github/kubernetes
4
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
103,254 Commits 1 Branch 31 Tags
2f448a078973df7adb4e7fe8ffd60a0ec2eabc35
Commit Graph

966 Commits

Author SHA1 Message Date
Kubernetes Prow Robot
80feff6f40 Merge pull request #104408 from martinkennelly/fix_fqdn_hostname_mismatch 
Fix comparison between FQDN and hostname
 2021-08-27 19:58:52 -07:00
Kubernetes Prow Robot
5871321310 Merge pull request #104614 from prameshj/disable-pod-rec 
Skip testing for Pod DNS records.
 2021-08-27 05:32:04 -07:00
Pavithra Ramesh
fa3f4a69e5 Skip testing for Pod DNS records. 
DNS records of the form *.pod.cluster.local are deprecated - https://github.com/kubernetes/dns/pull/335
Testing for their presence is not required.
 2021-08-26 14:33:12 -07:00
Martin Kennelly
752a532c3d Fix comparison between FQDN and hostname 
Agnhost's serve-hostname at endpoint /hostname
will return hostname. Pods host node name may
return FQDN. Comparison between the two fails.

Signed-off-by: Martin Kennelly <mkennell@redhat.com>
 2021-08-20 10:24:41 +01:00
Antonio Ojea
0cd75e8fec run hack/update-netparse-cve.sh 2021-08-20 10:42:09 +02:00
Kubernetes Prow Robot
851b4a2c9a Merge pull request #104407 from aojea/host_network_collision 
hostNetwork tests can't share the same port
 2021-08-19 13:45:25 -07:00
Kubernetes Prow Robot
333eb833e5 Merge pull request #104401 from aojea/sctp_scale 
SCTP tests run only on 2 nodes
 2021-08-18 03:28:08 -07:00
Antonio Ojea
513b55b00d hostNetwork tests can't share the same port 
The pods using hostNetwork use the host network namespace, hence
they have to share it with the rest of the process and pods.
If several pods try to bind to the same port, the test will fail,
so we try to use a non common port, and run the different scenario
in the same test, so we only have to bind once and we avoid consuming
ports reducing the port collision risk.
 2021-08-18 10:43:06 +02:00
Antonio Ojea
04d83edd3c SCTP tests run only on 2 nodes 2021-08-17 00:42:20 +02:00
Martin Kennelly
eba9d33c3e Fix insufficient privileges to bind to port 
Container without elevated privileges to bind to
host port less than 1024 causes bind permission
denied error.
Increase port number greater than 1024 to allow
binding.

Signed-off-by: Martin Kennelly <mkennell@redhat.com>
 2021-08-13 19:15:03 +01:00
Rajas Kakodkar
e36a14730b reducing the number of containers created based on the ports used 2021-08-12 23:36:28 +05:30
Kubernetes Prow Robot
d77af28a35 Merge pull request #104086 from jayunit100/patch-27 
(experimental) Calibrate networkpolicy test aggressiveness
 2021-08-12 06:09:48 -07:00
jay vyas
145cec925a reduce the number of containers created by 66% 
Co-authored-by: jay vyas <jvyas@vmware.com>
Co-authored-by: rajas kakodkar <rkakodkar@vmware.com>
 2021-08-12 02:08:00 +05:30
Kubernetes Prow Robot
9aee1ea7ce Merge pull request #104074 from danwinship/np-dns-fixup 
Remove stray DNS port references in NetPol tests
 2021-08-05 08:18:32 -07:00
Kubernetes Prow Robot
ed5618e2d5 Merge pull request #104061 from aojea/waitForPodsReady 
replace e2e WaitForPodsReady by WaitTimeoutForPodReadyInNamespace
 2021-08-05 08:18:24 -07:00
Kubernetes Prow Robot
6edce1cfca Merge pull request #103778 from danwinship/feature-sctp 
remove superfluous [Feature:SCTP] tag in some test names
 2021-08-05 01:43:13 -07:00
Dan Winship
72223406ac Remove stray DNS port references in NetPol tests 
The tests no longer use DNS, so we shouldn't be adding DNS-related
exceptions to the policies that are being tested.
 2021-08-02 10:31:59 -04:00
Antonio Ojea
34f4959633 replace e2e WaitForPodsReady by WaitTimeoutForPodReadyInNamespace 2021-08-01 19:24:52 +02:00
jay vyas
59c0523bca Using ServiceIPs instead of DNS names in the NetworkPolicy Probes + adding Interface decoupling (#102354) 
* Squashed commit of the following:

