mirror of
https://github.com/k3s-io/kubernetes.git
synced 2026-01-15 14:26:57 +00:00
55b687054d
The test "should allow ingress access from updated pod" fails regardless of which CNI plugin is enabled. It's because the test assumes the client Pod can recheck connectivity after updating its label, but the client won't restart after the first failure, so the second check will always fail. The PR creates a client Pod with OnFailure RestartPolicy to fix it. In addition to the above test that checks rule selector takes effect on updated client pod, the PR adds a test "should deny ingress access to updated pod" to ensure network policy selector can take effect on updated server pod.