This document discusses testing Kubernetes resources using Python. It covers setting up Python and installing the Kubernetes client library. It then discusses various Kubernetes API testing concepts like contexts, nodes, roles, namespaces, services, pods, deployments and secrets. The goal is to make sure new deployments are functioning properly across different environments and API versions.

1. K8S FOR K8 API TESTING
2023 © Visualpath All Rights Reserved. | Designed By Visualpath

2. INTRODUCTION
• About the topic
• Testing done Kubernetes resources using pytjhfjyhon.
• Testing Architecture
Python Script
Kubernetes-client
Python compiler
Kube config
Kubernetes control
plane
API Server
2023 © Visualpath All Rights Reserved. | Designed By Visualpath

3. PYTHON SETUP
• Python CLI commands
• Version
• path
2023 © Visualpath All Rights Reserved. | Designed By Visualpath

4. PYTHON PEP8
• Docstrings
• Linting
• https://peps.python.org/pep-0008/
2023 © Visualpath All Rights Reserved. | Designed By Visualpath

5. PYTHON UNIT TEST ESSENTIALS
• Decorator
• It’s a wrapper to a function
• Stestr
• Third party tool for executing test case as a batch file
2023 © Visualpath All Rights Reserved. | Designed By Visualpath

6. MOCKING IN UNIT TESTS
• Mocks
• It allows you to replace parts of your system under test with mock objects
and make assertions about how they have been used
2023 © Visualpath All Rights Reserved. | Designed By Visualpath

7. EXAMPLE FOR MOCKING
• values = {'a': 1, 'b': 2, 'c': 3}
• def side_effect(arg):
• ... return values[arg]
• mock.side_effect = side_effect
• mock('a'), mock('b'), mock('c') (1, 2, 3)
• mock.side_effect = [5, 4, 3, 2, 1]
• mock(), mock(), mock()
2023 © Visualpath All Rights Reserved. | Designed By Visualpath

8. PYTHON KUBERNETES ESSENTIALS
• Yaml parser
• Kube-config
• Kubernetes-client
• proxy setup
2023 © Visualpath All Rights Reserved. | Designed By Visualpath

9. INTRODUCTION TO WHY KUBERNETES API
TESTING
• To make sure your new deployments are up and running
• Could be that your APIs are behind a VPN or a firewall or you need a special kind of authentication
• Differences in the various environments
• Changes in APIs due to ongoing API development and the necessity to test multiple versions.
2023 © Visualpath All Rights Reserved. | Designed By Visualpath

10. CONTEXT
• To get the current context
• To know on which cluster the context is
• kubectl config get-contexts
• config.list_kube_config_contexts()
2023 © Visualpath All Rights Reserved. | Designed By Visualpath

11. NODES
• To check the nodes states
• listing the nodes
• Describe the nodes
• Parse the required parameter of node output
• Node selector
• state
2023 © Visualpath All Rights Reserved. | Designed By Visualpath

12. RBAC ROLES
• Permissions for namespaced resources
• To list the roles
• To create the roles
• kubectl get rolebindings
• client.RbacAuthorizationV1Api()
2023 © Visualpath All Rights Reserved. | Designed By Visualpath

13. CLUSTER ROLES
• Permissions at cluster level
• We test the clusterrole bindings associated with the namespace.
• kubectl get clusterroles
• list_cluster_role()
2023 © Visualpath All Rights Reserved. | Designed By Visualpath

14. NODE CERTIFICATES VALIDITY
• By default, kubeadm generates all the certificates needed for a cluster to run. You can override this behaviour by
providing your own certificates.
• kubeadm certs check-expiration
2023 © Visualpath All Rights Reserved. | Designed By Visualpath

15. NAMESPACES
• To get list of all namespaces in cluster
• We test our list of namespaces are present in the cluster
• Kubectl get ns
• list_namespace()
2023 © Visualpath All Rights Reserved. | Designed By Visualpath

16. SERVICES
• A service is a method for exposing a network application that is running as one or more pods in your
cluster as an api
• We test our namespace services are present in the namespace.
• Check the endpoints are available
• We do not guarantee that svc is functionally running.
• Kubectl get svc
• list_service_for_all_namespaces
2023 © Visualpath All Rights Reserved. | Designed By Visualpath

17. PODS
• A Pod is a containers.
• We and running state
• Kubectl get pods
• list_pod_for_all_namespaces
2023 © Visualpath All Rights Reserved. | Designed By Visualpath

18. POD REPLICA
• Replicaset will be indicating how many Pods it should be maintaining.
• We test pod replicas present and matching with our count
• Kubectl get pods
• V1ReplicaSet
2023 © Visualpath All Rights Reserved. | Designed By Visualpath

19. AGE OF PODS
2023 © Visualpath All Rights Reserved. | Designed By Visualpath

20. CONFIGMAP
• A ConfigMap is an API object used to store non-confidential data in key-value pairs
• We test the presence of configmap
• We test the data inside the configmap
• Kubectl get configmap
• list_namespaced_config_map
2023 © Visualpath All Rights Reserved. | Designed By Visualpath

21. DEPLOYMENT
• Deployment is controller of pods
• We test the deployment is present in the given namespace.
• Kubectl get deploy
• list_deployment_for_all_namespaces
2023 © Visualpath All Rights Reserved. | Designed By Visualpath

22. DEPLOYMENT SPECS
• Specs are the other configurations related to the kind
• We test the images names and selector in the deployments are as expected
• Pythonic code to traverse the deployment output
2023 © Visualpath All Rights Reserved. | Designed By Visualpath

23. SECRETS
• A Secret is an object that contains a small amount of sensitive data such as a password
• We test the presence of secret in the namespace
• We can’t decrypt the secret so we cant guarantee the data behind
• Kubectl get secrets
2023 © Visualpath All Rights Reserved. | Designed By Visualpath

24. VOLUMES
• A volume is a directoryin it, which is accessible to the containers in a pod.
2023 © Visualpath All Rights Reserved. | Designed By Visualpath

25. STATEFULSET
• StatefulSet manages Pods that are
• We statefullset in the namespace
• Kubectl
2023 © Visualpath All Rights Reserved. | Designed By Visualpath