public void TestStringValue()
{
var pod = Pod.Create("default", EmptyDict <string, string>().Add("k0", "v0"), EmptyList <string>().AddBack("k0"));
var expected = pod.GetLabels().Get("k0").Value().StringValue();
Assert.IsTrue(expected.Equals("v0"));
}
public void ReachabilityMatrix_OneDirectionOnly()
{
Zen <Pod>[] pods = new Zen <Pod>[]
{
Pod.Create("default", EmptyDict <string, string>().Add("k0", "v0"), EmptyList <string>().AddBack("k0")),
Pod.Create("ns1", EmptyDict <string, string>().Add("k1", "v1"), EmptyList <string>().AddBack("k1")),
};
Zen <Namespace>[] namespaces = new Zen <Namespace>[]
{
Namespace.Create("default", EmptyDict <string, string>().Add("k0", "v0"), EmptyList <string>().AddBack("k0")),
Namespace.Create("ns1", EmptyDict <string, string>().Add("k1", "v1"), EmptyList <string>().AddBack("k1"))
};
Zen <Policy>[] policies = new Zen <Policy>[]
{
// only one side allows ingress traffic
Policy.Create("default", EmptyDict <string, string>().Add("k0", "v0"),
EmptyDict <string, string>(), EmptyDict <string, string>().Add("k1", "v1"),
EmptyList <string>().AddBack("k0"), EmptyList <string>(), EmptyList <string>().AddBack("k1")),
Policy.Create("ns1", EmptyDict <string, string>().Add("k1", "v1"),
EmptyDict <string, string>(), EmptyDict <string, string>().Add("k1", "v1"),
EmptyList <string>().AddBack("k1"), EmptyList <string>(), EmptyList <string>().AddBack("k1"),
False(), False()),
};
var output = Algorithms.CreateReachMatrix(pods, policies, namespaces).ingressMatrix;
var r0 = EmptyList <bool>().AddBack(true).AddBack(false);
var r1 = EmptyList <bool>().AddBack(false).AddBack(true);
TestHelper.AssertMatrixEqual(output, new Zen <IList <bool> >[] { r0, r1 }, "Reachability Matrix, one direction only");
}
public void PolicyShadowTest()
{
Zen <Pod>[] pods = new Zen <Pod>[]
{
Pod.Create("default", EmptyDict <string, string>().Add("k0", "v0").Add("k1", "v1"), EmptyList <string>().AddBack("k0").AddBack("k1")),
Pod.Create("default", EmptyDict <string, string>().Add("k1", "v1"), EmptyList <string>().AddBack("k1")),
Pod.Create("ns1", EmptyDict <string, string>().Add("k2", "v2"), EmptyList <string>().AddBack("k2")),
Pod.Create("ns1", EmptyDict <string, string>().Add("k3", "v3"), EmptyList <string>().AddBack("k3"))
};
Zen <Namespace>[] namespaces = new Zen <Namespace>[]
{
Namespace.Create("default", EmptyDict <string, string>().Add("k0", "v0"), EmptyList <string>().AddBack("k0")),
Namespace.Create("ns1", EmptyDict <string, string>().Add("k1", "v1"), EmptyList <string>().AddBack("k1"))
};
Zen <Policy>[] policies = new Zen <Policy>[]
{
Policy.Create("default", EmptyDict <string, string>().Add("k0", "v0").Add("k1", "v1"),
EmptyDict <string, string>().Add("k2", "v2"), EmptyDict <string, string>().Add("k1", "v1"),
EmptyList <string>().AddBack("k0").AddBack("k1"), EmptyList <string>().AddBack("k2"), EmptyList <string>().AddBack("k1")),
Policy.Create("default", EmptyDict <string, string>().Add("k1", "v1"),
EmptyDict <string, string>(), EmptyDict <string, string>().Add("k1", "v1"),
EmptyList <string>().AddBack("k1"), EmptyList <string>(), EmptyList <string>().AddBack("k1")),
Policy.Create("ns1", EmptyDict <string, string>().Add("k3", "v3"),
EmptyDict <string, string>().Add("k2", "v2"), EmptyDict <string, string>().Add("k0", "v0"),
