Commit Graph

955 Commits

Author SHA1 Message Date
Kubernetes Prow Robot
d77af28a35 Merge pull request #104086 from jayunit100/patch-27
(experimental) Calibrate networkpolicy test aggressiveness
2021-08-12 06:09:48 -07:00
jay vyas
145cec925a reduce the number of containers created by 66%
Co-authored-by: jay vyas <jvyas@vmware.com>
Co-authored-by: rajas kakodkar <rkakodkar@vmware.com>
2021-08-12 02:08:00 +05:30
Kubernetes Prow Robot
9aee1ea7ce Merge pull request #104074 from danwinship/np-dns-fixup
Remove stray DNS port references in NetPol tests
2021-08-05 08:18:32 -07:00
Kubernetes Prow Robot
ed5618e2d5 Merge pull request #104061 from aojea/waitForPodsReady
replace e2e WaitForPodsReady by WaitTimeoutForPodReadyInNamespace
2021-08-05 08:18:24 -07:00
Kubernetes Prow Robot
6edce1cfca Merge pull request #103778 from danwinship/feature-sctp
remove superfluous [Feature:SCTP] tag in some test names
2021-08-05 01:43:13 -07:00
Dan Winship
72223406ac Remove stray DNS port references in NetPol tests
The tests no longer use DNS, so we shouldn't be adding DNS-related
exceptions to the policies that are being tested.
2021-08-02 10:31:59 -04:00
Antonio Ojea
34f4959633 replace e2e WaitForPodsReady by WaitTimeoutForPodReadyInNamespace 2021-08-01 19:24:52 +02:00
jay vyas
59c0523bca Using ServiceIPs instead of DNS names in the NetworkPolicy Probes + adding Interface decoupling (#102354)
* Squashed commit of the following:

commit 7f774dcb54b511a3956aed0fac5c803f145e383a
Author: Jay Vyas (jayunit100) <jvyas@vmware.com>
Date:   Fri Jun 18 10:58:16 2021 +0000

    fix commit message

commit 0ac09650742f02004dbb227310057ea3760c4da9
Author: jay vyas <jvyas@vmware.com>
Date:   Thu Jun 17 07:50:33 2021 -0400

    Update test/e2e/network/netpol/kubemanager.go

    Co-authored-by: Antonio Ojea <antonio.ojea.garcia@gmail.com>

commit 6a8bf0a6a2690dac56fec2bdcdce929311c513ca
Author: jay vyas <jvyas@vmware.com>
Date:   Sun Jun 13 08:17:25 2021 -0400

    Implement Service polling for network policy suite to remove reliance on CoreDNS when verifying network policys

    Update test/e2e/network/netpol/probe.go

    Co-authored-by: Antonio Ojea <antonio.ojea.garcia@gmail.com>

    Add deafultNS to use service probe

commit b9c17a48327aab35a855540c2294a51137aa4a48
Author: Matthew Fenwick <mfenwick100@gmail.com>
Date:   Thu May 27 07:30:59 2021 -0400

    address code review comments for networkpolicy decoupling from dns

commit e23ef6ff0d189cf2ed80dbafed9881d68402cb56
Author: jay vyas <jvyas@vmware.com>
Date:   Wed May 26 13:30:21 2021 -0400