commit 7f774dcb54b511a3956aed0fac5c803f145e383a
Author: Jay Vyas (jayunit100) <jvyas@vmware.com>
Date:   Fri Jun 18 10:58:16 2021 +0000

    fix commit message

commit 0ac09650742f02004dbb227310057ea3760c4da9
Author: jay vyas <jvyas@vmware.com>
Date:   Thu Jun 17 07:50:33 2021 -0400

    Update test/e2e/network/netpol/kubemanager.go

    Co-authored-by: Antonio Ojea <antonio.ojea.garcia@gmail.com>

commit 6a8bf0a6a2690dac56fec2bdcdce929311c513ca
Author: jay vyas <jvyas@vmware.com>
Date:   Sun Jun 13 08:17:25 2021 -0400

    Implement Service polling for network policy suite to remove reliance on CoreDNS when verifying network policys

    Update test/e2e/network/netpol/probe.go

    Co-authored-by: Antonio Ojea <antonio.ojea.garcia@gmail.com>

    Add deafultNS to use service probe

commit b9c17a48327aab35a855540c2294a51137aa4a48
Author: Matthew Fenwick <mfenwick100@gmail.com>
Date:   Thu May 27 07:30:59 2021 -0400

    address code review comments for networkpolicy decoupling from dns

commit e23ef6ff0d189cf2ed80dbafed9881d68402cb56
Author: jay vyas <jvyas@vmware.com>
Date:   Wed May 26 13:30:21 2021 -0400