EmptyList <string>().AddBack("k3"), EmptyList <string>().AddBack("k2"), EmptyList <string>().AddBack("k0")),
};
var podPolMx = Algorithms.CreateReachMatrix(pods, policies, namespaces).podPolMatrix;
var r0 = EmptyList <bool>().AddBack(true).AddBack(true).AddBack(false);
var r1 = EmptyList <bool>().AddBack(false).AddBack(true).AddBack(false);
var r2 = EmptyList <bool>().AddBack(false).AddBack(false).AddBack(false);
var r3 = EmptyList <bool>().AddBack(false).AddBack(false).AddBack(true);
TestHelper.AssertMatrixEqual(podPolMx, new Zen <IList <bool> >[] { r0, r1, r2, r3 }, "PolicyShadowTest: PodPolMatrix");
var polPodAllowedMx = Algorithms.CreateReachMatrix(pods, policies, namespaces).polPodAllowedMatrix;
r0 = EmptyList <bool>().AddBack(false).AddBack(false).AddBack(true).AddBack(false);
r1 = EmptyList <bool>().AddBack(false).AddBack(false).AddBack(true).AddBack(true);
r2 = EmptyList <bool>().AddBack(false).AddBack(false).AddBack(false).AddBack(false);
TestHelper.AssertMatrixEqual(polPodAllowedMx, new Zen <IList <bool> >[] { r0, r1, r2 }, "PolicyShadowTest: PolPodAllowedMatrix");
var polPodSelectedMx = Algorithms.CreateReachMatrix(pods, policies, namespaces).polPodSelectedMatrix;
r0 = EmptyList <bool>().AddBack(true).AddBack(false).AddBack(false).AddBack(false);
r1 = EmptyList <bool>().AddBack(true).AddBack(true).AddBack(false).AddBack(false);
r2 = EmptyList <bool>().AddBack(false).AddBack(false).AddBack(false).AddBack(true);
TestHelper.AssertMatrixEqual(polPodSelectedMx, new Zen <IList <bool> >[] { r0, r1, r2 }, "PolicyShadowTest: PolPodSelectedMatrix");
var shadowedPair = Verifier.PolicyShadowCheck(podPolMx, polPodAllowedMx, polPodSelectedMx);
Assert.IsTrue(shadowedPair.Length().EqualToNumber(1));
var expected = EmptyList <Tuple <int, int> >().AddBack(Tuple <int, int>(1, 0));
Assert.IsTrue(shadowedPair.ToString().Equals(expected.ToString()), "PolicyShadowTest: shadow pairs are not correct.\nExpected: {0}\nGot: {1}", expected.ToString(), shadowedPair.ToString());
}
public void TestPodLabelValue()
{
var pods = new Zen <Pod>[]
{
Pod.Create("default", EmptyDict <string, string>().Add("k0", "v0"), EmptyList <string>().AddBack("user")),
Pod.Create("default", EmptyDict <string, string>().Add("k1", "v1"), EmptyList <string>().AddBack("user")),
Pod.Create("ns1", EmptyDict <string, string>().Add("k2", "v2"), EmptyList <string>().AddBack("user")),
Pod.Create("ns1", EmptyDict <string, string>().Add("k3", "v3"), EmptyList <string>().AddBack("user"))
};
Assert.IsTrue(pods[0].LabelValue("k0") == "v0", "pod0 got wrong value of key {0}.\nExpected: {1}\nGot: {2}", "k0", "v0", pods[0].LabelValue("k0"));
Assert.IsTrue(pods[1].LabelValue("k1") == "v1", "pod1 got wrong value of key {0}.\nExpected: {1}\nGot: {2}", "k1", "v1", pods[1].LabelValue("k1"));
Assert.IsTrue(pods[2].LabelValue("k2") == "v2", "pod2 got wrong value of key {0}.\nExpected: {1}\nGot: {2}", "k2", "v2", pods[2].LabelValue("k2"));
Assert.IsTrue(pods[3].LabelValue("k3") == "v3", "pod3 got wrong value of key {0}.\nExpected: {1}\nGot: {2}", "k3", "v3", pods[3].LabelValue("k3"));
}
public void ReachabilityMatrix_NSAndPod()
{
Zen <Pod>[] pods = new Zen <Pod>[]
{
