| e5ec575b |
// +build !windows
package main
import (
"encoding/json" |
| 76b33fdb |
"fmt" |
| 0da7bd03 |
"path/filepath" |
| e5ec575b |
"strings"
|
| 91e197d6 |
"github.com/docker/docker/api/types" |
| 821aeb6a |
"github.com/docker/docker/api/types/mount" |
| 91e197d6 |
"github.com/docker/docker/api/types/swarm" |
| 33968e6c |
"github.com/docker/docker/integration-cli/checker" |
| e5ec575b |
"github.com/go-check/check" |
| 6345208b |
"gotest.tools/assert" |
| e5ec575b |
)
func (s *DockerSwarmSuite) TestServiceCreateMountVolume(c *check.C) {
d := s.AddDaemon(c, true, true) |
| d012569b |
out, err := d.Cmd("service", "create", "--no-resolve-image", "--detach=true", "--mount", "type=volume,source=foo,target=/foo,volume-nocopy", "busybox", "top") |
| 6345208b |
assert.NilError(c, err, out) |
| e5ec575b |
id := strings.TrimSpace(out)
var tasks []swarm.Task
waitAndAssert(c, defaultReconciliationTimeout, func(c *check.C) (interface{}, check.CommentInterface) { |
| 48de91a3 |
tasks = d.GetServiceTasks(c, id) |
| e5ec575b |
return len(tasks) > 0, nil
}, checker.Equals, true)
task := tasks[0]
waitAndAssert(c, defaultReconciliationTimeout, func(c *check.C) (interface{}, check.CommentInterface) { |
| 9247e099 |
if task.NodeID == "" || task.Status.ContainerStatus == nil { |
| 48de91a3 |
task = d.GetTask(c, task.ID) |
| e5ec575b |
} |
| 9247e099 |
return task.NodeID != "" && task.Status.ContainerStatus != nil, nil |
| e5ec575b |
}, checker.Equals, true)
|
| 821aeb6a |
// check container mount config
out, err = s.nodeCmd(c, task.NodeID, "inspect", "--format", "{{json .HostConfig.Mounts}}", task.Status.ContainerStatus.ContainerID) |
| 6345208b |
assert.NilError(c, err, out) |
| 821aeb6a |
var mountConfig []mount.Mount
c.Assert(json.Unmarshal([]byte(out), &mountConfig), checker.IsNil)
c.Assert(mountConfig, checker.HasLen, 1)
c.Assert(mountConfig[0].Source, checker.Equals, "foo")
c.Assert(mountConfig[0].Target, checker.Equals, "/foo")
c.Assert(mountConfig[0].Type, checker.Equals, mount.TypeVolume)
c.Assert(mountConfig[0].VolumeOptions, checker.NotNil)
c.Assert(mountConfig[0].VolumeOptions.NoCopy, checker.True)
// check container mounts actual |
| e5ec575b |
out, err = s.nodeCmd(c, task.NodeID, "inspect", "--format", "{{json .Mounts}}", task.Status.ContainerStatus.ContainerID) |
| 6345208b |
assert.NilError(c, err, out) |
| e5ec575b |
var mounts []types.MountPoint
c.Assert(json.Unmarshal([]byte(out), &mounts), checker.IsNil)
c.Assert(mounts, checker.HasLen, 1)
|
| 821aeb6a |
c.Assert(mounts[0].Type, checker.Equals, mount.TypeVolume) |
| e5ec575b |
c.Assert(mounts[0].Name, checker.Equals, "foo")
