Add test that the ServiceCIDR API is blocked

Author: danwinship

test/extended/networking/servicecidr.go

@@ -0,0 +1,23 @@
+package networking
+
+import (
+	g "github.com/onsi/ginkgo/v2"
+	o "github.com/onsi/gomega"
+
+	exutil "github.com/openshift/origin/test/extended/util"
+)
+
+var _ = g.Describe("[sig-network] ServiceCIDR", func() {
+	g.It("should be blocked", func() {
+		oc := exutil.NewCLIWithoutNamespace("servicecidr")
+
+		g.By("Trying to create a new ServiceCIDR")
+		yaml := exutil.FixturePath("testdata", "servicecidr.yaml")
+		err := oc.AsAdmin().Run("create").Args("-f", yaml).Execute()
+		o.Expect(err).To(o.HaveOccurred())
+
+		g.By("Trying to modify an existing ServiceCIDR")
+		err = oc.AsAdmin().Run("annotate").Args("servicecidr", "kubernetes", "e2etest=success").Execute()
+		o.Expect(err).To(o.HaveOccurred())
+	})
+})

test/extended/testdata/bindata.go

@@ -0,0 +1,7 @@
+apiVersion: networking.k8s.io/v1beta1
+kind: ServiceCIDR
+metadata:
+  name: newcidr1
+spec:
+  cidrs:
+  - 10.96.0.0/24