Pod.Create("default", EmptyDict <string, string>().Add("k0", "v0").Add("k1", "v1"), EmptyList <string>().AddBack("k0").AddBack("k1")),
Pod.Create("default", EmptyDict <string, string>().Add("k1", "v1"), EmptyList <string>().AddBack("k1")),
Pod.Create("ns1", EmptyDict <string, string>().Add("k2", "v2"), EmptyList <string>().AddBack("k2")),
Pod.Create("ns1", EmptyDict <string, string>().Add("k3", "v3"), EmptyList <string>().AddBack("k3")),
Pod.Create("ns1", EmptyDict <string, string>().Add("k4", "v4"), EmptyList <string>().AddBack("k4"))
};
Zen <Namespace>[] namespaces = new Zen <Namespace>[]
{
Namespace.Create("default", EmptyDict <string, string>().Add("k0", "v0"), EmptyList <string>().AddBack("k0")),
Namespace.Create("ns1", EmptyDict <string, string>().Add("k1", "v1"), EmptyList <string>().AddBack("k1"))
};
Zen <Policy>[] policies = new Zen <Policy>[]
{
Policy.Create("default", EmptyDict <string, string>().Add("k0", "v0").Add("k1", "v1"),
EmptyDict <string, string>().Add("k4", "v4"), EmptyDict <string, string>().Add("k1", "v1"),
EmptyList <string>().AddBack("k0").AddBack("k1"), EmptyList <string>().AddBack("k4"), EmptyList <string>().AddBack("k1")),
Policy.Create("default", EmptyDict <string, string>().Add("k1", "v1"),
EmptyDict <string, string>().Add("k2", "v2"), EmptyDict <string, string>().Add("k1", "v1"),
EmptyList <string>().AddBack("k1"), EmptyList <string>().AddBack("k2"), EmptyList <string>().AddBack("k1"),
False(), False()),
Policy.Create("ns1", EmptyDict <string, string>().Add("k3", "v3"),
EmptyDict <string, string>().Add("k2", "v2"), EmptyDict <string, string>().Add("k0", "v0"),
EmptyList <string>().AddBack("k3"), EmptyList <string>().AddBack("k2"), EmptyList <string>().AddBack("k0")),
};
var ingress = Algorithms.CreateReachMatrix(pods, policies, namespaces).ingressMatrix;
var r0 = EmptyList <bool>().AddBack(true).AddBack(false).AddBack(false).AddBack(false).AddBack(true);
var r1 = EmptyList <bool>().AddBack(false).AddBack(true).AddBack(false).AddBack(false).AddBack(false);
var r2 = EmptyList <bool>().AddBack(true).AddBack(true).AddBack(true).AddBack(false).AddBack(true);
var r3 = EmptyList <bool>().AddBack(false).AddBack(false).AddBack(false).AddBack(true).AddBack(false);
var r4 = EmptyList <bool>().AddBack(false).AddBack(false).AddBack(true).AddBack(false).AddBack(true);
TestHelper.AssertMatrixEqual(ingress, new Zen <IList <bool> >[] { r0, r1, r2, r3, r4 }, "Reachability_Matrix_Test_NS_Pods(ingress matrix)");
var egress = Algorithms.CreateReachMatrix(pods, policies, namespaces).egressMatrix;
r0 = EmptyList <bool>().AddBack(true).AddBack(false).AddBack(true).AddBack(false).AddBack(false);
r1 = EmptyList <bool>().AddBack(false).AddBack(true).AddBack(true).AddBack(false).AddBack(false);
r2 = EmptyList <bool>().AddBack(false).AddBack(false).AddBack(true).AddBack(false).AddBack(true);
r3 = EmptyList <bool>().AddBack(false).AddBack(false).AddBack(false).AddBack(true).AddBack(false);
r4 = EmptyList <bool>().AddBack(true).AddBack(false).AddBack(true).AddBack(false).AddBack(true);
TestHelper.AssertMatrixEqual(egress, new Zen <IList <bool> >[] { r0, r1, r2, r3, r4 }, "Reachability_Matrix_Test_NS_Pods(egress matrix)");
}
public void NSPodsMapTests()
{
var p1 = Pod.Create("default", EmptyDict <string, string>(), EmptyList <string>());