c.Assert(mounts[0].Destination, checker.Equals, "/foo") |
| 56f34224 |
c.Assert(mounts[0].RW, checker.Equals, true) |
| e5ec575b |
} |
| 76b33fdb |
|
| a257f674 |
func (s *DockerSwarmSuite) TestServiceCreateWithSecretSimple(c *check.C) {
d := s.AddDaemon(c, true, true)
serviceName := "test-service-secret"
testName := "test_secret" |
| 48de91a3 |
id := d.CreateSecret(c, swarm.SecretSpec{ |
| 2333b39b |
Annotations: swarm.Annotations{ |
| a257f674 |
Name: testName,
}, |
| 2333b39b |
Data: []byte("TESTINGDATA"), |
| a257f674 |
})
c.Assert(id, checker.Not(checker.Equals), "", check.Commentf("secrets: %s", id))
|
| e5b3ebbc |
out, err := d.Cmd("service", "create", "--detach", "--no-resolve-image", "--name", serviceName, "--secret", testName, "busybox", "top") |
| 6345208b |
assert.NilError(c, err, out) |
| a257f674 |
out, err = d.Cmd("service", "inspect", "--format", "{{ json .Spec.TaskTemplate.ContainerSpec.Secrets }}", serviceName) |
| 6345208b |
assert.NilError(c, err) |
| a257f674 |
var refs []swarm.SecretReference
c.Assert(json.Unmarshal([]byte(out), &refs), checker.IsNil) |
| 6345208b |
assert.Equal(c, len(refs), 1) |
| a257f674 |
c.Assert(refs[0].SecretName, checker.Equals, testName) |
| bebd472e |
c.Assert(refs[0].File, checker.Not(checker.IsNil))
c.Assert(refs[0].File.Name, checker.Equals, testName)
c.Assert(refs[0].File.UID, checker.Equals, "0")
c.Assert(refs[0].File.GID, checker.Equals, "0") |
| 76b33fdb |
|
| 67d282a5 |
out, err = d.Cmd("service", "rm", serviceName) |
| 6345208b |
assert.NilError(c, err, out) |
| 67d282a5 |
d.DeleteSecret(c, testName)
} |
| 76b33fdb |
|
| 67d282a5 |
func (s *DockerSwarmSuite) TestServiceCreateWithSecretSourceTargetPaths(c *check.C) {
d := s.AddDaemon(c, true, true) |
| 76b33fdb |
|
| 67d282a5 |
testPaths := map[string]string{ |
| 0da7bd03 |
"app": "/etc/secret",
"test_secret": "test_secret",
"relative_secret": "relative/secret",
"escapes_in_container": "../secret", |
| 67d282a5 |
} |
| 0da7bd03 |
var secretFlags []string
|
| 67d282a5 |
for testName, testTarget := range testPaths {
id := d.CreateSecret(c, swarm.SecretSpec{
Annotations: swarm.Annotations{
Name: testName,
}, |
| 0da7bd03 |
Data: []byte("TESTINGDATA " + testName + " " + testTarget), |
| 67d282a5 |
})
c.Assert(id, checker.Not(checker.Equals), "", check.Commentf("secrets: %s", id))
|
| 0da7bd03 |
secretFlags = append(secretFlags, "--secret", fmt.Sprintf("source=%s,target=%s", testName, testTarget))
}
serviceName := "svc" |
| e5b3ebbc |
serviceCmd := []string{"service", "create", "--detach", "--no-resolve-image", "--name", serviceName} |
| 0da7bd03 |
serviceCmd = append(serviceCmd, secretFlags...)
