Commit Graph

971 Commits

Author SHA1 Message Date
Tim Hockin
d30ae6a5ab Svc REST: Make ipFamilyPolicy authoritative
Previously we would try to infer the `ipFamilyPolicy` from `clusterIPs`
and/or `ipFamilies`.  That is too tricky.  Now you MUST specify
`ipFamilyPolicy` as one of the dual-stack options in order to get a
dual-stack service.
2021-09-11 11:30:01 -07:00
Kubernetes Prow Robot
6b21e064be Merge pull request #104917 from vinayakankugoyal/e2e
Skip externalips service tests if admission controller to deny externalip services is enabled.
2021-09-10 19:08:06 -07:00
Vinayak Goyal
b3c23290b4 Skip service external ips tests if admission controller to deny externalip services is enabled. 2021-09-10 12:51:31 -07:00
Antonio Ojea
3f6f63d2a8 e2e iperf2 change threshold to 10MBps = 80 Mbps 2021-09-08 18:46:04 +02:00
Antonio Ojea
2a5ad65a9a e2e test apiserver endpoint and endpointslices
The e2e test "should have Endpoints and EndpointSlices pointing to
the API Server Service" was veryfing the current endpoints
reconciler implementation on the apiservers, however, users may
disable the endpoint reconciler and create their own.

This e2e test is also a conformance test, so we should test the
behaviour and not the implementation details. The test verifies
that a kubernetes.default service exist, an endpoint and endpoint
slices object referencing that service exist and are equivalent.
2021-08-31 11:29:06 +02:00
Kubernetes Prow Robot
80feff6f40 Merge pull request #104408 from martinkennelly/fix_fqdn_hostname_mismatch
Fix comparison between FQDN and hostname
2021-08-27 19:58:52 -07:00
Kubernetes Prow Robot
5871321310 Merge pull request #104614 from prameshj/disable-pod-rec
Skip testing for Pod DNS records.
2021-08-27 05:32:04 -07:00
Pavithra Ramesh
fa3f4a69e5 Skip testing for Pod DNS records.
DNS records of the form *.pod.cluster.local are deprecated - https://github.com/kubernetes/dns/pull/335
Testing for their presence is not required.
2021-08-26 14:33:12 -07:00
Martin Kennelly
752a532c3d Fix comparison between FQDN and hostname
Agnhost's serve-hostname at endpoint /hostname
will return hostname. Pods host node name may
return FQDN. Comparison between the two fails.

Signed-off-by: Martin Kennelly <mkennell@redhat.com>
2021-08-20 10:24:41 +01:00
Antonio Ojea
0cd75e8fec run hack/update-netparse-cve.sh 2021-08-20 10:42:09 +02:00
Kubernetes Prow Robot
851b4a2c9a Merge pull request #104407 from aojea/host_network_collision
hostNetwork tests can't share the same port
2021-08-19 13:45:25 -07:00
Kubernetes Prow Robot
333eb833e5 Merge pull request #104401 from aojea/sctp_scale
SCTP tests run only on 2 nodes
2021-08-18 03:28:08 -07:00
Antonio Ojea
513b55b00d hostNetwork tests can't share the same port
The pods using hostNetwork use the host network namespace, hence
they have to share it with the rest of the process and pods.
If several pods try to bind to the same port, the test will fail,
so we try to use a non common port, and run the different scenario
in the same test, so we only have to bind once and we avoid consuming
ports reducing the port collision risk.
2021-08-18 10:43:06 +02:00
Antonio Ojea
04d83edd3c SCTP tests run only on 2 nodes 2021-08-17 00:42:20 +02:00
Martin Kennelly
eba9d33c3e Fix insufficient privileges to bind to port
Container without elevated privileges to bind to
host port less than 1024 causes bind permission
denied error.
Increase port number greater than 1024 to allow
binding.

