Added DNS Spoof chaos (#455)
* added dns-spoof chaos chart Signed-off-by: Soumya Ghosh Dastidar <gdsoumya@gmail.com>
This commit is contained in:
Soumya Ghosh Dastidar
committed by
GitHub
GitHub
parent
de46820cdb
commit
cb425d8522
35
charts/generic/pod-dns-spoof/engine.yaml
Normal file
35
charts/generic/pod-dns-spoof/engine.yaml
Normal file
@@ -0,0 +1,35 @@
|
||||
apiVersion: litmuschaos.io/v1alpha1
|
||||
kind: ChaosEngine
|
||||
metadata:
|
||||
name: nginx-chaos
|
||||
spec:
|
||||
appinfo:
|
||||
appns: "default"
|
||||
applabel: "app=nginx"
|
||||
appkind: "deployment"
|
||||
# It can be active/stop
|
||||
engineState: "active"
|
||||
#ex. values: ns1:name=percona,ns2:run=nginx
|
||||
auxiliaryAppInfo: ""
|
||||
chaosServiceAccount: pod-dns-spoof-sa
|
||||
# It can be delete/retain
|
||||
jobCleanUpPolicy: "delete"
|
||||
experiments:
|
||||
- name: pod-dns-spoof
|
||||
spec:
|
||||
components:
|
||||
env:
|
||||
# map of the target hostnames eg. '{"abc.com":"spoofabc.com"}' . If empty no queries will be spoofed
|
||||
- name: SPOOF_MAP
|
||||
value: '{"google.com":"fakegoogle.com"}'
|
||||
|
||||
- name: TOTAL_CHAOS_DURATION
|
||||
value: "60" # in seconds
|
||||
|
||||
# provide the name of container runtime, it supports docker, containerd, crio
|
||||
- name: CONTAINER_RUNTIME
|
||||
value: "docker"
|
||||
|
||||
# provide the socket file path
|
||||
- name: SOCKET_PATH
|
||||
value: "/var/run/docker.sock"
|
||||
97
charts/generic/pod-dns-spoof/experiment.yaml
Normal file
97
charts/generic/pod-dns-spoof/experiment.yaml
Normal file
@@ -0,0 +1,97 @@
|
||||
apiVersion: litmuschaos.io/v1alpha1
|
||||
description:
|
||||
message: |
|
||||
Pod DNS Spoof can spoof particular dns requests in target pod container to desired target hostnames
|
||||
kind: ChaosExperiment
|
||||
metadata:
|
||||
name: pod-dns-spoof
|
||||
labels:
|
||||
name: pod-dns-spoof
|
||||
app.kubernetes.io/part-of: litmus
|
||||
app.kubernetes.io/component: chaosexperiment
|
||||
app.kubernetes.io/version: latest
|
||||
spec:
|
||||
definition:
|
||||
scope: Namespaced
|
||||
permissions:
|
||||
- apiGroups:
|
||||
- ""
|
||||
- "batch"
|
||||
- "apps"
|
||||
- "apps.openshift.io"
|
||||
- "argoproj.io"
|
||||
- "litmuschaos.io"
|
||||
resources:
|
||||
- "jobs"
|
||||
- "pods"
|
||||
- "pods/log"
|
||||
- "replicationcontrollers"
|
||||
- "deployments"
|
||||
- "statefulsets"
|
||||
- "daemonsets"
|
||||
- "replicasets"
|
||||
- "deploymentconfigs"
|
||||
- "rollouts"
|
||||
- "pods/exec"
|
||||
- "events"
|
||||
- "chaosengines"
|
||||
- "chaosexperiments"
|
||||
- "chaosresults"
|
||||
verbs:
|
||||
- "create"
|
||||
- "list"
|
||||
- "get"
|
||||
- "patch"
|
||||
- "update"
|
||||
- "delete"
|
||||
- "deletecollection"
|
||||
image: "litmuschaos/go-runner:latest"
|
||||
args:
|
||||
- -c
|
||||
- ./experiments -name pod-dns-spoof
|
||||
command:
|
||||
- /bin/bash
|
||||
env:
|
||||
- name: TARGET_CONTAINER
|
||||
value: ""
|
||||
|
||||
# provide lib image
|
||||
- name: LIB_IMAGE
|
||||
value: "litmuschaos/go-runner:latest"
|
||||
|
||||
- name: TOTAL_CHAOS_DURATION
|
||||
value: "60" # in seconds
|
||||
|
||||
# Time period to wait before and after injection of chaos in sec
|