    NetworkPolicy decoupling from DNS

gofmt

remove old function

* model refactor

* minor

* dropped getK8sModel func

* dropped modelMap, added global model in BeforeEach and subsequent changes

Co-authored-by: Rajas Kakodkar <rajaskakodkar16@gmail.com>
2021-07-19 23:09:32 -07:00
Dan Winship
318b9a9578 remove superfluous [Feature:SCTP] tag in some test names
This tag was supposed to have gone away when SCTP went GA. (I think it
got screwed up due to a PR being mis-rebased after the SCTP GA merge.)
2021-07-19 14:49:53 -04:00
Davanum Srinivas
75748c185e enable verify-golangci-lint.sh
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2021-07-14 08:53:33 -04:00
Davanum Srinivas
26cc8e40a8 fix deadcode issues
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2021-07-14 08:41:21 -04:00
Andrew Sy Kim
04d59ff2df test/e2e/network: add Service internalTrafficPolicy test for pod (w/ host network) -> pod (w/ host network)
Signed-off-by: Andrew Sy Kim <kim.andrewsy@gmail.com>
2021-07-06 09:22:07 -04:00
Andrew Sy Kim
9977ea371b test/e2e/network: add Service internalTrafficPolicy test for pod -> pod (w/ host network)
Signed-off-by: Andrew Sy Kim <kim.andrewsy@gmail.com>
2021-07-06 09:22:06 -04:00
Andrew Sy Kim
025c95a778 test/e2e/network: add Service internalTrafficPolicy test pod (w/ host network) -> pod
Signed-off-by: Andrew Sy Kim <kim.andrewsy@gmail.com>
2021-07-06 09:22:06 -04:00
Andrew Sy Kim
f6bc5d0140 test/e2e/network: add Service internalTrafficPolicy test pod to pod
Signed-off-by: Andrew Sy Kim <kim.andrewsy@gmail.com>
2021-07-06 09:22:06 -04:00
Kubernetes Prow Robot
62503f254e Merge pull request #103413 from mgutierrez98/refactor-whitelist-blacklist
Refactored files containing whitelist/blacklist to allowlist/denylist…
2021-07-01 18:12:25 -07:00
mgutierrez98
1cfbb0aa25 remove webhook.go to revert changes to conformance test 2021-07-01 20:24:46 +00:00
Rajas Kakodkar
266ffa8526 bug fix in sctp test 2021-06-27 21:53:41 +05:30
Ciprian Hacman
1721be087d nodeport tests: node addresses must match the service IP family 2021-06-26 10:00:46 +03:00
Kubernetes Prow Robot
017b359770 Merge pull request #103180 from aojea/collect_ipfamily
Services tests for NodePorts must match the Node Address and Service IP family
2021-06-25 12:13:32 -07:00
Antonio Ojea
916dbc335c nodeport tests: node addresses must match the service IP family 2021-06-25 10:34:42 +02:00
Antonio Ojea
02a3caba9c refactor default IP family cluster detection 2021-06-25 10:34:42 +02:00
Shiming Zhang
674802147c update to remove github.com/pkg/errors 2021-06-23 22:56:48 +08:00
Kubernetes Prow Robot
6dd9deea3d Merge pull request #103038 from aojea/ips_panics
don't panic (just fail) if nodeIPs are not found
2021-06-22 07:44:11 -07:00
Kubernetes Prow Robot
0f4fd721e5 Merge pull request #102963 from andrewsykim/granular-services-remove-internet-tests
test/e2e/network: remove dependency to google.com for in-cluster networking tests
2021-06-21 10:06:51 -07:00
Antonio Ojea
6d3fd8353c don't panic if nodeIPs are not found 2021-06-21 10:59:09 +02:00
Andrew Sy Kim
afea48d23f test/e2e/network: remove dependency to google.com for in-cluster networking tests
Signed-off-by: Andrew Sy Kim <kim.andrewsy@gmail.com>
2021-06-20 19:19:02 -04:00
Kubernetes Prow Robot
75151fa524 Merge pull request #102933 from andrewsykim/net-pol-legacy
test/e2e/network: mark tests in test/e2e/network/netpol/network_legacy.go with NetworkPolicyLegacy
2021-06-17 14:08:05 -07:00
Andrew Sy Kim
9e694a45f9 test/e2e/network: mark tests in test/e2e/network/netpol/network_legacy.go with NetworkPolicyLegacy
Signed-off-by: Andrew Sy Kim <kim.andrewsy@gmail.com>
2021-06-16 19:44:27 -04:00
Andrew Sy Kim
480093bd1f test/e2e/network: mark network_tiers.go tests with GCE tag
Signed-off-by: Andrew Sy Kim <kim.andrewsy@gmail.com>
2021-06-16 07:27:53 -04:00
Kubernetes Prow Robot
4ebf4a08c0 Merge pull request #100447 from JornShen/add_netpol_immutable_label_for_ns
add e2e test for default label selector for NS in netpol
2021-06-14 09:49:04 -07:00
Kubernetes Prow Robot
90132378f0 Merge pull request #102710 from freehan/net-tier-fix
fix net-tiers e2e test
2021-06-09 13:35:27 -07:00
Minhan Xia
a84b91f08c fix net-tiers e2e test 2021-06-09 11:17:37 -07:00
jornshen
f22b07d8b4 add e2e test for immutable label selector in netpol 2021-06-08 09:52:12 +08:00
Antonio Ojea
b8edcd3bb3 add loadbalancer name to ESIPP tests so regex pick them 2021-06-02 22:38:12 +02:00
Antonio Ojea
21073e3b34 loadbalancer outer poll loops should have a longer timeout that inner loop 2021-06-02 22:38:08 +02:00
Antonio Ojea
27e20e226e e2e lb use same variable for endpoint path 2021-06-02 22:24:10 +02:00
Kubernetes Prow Robot
f98e9caa77 Merge pull request #102509 from danwinship/sctp-is-not-tcp
Clarify and split up the "not actually SCTP" SCTP NetworkPolicy test
2021-06-02 09:46:23 -07:00
Dan Winship
211e974722 Clarify and split up the "not actually SCTP" SCTP NetworkPolicy test
These tests *do* apply to plugins that don't support SCTP.
2021-06-02 09:10:25 -04:00
Dan Winship
4b0d0d6fc7 Fix spurious Feature tags on some NetworkPolicy tests
The "[Feature:SCTP]" tag was needed on "should not allow access by TCP
when a policy specifies only SCTP" back when SCTP was alpha, because
it wasn't possible to create a policy that even mentioned SCTP without
enabling the feature gate. This no longer applies, and the tag was
removed from the original copy of network_policy.go, but accidentally
got left behind in the netpol/ version.

