Istio Test Infra

Istio Test Infra

• Testing Infrastructure
• Tests Types
• Life of a PR
• Breaking Change
• Admin Responsibilities
• Build Cop Responsibilities
• FAQ
  • My PR has required check but they did not start. Why ?
  • How can I retest my PR ?
  • I have a breaking change. How can I go about it ?

Testing Infrastructure

Istio's current testing infrastructure is based on Jenkins.

Jenkins listens on PRs for all modules that have a Jenkinsfile. For each protected branch, a set of required tests are defined. Only once tests are passing and after review approval can a PR be merged to master branch. If a stable branch exists for that module, a new fastForward branch (based on HEAD of master) will be created and a PR will be automatically created for the stable branch. This will trigger qualification jobs.

More details here.

Tests Types

• Unit tests: Should be done in specific modules for features implemented in a module. (PR to master)
• Integration tests: Each module should write integration tests that exercise their dependencies. Integration tests should be runnable by every contributor locally and should not need access to a cluster. Those tests will also be run when PRs are created on dependencies. Integration testing is the team's responsibility and therefore will not be planned in this document. (PR to master)
• Long Integration tests: Longer integration tests (>10 minutes) might only be triggered for qualification. (PR master to stable)
• End to end tests: Stored in istio/istio module where all components need to be tested together. (PR to master and PR master to stable)
• Performance Benchmarks: Benchmarks should be kept in modules. (PR master to stable)
• Performance Regression: Stored in istio/istio. (PR master to stable)

Life of a PR

1. PR on master: We build necessary artifacts for other tests and we tag them with the PR’s branch head SHA.

   Example:

   • istioctl: https://storage.googleapis.com/istio-artifacts/:${BRANCH_HEAD_SHA}/artifacts/istioctl
   • Docker images: gcr.io//istio-testing/manager:${BRANCH_HEAD_SHA}

2. Postsubmit on Master: We usually run stuff like code coverage here.

3. PR on stable: We build necessary artifacts for other tests and we tag them with PR’s master head SHA.

   Example:

   • istioctl: https://storage.googleapis.com/istio-artifacts/:${MASTER_SHA}/artifacts/istioctl
   • Docker Images: gcr.io//istio-testing/manager:${MASTER_SHA}

4. Postsubmit on Stable: We rebuild artifacts with stable tag and we push docker images to official Docker Hubs ie gcr.io/istio-io and docker.io/istio.

   Example:

   • istioctl: https://storage.googleapis.com/istio-artifacts/:${STABLE_TAG}/artifacts/istioctl
   • Docker Images: gcr.io//istio-io/manager:${DATE}, docker.io.istio/manager:${DATE}

	PR to Master	PR to stable
istio/manager	- Unit tests	- Longer integration tests
	- Integration tests	- istio/istio e2e suite
	- istio/istio e2e smoke test
istio/mixer	- Unit tests	- istio/istio e2e suite
	- Manager Regression
	- istio/istio e2e smoke test
istio/proxy	- Unit tests
	- Manager Regression
	- istio/istio e2e smoke test
istio/mixerclient	- Unit tests
	- Proxy Regression
	- istio/istio e2e smoke test
istio/auth	- Unit tests
	- Manager Regression
	- istio/istio e2e smoke test

This diagram is just an example for Mixer. It is the responsibility of each module to listen to other modules that they depend on to prevent breakage. The test done on master branches and stable might be different across modules depending on the type of integration between modules.

The istio/istio module is where integration between all modules is tested.

Breaking Change

Here are examples that will trigger e2e-smoketest failures:

1. Template changes required on istio/istio
2. Adding new artifacts which require change to istio/istio
3. Incompatible binary change

Note that (3) can usually be avoided by creating compatibility glue code (Feature protected by a flag and enabled in the future). If possible, this should be used, and a maintenance issue should be created to remove the glue code once istio/istio module has been updated with a stable version.

For (1) and (2), force pushing the breaking change will be required. Once a breaking change is forced pushed, all subsequent PRs will require Admin approval. It is therefore in everyone’s interest to have a plan of action to limit impact on the module. If the breaking change impacts multiple modules, Admins of the impacted modules should come up with a plan to resolve the breakage before approving the breaking PR.

In this case, we assume that PR A is created on any of the istio/manager, istio/mixer and istio/auth, that module presubmit passed, but the module e2e-smoketest failed.

In that case follow this procedure

• Create a PR B on istio/istio with the artifacts created by the CI for PR A presubmit. Reiterate between PR A and B until PR B presubmit pass. Do not submit PR B just yet as it contains development artifacts.
• Upon PR B presubmit success, get Admin approval to force push the PR A to master. PR B remains unmerged. It is the admin responsibility to gather information of PR B and check results. Admin might deny merging if not enough information is provided.
• Once PR A is merged to master, qualification will create a new PR C (It should be named “DO NOT MERGE! Fast Forward stable for ”) from module master to stable. postsubmit should pass, but the e2e-suite is expected to fail. Update PR B with the artifacts created for postsubmit. Get necessary review and merge PR B once istio/istio presubmit passes.
• If PR C is closed, re-open it. This will restart all the tests. If the PR is still open, you can also simply drop a comment on the PR C to start the required test.
• Upon, successful e2e-suite, the PR C will be merged automatically to stable branch. Stable artifacts will be created. Since istio/istio is using testing artifacts and new PR D should be created in istio/istio using the stable artifacts created.

Admin Responsibilities

1. Force push the breaking change after checking that testing artifacts created by the PR are passing the smoke test.
2. Working with the breaking change's author until the situation is resolved.
3. During a breaking change, prevent other changes from going in, which will delay the process.
4. Make sure that istio/istio is using latest stable version of module artifacts.
5. Update bazel dependencies on other modules with latest stable one..

Build Cop Responsibilities

1. Look at unassigned PRs.
2. Investigate postsubmit issues and assign issues to Admins.

FAQ

My PR has required check but they did not start. Why ?

Are you part of the istio Github Organization? If not, you might need an Istio member to run tests for you, after they have reviewed the submitted code.

Org member can comment /ok-to-test on your PR to start testing.

How can I retest my PR ?

If you are part of the istio Github Organization, you can start a test by:

1. Drop a comment on your PR: "test istio-presubmit" if prow/istio-presubmit is the required check that you want to start

I have a breaking change. How can I go about it ?

Follow the Breaking Change procedure.