serviceCmd = append(serviceCmd, "busybox", "top")
out, err := d.Cmd(serviceCmd...) |
| 6345208b |
assert.NilError(c, err, out) |
| 0da7bd03 |
out, err = d.Cmd("service", "inspect", "--format", "{{ json .Spec.TaskTemplate.ContainerSpec.Secrets }}", serviceName) |
| 6345208b |
assert.NilError(c, err) |
| 0da7bd03 |
var refs []swarm.SecretReference
c.Assert(json.Unmarshal([]byte(out), &refs), checker.IsNil) |
| 6345208b |
assert.Equal(c, len(refs), len(testPaths)) |
| 0da7bd03 |
var tasks []swarm.Task
waitAndAssert(c, defaultReconciliationTimeout, func(c *check.C) (interface{}, check.CommentInterface) {
tasks = d.GetServiceTasks(c, serviceName)
return len(tasks) > 0, nil
}, checker.Equals, true) |
| 67d282a5 |
|
| 0da7bd03 |
task := tasks[0]
waitAndAssert(c, defaultReconciliationTimeout, func(c *check.C) (interface{}, check.CommentInterface) { |
| 9247e099 |
if task.NodeID == "" || task.Status.ContainerStatus == nil { |
| 0da7bd03 |
task = d.GetTask(c, task.ID)
} |
| 9247e099 |
return task.NodeID != "" && task.Status.ContainerStatus != nil, nil |
| 0da7bd03 |
}, checker.Equals, true)
for testName, testTarget := range testPaths {
path := testTarget
if !filepath.IsAbs(path) {
path = filepath.Join("/run/secrets", path)
}
out, err := d.Cmd("exec", task.Status.ContainerStatus.ContainerID, "cat", path) |
| 6345208b |
assert.NilError(c, err)
assert.Equal(c, out, "TESTINGDATA "+testName+" "+testTarget) |
| 0da7bd03 |
} |
| 67d282a5 |
|
| 0da7bd03 |
out, err = d.Cmd("service", "rm", serviceName) |
| 6345208b |
assert.NilError(c, err, out) |
| 0da7bd03 |
} |
| 67d282a5 |
|
| 0da7bd03 |
func (s *DockerSwarmSuite) TestServiceCreateWithSecretReferencedTwice(c *check.C) {
d := s.AddDaemon(c, true, true) |
| 67d282a5 |
|
| 0da7bd03 |
id := d.CreateSecret(c, swarm.SecretSpec{
Annotations: swarm.Annotations{
Name: "mysecret",
},
Data: []byte("TESTINGDATA"),
})
c.Assert(id, checker.Not(checker.Equals), "", check.Commentf("secrets: %s", id))
serviceName := "svc" |
| e5b3ebbc |
out, err := d.Cmd("service", "create", "--detach", "--no-resolve-image", "--name", serviceName, "--secret", "source=mysecret,target=target1", "--secret", "source=mysecret,target=target2", "busybox", "top") |
| 6345208b |
assert.NilError(c, err, out) |
| 0da7bd03 |
out, err = d.Cmd("service", "inspect", "--format", "{{ json .Spec.TaskTemplate.ContainerSpec.Secrets }}", serviceName) |
| 6345208b |
assert.NilError(c, err) |
| 0da7bd03 |
var refs []swarm.SecretReference
c.Assert(json.Unmarshal([]byte(out), &refs), checker.IsNil) |
| 6345208b |
assert.Equal(c, len(refs), 2) |
| 0da7bd03 |
var tasks []swarm.Task
waitAndAssert(c, defaultReconciliationTimeout, func(c *check.C) (interface{}, check.CommentInterface) {
tasks = d.GetServiceTasks(c, serviceName)
return len(tasks) > 0, nil
}, checker.Equals, true)
task := tasks[0]
waitAndAssert(c, defaultReconciliationTimeout, func(c *check.C) (interface{}, check.CommentInterface) { |
| 9247e099 |
if task.NodeID == "" || task.Status.ContainerStatus == nil { |
| 0da7bd03 |
task = d.GetTask(c, task.ID)
} |
| 9247e099 |
return task.NodeID != "" && task.Status.ContainerStatus != nil, nil |
| 0da7bd03 |
}, checker.Equals, true) |
| 67d282a5 |
|
| 0da7bd03 |
for _, target := range []string{"target1", "target2"} { |
| 6345208b |
assert.NilError(c, err, out) |
| 0da7bd03 |
path := filepath.Join("/run/secrets", target)
