Commit Graph

949 Commits

Author SHA1 Message Date
Kubernetes Prow Robot
6edce1cfca Merge pull request #103778 from danwinship/feature-sctp
remove superfluous [Feature:SCTP] tag in some test names
2021-08-05 01:43:13 -07:00
jay vyas
59c0523bca Using ServiceIPs instead of DNS names in the NetworkPolicy Probes + adding Interface decoupling (#102354)
* Squashed commit of the following:

commit 7f774dcb54b511a3956aed0fac5c803f145e383a
Author: Jay Vyas (jayunit100) <jvyas@vmware.com>
Date:   Fri Jun 18 10:58:16 2021 +0000

    fix commit message

commit 0ac09650742f02004dbb227310057ea3760c4da9
Author: jay vyas <jvyas@vmware.com>
Date:   Thu Jun 17 07:50:33 2021 -0400

    Update test/e2e/network/netpol/kubemanager.go

    Co-authored-by: Antonio Ojea <antonio.ojea.garcia@gmail.com>

commit 6a8bf0a6a2690dac56fec2bdcdce929311c513ca
Author: jay vyas <jvyas@vmware.com>
Date:   Sun Jun 13 08:17:25 2021 -0400

    Implement Service polling for network policy suite to remove reliance on CoreDNS when verifying network policys

    Update test/e2e/network/netpol/probe.go

    Co-authored-by: Antonio Ojea <antonio.ojea.garcia@gmail.com>

    Add deafultNS to use service probe

commit b9c17a48327aab35a855540c2294a51137aa4a48
Author: Matthew Fenwick <mfenwick100@gmail.com>
Date:   Thu May 27 07:30:59 2021 -0400

    address code review comments for networkpolicy decoupling from dns

commit e23ef6ff0d189cf2ed80dbafed9881d68402cb56
Author: jay vyas <jvyas@vmware.com>
Date:   Wed May 26 13:30:21 2021 -0400

