Multi Tenancy E2E Tests Plan and Progress

cluster basic functioning tests

• kube-dns and virtlet are running

• kubectl commands

  Done: create, run, delete, cp, exec, apply, scale, patch, create job, label, autoscale, diff, cluster-info, expose

tenant initialization & deleter tests

• system tenant is created automatically. System tenant cannot be deleted.
• resources (namespaces, service accounts, clusterroles, clsuterrolebindings) created automatically at tenant initialization
• multi-tenancy namespace deleter
• tenant deleter

multi-tenancy Kubectl commands

All the tests should be done by

• a regular tenant with the tenant admin context specified
• by a system tenant user with "--tenant" option

Tests for some verbs are done

 **Done**: create, run, delete, cp, exec, apply, scale, patch, create job, label, autoscale, diff, cluster-info, expose

controllers

• deployment controller
• replicaset controller
• serviceaccount controller
• token controller
• endpoints controller

access control

• regular tenants can not visit resources like nodes

CRD

• per-tenant CRD
• system forced CRD

Protection on fixed bugs