#!/usr/bin/env bash
# Compare two filters and an admission-time quota denial on an isolated namespace.
set -euo pipefail
test "$(kubectl config current-context)" = kind-handbook-lab
ns=$(kubectl create -f - -o jsonpath='{.metadata.name}' <<'YAML'
apiVersion: v1
kind: Namespace
metadata: {generateName: schedule-study-}
YAML
)
trap 'kubectl delete namespace "$ns" --wait=false >/dev/null' EXIT
node=$(kubectl get node -o jsonpath='{.items[0].metadata.labels.kubernetes\.io/hostname}')
pod() {
kubectl -n "$ns" apply -f - <<YAML
apiVersion: v1
kind: Pod
metadata: {name: $1}
spec:
  restartPolicy: Never
  affinity:
    nodeAffinity:
      requiredDuringSchedulingIgnoredDuringExecution:
        nodeSelectorTerms:
        - matchExpressions:
          - {key: kubernetes.io/hostname, operator: In, values: ["$2"]}
  containers:
  - name: runtime
    image: modeldock-cpu:lab
    imagePullPolicy: IfNotPresent
    resources: {requests: {cpu: "$3", memory: 16Mi}}
YAML
}
pod wrong-label no-such-study-host 10m
pod too-large "$node" 100000
pod fits "$node" 10m
for name in wrong-label too-large; do
 kubectl -n "$ns" wait "pod/$name" --for=condition=PodScheduled=False --timeout=90s
 kubectl -n "$ns" get "pod/$name" -o jsonpath='{.status.conditions[?(@.type=="PodScheduled")].message}'; echo
 kubectl -n "$ns" get events --field-selector "involvedObject.name=$name,reason=FailedScheduling"
done
kubectl -n "$ns" wait pod/fits --for=condition=PodScheduled --timeout=60s
kubectl -n "$ns" get pod fits -o wide
kubectl -n "$ns" create quota max-three --hard=pods=3
for _ in {1..30}; do [[ $(kubectl -n "$ns" get quota max-three -o jsonpath='{.status.used.pods}') = 3 ]] && break; sleep 1; done
if pod denied "$node" 10m > /dev/null 2>"${TMPDIR:-/tmp}/$ns.err"; then echo 'unexpected admission'; exit 1; fi
grep 'exceeded quota' "${TMPDIR:-/tmp}/$ns.err"
rm -f "${TMPDIR:-/tmp}/$ns.err"