    NetworkPolicy decoupling from DNS

gofmt

remove old function

* model refactor

* minor

* dropped getK8sModel func

* dropped modelMap, added global model in BeforeEach and subsequent changes

Co-authored-by: Rajas Kakodkar <rajaskakodkar16@gmail.com>
2021-07-19 23:09:32 -07:00
Dan Winship
318b9a9578 remove superfluous [Feature:SCTP] tag in some test names
This tag was supposed to have gone away when SCTP went GA. (I think it
got screwed up due to a PR being mis-rebased after the SCTP GA merge.)
2021-07-19 14:49:53 -04:00
Davanum Srinivas
75748c185e enable verify-golangci-lint.sh
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2021-07-14 08:53:33 -04:00
Davanum Srinivas
26cc8e40a8 fix deadcode issues
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2021-07-14 08:41:21 -04:00
Andrew Sy Kim
04d59ff2df test/e2e/network: add Service internalTrafficPolicy test for pod (w/ host network) -> pod (w/ host network)
Signed-off-by: Andrew Sy Kim <kim.andrewsy@gmail.com>
2021-07-06 09:22:07 -04:00
Andrew Sy Kim
9977ea371b test/e2e/network: add Service internalTrafficPolicy test for pod -> pod (w/ host network)
Signed-off-by: Andrew Sy Kim <kim.andrewsy@gmail.com>
2021-07-06 09:22:06 -04:00
Andrew Sy Kim
025c95a778 test/e2e/network: add Service internalTrafficPolicy test pod (w/ host network) -> pod
Signed-off-by: Andrew Sy Kim <kim.andrewsy@gmail.com>
2021-07-06 09:22:06 -04:00
Andrew Sy Kim
f6bc5d0140 test/e2e/network: add Service internalTrafficPolicy test pod to pod
Signed-off-by: Andrew Sy Kim <kim.andrewsy@gmail.com>
2021-07-06 09:22:06 -04:00
Kubernetes Prow Robot
62503f254e Merge pull request #103413 from mgutierrez98/refactor-whitelist-blacklist
Refactored files containing whitelist/blacklist to allowlist/denylist…
2021-07-01 18:12:25 -07:00
mgutierrez98
1cfbb0aa25 remove webhook.go to revert changes to conformance test 2021-07-01 20:24:46 +00:00
Rajas Kakodkar
266ffa8526 bug fix in sctp test 2021-06-27 21:53:41 +05:30
Ciprian Hacman
1721be087d nodeport tests: node addresses must match the service IP family 2021-06-26 10:00:46 +03:00
Kubernetes Prow Robot
017b359770 Merge pull request #103180 from aojea/collect_ipfamily
Services tests for NodePorts must match the Node Address and Service IP family
2021-06-25 12:13:32 -07:00
Antonio Ojea
916dbc335c nodeport tests: node addresses must match the service IP family 2021-06-25 10:34:42 +02:00
Antonio Ojea
02a3caba9c refactor default IP family cluster detection 2021-06-25 10:34:42 +02:00
Shiming Zhang
674802147c update to remove github.com/pkg/errors 2021-06-23 22:56:48 +08:00
Kubernetes Prow Robot
6dd9deea3d Merge pull request #103038 from aojea/ips_panics
don't panic (just fail) if nodeIPs are not found
2021-06-22 07:44:11 -07:00
Kubernetes Prow Robot
0f4fd721e5 Merge pull request #102963 from andrewsykim/granular-services-remove-internet-tests
test/e2e/network: remove dependency to google.com for in-cluster networking tests
2021-06-21 10:06:51 -07:00
Antonio Ojea
6d3fd8353c don't panic if nodeIPs are not found 2021-06-21 10:59:09 +02:00
Andrew Sy Kim
afea48d23f test/e2e/network: remove dependency to google.com for in-cluster networking tests
Signed-off-by: Andrew Sy Kim <kim.andrewsy@gmail.com>
2021-06-20 19:19:02 -04:00
Kubernetes Prow Robot
75151fa524 Merge pull request #102933 from andrewsykim/net-pol-legacy
test/e2e/network: mark tests in test/e2e/network/netpol/network_legacy.go with NetworkPolicyLegacy
2021-06-17 14:08:05 -07:00
Andrew Sy Kim
9e694a45f9 test/e2e/network: mark tests in test/e2e/network/netpol/network_legacy.go with NetworkPolicyLegacy
Signed-off-by: Andrew Sy Kim <kim.andrewsy@gmail.com>
2021-06-16 19:44:27 -04:00
Andrew Sy Kim
480093bd1f test/e2e/network: mark network_tiers.go tests with GCE tag
Signed-off-by: Andrew Sy Kim <kim.andrewsy@gmail.com>
2021-06-16 07:27:53 -04:00
Kubernetes Prow Robot
4ebf4a08c0 Merge pull request #100447 from JornShen/add_netpol_immutable_label_for_ns
add e2e test for default label selector for NS in netpol
2021-06-14 09:49:04 -07:00
Kubernetes Prow Robot
90132378f0 Merge pull request #102710 from freehan/net-tier-fix
fix net-tiers e2e test
2021-06-09 13:35:27 -07:00
Minhan Xia
a84b91f08c fix net-tiers e2e test 2021-06-09 11:17:37 -07:00
jornshen
f22b07d8b4 add e2e test for immutable label selector in netpol 2021-06-08 09:52:12 +08:00
Antonio Ojea
b8edcd3bb3 add loadbalancer name to ESIPP tests so regex pick them 2021-06-02 22:38:12 +02:00
Antonio Ojea
21073e3b34 loadbalancer outer poll loops should have a longer timeout that inner loop 2021-06-02 22:38:08 +02:00
Antonio Ojea
27e20e226e e2e lb use same variable for endpoint path 2021-06-02 22:24:10 +02:00
Kubernetes Prow Robot
f98e9caa77 Merge pull request #102509 from danwinship/sctp-is-not-tcp
Clarify and split up the "not actually SCTP" SCTP NetworkPolicy test
2021-06-02 09:46:23 -07:00
Dan Winship
211e974722 Clarify and split up the "not actually SCTP" SCTP NetworkPolicy test
These tests *do* apply to plugins that don't support SCTP.
2021-06-02 09:10:25 -04:00
Dan Winship
4b0d0d6fc7 Fix spurious Feature tags on some NetworkPolicy tests
The "[Feature:SCTP]" tag was needed on "should not allow access by TCP
when a policy specifies only SCTP" back when SCTP was alpha, because
it wasn't possible to create a policy that even mentioned SCTP without
enabling the feature gate. This no longer applies, and the tag was
removed from the original copy of network_policy.go, but accidentally
got left behind in the netpol/ version.