Signed-off-by: Martin Kennelly <mkennell@redhat.com>
2021-08-13 19:15:03 +01:00
Rajas Kakodkar
e36a14730b reducing the number of containers created based on the ports used 2021-08-12 23:36:28 +05:30
Kubernetes Prow Robot
d77af28a35 Merge pull request #104086 from jayunit100/patch-27
(experimental) Calibrate networkpolicy test aggressiveness
2021-08-12 06:09:48 -07:00
jay vyas
145cec925a reduce the number of containers created by 66%
Co-authored-by: jay vyas <jvyas@vmware.com>
Co-authored-by: rajas kakodkar <rkakodkar@vmware.com>
2021-08-12 02:08:00 +05:30
Kubernetes Prow Robot
9aee1ea7ce Merge pull request #104074 from danwinship/np-dns-fixup
Remove stray DNS port references in NetPol tests
2021-08-05 08:18:32 -07:00
Kubernetes Prow Robot
ed5618e2d5 Merge pull request #104061 from aojea/waitForPodsReady
replace e2e WaitForPodsReady by WaitTimeoutForPodReadyInNamespace
2021-08-05 08:18:24 -07:00
Kubernetes Prow Robot
6edce1cfca Merge pull request #103778 from danwinship/feature-sctp
remove superfluous [Feature:SCTP] tag in some test names
2021-08-05 01:43:13 -07:00
Dan Winship
72223406ac Remove stray DNS port references in NetPol tests
The tests no longer use DNS, so we shouldn't be adding DNS-related
exceptions to the policies that are being tested.
2021-08-02 10:31:59 -04:00
Antonio Ojea
34f4959633 replace e2e WaitForPodsReady by WaitTimeoutForPodReadyInNamespace 2021-08-01 19:24:52 +02:00
jay vyas
59c0523bca Using ServiceIPs instead of DNS names in the NetworkPolicy Probes + adding Interface decoupling (#102354)
* Squashed commit of the following:

commit 7f774dcb54b511a3956aed0fac5c803f145e383a
Author: Jay Vyas (jayunit100) <jvyas@vmware.com>
Date:   Fri Jun 18 10:58:16 2021 +0000

    fix commit message

commit 0ac09650742f02004dbb227310057ea3760c4da9
Author: jay vyas <jvyas@vmware.com>
Date:   Thu Jun 17 07:50:33 2021 -0400

    Update test/e2e/network/netpol/kubemanager.go

    Co-authored-by: Antonio Ojea <antonio.ojea.garcia@gmail.com>

commit 6a8bf0a6a2690dac56fec2bdcdce929311c513ca
Author: jay vyas <jvyas@vmware.com>
Date:   Sun Jun 13 08:17:25 2021 -0400

    Implement Service polling for network policy suite to remove reliance on CoreDNS when verifying network policys

    Update test/e2e/network/netpol/probe.go

    Co-authored-by: Antonio Ojea <antonio.ojea.garcia@gmail.com>

    Add deafultNS to use service probe

commit b9c17a48327aab35a855540c2294a51137aa4a48
Author: Matthew Fenwick <mfenwick100@gmail.com>
Date:   Thu May 27 07:30:59 2021 -0400

    address code review comments for networkpolicy decoupling from dns

commit e23ef6ff0d189cf2ed80dbafed9881d68402cb56
Author: jay vyas <jvyas@vmware.com>
Date:   Wed May 26 13:30:21 2021 -0400

