Skip to content

Commit 233430d

Browse files
zirainzirain
committed
test
Signed-off-by: zirain <zirain2009@gmail.com>
1 parent 86cf151 commit 233430d

File tree

2 files changed

+328
-0
lines changed

2 files changed

+328
-0
lines changed

‎internal/gatewayapi/testdata/backendtlspolicy-ca-clustertrustbundle.in.yaml

Lines changed: 134 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,134 @@
1+
gateways:
2+
- apiVersion: gateway.networking.k8s.io/v1
3+
kind: Gateway
4+
metadata:
5+
name: gateway-btls
6+
namespace: envoy-gateway
7+
spec:
8+
gatewayClassName: envoy-gateway-class
9+
listeners:
10+
- name: http
11+
protocol: HTTP
12+
port: 80
13+
allowedRoutes:
14+
namespaces:
15+
from: All
16+
httpRoutes:
17+
- apiVersion: gateway.networking.k8s.io/v1
18+
kind: HTTPRoute
19+
metadata:
20+
name: httproute-btls
21+
namespace: envoy-gateway
22+
spec:
23+
parentRefs:
24+
- namespace: envoy-gateway
25+
name: gateway-btls
26+
sectionName: http
27+
rules:
28+
- matches:
29+
- path:
30+
type: Exact
31+
value: "/exact"
32+
backendRefs:
33+
- name: http-backend
34+
namespace: backends
35+
port: 8080
36+
37+
referenceGrants:
38+
- apiVersion: gateway.networking.k8s.io/v1alpha2
39+
kind: ReferenceGrant
40+
metadata:
41+
name: refg-route-svc
42+
namespace: backends
43+
spec:
44+
from:
45+
- group: gateway.networking.k8s.io
46+
kind: HTTPRoute
47+
namespace: envoy-gateway
48+
- group: gateway.networking.k8s.io
49+
kind: Gateway
50+
namespace: envoy-gateway
51+
- group: gateway.networking.k8s.io
52+
kind: BackendTLSPolicy
53+
namespace: policies
54+
to:
55+
- group: ""
56+
kind: Service
57+
services:
58+
- apiVersion: v1
59+
kind: Service
60+
metadata:
61+
name: http-backend
62+
namespace: backends
63+
spec:
64+
clusterIP: 10.11.12.13
65+
ports:
66+
- port: 8080
67+
name: http
68+
protocol: TCP
69+
targetPort: 8080
70+
71+
endpointSlices:
72+
- apiVersion: discovery.k8s.io/v1
73+
kind: EndpointSlice
74+
metadata:
75+
name: endpointslice-http-backend
76+
namespace: backends
77+
labels:
78+
kubernetes.io/service-name: http-backend
79+
addressType: IPv4
80+
ports:
81+
- name: http