Likewise, the newly-added "should not allow access by TCP when a
policy specifies only UDP" got tagged "[Feature:UDP]", but this was
never necessary, and is inconsistent with other UDP tests anyway.

Similarly, we need "[Feature:SCTPConnectivity]" on tests that make
SCTP connections, because that functionality is not available in all
clusters, but "[Feature:UDPConnectivity]" is unnecessary and
inconsistent.
2021-06-02 09:10:25 -04:00
Anish Ramasekar
f3f59d420a remove LinuxOnly tags for subset of dual-stack tests
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2021-06-01 16:54:54 +00:00
Kubernetes Prow Robot
29e5e4df4b Merge pull request #99777 from JornShen/add_e2e_api_validate_endport
add API e2e test for port ranges of netpolices
2021-05-26 19:34:23 -07:00
Kubernetes Prow Robot
494dc731d7 Merge pull request #98077 from jayunit100/jay-netpol-win
NetworkPolicy E2E enablement for Windows
2021-05-26 06:35:21 -07:00
jornshen
90e215dfd2 add api e2e test for port ranges of netpolices 2021-05-26 20:00:11 +08:00
jay vyas
8651fcb25a Implement a windows Netpol NewModel 2021-05-25 21:08:29 -04:00
Peri Thompson
69019a03d3 Add netpol tests for windows
Co-authored-by: Jay Vyas <jvyas@vmware.com>
2021-05-24 13:28:04 -04:00
Antonio Ojea
da9ec0d4c7 remove ingress kubemci tests from e2e 2021-05-20 10:18:43 +02:00
Antonio Ojea
5ffed5133d tag ingress multicluster test and adapt to v1 2021-05-19 13:28:22 +02:00
Antonio Ojea
c822a1f2c6 gcp ingress only supports ImplementationSpecific path type 2021-05-19 11:48:01 +02:00
Antonio Ojea
7b38012e74 add pathtype to scale ingress 2021-05-19 11:41:49 +02:00
Antonio Ojea
0839ed41ac mark test that restart kcm as disruptive 2021-05-19 09:31:57 +02:00
Antonio Ojea
8f5020a3aa skip nginx controller e2e tests 2021-05-18 22:49:07 +02:00
Antonio Ojea
7d7179ebfd bump e2e test to ingress v1 2021-05-18 21:42:48 +02:00
Antonio Ojea
2dc4dba562 conformance test for Services should validate behavior
Current test for service with endpoints only validate the API objects,
however, doesn't validate that the implementation of Services works.

This mean that a cluster without any component implementing Services,
can pass Conformance.
2021-05-03 17:19:54 +02:00
Kubernetes Prow Robot
db70c2a96a Merge pull request #99348 from chymy/e2e-rck-unused
Remove unused code in test/e2e/{upgrades,storage,network}
2021-04-28 21:02:50 -07:00
Dan Williams
f86ddbea70 e2e/network/firewall: don't assume nodes are exposed externally
If no nodes have NodeExternalIP addresses, then clearly none of the
services are exposed externally, and the test should succeed.
Seen in OpenShift CI.
2021-04-26 10:25:21 -05:00