    NetworkPolicy decoupling from DNS

gofmt

remove old function

* model refactor

* minor

* dropped getK8sModel func

* dropped modelMap, added global model in BeforeEach and subsequent changes

Co-authored-by: Rajas Kakodkar <rajaskakodkar16@gmail.com>
2021-07-19 23:09:32 -07:00
Dan Winship
318b9a9578 remove superfluous [Feature:SCTP] tag in some test names
This tag was supposed to have gone away when SCTP went GA. (I think it
got screwed up due to a PR being mis-rebased after the SCTP GA merge.)
2021-07-19 14:49:53 -04:00
Davanum Srinivas
75748c185e enable verify-golangci-lint.sh
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2021-07-14 08:53:33 -04:00
Davanum Srinivas
26cc8e40a8 fix deadcode issues
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2021-07-14 08:41:21 -04:00
Andrew Sy Kim
04d59ff2df test/e2e/network: add Service internalTrafficPolicy test for pod (w/ host network) -> pod (w/ host network)
Signed-off-by: Andrew Sy Kim <kim.andrewsy@gmail.com>
2021-07-06 09:22:07 -04:00
Andrew Sy Kim
9977ea371b test/e2e/network: add Service internalTrafficPolicy test for pod -> pod (w/ host network)
Signed-off-by: Andrew Sy Kim <kim.andrewsy@gmail.com>
2021-07-06 09:22:06 -04:00
Andrew Sy Kim
025c95a778 test/e2e/network: add Service internalTrafficPolicy test pod (w/ host network) -> pod
Signed-off-by: Andrew Sy Kim <kim.andrewsy@gmail.com>
2021-07-06 09:22:06 -04:00
Andrew Sy Kim
f6bc5d0140 test/e2e/network: add Service internalTrafficPolicy test pod to pod
Signed-off-by: Andrew Sy Kim <kim.andrewsy@gmail.com>
2021-07-06 09:22:06 -04:00
Kubernetes Prow Robot
62503f254e Merge pull request #103413 from mgutierrez98/refactor-whitelist-blacklist
Refactored files containing whitelist/blacklist to allowlist/denylist…
2021-07-01 18:12:25 -07:00
mgutierrez98
1cfbb0aa25 remove webhook.go to revert changes to conformance test 2021-07-01 20:24:46 +00:00
Rajas Kakodkar
266ffa8526 bug fix in sctp test 2021-06-27 21:53:41 +05:30
Ciprian Hacman
1721be087d nodeport tests: node addresses must match the service IP family 2021-06-26 10:00:46 +03:00
Kubernetes Prow Robot
017b359770 Merge pull request #103180 from aojea/collect_ipfamily
Services tests for NodePorts must match the Node Address and Service IP family
2021-06-25 12:13:32 -07:00
Antonio Ojea
916dbc335c nodeport tests: node addresses must match the service IP family 2021-06-25 10:34:42 +02:00
Antonio Ojea
02a3caba9c refactor default IP family cluster detection 2021-06-25 10:34:42 +02:00
Shiming Zhang
674802147c update to remove github.com/pkg/errors 2021-06-23 22:56:48 +08:00
Kubernetes Prow Robot
6dd9deea3d Merge pull request #103038 from aojea/ips_panics
don't panic (just fail) if nodeIPs are not found
2021-06-22 07:44:11 -07:00
Kubernetes Prow Robot
0f4fd721e5 Merge pull request #102963 from andrewsykim/granular-services-remove-internet-tests
test/e2e/network: remove dependency to google.com for in-cluster networking tests
2021-06-21 10:06:51 -07:00
Antonio Ojea
6d3fd8353c don't panic if nodeIPs are not found 2021-06-21 10:59:09 +02:00
Andrew Sy Kim
afea48d23f test/e2e/network: remove dependency to google.com for in-cluster networking tests
Signed-off-by: Andrew Sy Kim <kim.andrewsy@gmail.com>
2021-06-20 19:19:02 -04:00
Kubernetes Prow Robot
75151fa524 Merge pull request #102933 from andrewsykim/net-pol-legacy
test/e2e/network: mark tests in test/e2e/network/netpol/network_legacy.go with NetworkPolicyLegacy
2021-06-17 14:08:05 -07:00
Andrew Sy Kim
9e694a45f9 test/e2e/network: mark tests in test/e2e/network/netpol/network_legacy.go with NetworkPolicyLegacy
Signed-off-by: Andrew Sy Kim <kim.andrewsy@gmail.com>
2021-06-16 19:44:27 -04:00
Andrew Sy Kim
480093bd1f test/e2e/network: mark network_tiers.go tests with GCE tag
Signed-off-by: Andrew Sy Kim <kim.andrewsy@gmail.com>
2021-06-16 07:27:53 -04:00
Kubernetes Prow Robot
4ebf4a08c0 Merge pull request #100447 from JornShen/add_netpol_immutable_label_for_ns
add e2e test for default label selector for NS in netpol
2021-06-14 09:49:04 -07:00
Kubernetes Prow Robot
90132378f0 Merge pull request #102710 from freehan/net-tier-fix
fix net-tiers e2e test
2021-06-09 13:35:27 -07:00
Minhan Xia
a84b91f08c fix net-tiers e2e test 2021-06-09 11:17:37 -07:00
jornshen
f22b07d8b4 add e2e test for immutable label selector in netpol 2021-06-08 09:52:12 +08:00