Multi Tenancy E2E Tests Plan and Progress

cluster basic functioning tests

• kube-dns and virtlet are running

tenant initialization & deleter tests

• system tenant is created automatically. System tenant cannot be deleted.
• resources (namespaces, service accounts, clusterroles, clsuterrolebindings) created automatically at tenant initialization
• multi-tenancy namespace deleter
• tenant deleter

multi—tenancy Kubectl commands

All the tests should be done on

• System tenant
• a regular tenant with the tenant admin context specified
• a regular tenant scope with "--tenant" option by a system tenant user
• get
• create
• run
• delete
• cp
• exec
• apply
• scale
• patch
• create job
• label
• autoscale
• diff
• cluster-info
• expose

controllers

• deployment controller

access control

• regular tenants can not visit resources like nodes

CRD

• per-tenant CRD
• system forced CRD

Protection on fixed bugs