out, err := d.Cmd("exec", task.Status.ContainerStatus.ContainerID, "cat", path) |
| 6345208b |
assert.NilError(c, err)
assert.Equal(c, out, "TESTINGDATA") |
| 67d282a5 |
} |
| 0da7bd03 |
out, err = d.Cmd("service", "rm", serviceName) |
| 6345208b |
assert.NilError(c, err, out) |
| 76b33fdb |
} |
| 821aeb6a |
|
| d2c5b6ee |
func (s *DockerSwarmSuite) TestServiceCreateWithConfigSimple(c *check.C) {
d := s.AddDaemon(c, true, true)
serviceName := "test-service-config"
testName := "test_config"
id := d.CreateConfig(c, swarm.ConfigSpec{
Annotations: swarm.Annotations{
Name: testName,
},
Data: []byte("TESTINGDATA"),
})
c.Assert(id, checker.Not(checker.Equals), "", check.Commentf("configs: %s", id))
|
| e5b3ebbc |
out, err := d.Cmd("service", "create", "--detach", "--no-resolve-image", "--name", serviceName, "--config", testName, "busybox", "top") |
| 6345208b |
assert.NilError(c, err, out) |
| d2c5b6ee |
out, err = d.Cmd("service", "inspect", "--format", "{{ json .Spec.TaskTemplate.ContainerSpec.Configs }}", serviceName) |
| 6345208b |
assert.NilError(c, err) |
| d2c5b6ee |
var refs []swarm.ConfigReference
c.Assert(json.Unmarshal([]byte(out), &refs), checker.IsNil) |
| 6345208b |
assert.Equal(c, len(refs), 1) |
| d2c5b6ee |
c.Assert(refs[0].ConfigName, checker.Equals, testName)
c.Assert(refs[0].File, checker.Not(checker.IsNil))
c.Assert(refs[0].File.Name, checker.Equals, testName)
c.Assert(refs[0].File.UID, checker.Equals, "0")
c.Assert(refs[0].File.GID, checker.Equals, "0")
out, err = d.Cmd("service", "rm", serviceName) |
| 6345208b |
assert.NilError(c, err, out) |
| d2c5b6ee |
d.DeleteConfig(c, testName)
}
func (s *DockerSwarmSuite) TestServiceCreateWithConfigSourceTargetPaths(c *check.C) {
d := s.AddDaemon(c, true, true)
testPaths := map[string]string{
"app": "/etc/config",
"test_config": "test_config",
"relative_config": "relative/config",
}
var configFlags []string
for testName, testTarget := range testPaths {
id := d.CreateConfig(c, swarm.ConfigSpec{
Annotations: swarm.Annotations{
Name: testName,
},
Data: []byte("TESTINGDATA " + testName + " " + testTarget),
})
c.Assert(id, checker.Not(checker.Equals), "", check.Commentf("configs: %s", id))
configFlags = append(configFlags, "--config", fmt.Sprintf("source=%s,target=%s", testName, testTarget))
}
serviceName := "svc" |
| e5b3ebbc |
serviceCmd := []string{"service", "create", "--detach", "--no-resolve-image", "--name", serviceName} |
| d2c5b6ee |
serviceCmd = append(serviceCmd, configFlags...)
serviceCmd = append(serviceCmd, "busybox", "top")
out, err := d.Cmd(serviceCmd...) |
| 6345208b |
assert.NilError(c, err, out) |
| d2c5b6ee |
out, err = d.Cmd("service", "inspect", "--format", "{{ json .Spec.TaskTemplate.ContainerSpec.Configs }}", serviceName) |
| 6345208b |
assert.NilError(c, err) |
| d2c5b6ee |
var refs []swarm.ConfigReference
c.Assert(json.Unmarshal([]byte(out), &refs), checker.IsNil) |
| 6345208b |
assert.Equal(c, len(refs), len(testPaths)) |
| d2c5b6ee |
var tasks []swarm.Task
waitAndAssert(c, defaultReconciliationTimeout, func(c *check.C) (interface{}, check.CommentInterface) {
tasks = d.GetServiceTasks(c, serviceName)
return len(tasks) > 0, nil
}, checker.Equals, true)
task := tasks[0]
waitAndAssert(c, defaultReconciliationTimeout, func(c *check.C) (interface{}, check.CommentInterface) { |
| 9247e099 |
if task.NodeID == "" || task.Status.ContainerStatus == nil { |
