test/ccm: Add support for verifying NLB health check configuration

Extend the CCM load balancer test to verify health check configuration
for both Classic Load Balancers (CLB) and Network Load Balancers (NLB).
IPv6 dual-stack clusters use NLB, while single-stack/IPv4 primary use CLB.

The test now checks that health check port and path are correctly
configured to 10256/healthz for both load balancer types by querying
target group configuration for NLB and load balancer description for CLB.

Author: tthvo

test/extended/cloud_controller_manager/ccm.go

@@ -152,10 +152,18 @@ spec:
 		region := exutil.GetClusterRegion(oc)
 		sess := exutil.InitAwsSession(region)
 		elbClient := exutil.NewELBClient(sess)
-		healthCheck, err := elbClient.GetLBHealthCheckPortPath(lbName)
-		o.Expect(err).NotTo(o.HaveOccurred(), "unable to get health check port and path")
+
+		expectedHealthCheck := fmt.Sprintf("HTTP:%s%s", healthCheckPort, healthCheckPath)
+		var healthCheck string
+		if isIPv6Primary {
+			healthCheck, err = elbClient.GetNLBHealthCheckPortPath(lbName)
+			o.Expect(err).NotTo(o.HaveOccurred(), "unable to get NLB health check port and path")
+		} else {
+			healthCheck, err = elbClient.GetCLBHealthCheckPortPath(lbName)
+			o.Expect(err).NotTo(o.HaveOccurred(), "unable to get CLB health check port and path")
+		}
 		e2e.Logf("Health check port and path: %v", healthCheck)
-		o.Expect(healthCheck).To(o.Equal(fmt.Sprintf("HTTP:%s%s", healthCheckPort, healthCheckPath)))
+		o.Expect(healthCheck).To(o.Equal(expectedHealthCheck))
 	})
 })
 

test/extended/util/aws_client.go

@@ -2,11 +2,13 @@ package util
 
 import (
 	"encoding/base64"
+	"fmt"
 	"os"
 
 	"github.com/aws/aws-sdk-go/aws"
 	"github.com/aws/aws-sdk-go/aws/session"
 	"github.com/aws/aws-sdk-go/service/elb"
+	"github.com/aws/aws-sdk-go/service/elbv2"
 	g "github.com/onsi/ginkgo/v2"
 	o "github.com/onsi/gomega"
 	"github.com/tidwall/gjson"
@@ -46,18 +48,20 @@ func InitAwsSession(region string) *session.Session {
 }
 
 type ELBClient struct {
-	svc *elb.ELB
+	svc   *elb.ELB
+	svcV2 *elbv2.ELBV2
 }
 
 // NewELBClient creates an ECRClient
 func NewELBClient(sess *session.Session) *ELBClient {
 	return &ELBClient{
-		svc: elb.New(sess),
+		svc:   elb.New(sess),
+		svcV2: elbv2.New(sess),
 	}
 }
 
-// GetLBHealthCheckPortPath get load balance health check port and path
-func (elbClient *ELBClient) GetLBHealthCheckPortPath(lbName string) (string, error) {
+// GetLBHealthCheckPortPath get load balance health check port and path for Classic Load Balancer
+func (elbClient *ELBClient) GetCLBHealthCheckPortPath(lbName string) (string, error) {
 	input := &elb.DescribeLoadBalancersInput{
 		LoadBalancerNames: []*string{
 			aws.String(lbName),
@@ -66,12 +70,12 @@ func (elbClient *ELBClient) GetLBHealthCheckPortPath(lbName string) (string, err
 
 	result, err := elbClient.svc.DescribeLoadBalancers(input)
 	if err != nil {
-		e2e.Logf("Failed to describe load balancer: %v", err)
+		e2e.Logf("Failed to describe classic load balancer: %v", err)
 		return "", err
 	}
 
 	if len(result.LoadBalancerDescriptions) == 0 {
-		e2e.Logf("Failed to get load balancers: %v", err)
+		e2e.Logf("Failed to get classic load balancers: %v", err)
 	}
 
 	healthCheck := result.LoadBalancerDescriptions[0].HealthCheck
@@ -80,3 +84,45 @@ func (elbClient *ELBClient) GetLBHealthCheckPortPath(lbName string) (string, err
 	}
 	return *healthCheck.Target, nil
 }
+
+// GetNLBHealthCheckPortPath get load balance health check port and path for Network/Application Load Balancer
+func (elbClient *ELBClient) GetNLBHealthCheckPortPath(lbName string) (string, error) {
+	// Describe the load balancer
+	input := &elbv2.DescribeLoadBalancersInput{
+		Names: []*string{aws.String(lbName)},
+	}
+	result, err := elbClient.svcV2.DescribeLoadBalancers(input)
+	if err != nil {
+		e2e.Logf("Failed to describe NLB: %v", err)
+		return "", err
+	}
+
+	if len(result.LoadBalancers) == 0 {
+		e2e.Logf("No NLB found with name: %s", lbName)
+		return "", nil
+	}
+
+	// Get target groups for this load balancer
+	tgInput := &elbv2.DescribeTargetGroupsInput{
+		LoadBalancerArn: result.LoadBalancers[0].LoadBalancerArn,
+	}
+	tgResult, err := elbClient.svcV2.DescribeTargetGroups(tgInput)
+	if err != nil {
+		e2e.Logf("Failed to describe target groups: %v", err)
+		return "", err
+	}
+
+	if len(tgResult.TargetGroups) == 0 {
+		e2e.Logf("No target groups found for NLB: %s", lbName)
+		return "", nil
+	}
+
+	// Get health check configuration from the first target group
+	tg := tgResult.TargetGroups[0]
+	protocol := aws.StringValue(tg.HealthCheckProtocol)
+	path := aws.StringValue(tg.HealthCheckPath)
+	port := aws.StringValue(tg.HealthCheckPort)
+
+	// Format: "HTTP:10256/healthz"
+	return fmt.Sprintf("%s:%s%s", protocol, port, path), nil
+}