||||
- name: RAMP_TIME
|
||||
value: ""
|
||||
|
||||
## percentage of total pods to target
|
||||
- name: PODS_AFFECTED_PERC
|
||||
value: ""
|
||||
|
||||
- name: TARGET_PODS
|
||||
value: ""
|
||||
|
||||
# provide the name of container runtime, it supports docker, containerd, crio
|
||||
- name: CONTAINER_RUNTIME
|
||||
value: "docker"
|
||||
|
||||
# provide the socket file path
|
||||
- name: SOCKET_PATH
|
||||
value: "/var/run/docker.sock"
|
||||
|
||||
## it defines the sequence of chaos execution for multiple target pods
|
||||
## supported values: serial, parallel
|
||||
- name: SEQUENCE
|
||||
value: "parallel"
|
||||
|
||||
# map of the target hostnames eg. '{"abc.com":"spoofabc.com"}' . If empty no queries will be spoofed
|
||||
- name: SPOOF_MAP
|
||||
value: ""
|
||||
|
||||
labels:
|
||||
experiment: pod-dns-spoof
|
||||
app.kubernetes.io/part-of: litmus
|
||||
app.kubernetes.io/component: experiment-job
|
||||
app.kubernetes.io/version: latest
|
||||
@@ -0,0 +1,37 @@
|
||||
apiVersion: litmuchaos.io/v1alpha1
|
||||
kind: ChartServiceVersion
|
||||
metadata:
|
||||
name: pod-dns-spoof
|
||||
version: 0.1.0
|
||||
annotations:
|
||||
categories: generic
|
||||
spec:
|
||||
displayName: pod-dns-spoof
|
||||
categoryDescription: >
|
||||
Pod DNS Spoof can spoof particular dns requests in target pod container to desired target hostnames
|
||||
keywords:
|
||||
- "pods"
|
||||
- "kubernetes"
|
||||
- "generic"
|
||||
- "dns"
|
||||
maturity: alpha
|
||||
minKubeVersion: 1.12.0
|
||||
provider:
|
||||
name: ChaosNative
|
||||
maintainers:
|
||||
- name: gdsoumya
|
||||
email: gdsoumya@chaosnative.com
|
||||
labels:
|
||||
app.kubernetes.io/component: chartserviceversion
|
||||
app.kubernetes.io/version: latest
|
||||
links:
|
||||
- name: Source Code
|
||||
url: https://github.com/litmuschaos/litmus-go/tree/master/experiments/generic/pod-dns-spoof
|
||||
- name: Documentation
|
||||
url: https://docs.litmuschaos.io/docs/getstarted/
|
||||
- name: Video
|
||||
url:
|
||||
icon:
|
||||
- base64data: ""
|
||||
mediatype: ""
|
||||
chaosexpcrdlink: https://raw.githubusercontent.com/litmuschaos/chaos-charts/master/charts/generic/pod-dns-spoof/experiment.yaml
|
||||
62
charts/generic/pod-dns-spoof/rbac-psp.yaml
Normal file
62
charts/generic/pod-dns-spoof/rbac-psp.yaml
Normal file
@@ -0,0 +1,62 @@
|
||||
---
|
||||
apiVersion: v1
|
||||
kind: ServiceAccount
|
||||
metadata:
|
||||
name: pod-dns-spoof-sa
|
||||
namespace: default
|
||||
labels:
|
||||
name: pod-dns-spoof-sa
|
||||
app.kubernetes.io/part-of: litmus
|
||||
---
|
||||
apiVersion: rbac.authorization.k8s.io/v1
|
||||
kind: Role
|
||||
metadata:
|
||||
name: pod-dns-spoof-sa
|
||||
namespace: default
|
||||
labels:
|
||||
name: pod-dns-spoof-sa
|
||||
app.kubernetes.io/part-of: litmus
|
||||
rules:
|
||||
- apiGroups: [""]
|
||||
resources: ["pods", "events"]
|
||||
verbs:
|
||||
["create", "list", "get", "patch", "update", "delete", "deletecollection"]
|
||||
- apiGroups: [""]
|
||||
resources: ["pods/exec", "pods/log", "replicationcontrollers"]
|
||||
verbs: ["create", "list", "get"]
|
||||
- apiGroups: ["batch"]
|
||||
resources: ["jobs"]
|
||||