| d2c5b6ee |
task = d.GetTask(c, task.ID)
} |
| 9247e099 |
return task.NodeID != "" && task.Status.ContainerStatus != nil, nil |
| d2c5b6ee |
}, checker.Equals, true)
for testName, testTarget := range testPaths {
path := testTarget
if !filepath.IsAbs(path) {
path = filepath.Join("/", path)
}
out, err := d.Cmd("exec", task.Status.ContainerStatus.ContainerID, "cat", path) |
| 6345208b |
assert.NilError(c, err)
assert.Equal(c, out, "TESTINGDATA "+testName+" "+testTarget) |
| d2c5b6ee |
}
out, err = d.Cmd("service", "rm", serviceName) |
| 6345208b |
assert.NilError(c, err, out) |
| d2c5b6ee |
}
func (s *DockerSwarmSuite) TestServiceCreateWithConfigReferencedTwice(c *check.C) {
d := s.AddDaemon(c, true, true)
id := d.CreateConfig(c, swarm.ConfigSpec{
Annotations: swarm.Annotations{
Name: "myconfig",
},
Data: []byte("TESTINGDATA"),
})
c.Assert(id, checker.Not(checker.Equals), "", check.Commentf("configs: %s", id))
serviceName := "svc" |
| e5b3ebbc |
out, err := d.Cmd("service", "create", "--detach", "--no-resolve-image", "--name", serviceName, "--config", "source=myconfig,target=target1", "--config", "source=myconfig,target=target2", "busybox", "top") |
| 6345208b |
assert.NilError(c, err, out) |
| d2c5b6ee |
out, err = d.Cmd("service", "inspect", "--format", "{{ json .Spec.TaskTemplate.ContainerSpec.Configs }}", serviceName) |
| 6345208b |
assert.NilError(c, err) |
| d2c5b6ee |
var refs []swarm.ConfigReference
c.Assert(json.Unmarshal([]byte(out), &refs), checker.IsNil) |
| 6345208b |
assert.Equal(c, len(refs), 2) |
| d2c5b6ee |
var tasks []swarm.Task
waitAndAssert(c, defaultReconciliationTimeout, func(c *check.C) (interface{}, check.CommentInterface) {
tasks = d.GetServiceTasks(c, serviceName)
return len(tasks) > 0, nil
}, checker.Equals, true)
task := tasks[0]
waitAndAssert(c, defaultReconciliationTimeout, func(c *check.C) (interface{}, check.CommentInterface) { |
| 9247e099 |
if task.NodeID == "" || task.Status.ContainerStatus == nil { |
| d2c5b6ee |
task = d.GetTask(c, task.ID)
} |
| 9247e099 |
return task.NodeID != "" && task.Status.ContainerStatus != nil, nil |
| d2c5b6ee |
}, checker.Equals, true)
for _, target := range []string{"target1", "target2"} { |
| 6345208b |
assert.NilError(c, err, out) |
| d2c5b6ee |
path := filepath.Join("/", target)
out, err := d.Cmd("exec", task.Status.ContainerStatus.ContainerID, "cat", path) |
| 6345208b |
assert.NilError(c, err)
assert.Equal(c, out, "TESTINGDATA") |
| d2c5b6ee |
}
out, err = d.Cmd("service", "rm", serviceName) |
| 6345208b |
assert.NilError(c, err, out) |
| d2c5b6ee |
}
|
| 821aeb6a |
func (s *DockerSwarmSuite) TestServiceCreateMountTmpfs(c *check.C) {
d := s.AddDaemon(c, true, true) |
| d012569b |
out, err := d.Cmd("service", "create", "--no-resolve-image", "--detach=true", "--mount", "type=tmpfs,target=/foo,tmpfs-size=1MB", "busybox", "sh", "-c", "mount | grep foo; tail -f /dev/null") |
| 6345208b |
assert.NilError(c, err, out) |
| 821aeb6a |
id := strings.TrimSpace(out)
var tasks []swarm.Task
waitAndAssert(c, defaultReconciliationTimeout, func(c *check.C) (interface{}, check.CommentInterface) { |
| 48de91a3 |
tasks = d.GetServiceTasks(c, id) |
| 821aeb6a |
return len(tasks) > 0, nil
}, checker.Equals, true)
task := tasks[0]
waitAndAssert(c, defaultReconciliationTimeout, func(c *check.C) (interface{}, check.CommentInterface) { |
| 9247e099 |
