1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
|
// Copyright Vespa.ai. Licensed under the terms of the Apache 2.0 license. See LICENSE in the project root.
package com.yahoo.vespa.hosted.controller.maintenance;
import com.yahoo.config.provision.TenantName;
import com.yahoo.vespa.hosted.controller.Instance;
import com.yahoo.vespa.hosted.controller.api.integration.aws.MockRoleService;
import com.yahoo.vespa.hosted.controller.application.pkg.ApplicationPackage;
import com.yahoo.vespa.hosted.controller.deployment.ApplicationPackageBuilder;
import com.yahoo.vespa.hosted.controller.deployment.DeploymentContext;
import com.yahoo.vespa.hosted.controller.deployment.DeploymentTester;
import com.yahoo.vespa.hosted.controller.tenant.Tenant;
import org.junit.jupiter.api.Test;
import java.time.Duration;
import java.time.Instant;
import java.util.List;
import java.util.stream.Collectors;
import static org.junit.jupiter.api.Assertions.assertEquals;
import static org.junit.jupiter.api.Assertions.assertFalse;
import static org.junit.jupiter.api.Assertions.assertTrue;
/**
* @author mortent
*/
public class TenantRoleMaintainerTest {
private final DeploymentTester tester = new DeploymentTester();
@Test
void maintains_iam_roles_for_tenants_in_production() {
var devAppTenant1 = tester.newDeploymentContext("tenant1", "app1", "default");
var prodAppTenant2 = tester.newDeploymentContext("tenant2", "app2", "default");
var devAppTenant2 = tester.newDeploymentContext("tenant2", "app3", "default");
var perfAppTenant1 = tester.newDeploymentContext("tenant3", "app1", "default");
ApplicationPackage appPackage = new ApplicationPackageBuilder()
.region("us-west-1")
.build();
// Deploy dev apps
devAppTenant1.runJob(DeploymentContext.devUsEast1, appPackage);
devAppTenant2.runJob(DeploymentContext.devUsEast1, appPackage);
// Deploy perf apps
perfAppTenant1.runJob(DeploymentContext.perfUsEast3, appPackage);
// Deploy prod
prodAppTenant2.submit(appPackage).deploy();
assertEquals(1, permanentDeployments(devAppTenant1.instance()));
assertEquals(1, permanentDeployments(devAppTenant2.instance()));
assertEquals(1, permanentDeployments(prodAppTenant2.instance()));
var maintainer = new TenantRoleMaintainer(tester.controller(), Duration.ofDays(1));
maintainer.maintain();
var roleService = tester.controller().serviceRegistry().roleService();
List<TenantName> tenantNames = ((MockRoleService) roleService).maintainedTenants();
assertTrue(tenantNames.containsAll(List.of(prodAppTenant2.application().id().tenant(), perfAppTenant1.application().id().tenant())));
}
@Test
void maintain_batch() {
var tenants = List.of(
tester.newDeploymentContext("tenant1", "app1", "default"),
tester.newDeploymentContext("tenant2", "app1", "default"),
tester.newDeploymentContext("tenant3", "app1", "default"),
tester.newDeploymentContext("tenant4", "app1", "default"),
tester.newDeploymentContext("tenant5", "app1", "default"),
tester.newDeploymentContext("tenant6", "app1", "default"));
var maintainer = new TenantRoleMaintainer(tester.controller(), Duration.ofDays(1));
maintainer.maintain();
var maintainedTenants = tester.controller().tenants().asList().stream()
.filter(t -> t.tenantRolesLastMaintained() != Instant.EPOCH)
.toList();
var unmaintainedTenants = tester.controller().tenants().asList().stream()
.filter(t -> t.tenantRolesLastMaintained() == Instant.EPOCH)
.toList();
assertEquals(5, maintainedTenants.size());
assertEquals(1, unmaintainedTenants.size());
tester.clock().advance(Duration.ofDays(1));
maintainer.maintain();
var result = tester.controller().tenants().asList().stream()
.collect(Collectors.groupingBy(Tenant::tenantRolesLastMaintained));
assertFalse(result.containsKey(Instant.EPOCH));
}
private long permanentDeployments(Instance instance) {
return tester.controller().applications().requireInstance(instance.id()).deployments().values().stream()
.filter(deployment -> !deployment.zone().environment().isTest())
.count();
}
}
|
