|
| 1 | +import logging |
| 2 | +import os.path |
| 3 | +import time |
| 4 | +from typing import List |
| 5 | + |
| 6 | +import krkn_lib.utils |
| 7 | +import yaml |
| 8 | +from krkn_lib.k8s import KrknKubernetes |
| 9 | +from krkn_lib.models.telemetry import ScenarioTelemetry |
| 10 | +from krkn_lib.telemetry.k8s import KrknTelemetryKubernetes |
| 11 | + |
| 12 | + |
| 13 | +def run(scenarios_list: list[str], krkn_kubernetes: KrknKubernetes, telemetry: KrknTelemetryKubernetes) -> (list[str], list[ScenarioTelemetry]): |
| 14 | + scenario_telemetries: list[ScenarioTelemetry] = [] |
| 15 | + failed_post_scenarios = [] |
| 16 | + for scenario in scenarios_list: |
| 17 | + scenario_telemetry = ScenarioTelemetry() |
| 18 | + scenario_telemetry.scenario = scenario |
| 19 | + scenario_telemetry.start_timestamp = time.time() |
| 20 | + telemetry.set_parameters_base64(scenario_telemetry, scenario) |
| 21 | + |
| 22 | + try: |
| 23 | + pod_names = [] |
| 24 | + config = parse_config(scenario) |
| 25 | + if config["target-service-label"]: |
| 26 | + target_services = krkn_kubernetes.select_service_by_label(config["namespace"], config["target-service-label"]) |
| 27 | + else: |
| 28 | + target_services = [config["target-service"]] |
| 29 | + |
| 30 | + for target in target_services: |
| 31 | + if not krkn_kubernetes.service_exists(target, config["namespace"]): |
| 32 | + raise Exception(f"{target} service not found") |
| 33 | + for i in range(config["number-of-pods"]): |
| 34 | + pod_name = "syn-flood-" + krkn_lib.utils.get_random_string(10) |
| 35 | + krkn_kubernetes.deploy_syn_flood(pod_name, |
| 36 | + config["namespace"], |
| 37 | + config["image"], |
| 38 | + target, |
| 39 | + config["target-port"], |
| 40 | + config["packet-size"], |
| 41 | + config["window-size"], |
| 42 | + config["duration"], |
| 43 | + config["attacker-nodes"] |
| 44 | + ) |
| 45 | + pod_names.append(pod_name) |
| 46 | + |
| 47 | + logging.info("waiting all the attackers to finish:") |
| 48 | + did_finish = False |
| 49 | + finished_pods = [] |
| 50 | + while not did_finish: |
| 51 | + for pod_name in pod_names: |
| 52 | + if not krkn_kubernetes.is_pod_running(pod_name, config["namespace"]): |
| 53 | + finished_pods.append(pod_name) |
| 54 | + if set(pod_names) == set(finished_pods): |
| 55 | + did_finish = True |
| 56 | + time.sleep(1) |
| 57 | + |
| 58 | + except Exception as e: |
| 59 | + logging.error(f"Failed to run syn flood scenario {scenario}: {e}") |
| 60 | + failed_post_scenarios.append(scenario) |
| 61 | + scenario_telemetry.exit_status = 1 |
| 62 | + else: |
| 63 | + scenario_telemetry.exit_status = 0 |
| 64 | + scenario_telemetry.end_timestamp = time.time() |
| 65 | + scenario_telemetries.append(scenario_telemetry) |
| 66 | + return failed_post_scenarios, scenario_telemetries |
| 67 | + |
| 68 | +def parse_config(scenario_file: str) -> dict[str,any]: |
| 69 | + if not os.path.exists(scenario_file): |
| 70 | + raise Exception(f"failed to load scenario file {scenario_file}") |
| 71 | + |
| 72 | + try: |
| 73 | + with open(scenario_file) as stream: |
| 74 | + config = yaml.safe_load(stream) |
| 75 | + except Exception: |
| 76 | + raise Exception(f"{scenario_file} is not a valid yaml file") |
| 77 | + |
| 78 | + missing = [] |
| 79 | + if not check_key_value(config ,"packet-size"): |
| 80 | + missing.append("packet-size") |
| 81 | + if not check_key_value(config,"window-size"): |
| 82 | + missing.append("window-size") |
| 83 | + if not check_key_value(config, "duration"): |
| 84 | + missing.append("duration") |
| 85 | + if not check_key_value(config, "namespace"): |
| 86 | + missing.append("namespace") |
| 87 | + if not check_key_value(config, "number-of-pods"): |
| 88 | + missing.append("number-of-pods") |
| 89 | + if not check_key_value(config, "target-port"): |
| 90 | + missing.append("target-port") |
| 91 | + if not check_key_value(config, "image"): |
| 92 | + missing.append("image") |
| 93 | + if "target-service" not in config.keys(): |
| 94 | + missing.append("target-service") |
| 95 | + if "target-service-label" not in config.keys(): |
| 96 | + missing.append("target-service-label") |
| 97 | + |
| 98 | + |
| 99 | + |
| 100 | + |
| 101 | + if len(missing) > 0: |
| 102 | + raise Exception(f"{(',').join(missing)} parameter(s) are missing") |
| 103 | + |
| 104 | + if not config["target-service"] and not config["target-service-label"]: |
| 105 | + raise Exception("you have either to set a target service or a label") |
| 106 | + if config["target-service"] and config["target-service-label"]: |
| 107 | + raise Exception("you cannot select both target-service and target-service-label") |
| 108 | + |
| 109 | + if 'attacker-nodes' and not is_node_affinity_correct(config['attacker-nodes']): |
| 110 | + raise Exception("attacker-nodes format is not correct") |
| 111 | + return config |
| 112 | + |
| 113 | +def check_key_value(dictionary, key): |
| 114 | + if key in dictionary: |
| 115 | + value = dictionary[key] |
| 116 | + if value is not None and value != '': |
| 117 | + return True |
| 118 | + return False |
| 119 | + |
| 120 | +def is_node_affinity_correct(obj) -> bool: |
| 121 | + if not isinstance(obj, dict): |
| 122 | + return False |
| 123 | + for key in obj.keys(): |
| 124 | + if not isinstance(key, str): |
| 125 | + return False |
| 126 | + if not isinstance(obj[key], list): |
| 127 | + return False |
| 128 | + return True |
| 129 | + |
| 130 | + |
| 131 | + |
| 132 | + |
0 commit comments