var p2 = Pod.Create("ns1", EmptyDict <string, string>(), EmptyList <string>());
var p3 = Pod.Create("ns2", EmptyDict <string, string>(), EmptyList <string>());
Zen <Pod>[] pods = new Zen <Pod>[] { p1, p2, p3 };
var output = Algorithms.CreateNSMatrix(pods);
Zen <IList <bool> > r1 = Language.EmptyList <bool>().AddBack(true).AddBack(false).AddBack(false);
Zen <IList <bool> > r2 = Language.EmptyList <bool>().AddBack(false).AddBack(true).AddBack(false);
Zen <IList <bool> > r3 = Language.EmptyList <bool>().AddBack(false).AddBack(false).AddBack(true);
Assert.IsTrue(output.Get(p1.GetNS().GetHashCode()).Value().ToString().Equals(r1.ToString()));
Assert.IsTrue(output.Get(p2.GetNS().GetHashCode()).Value().ToString().Equals(r2.ToString()));
Assert.IsTrue(output.Get(p3.GetNS().GetHashCode()).Value().ToString().Equals(r3.ToString()));
}
public void UserCrossCheckTest()
{
var matrix = new Zen <IList <bool> >[]
{
EmptyList <bool>().AddBack(true).AddBack(true).AddBack(false).AddBack(false).AddBack(false),
EmptyList <bool>().AddBack(false).AddBack(true).AddBack(true).AddBack(false).AddBack(false),
EmptyList <bool>().AddBack(true).AddBack(false).AddBack(true).AddBack(false).AddBack(false),
EmptyList <bool>().AddBack(false).AddBack(false).AddBack(false).AddBack(true).AddBack(false),
EmptyList <bool>().AddBack(true).AddBack(true).AddBack(true).AddBack(true).AddBack(true),
};
Zen <Pod>[] pods = new Zen <Pod>[]
{
Pod.Create("default", EmptyDict <string, string>().Add("user", "v0"), EmptyList <string>().AddBack("user")),
Pod.Create("default", EmptyDict <string, string>().Add("user", "v1"), EmptyList <string>().AddBack("user")),
Pod.Create("ns1", EmptyDict <string, string>().Add("user", "v1"), EmptyList <string>().AddBack("user")),
Pod.Create("ns1", EmptyDict <string, string>().Add("user", "v2"), EmptyList <string>().AddBack("user")),
Pod.Create("ns1", EmptyDict <string, string>().Add("user", "v2"), EmptyList <string>().AddBack("user")),
};
string userKey = "user";
var userHash = Algorithms.GetUserHash(pods, userKey);
var output = Verifier.UserCrossCheck(matrix, userHash, pods, userKey);
var expected = EmptyList <ushort>().AddBack(1).AddBack(3);
Assert.IsTrue(output.ToString().Equals(expected.ToString()), "UserCrossCheckTest: pods list is not correct.\n " +
"Expected: {0}\nGot: {1}", expected.ToString(), output.ToString());
matrix = new Zen <IList <bool> >[]
{
EmptyList <bool>().AddBack(true).AddBack(true).AddBack(false).AddBack(false),
EmptyList <bool>().AddBack(false).AddBack(true).AddBack(false).AddBack(false),
EmptyList <bool>().AddBack(true).AddBack(true).AddBack(true).AddBack(false),
EmptyList <bool>().AddBack(true).AddBack(false).AddBack(false).AddBack(true),
};
pods = new Zen <Pod>[]
{
Pod.Create("default", EmptyDict <string, string>().Add("user", "v0"), EmptyList <string>().AddBack("user")),
Pod.Create("default", EmptyDict <string, string>().Add("user", "v1"), EmptyList <string>().AddBack("user")),
Pod.Create("ns1", EmptyDict <string, string>().Add("user", "v1"), EmptyList <string>().AddBack("user")),
Pod.Create("ns1", EmptyDict <string, string>().Add("user", "v2"), EmptyList <string>().AddBack("user"))
};
userHash = Algorithms.GetUserHash(pods, userKey);
