Added DNS Spoof chaos (#455)

* added dns-spoof chaos chart

Signed-off-by: Soumya Ghosh Dastidar <gdsoumya@gmail.com>

charts/generic/pod-dns-error/engine.yaml

@@ -0,0 +1,39 @@
+apiVersion: litmuschaos.io/v1alpha1
+kind: ChaosEngine
+metadata:
+  name: nginx-chaos
+spec:
+  appinfo:
+    appns: "default"
+    applabel: "app=nginx"
+    appkind: "deployment"
+  # It can be active/stop
+  engineState: "active"
+  #ex. values: ns1:name=percona,ns2:run=nginx
+  auxiliaryAppInfo: ""
+  chaosServiceAccount: pod-dns-error-sa
+  # It can be delete/retain
+  jobCleanUpPolicy: "delete"
+  experiments:
+    - name: pod-dns-error
+      spec:
+        components:
+          env:
+            # list of the target hostnames or kewywords eg. '["litmuschaos","chaosnative.io"]' . If empty all hostnames are targets
+            - name: TARGET_HOSTNAMES
+              value: ""
+
+            # can be either exact or substring, determines whether the dns query has to match exactly with one of the targets or can have any of the targets as substring
+            - name: MATCH_SCHEME
+              value: "exact"
+
+            - name: TOTAL_CHAOS_DURATION
+              value: "60" # in seconds
+
+            # provide the name of container runtime, it supports docker, containerd, crio
+            - name: CONTAINER_RUNTIME
+              value: "docker"
+
+            # provide the socket file path
+            - name: SOCKET_PATH
+              value: "/var/run/docker.sock"

charts/generic/pod-dns-error/experiment.yaml

@@ -0,0 +1,101 @@
+apiVersion: litmuschaos.io/v1alpha1
+description:
+  message: |
+    Pod DNS Error injects dns failure/error in target pod containersr
+kind: ChaosExperiment
+metadata:
+  name: pod-dns-error
+  labels:
+    name: pod-dns-error
+    app.kubernetes.io/part-of: litmus
+    app.kubernetes.io/component: chaosexperiment
+    app.kubernetes.io/version: latest
+spec:
+  definition:
+    scope: Namespaced
+    permissions:
+      - apiGroups:
+          - ""
+          - "batch"
+          - "apps"
+          - "apps.openshift.io"
+          - "argoproj.io"
+          - "litmuschaos.io"
+        resources:
+          - "jobs"
+          - "pods"
+          - "pods/log"
+          - "replicationcontrollers"
+          - "deployments"
+          - "statefulsets"
+          - "daemonsets"
+          - "replicasets"
+          - "deploymentconfigs"
+          - "rollouts"
+          - "pods/exec"
+          - "events"
+          - "chaosengines"
+          - "chaosexperiments"
+          - "chaosresults"
+        verbs:
+          - "create"
+          - "list"
+          - "get"
+          - "patch"
+          - "update"
+          - "delete"
+          - "deletecollection"
+    image: "litmuschaos/go-runner:latest"
+    args:
+      - -c
+      - ./experiments -name pod-dns-error
+    command:
+      - /bin/bash
+    env:
+      - name: TARGET_CONTAINER
+        value: ""
+
+      # provide lib image
+      - name: LIB_IMAGE
+        value: "litmuschaos/go-runner:latest"
+
+      - name: TOTAL_CHAOS_DURATION
+        value: "60" # in seconds
+
+      # Time period to wait before and after injection of chaos in sec
+      - name: RAMP_TIME
+        value: ""
+
+      ## percentage of total pods to target
+      - name: PODS_AFFECTED_PERC
+        value: ""
+
+      - name: TARGET_PODS
+        value: ""
+
+      # provide the name of container runtime, it supports docker, containerd, crio
+      - name: CONTAINER_RUNTIME
+        value: "docker"
+
+      # provide the socket file path
+      - name: SOCKET_PATH
+        value: "/var/run/docker.sock"
+
+      ## it defines the sequence of chaos execution for multiple target pods
+      ## supported values: serial, parallel
+      - name: SEQUENCE
+        value: "parallel"
+
+      # list of the target hostnames or kewywords eg. '["litmuschaos","chaosnative.io"]' . If empty all hostnames are targets
+      - name: TARGET_HOSTNAMES
+        value: ""
+
+      # can be either exact or substring, determines whether the dns query has to match exactly with one of the targets or can have any of the targets as substring
+      - name: MATCH_SCHEME
+        value: "exact"
+
+    labels:
+      experiment: pod-dns-error
+      app.kubernetes.io/part-of: litmus
+      app.kubernetes.io/component: experiment-job
+      app.kubernetes.io/version: latest

