjectMeta: metav1.ObjectMeta{
			Name:      getAgentClusterInstallName(getValidOptionalInstallConfig()),
			Namespace: getValidOptionalInstallConfig().ClusterNamespace(),
		},
		Spec: hiveext.AgentClusterInstallSpec{
			ImageSetRef: &hivev1.ClusterImageSetReference{
				Name: getClusterImageSetReferenceName(),
			},
			ClusterDeploymentRef: corev1.LocalObjectReference{
				Name: getClusterDeploymentName(getValidOptionalInstallConfig()),
			},
			Networking: hiveext.Networking{
				MachineNetwork: []hiveext.MachineNetworkEntry{
					{
						CIDR: "10.10.11.0/24",
					},
				},
				ClusterNetwork: []hiveext.ClusterNetworkEntry{
					{
						CIDR:       "192.168.111.0/24",
						HostPrefix: 23,
					},
				},
				ServiceNetwork: []string{"172.30.0.0/16"},
				NetworkType:    "OVNKubernetes",
			},
			SSHPublicKey: strings.Trim(testSSHKey, "|\n\t"),
			ProvisionRequirements: hiveext.ProvisionRequirements{
				ControlPlaneAgents: 3,
				WorkerAgents:       5,
			},
			APIVIPs:      []string{"192.168.122.10"},
			IngressVIPs:  []string{"192.168.122.11"},
			APIVIP:       "192.168.122.10",
			IngressVIP:   "192.168.122.11",
			PlatformType: hiveext.BareMetalPlatformType,
		},
	}
	return goodACI
}

func getInValidAgentHostsConfig() *agentconfig.AgentHosts {
	return &agentconfig.AgentHosts{
		Hosts: []agenttypes.Host{
			{
				Hostname: "control-0.example.org",
				Role:     "master",
				Interfaces: []*v1beta1.Interface{
					{
						Name:       "enp2s0",
						MacAddress: "98:af:65:a5:8d:01",
					},
				},
				NetworkConfig: v1beta1.NetConfig{
					Raw: unmarshalJSON([]byte(invalidRawNMStateConfig)),
				},
			},
		},
	}
}

func getGoodACIDualStack() *hiveext.AgentClusterInstall {
	goodACI := getGoodACI()
	goodACI.Spec.Networking.MachineNetwork = append(goodACI.Spec.Networking.MachineNetwork, hiveext.MachineNetworkEntry{
		CIDR: "2001:db8:5dd8:c956::/64",
	})
	goodACI.Spec.Networking.ClusterNetwork = append(goodACI.Spec.Networking.ClusterNetwork, hiveext.ClusterNetworkEntry{
		CIDR:       "2001:db8:1111:2222::/64",
		HostPrefix: 64,
	})
	goodACI.Spec.Networking.ServiceNetwork = append(goodACI.Spec.Networking.ServiceNetwork, "fd02::/112")

	return goodACI
}

func unmarshalJSON(b []byte) []byte {
	output, _ := yaml.JSONToYAML(b)
	return output
}