output = Verifier.UserCrossCheck(matrix, userHash, pods, userKey);
expected = EmptyList <ushort>().AddBack(1);
Assert.IsTrue(output.ToString().Equals(expected.ToString()), "UserCrossCheckTest: pods list is not correct.\n " +
"Expected: {0}\nGot: {1}", expected.ToString(), output.ToString());
}
public void UserHashMapTest()
{
Zen <Pod>[] pods = new Zen <Pod>[]
{
Pod.Create("default", EmptyDict <string, string>().Add("user", "v0"), EmptyList <string>().AddBack("user")),
Pod.Create("default", EmptyDict <string, string>().Add("user", "v1"), EmptyList <string>().AddBack("user")),
Pod.Create("ns1", EmptyDict <string, string>().Add("user", "v1"), EmptyList <string>().AddBack("user")),
Pod.Create("ns1", EmptyDict <string, string>().Add("user", "v2"), EmptyList <string>().AddBack("user"))
};
string userKey = "user";
var userHash = Algorithms.GetUserHash(pods, "user");
var r0 = EmptyList <bool>().AddBack(true).AddBack(false).AddBack(false).AddBack(false);
var r1 = EmptyList <bool>().AddBack(false).AddBack(true).AddBack(true).AddBack(false);
var r2 = EmptyList <bool>().AddBack(false).AddBack(false).AddBack(false).AddBack(true);
TestHelper.AssertMatrixEqual(new Zen <IList <bool> >[] {
userHash.Get(pods[0].LabelValue(userKey).GetHashCode()).Value(),
userHash.Get(pods[1].LabelValue(userKey).GetHashCode()).Value(),
userHash.Get(pods[3].LabelValue(userKey).GetHashCode()).Value(),
}, new Zen <IList <bool> >[] { r0, r1, r2 }, "User_Hash_Map_Test");
}
public void ReachabilityMatrix_TwoDirection()
{
Zen <Pod>[] pods = new Zen <Pod>[]
{
Pod.Create("default", EmptyDict <string, string>().Add("k0", "v0"), EmptyList <string>().AddBack("k0")),
Pod.Create("ns1", EmptyDict <string, string>().Add("k1", "v1"), EmptyList <string>().AddBack("k1")),
};
Zen <Namespace>[] namespaces = new Zen <Namespace>[]
{
Namespace.Create("default", EmptyDict <string, string>().Add("k0", "v0"), EmptyList <string>().AddBack("k0")),
Namespace.Create("ns1", EmptyDict <string, string>().Add("k1", "v1"), EmptyList <string>().AddBack("k1"))
};
Zen <Policy>[] policies = new Zen <Policy>[]
{
// only ingress is allowed
Policy.Create("default", EmptyDict <string, string>().Add("k0", "v0"),
EmptyDict <string, string>(), EmptyDict <string, string>().Add("k1", "v1"),
EmptyList <string>().AddBack("k0"), EmptyList <string>(), EmptyList <string>().AddBack("k1")),
// only egress is allowed
Policy.Create("ns1", EmptyDict <string, string>().Add("k1", "v1"),
EmptyDict <string, string>(), EmptyDict <string, string>().Add("k0", "v0"),
EmptyList <string>().AddBack("k1"), EmptyList <string>(), EmptyList <string>().AddBack("k0"),
False(), False()),
};
var ingress = Algorithms.CreateReachMatrix(pods, policies, namespaces).ingressMatrix;
var r0 = EmptyList <bool>().AddBack(true).AddBack(true);
var r1 = EmptyList <bool>().AddBack(false).AddBack(true);
TestHelper.AssertMatrixEqual(ingress, new Zen <IList <bool> >[] { r0, r1 }, "Happy path(ingress matrix)");
var egress = Algorithms.CreateReachMatrix(pods, policies, namespaces).egressMatrix;
r0 = EmptyList <bool>().AddBack(true).AddBack(false);
r1 = EmptyList <bool>().AddBack(true).AddBack(true);
TestHelper.AssertMatrixEqual(egress, new Zen <IList <bool> >[] { r0, r1 }, "Happy path(egress matrix)");
}