82+
protocol: TCP
83+
port: 8080
84+
endpoints:
85+
- addresses:
86+
- "10.244.0.11"
87+
conditions:
88+
ready: true
89+
clusterTrustBundles:
90+
- apiVersion: certificates.k8s.io/v1alpha1
91+
kind: ClusterTrustBundle
92+
metadata:
93+
creationTimestamp: "2025-06-18T03:19:03Z"
94+
name: ca-cluster-trust-bundle
95+
spec:
96+
trustBundle: |
97+
-----BEGIN CERTIFICATE-----
98+
MIIDQzCCAiugAwIBAgIBATANBgkqhkiG9w0BAQsFADBCMRMwEQYDVQQKEwpFbnZv
99+
eVByb3h5MRAwDgYDVQQLEwdHYXRld2F5MRkwFwYDVQQDExBFbnZveSBHYXRld2F5
100+
IENBMCAXDTI0MDMxMDE1MzIxN1oYDzIxMjQwMzEwMTYzMjE3WjBCMRMwEQYDVQQK
101+
EwpFbnZveVByb3h5MRAwDgYDVQQLEwdHYXRld2F5MRkwFwYDVQQDExBFbnZveSBH
102+
YXRld2F5IENBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7ZFmGB4e
103+
m1KdGEohAZBfqydAEGLDHJ1YyfHWdd+vBAevdW64bZx3pggJOtgCnePuFd02rDQS
104+
dlsJlX/6mFtoQilo6wvxDSJRfaTDbtfTjw+7k8yfd/Jsmh0RWG+UeyI7Na9sXAz7
105+
b57mpxsCoNowzeK5ETiOGGNWPcjENJkSnBarz5muN00xIZWBU+yN5PLJNxZvxpZJ
106+
Ol/SSI8sno0e0PxAmp3fe7QaXiZj/TAGJPGuTJkUxrHqyZGJtYUxsS8A0dT1zBjj
107+
izA5Dp+b5yzYo23Hh7BgpbZ7X4gsDThFuwCD6fHyepuv2zHPqvSsdqg2hAhDp91R
108+
zrn7a9GxG2VSIwIDAQABo0IwQDAOBgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUw
109+
AwEB/zAdBgNVHQ4EFgQUUpP1aZ1M2KIuPPWrNPDV2c5CngowDQYJKoZIhvcNAQEL
110+
BQADggEBAGSEkAVz+Z0qS4FmA0q4SCpIIq64bsdEjiUzev7pK1LEK0/Y28QBPixV
111+
cUXfax18VPR9pls1JgXto9qY+C0hnRZic6611QTJlWK1p6dinQ/eDdYCBC+nv5xx
112+
ssASwmplIxMvj3S1qF6dr7sMI2ZVD5HElTWdO19UBLyhiKKZW2KxDsYj+5NRwGFe
113+
G+JuDgq7njUM8mdyYk0NehefdBUEUUCQtnwUtW95/429XwqQROuRDteGT9kjD+Y5
114+
ea5mW4mfqLeuGJXZs9bdWjKKdLQPrn9IshPysWqz2Hz8dQ1f7N9/g8UWVSjd4cyx
115+
S5EAolzVv0yB7wHCWCgfG/ckdOTUNnE=
116+
-----END CERTIFICATE-----
117+
backendTLSPolicies:
118+
- apiVersion: gateway.networking.k8s.io/v1alpha2
119+
kind: BackendTLSPolicy
120+
metadata:
121+
name: policy-btls
122+
namespace: backends
123+
spec:
124+
targetRefs:
125+
- group: ""
126+
kind: Service
127+
name: http-backend
128+
sectionName: http
129+
validation:
130+
caCertificateRefs:
131+
- name: ca-cluster-trust-bundle
132+
group: ""
133+
kind: ClusterTrustBundle
134+
hostname: example.com

