Active assurance of network slices

1 . Non-transitory computer-readable media storing instructions that, when executed, cause processing circuitry to:

receive data indicative of a declarative testing descriptor for active testing of a network slice implemented by a first virtualized service of a plurality of virtualized services;

obtain, from an orchestration layer, metadata associated with objects of a cluster of the network slice implemented by the first virtualized service, wherein the metadata specifies a unique name for the first virtualized service within a namespace of the cluster managed by the orchestration layer, and wherein the objects correspond to resources within the cluster of the network slice;

provide labels in a custom resource that defines inputs of a test agent, wherein the labels are used to bind the test agent to the first virtualized service, and wherein the labels correspond to objects of the cluster of the network slice that is associated with the metadata;

determine, based on the declarative testing descriptor and the metadata, an initial active testing configuration for validating the network slice by matching the test agent to the first virtualized service based on the labels in the custom resource matching the objects of the cluster of the network slice implemented by the first virtualized service; and

based on received updated metadata indicating a change to the cluster of the network slice implemented by the first virtualized service, determine, based on the declarative testing descriptor and the updated metadata, an updated active testing configuration by matching the test agent to a second virtualized service of the plurality of virtualized services based on matching the labels in the custom resource using the updated metadata.

2 . The non-transitory computer-readable media of claim 1 , wherein to receive the data indicative of the declarative testing descriptor, the instructions cause the processing circuitry to: receive, for each of a plurality of service types, data indicative of a service type and data indicative of a corresponding initial active testing configuration for the service type.

3 . The non-transitory computer-readable media of claim 1 , wherein the initial active testing configuration includes test configuration parameters, placement of the test agent, and one or more simulated elements to be assigned for validating the network slice, and wherein the instructions further cause the processing circuitry to:

based on placing the test agent according to the active testing configuration, start an active test of the network slice using the one or more simulated elements; and

output an indication of whether a result of the active test indicates the network slice meets service level requirements.

4 . The non-transitory computer-readable media of claim 3 , wherein the instructions further cause the processing circuitry to: based on a determination that the result of the active test indicates the network slice meets service level requirements, discontinue using the one or more simulated elements for the network slice.

5 . The non-transitory computer-readable media of claim 3 , wherein the instructions further cause the processing circuitry to: based on a determination that the result of the active test indicates the network slice does not meet service level requirements, perform an action.

6 . The non-transitory computer-readable media of claim 3 , wherein the one or more simulated elements are implemented by a third virtualized service of the plurality of virtualized services and simulate one or more network functions of the network slice.

7 . The non-transitory computer-readable media of claim 3 , wherein to start the active test, the instructions cause the processing circuitry to: send, using the test agent and according to the initial active testing configuration, simulated network traffic and active test packets.

8 . The non-transitory computer-readable media of claim 1 , wherein the instructions further cause the processing circuitry to:

based on using the network slice in a network for live network traffic:

start an active test according to the initial active testing configuration or the updated active testing configuration; and

determine one or more service level violations based on a result of the active test.

9 . The non-transitory computer-readable media of claim 8 , wherein the instructions further cause the processing circuitry to: trigger healing operations in the network based on a determination that the one or more service level violations exist.

10 . The non-transitory computer-readable media of claim 1 , wherein the first virtualized service comprises at least one service selected from a group consisting of an Access and Mobility Management Function (AMF) and a user plane function (UPF) to implement the network slice for a mobile network.

11 . The non-transitory computer-readable media of claim 1 , wherein the first virtualized service comprises one or more containerized services.

12 . The non-transitory computer-readable media of claim 1 , wherein the instructions further cause the processing circuitry to: create a third virtualized service for allowing active testing between nodes.

13 . The non-transitory computer-readable media of claim 1 , wherein the instructions further cause the processing circuitry to:

deploy the test agent outside the cluster; and

use the test agent for testing outbound services.

14 . A computing system comprising:

processing circuitry coupled to memory, the processing circuitry configured to:

receive data indicative of a declarative testing descriptor for active testing of a network slice implemented by a first virtualized service of a plurality of virtualized services;

obtain, from an orchestration layer, metadata associated with objects of a cluster of the network slice implemented by the first virtualized service, wherein the metadata specifies a unique name for the first virtualized service within a namespace of the cluster managed by the orchestration layer, and wherein the objects correspond to resources within the cluster of the network slice;

provide labels in a custom resource that defines inputs of a test agent, wherein the labels are used to bind the test agent to the first virtualized service, and wherein the labels correspond to objects of the cluster of the network slice that is associated with the metadata;

determine, based on the declarative testing descriptor and the metadata, an initial active testing configuration for validating the network slice by matching the test agent to the first virtualized service based on the labels in the custom resource matching the objects of the cluster of the network slice implemented by the first virtualized service; and

based on received updated metadata indicating a change to the cluster of the network slice implemented by the first virtualized service, determine, based on the declarative testing descriptor and the updated metadata, an updated active testing configuration by matching the test agent to a second virtualized service of the plurality of virtualized services based on matching the labels in the custom resource using the updated metadata.

15 . The computing system of claim 14 , wherein the processing circuitry is further configured to:

based on using the network slice in a network for live network traffic:

start an active test according to the initial active testing configuration or the updated active testing configuration; and

determine one or more service level violations based on a result of the active test.

16 . The computing system of claim 15 , wherein the processing circuitry is further configured to: trigger one or more healing operations in the network based on the determination of the one or more service level violations.

17 . The computing system of claim 14 , wherein the first virtualized service comprises at least one service selected from a group consisting of an Access and Mobility Management Function (AMF) and a user plane function (UPF) to implement the network slice for a mobile network.

18 . The computing system of claim 14 , wherein the computing system is part of an edge cloud system.

19 . A method comprising:

receiving, by a computing system, data indicative of a declarative testing descriptor for active testing of a network slice implemented by a first virtualized service of a plurality of virtualized services;

obtaining, by the computing system and from an orchestration layer, metadata associated with objects of a cluster of the network slice implemented by the first virtualized service, wherein the metadata specifies a unique name for the first virtualized service within a namespace of the cluster managed by the orchestration layer, and wherein the objects correspond to resources within the cluster of the network slice;

providing, by the computing system, labels in a custom resource that defines inputs of a test agent, wherein the labels are used to bind the test agent to the first virtualized service, and wherein the labels correspond to objects of the cluster of the network slice that is associated with the metadata;

determining, by the computing system and based on the declarative testing descriptor and the metadata, an initial active testing configuration for validating the network slice by matching the test agent to the first virtualized service based on the labels in the custom resource matching the objects of the cluster of the network slice implemented by the first virtualized service; and

based on received updated metadata indicating a change to the cluster of the network slice implemented by the first virtualized service, determining, by the computing system, based on the declarative testing descriptor and the updated metadata, an updated active testing configuration by matching the test agent to a second virtualized service of the plurality of virtualized services based on matching the labels in the custom resource using the updated metadata.

20 . The method of claim 19 , further comprising:

based on using the network slice in a network for live network traffic:

starting an active test according to the initial active testing configuration or the updated active testing configuration, and

determining one or more service level violations based on a result of the active test; and

triggering one or more healing operations in the network based on the determination of the one or more service level violations.