OCPNODE-3138: Add zstd:chunked image test

Signed-off-by: Ayato Tokubi <[email protected]>

Author: bitoku

test/extended/include.go

@@ -40,6 +40,7 @@ import (
 	_ "github.com/openshift/origin/test/extended/machine_config"
 	_ "github.com/openshift/origin/test/extended/machines"
 	_ "github.com/openshift/origin/test/extended/networking"
+	_ "github.com/openshift/origin/test/extended/node"
 	_ "github.com/openshift/origin/test/extended/node_tuning"
 	_ "github.com/openshift/origin/test/extended/oauth"
 	_ "github.com/openshift/origin/test/extended/olm"

test/extended/node/ztsd_chunked.go

@@ -0,0 +1,66 @@
+package node
+
+import (
+	"context"
+	"fmt"
+	"time"
+
+	g "github.com/onsi/ginkgo/v2"
+	o "github.com/onsi/gomega"
+
+	corev1 "k8s.io/api/core/v1"
+	metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
+	e2epod "k8s.io/kubernetes/test/e2e/framework/pod"
+
+	exutil "github.com/openshift/origin/test/extended/util"
+)
+
+var _ = g.Describe("[sig-node] zstd:chunked Image", func() {
+	defer g.GinkgoRecover()
+	var (
+		oc          = exutil.NewCLI("zstd-chunked-image")
+		customImage = exutil.FixturePath("testdata", "node", "zstd-chunked")
+	)
+
+	g.It("should successfully run date command", func(ctx context.Context) {
+		name := "zstd-chunked-build"
+		namespace := oc.Namespace()
+
+		g.By("creating custom builder image")
+		err := oc.Run("new-build").Args("--binary", "--strategy=docker", fmt.Sprintf("--name=%s", name)).Execute()
+		o.Expect(err).NotTo(o.HaveOccurred())
+		br, _ := exutil.StartBuildAndWait(oc, name, fmt.Sprintf("--from-dir=%s", customImage))
+		br.AssertSuccess()
+
+		// Define a pod that runs the date command using the zstd-chunked image
+		pod := &corev1.Pod{
+			ObjectMeta: metav1.ObjectMeta{
+				Name:      "zstd-chunked-pod",
+				Namespace: namespace,
+			},
+			Spec: corev1.PodSpec{
+				RestartPolicy: corev1.RestartPolicyNever,
+				Containers: []corev1.Container{
+					{
+						Name:    "zstd-chunked-container",
+						Image:   fmt.Sprintf("image-registry.openshift-image-registry.svc:5000/%s/%s", namespace, name),
+						Command: []string{"date"},
+					},
+				},
+			},
+		}
+
+		g.By("Creating a pod")
+		pod, err = oc.KubeClient().CoreV1().Pods(namespace).Create(context.Background(), pod, metav1.CreateOptions{})
+		o.Expect(err).NotTo(o.HaveOccurred())
+
+		g.By("Waiting for pod to complete")
+		err = e2epod.WaitForPodSuccessInNamespaceTimeout(ctx, oc.KubeClient(), pod.Name, namespace, 1*time.Minute)
+		o.Expect(err).NotTo(o.HaveOccurred())
+
+		g.By("Verifying pod completed successfully")
+		pod, err = oc.KubeClient().CoreV1().Pods(namespace).Get(context.Background(), pod.Name, metav1.GetOptions{})
+		o.Expect(err).NotTo(o.HaveOccurred())
+		o.Expect(pod.Status.Phase).To(o.Equal(corev1.PodSucceeded))
+	})
+})

test/extended/testdata/bindata.go

@@ -0,0 +1,10 @@
+FROM registry.redhat.io/rhel8/buildah
+# In this example, `/tmp/build` contains the inputs that build when this
+# custom builder image is run. Normally the custom builder image fetches
+# this content from some location at build time, by using git clone as an example.
+ADD Dockerfile.target /tmp/input/Dockerfile
+ADD build.sh /usr/bin
+RUN chmod a+x /usr/bin/build.sh
+# /usr/bin/build.sh contains the actual custom build logic that will be run when
+# this custom builder image is run.
+ENTRYPOINT ["/usr/bin/build.sh"]

test/extended/testdata/node/zstd-chunked/Dockerfile

@@ -0,0 +1,2 @@
+FROM image-registry.openshift-image-registry.svc:5000/openshift/tools:latest
+CMD ["date"]

test/extended/testdata/node/zstd-chunked/Dockerfile.target

@@ -0,0 +1,21 @@
+#!/bin/sh
+# Note that in this case the build inputs are part of the custom builder image, but normally this
+# is retrieved from an external source.
+cd /tmp/input
+# OUTPUT_REGISTRY and OUTPUT_IMAGE are env variables provided by the custom
+# build framework
+TAG="${OUTPUT_REGISTRY}/${OUTPUT_IMAGE}"
+
+
+# performs the build of the new image defined by Dockerfile.target
+buildah --storage-driver vfs bud --isolation chroot -t ${TAG} .
+
+
+# buildah requires a slight modification to the push secret provided by the service
+# account to use it for pushing the image
+cp /var/run/secrets/openshift.io/push/.dockercfg /tmp
+(echo "{ \"auths\": " ; cat /var/run/secrets/openshift.io/push/.dockercfg ; echo "}") > /tmp/.dockercfg
+
+
+# push the new image to the target for the build
+buildah --storage-driver vfs push --tls-verify=false --authfile /tmp/.dockercfg --compression-format zstd:chunked ${TAG}