if task.NodeID == "" || task.Status.ContainerStatus == nil { |
| 48de91a3 |
task = d.GetTask(c, task.ID) |
| 821aeb6a |
} |
| 9247e099 |
return task.NodeID != "" && task.Status.ContainerStatus != nil, nil |
| 821aeb6a |
}, checker.Equals, true)
// check container mount config
out, err = s.nodeCmd(c, task.NodeID, "inspect", "--format", "{{json .HostConfig.Mounts}}", task.Status.ContainerStatus.ContainerID) |
| 6345208b |
assert.NilError(c, err, out) |
| 821aeb6a |
var mountConfig []mount.Mount
c.Assert(json.Unmarshal([]byte(out), &mountConfig), checker.IsNil)
c.Assert(mountConfig, checker.HasLen, 1)
c.Assert(mountConfig[0].Source, checker.Equals, "")
c.Assert(mountConfig[0].Target, checker.Equals, "/foo")
c.Assert(mountConfig[0].Type, checker.Equals, mount.TypeTmpfs) |
| a5b3649b |
c.Assert(mountConfig[0].TmpfsOptions, checker.NotNil)
c.Assert(mountConfig[0].TmpfsOptions.SizeBytes, checker.Equals, int64(1048576)) |
| 821aeb6a |
// check container mounts actual
out, err = s.nodeCmd(c, task.NodeID, "inspect", "--format", "{{json .Mounts}}", task.Status.ContainerStatus.ContainerID) |
| 6345208b |
assert.NilError(c, err, out) |
| 821aeb6a |
var mounts []types.MountPoint
c.Assert(json.Unmarshal([]byte(out), &mounts), checker.IsNil)
c.Assert(mounts, checker.HasLen, 1)
c.Assert(mounts[0].Type, checker.Equals, mount.TypeTmpfs)
c.Assert(mounts[0].Name, checker.Equals, "")
c.Assert(mounts[0].Destination, checker.Equals, "/foo")
c.Assert(mounts[0].RW, checker.Equals, true)
out, err = s.nodeCmd(c, task.NodeID, "logs", task.Status.ContainerStatus.ContainerID) |
| 6345208b |
assert.NilError(c, err, out)
assert.Assert(c, strings.HasPrefix(strings.TrimSpace(out), "tmpfs on /foo type tmpfs"))
assert.Assert(c, strings.Contains(strings.TrimSpace(out), "size=1024k")) |
| 821aeb6a |
} |
| 38c15531 |
func (s *DockerSwarmSuite) TestServiceCreateWithNetworkAlias(c *check.C) {
d := s.AddDaemon(c, true, true)
out, err := d.Cmd("network", "create", "--scope=swarm", "test_swarm_br") |
| 6345208b |
assert.NilError(c, err, out) |
| 38c15531 |
out, err = d.Cmd("service", "create", "--no-resolve-image", "--detach=true", "--network=name=test_swarm_br,alias=srv_alias", "--name=alias_tst_container", "busybox", "top") |
| 6345208b |
assert.NilError(c, err, out) |
| 38c15531 |
id := strings.TrimSpace(out)
var tasks []swarm.Task
waitAndAssert(c, defaultReconciliationTimeout, func(c *check.C) (interface{}, check.CommentInterface) {
tasks = d.GetServiceTasks(c, id)
return len(tasks) > 0, nil
}, checker.Equals, true)
task := tasks[0]
waitAndAssert(c, defaultReconciliationTimeout, func(c *check.C) (interface{}, check.CommentInterface) { |
| 9247e099 |
if task.NodeID == "" || task.Status.ContainerStatus == nil { |
| 38c15531 |
task = d.GetTask(c, task.ID)
} |
| 9247e099 |
return task.NodeID != "" && task.Status.ContainerStatus != nil, nil |
| 38c15531 |
}, checker.Equals, true)
// check container alias config
out, err = s.nodeCmd(c, task.NodeID, "inspect", "--format", "{{json .NetworkSettings.Networks.test_swarm_br.Aliases}}", task.Status.ContainerStatus.ContainerID) |
| 6345208b |
assert.NilError(c, err, out) |
| 38c15531 |
// Make sure the only alias seen is the container-id
var aliases []string
c.Assert(json.Unmarshal([]byte(out), &aliases), checker.IsNil)
c.Assert(aliases, checker.HasLen, 1)
c.Assert(task.Status.ContainerStatus.ContainerID, checker.Contains, aliases[0])
} |