verbs: ["create", "list", "get", "delete", "deletecollection"]
|
||||
- apiGroups: ["apps"]
|
||||
resources: ["deployments", "statefulsets", "daemonsets", "replicasets"]
|
||||
verbs: ["list", "get"]
|
||||
- apiGroups: ["apps.openshift.io"]
|
||||
resources: ["deploymentconfigs"]
|
||||
verbs: ["list", "get"]
|
||||
- apiGroups: ["argoproj.io"]
|
||||
resources: ["rollouts"]
|
||||
verbs: ["list", "get"]
|
||||
- apiGroups: ["litmuschaos.io"]
|
||||
resources: ["chaosengines", "chaosexperiments", "chaosresults"]
|
||||
verbs: ["create", "list", "get", "patch", "update"]
|
||||
- apiGroups: ["policy"]
|
||||
resources: ["podsecuritypolicies"]
|
||||
verbs: ["use"]
|
||||
resourceNames: ["litmus"]
|
||||
---
|
||||
apiVersion: rbac.authorization.k8s.io/v1
|
||||
kind: RoleBinding
|
||||
metadata:
|
||||
name: pod-dns-spoof-sa
|
||||
namespace: default
|
||||
labels:
|
||||
name: pod-dns-spoof-sa
|
||||
app.kubernetes.io/part-of: litmus
|
||||
roleRef:
|
||||
apiGroup: rbac.authorization.k8s.io
|
||||
kind: Role
|
||||
name: pod-dns-spoof-sa
|
||||
subjects:
|
||||
- kind: ServiceAccount
|
||||
name: pod-dns-spoof-sa
|
||||
namespace: default
|
||||
58
charts/generic/pod-dns-spoof/rbac.yaml
Normal file
58
charts/generic/pod-dns-spoof/rbac.yaml
Normal file
@@ -0,0 +1,58 @@
|
||||
---
|
||||
apiVersion: v1
|
||||
kind: ServiceAccount
|
||||
metadata:
|
||||
name: pod-dns-spoof-sa
|
||||
namespace: default
|
||||
labels:
|
||||
name: pod-dns-spoof-sa
|
||||
app.kubernetes.io/part-of: litmus
|
||||
---
|
||||
apiVersion: rbac.authorization.k8s.io/v1
|
||||
kind: Role
|
||||
metadata:
|
||||
name: pod-dns-spoof-sa
|
||||
namespace: default
|
||||
labels:
|
||||
name: pod-dns-spoof-sa
|
||||
app.kubernetes.io/part-of: litmus
|
||||
rules:
|
||||
- apiGroups: [""]
|
||||
resources: ["pods", "events"]
|
||||
verbs:
|
||||
["create", "list", "get", "patch", "update", "delete", "deletecollection"]
|
||||
- apiGroups: [""]
|
||||
resources: ["pods/exec", "pods/log", "replicationcontrollers"]
|
||||
verbs: ["create", "list", "get"]
|
||||
- apiGroups: ["batch"]
|
||||
resources: ["jobs"]
|
||||
verbs: ["create", "list", "get", "delete", "deletecollection"]
|
||||
- apiGroups: ["apps"]
|
||||
resources: ["deployments", "statefulsets", "daemonsets", "replicasets"]
|
||||
verbs: ["list", "get"]
|
||||
- apiGroups: ["apps.openshift.io"]
|
||||
resources: ["deploymentconfigs"]
|
||||
verbs: ["list", "get"]
|
||||
- apiGroups: ["argoproj.io"]
|
||||
resources: ["rollouts"]
|
||||
verbs: ["list", "get"]
|
||||
- apiGroups: ["litmuschaos.io"]
|
||||
resources: ["chaosengines", "chaosexperiments", "chaosresults"]
|
||||
verbs: ["create", "list", "get", "patch", "update"]
|
||||
---
|
||||
apiVersion: rbac.authorization.k8s.io/v1
|
||||
kind: RoleBinding
|
||||
metadata:
|
||||
name: pod-dns-spoof-sa
|
||||
namespace: default
|
||||
labels:
|
||||
name: pod-dns-spoof-sa
|
||||
app.kubernetes.io/part-of: litmus
|
||||
roleRef:
|
||||
apiGroup: rbac.authorization.k8s.io
|
||||
kind: Role
|
||||
name: pod-dns-spoof-sa
|
||||
subjects:
|
||||
- kind: ServiceAccount
|
||||
name: pod-dns-spoof-sa
|
||||
namespace: default
|
||||
Reference in New Issue
Block a user