Test networkpolicy plugin in extended networking test, if the kernel supports it

Author: danwinship

test/extended/networking.sh

@@ -313,6 +313,25 @@ function disable-selinux() {
   fi
 }
 
+function kernel-supports-networkpolicy() {
+  # There's really no good way to test this "correctly" if OVS isn't installed.
+  # The mainline kernel got support for OVS conntrack in 4.3. RHEL kernels have
+  # it in 3.10.0-514 and later.
+  version="$(uname -r)"
+  case "${version}" in
+    3.10.0-*.el7.*)
+      build=$(sed -e 's/.*-\([0-9]*\)\..*/\1/' <<< "${version}")
+      if [[ "${build}" -lt 514 ]]; then
+        return 1
+      fi
+      ;;
+    [0-3].*|4.[0-2].*)
+      return 1
+      ;;
+  esac
+  return 0
+}
+
 os::log::info "Starting 'networking' extended tests"
 if [[ -n "${CONFIG_ROOT}" ]]; then
   KUBECONFIG="$(get-kubeconfig-from-root "${CONFIG_ROOT}")"
@@ -382,6 +401,12 @@ else
     # Ignore deployment errors for a given plugin to allow other plugins
     # to be tested.
     test-osdn-plugin "subnet" "redhat/openshift-ovs-subnet" "false" "false" || true
+
+    if kernel-supports-networkpolicy; then
+      test-osdn-plugin "networkpolicy" "redhat/openshift-ovs-networkpolicy" "false" "buggy" || true
+    else
+      os::log::warning "Skipping networkpolicy tests due to kernel version"
+    fi
   fi
 
   test-osdn-plugin "multitenant" "redhat/openshift-ovs-multitenant" "true" "false" || true