‎internal/gatewayapi/testdata/backendtlspolicy-ca-clustertrustbundle.out.yaml

Lines changed: 194 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,194 @@
1+
backendTLSPolicies:
2+
- apiVersion: gateway.networking.k8s.io/v1alpha2
3+
kind: BackendTLSPolicy
4+
metadata:
5+
creationTimestamp: null
6+
name: policy-btls
7+
namespace: backends
8+
spec:
9+
targetRefs:
10+
- group: ""
11+
kind: Service
12+
name: http-backend
13+
sectionName: http
14+
validation:
15+
caCertificateRefs:
16+
- group: ""
17+
kind: ClusterTrustBundle
18+
name: ca-cluster-trust-bundle
19+
hostname: example.com
20+
status:
21+
ancestors:
22+
- ancestorRef:
23+
name: gateway-btls
24+
namespace: envoy-gateway
25+
sectionName: http
26+
conditions:
27+
- lastTransitionTime: null
28+
message: Policy has been accepted.
29+
reason: Accepted
30+
status: "True"
31+
type: Accepted
32+
controllerName: gateway.envoyproxy.io/gatewayclass-controller
33+
gateways:
34+
- apiVersion: gateway.networking.k8s.io/v1
35+
kind: Gateway
36+
metadata:
37+
creationTimestamp: null
38+
name: gateway-btls
39+
namespace: envoy-gateway
40+
spec:
41+
gatewayClassName: envoy-gateway-class
42+
listeners:
43+
- allowedRoutes:
44+
namespaces:
45+
from: All
46+
name: http
47+
port: 80
48+
protocol: HTTP
49+
status:
50+
listeners:
51+
- attachedRoutes: 1
52+
conditions:
53+
- lastTransitionTime: null
54+
message: Sending translated listener configuration to the data plane
55+
reason: Programmed
56+
status: "True"
57+
type: Programmed
58+
- lastTransitionTime: null
59+
message: Listener has been successfully translated
60+
reason: Accepted
61+
status: "True"
62+
type: Accepted
63+
- lastTransitionTime: null
64+
message: Listener references have been resolved
65+
reason: ResolvedRefs
66+
status: "True"
67+
type: ResolvedRefs
68+
name: http
69+
supportedKinds:
70+
- group: gateway.networking.k8s.io
71+
kind: HTTPRoute
72+
- group: gateway.networking.k8s.io
73+
kind: GRPCRoute
74+
httpRoutes:
75+
- apiVersion: gateway.networking.k8s.io/v1
76+
kind: HTTPRoute
77+
metadata:
78+
creationTimestamp: null
79+
name: httproute-btls
80+
namespace: envoy-gateway
81+
spec:
82+
parentRefs:
83+
- name: gateway-btls
84+
namespace: envoy-gateway
85+
sectionName: http
86+
rules:
87+
- backendRefs:
88+
- name: http-backend
89+
namespace: backends
90+
port: 8080
91+
matches:
92+
- path:
93+
type: Exact
94+
value: /exact
95+
status:
96+
parents:
97+
- conditions:
98+
- lastTransitionTime: null
99+
message: Route is accepted
100+
reason: Accepted
101+
status: "True"
102+
type: Accepted
103+
- lastTransitionTime: null
104+
message: Resolved all the Object references for the Route
105+
reason: ResolvedRefs
106+
status: "True"
107+
type: ResolvedRefs
108+
controllerName: gateway.envoyproxy.io/gatewayclass-controller
109+
parentRef:
110+
name: gateway-btls
111+
namespace: envoy-gateway
112+
sectionName: http
113+
infraIR:
114+
envoy-gateway/gateway-btls:
115+
proxy:
116+
listeners:
117+
- address: null
118+
name: envoy-gateway/gateway-btls/http
119+
ports:
120+
- containerPort: 10080
121+
name: http-80
122+
protocol: HTTP
123+
servicePort: 80
124+
metadata:
125+
labels:
126+
gateway.envoyproxy.io/owning-gateway-name: gateway-btls
127+
gateway.envoyproxy.io/owning-gateway-namespace: envoy-gateway
128+
ownerReference:
129+
kind: GatewayClass
130+
name: envoy-gateway-class
131+
name: envoy-gateway/gateway-btls
132+
namespace: envoy-gateway-system
133+
xdsIR:
134+
envoy-gateway/gateway-btls:
135+
accessLog:
136+
json:
137+
- path: /dev/stdout
138+
http:
139+
- address: 0.0.0.0
140+
hostnames:
141+
- '*'
142+
isHTTP2: false
143+
metadata:
144+
kind: Gateway
145+
name: gateway-btls
146+
namespace: envoy-gateway
147+
sectionName: http
148+
name: envoy-gateway/gateway-btls/http
149+
path:
150+
escapedSlashesAction: UnescapeAndRedirect
151+
mergeSlashes: true
152+
port: 10080
153+
routes:
154+
- destination:
155+
metadata:
156+
kind: HTTPRoute
157+
name: httproute-btls
158+
namespace: envoy-gateway
159+
name: httproute/envoy-gateway/httproute-btls/rule/0
160+
settings:
161+
- addressType: IP
162+
endpoints:
163+
- host: 10.244.0.11
164+
port: 8080
165+
metadata:
166+
kind: Service
167+
name: http-backend
168+
namespace: backends
169+
sectionName: "8080"
170+
name: httproute/envoy-gateway/httproute-btls/rule/0/backend/0
171+
protocol: HTTP
172+
tls:
173+
alpnProtocols: null
174+
caCertificate:
175+
certificate: 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
176+
name: policy-btls/backends-ca
177+
sni: example.com
178+
weight: 1
179+
hostname: '*'
180+
isHTTP2: false
181+
metadata:
182+
kind: HTTPRoute
183+
name: httproute-btls
184+
namespace: envoy-gateway
185+
name: httproute/envoy-gateway/httproute-btls/rule/0/match/0/*
186+
pathMatch:
187+
distinct: false
188+
exact: /exact
189+
name: ""
190+
readyListener:
191+
address: 0.0.0.0
192+
ipFamily: IPv4
193+
path: /ready
194+
port: 19003

0 commit comments

Comments
 (0)