    NetworkPolicy decoupling from DNS

gofmt

remove old function

* model refactor

* minor

* dropped getK8sModel func

* dropped modelMap, added global model in BeforeEach and subsequent changes

Co-authored-by: Rajas Kakodkar <rajaskakodkar16@gmail.com>
 2021-07-19 23:09:32 -07:00
Dan Winship
318b9a9578 remove superfluous [Feature:SCTP] tag in some test names 
This tag was supposed to have gone away when SCTP went GA. (I think it
got screwed up due to a PR being mis-rebased after the SCTP GA merge.)
 2021-07-19 14:49:53 -04:00
Davanum Srinivas
75748c185e enable verify-golangci-lint.sh 
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
 2021-07-14 08:53:33 -04:00
Davanum Srinivas
26cc8e40a8 fix deadcode issues 
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
 2021-07-14 08:41:21 -04:00
Andrew Sy Kim
04d59ff2df test/e2e/network: add Service internalTrafficPolicy test for pod (w/ host network) -> pod (w/ host network) 
Signed-off-by: Andrew Sy Kim <kim.andrewsy@gmail.com>
 2021-07-06 09:22:07 -04:00
Andrew Sy Kim
9977ea371b test/e2e/network: add Service internalTrafficPolicy test for pod -> pod (w/ host network) 
Signed-off-by: Andrew Sy Kim <kim.andrewsy@gmail.com>
 2021-07-06 09:22:06 -04:00
Andrew Sy Kim
025c95a778 test/e2e/network: add Service internalTrafficPolicy test pod (w/ host network) -> pod 
Signed-off-by: Andrew Sy Kim <kim.andrewsy@gmail.com>
 2021-07-06 09:22:06 -04:00
Andrew Sy Kim
f6bc5d0140 test/e2e/network: add Service internalTrafficPolicy test pod to pod 
Signed-off-by: Andrew Sy Kim <kim.andrewsy@gmail.com>
 2021-07-06 09:22:06 -04:00
Kubernetes Prow Robot
62503f254e Merge pull request #103413 from mgutierrez98/refactor-whitelist-blacklist 
Refactored files containing whitelist/blacklist to allowlist/denylist…
 2021-07-01 18:12:25 -07:00
mgutierrez98
1cfbb0aa25 remove webhook.go to revert changes to conformance test 2021-07-01 20:24:46 +00:00
Rajas Kakodkar
266ffa8526 bug fix in sctp test 2021-06-27 21:53:41 +05:30
Ciprian Hacman
1721be087d nodeport tests: node addresses must match the service IP family 2021-06-26 10:00:46 +03:00
Kubernetes Prow Robot
017b359770 Merge pull request #103180 from aojea/collect_ipfamily 
Services tests for NodePorts must match the Node Address and Service IP family
 2021-06-25 12:13:32 -07:00
Antonio Ojea
916dbc335c nodeport tests: node addresses must match the service IP family 2021-06-25 10:34:42 +02:00
Antonio Ojea
02a3caba9c refactor default IP family cluster detection 2021-06-25 10:34:42 +02:00
Shiming Zhang
674802147c update to remove github.com/pkg/errors 2021-06-23 22:56:48 +08:00
Kubernetes Prow Robot
6dd9deea3d Merge pull request #103038 from aojea/ips_panics 
don't panic (just fail) if nodeIPs are not found
 2021-06-22 07:44:11 -07:00
Kubernetes Prow Robot
0f4fd721e5 Merge pull request #102963 from andrewsykim/granular-services-remove-internet-tests 
test/e2e/network: remove dependency to google.com for in-cluster networking tests
 2021-06-21 10:06:51 -07:00
Antonio Ojea
6d3fd8353c don't panic if nodeIPs are not found 2021-06-21 10:59:09 +02:00
Andrew Sy Kim
afea48d23f test/e2e/network: remove dependency to google.com for in-cluster networking tests 
Signed-off-by: Andrew Sy Kim <kim.andrewsy@gmail.com>
 2021-06-20 19:19:02 -04:00
Kubernetes Prow Robot
75151fa524 Merge pull request #102933 from andrewsykim/net-pol-legacy 
test/e2e/network: mark tests in test/e2e/network/netpol/network_legacy.go with NetworkPolicyLegacy
 2021-06-17 14:08:05 -07:00
Andrew Sy Kim
9e694a45f9 test/e2e/network: mark tests in test/e2e/network/netpol/network_legacy.go with NetworkPolicyLegacy 
Signed-off-by: Andrew Sy Kim <kim.andrewsy@gmail.com>
 2021-06-16 19:44:27 -04:00
Andrew Sy Kim
480093bd1f test/e2e/network: mark network_tiers.go tests with GCE tag 
Signed-off-by: Andrew Sy Kim <kim.andrewsy@gmail.com>
 2021-06-16 07:27:53 -04:00
Kubernetes Prow Robot
4ebf4a08c0 Merge pull request #100447 from JornShen/add_netpol_immutable_label_for_ns 
add e2e test for default label selector for NS in netpol
 2021-06-14 09:49:04 -07:00
Kubernetes Prow Robot
90132378f0 Merge pull request #102710 from freehan/net-tier-fix 
fix net-tiers e2e test
 2021-06-09 13:35:27 -07:00
Minhan Xia
a84b91f08c fix net-tiers e2e test 2021-06-09 11:17:37 -07:00
jornshen
f22b07d8b4 add e2e test for immutable label selector in netpol 2021-06-08 09:52:12 +08:00
Antonio Ojea
b8edcd3bb3 add loadbalancer name to ESIPP tests so regex pick them 2021-06-02 22:38:12 +02:00
Antonio Ojea
21073e3b34 loadbalancer outer poll loops should have a longer timeout that inner loop 2021-06-02 22:38:08 +02:00
Antonio Ojea
27e20e226e e2e lb use same variable for endpoint path 2021-06-02 22:24:10 +02:00
Kubernetes Prow Robot
f98e9caa77 Merge pull request #102509 from danwinship/sctp-is-not-tcp 
Clarify and split up the "not actually SCTP" SCTP NetworkPolicy test
 2021-06-02 09:46:23 -07:00
Dan Winship
211e974722 Clarify and split up the "not actually SCTP" SCTP NetworkPolicy test 
These tests *do* apply to plugins that don't support SCTP.
 2021-06-02 09:10:25 -04:00