Likewise, the newly-added "should not allow access by TCP when a
policy specifies only UDP" got tagged "[Feature:UDP]", but this was
never necessary, and is inconsistent with other UDP tests anyway.

Similarly, we need "[Feature:SCTPConnectivity]" on tests that make
SCTP connections, because that functionality is not available in all
clusters, but "[Feature:UDPConnectivity]" is unnecessary and
inconsistent.
2021-06-02 09:10:25 -04:00
Anish Ramasekar
f3f59d420a remove LinuxOnly tags for subset of dual-stack tests
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2021-06-01 16:54:54 +00:00
Kubernetes Prow Robot
29e5e4df4b Merge pull request #99777 from JornShen/add_e2e_api_validate_endport
add API e2e test for port ranges of netpolices
2021-05-26 19:34:23 -07:00
Kubernetes Prow Robot
494dc731d7 Merge pull request #98077 from jayunit100/jay-netpol-win
NetworkPolicy E2E enablement for Windows
2021-05-26 06:35:21 -07:00
jornshen
90e215dfd2 add api e2e test for port ranges of netpolices 2021-05-26 20:00:11 +08:00
jay vyas
8651fcb25a Implement a windows Netpol NewModel 2021-05-25 21:08:29 -04:00
Peri Thompson
69019a03d3 Add netpol tests for windows
Co-authored-by: Jay Vyas <jvyas@vmware.com>
2021-05-24 13:28:04 -04:00
Antonio Ojea
da9ec0d4c7 remove ingress kubemci tests from e2e 2021-05-20 10:18:43 +02:00
Antonio Ojea
5ffed5133d tag ingress multicluster test and adapt to v1 2021-05-19 13:28:22 +02:00
Antonio Ojea
c822a1f2c6 gcp ingress only supports ImplementationSpecific path type 2021-05-19 11:48:01 +02:00
Antonio Ojea
7b38012e74 add pathtype to scale ingress 2021-05-19 11:41:49 +02:00