charts/generic/pod-dns-error/pod-dns-error.chartserviceversion.yaml

@@ -0,0 +1,37 @@
+apiVersion: litmuchaos.io/v1alpha1
+kind: ChartServiceVersion
+metadata:
+  name: pod-dns-error
+  version: 0.1.0
+  annotations:
+    categories: generic
+spec:
+  displayName: pod-dns-error
+  categoryDescription: >
+    Pod DNS Error injects dns failure/error in target pod containers
+  keywords:
+    - "pods"
+    - "kubernetes"
+    - "generic"
+    - "dns"
+  maturity: alpha
+  minKubeVersion: 1.12.0
+  provider:
+    name: ChaosNative
+  maintainers:
+    - name: gdsoumya
+      email: gdsoumya@chaosnative.com
+  labels:
+    app.kubernetes.io/component: chartserviceversion
+    app.kubernetes.io/version: latest
+  links:
+    - name: Source Code
+      url: https://github.com/litmuschaos/litmus-go/tree/master/experiments/generic/pod-dns-error
+    - name: Documentation
+      url: https://docs.litmuschaos.io/docs/getstarted/
+    - name: Video
+      url:
+  icon:
+    - base64data: ""
+      mediatype: ""
+  chaosexpcrdlink: https://raw.githubusercontent.com/litmuschaos/chaos-charts/master/charts/generic/pod-dns-error/experiment.yaml

charts/generic/pod-dns-error/rbac-psp.yaml

@@ -0,0 +1,62 @@
+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: pod-dns-error-sa
+  namespace: default
+  labels:
+    name: pod-dns-error-sa
+    app.kubernetes.io/part-of: litmus
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: Role
+metadata:
+  name: pod-dns-error-sa
+  namespace: default
+  labels:
+    name: pod-dns-error-sa
+    app.kubernetes.io/part-of: litmus
+rules:
+  - apiGroups: [""]
+    resources: ["pods", "events"]
+    verbs:
+      ["create", "list", "get", "patch", "update", "delete", "deletecollection"]
+  - apiGroups: [""]
+    resources: ["pods/exec", "pods/log", "replicationcontrollers"]
+    verbs: ["create", "list", "get"]
+  - apiGroups: ["batch"]
+    resources: ["jobs"]
+    verbs: ["create", "list", "get", "delete", "deletecollection"]
+  - apiGroups: ["apps"]
+    resources: ["deployments", "statefulsets", "daemonsets", "replicasets"]
+    verbs: ["list", "get"]
+  - apiGroups: ["apps.openshift.io"]
+    resources: ["deploymentconfigs"]
+    verbs: ["list", "get"]
+  - apiGroups: ["argoproj.io"]
+    resources: ["rollouts"]
+    verbs: ["list", "get"]
+  - apiGroups: ["litmuschaos.io"]
+    resources: ["chaosengines", "chaosexperiments", "chaosresults"]
+    verbs: ["create", "list", "get", "patch", "update"]
+  - apiGroups: ["policy"]
+    resources: ["podsecuritypolicies"]
+    verbs: ["use"]
+    resourceNames: ["litmus"]
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: RoleBinding
+metadata:
+  name: pod-dns-error-sa
+  namespace: default
+  labels:
+    name: pod-dns-error-sa
+    app.kubernetes.io/part-of: litmus
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: Role
+  name: pod-dns-error-sa
+subjects:
+  - kind: ServiceAccount
+    name: pod-dns-error-sa
+    namespace: default

charts/generic/pod-dns-error/rbac.yaml

@@ -0,0 +1,58 @@
+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: pod-dns-error-sa
+  namespace: default
+  labels:
+    name: pod-dns-error-sa
+    app.kubernetes.io/part-of: litmus
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: Role
+metadata:
+  name: pod-dns-error-sa
+  namespace: default
+  labels:
+    name: pod-dns-error-sa
+    app.kubernetes.io/part-of: litmus
+rules:
+  - apiGroups: [""]
+    resources: ["pods", "events"]
+    verbs:
+      ["create", "list", "get", "patch", "update", "delete", "deletecollection"]
+  - apiGroups: [""]
+    resources: ["pods/exec", "pods/log", "replicationcontrollers"]
+    verbs: ["create", "list", "get"]
+  - apiGroups: ["batch"]
+    resources: ["jobs"]
+    verbs: ["create", "list", "get", "delete", "deletecollection"]
+  - apiGroups: ["apps"]
+    resources: ["deployments", "statefulsets", "daemonsets", "replicasets"]
+    verbs: ["list", "get"]
+  - apiGroups: ["apps.openshift.io"]
+    resources: ["deploymentconfigs"]
+    verbs: ["list", "get"]
+  - apiGroups: ["argoproj.io"]
+    resources: ["rollouts"]
+    verbs: ["list", "get"]
+  - apiGroups: ["litmuschaos.io"]
+    resources: ["chaosengines", "chaosexperiments", "chaosresults"]
+    verbs: ["create", "list", "get", "patch", "update"]
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: RoleBinding
+metadata:
+  name: pod-dns-error-sa
+  namespace: default
+  labels:
+    name: pod-dns-error-sa
+    app.kubernetes.io/part-of: litmus
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: Role
+  name: pod-dns-error-sa
+subjects:
+  - kind: ServiceAccount
+    name: pod-dns-error-sa
+    namespace: default