Commit Graph

940 Commits

Author SHA1 Message Date
Kubernetes Prow Robot
62503f254e Merge pull request #103413 from mgutierrez98/refactor-whitelist-blacklist
Refactored files containing whitelist/blacklist to allowlist/denylist…
2021-07-01 18:12:25 -07:00
mgutierrez98
1cfbb0aa25 remove webhook.go to revert changes to conformance test 2021-07-01 20:24:46 +00:00
Rajas Kakodkar
266ffa8526 bug fix in sctp test 2021-06-27 21:53:41 +05:30
Ciprian Hacman
1721be087d nodeport tests: node addresses must match the service IP family 2021-06-26 10:00:46 +03:00
Kubernetes Prow Robot
017b359770 Merge pull request #103180 from aojea/collect_ipfamily
Services tests for NodePorts must match the Node Address and Service IP family
2021-06-25 12:13:32 -07:00
Antonio Ojea
916dbc335c nodeport tests: node addresses must match the service IP family 2021-06-25 10:34:42 +02:00
Antonio Ojea
02a3caba9c refactor default IP family cluster detection 2021-06-25 10:34:42 +02:00
Shiming Zhang
674802147c update to remove github.com/pkg/errors 2021-06-23 22:56:48 +08:00
Kubernetes Prow Robot
6dd9deea3d Merge pull request #103038 from aojea/ips_panics
don't panic (just fail) if nodeIPs are not found
2021-06-22 07:44:11 -07:00
Kubernetes Prow Robot
0f4fd721e5 Merge pull request #102963 from andrewsykim/granular-services-remove-internet-tests
test/e2e/network: remove dependency to google.com for in-cluster networking tests
2021-06-21 10:06:51 -07:00
Antonio Ojea
6d3fd8353c don't panic if nodeIPs are not found 2021-06-21 10:59:09 +02:00
Andrew Sy Kim
afea48d23f test/e2e/network: remove dependency to google.com for in-cluster networking tests
Signed-off-by: Andrew Sy Kim <kim.andrewsy@gmail.com>
2021-06-20 19:19:02 -04:00
Kubernetes Prow Robot
75151fa524 Merge pull request #102933 from andrewsykim/net-pol-legacy
test/e2e/network: mark tests in test/e2e/network/netpol/network_legacy.go with NetworkPolicyLegacy
2021-06-17 14:08:05 -07:00
Andrew Sy Kim
9e694a45f9 test/e2e/network: mark tests in test/e2e/network/netpol/network_legacy.go with NetworkPolicyLegacy
Signed-off-by: Andrew Sy Kim <kim.andrewsy@gmail.com>
2021-06-16 19:44:27 -04:00
Andrew Sy Kim
480093bd1f test/e2e/network: mark network_tiers.go tests with GCE tag
Signed-off-by: Andrew Sy Kim <kim.andrewsy@gmail.com>
2021-06-16 07:27:53 -04:00
Kubernetes Prow Robot
4ebf4a08c0 Merge pull request #100447 from JornShen/add_netpol_immutable_label_for_ns
add e2e test for default label selector for NS in netpol
2021-06-14 09:49:04 -07:00
Kubernetes Prow Robot
90132378f0 Merge pull request #102710 from freehan/net-tier-fix
fix net-tiers e2e test
2021-06-09 13:35:27 -07:00
Minhan Xia
a84b91f08c fix net-tiers e2e test 2021-06-09 11:17:37 -07:00
jornshen
f22b07d8b4 add e2e test for immutable label selector in netpol 2021-06-08 09:52:12 +08:00
Antonio Ojea
b8edcd3bb3 add loadbalancer name to ESIPP tests so regex pick them 2021-06-02 22:38:12 +02:00
Antonio Ojea
21073e3b34 loadbalancer outer poll loops should have a longer timeout that inner loop 2021-06-02 22:38:08 +02:00
Antonio Ojea
27e20e226e e2e lb use same variable for endpoint path 2021-06-02 22:24:10 +02:00
Kubernetes Prow Robot
f98e9caa77 Merge pull request #102509 from danwinship/sctp-is-not-tcp
Clarify and split up the "not actually SCTP" SCTP NetworkPolicy test
2021-06-02 09:46:23 -07:00
Dan Winship
211e974722 Clarify and split up the "not actually SCTP" SCTP NetworkPolicy test
These tests *do* apply to plugins that don't support SCTP.
2021-06-02 09:10:25 -04:00
Dan Winship
4b0d0d6fc7 Fix spurious Feature tags on some NetworkPolicy tests
The "[Feature:SCTP]" tag was needed on "should not allow access by TCP
when a policy specifies only SCTP" back when SCTP was alpha, because
it wasn't possible to create a policy that even mentioned SCTP without
enabling the feature gate. This no longer applies, and the tag was
removed from the original copy of network_policy.go, but accidentally
got left behind in the netpol/ version.

Likewise, the newly-added "should not allow access by TCP when a
policy specifies only UDP" got tagged "[Feature:UDP]", but this was
never necessary, and is inconsistent with other UDP tests anyway.

Similarly, we need "[Feature:SCTPConnectivity]" on tests that make
SCTP connections, because that functionality is not available in all
clusters, but "[Feature:UDPConnectivity]" is unnecessary and
inconsistent.
2021-06-02 09:10:25 -04:00
Anish Ramasekar
f3f59d420a remove LinuxOnly tags for subset of dual-stack tests
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2021-06-01 16:54:54 +00:00
Kubernetes Prow Robot
29e5e4df4b Merge pull request #99777 from JornShen/add_e2e_api_validate_endport
add API e2e test for port ranges of netpolices
2021-05-26 19:34:23 -07:00
Kubernetes Prow Robot
494dc731d7 Merge pull request #98077 from jayunit100/jay-netpol-win
NetworkPolicy E2E enablement for Windows
2021-05-26 06:35:21 -07:00
jornshen
90e215dfd2 add api e2e test for port ranges of netpolices 2021-05-26 20:00:11 +08:00
jay vyas
8651fcb25a Implement a windows Netpol NewModel 2021-05-25 21:08:29 -04:00
Peri Thompson
69019a03d3 Add netpol tests for windows
Co-authored-by: Jay Vyas <jvyas@vmware.com>
2021-05-24 13:28:04 -04:00
Antonio Ojea
da9ec0d4c7 remove ingress kubemci tests from e2e 2021-05-20 10:18:43 +02:00
Antonio Ojea
5ffed5133d tag ingress multicluster test and adapt to v1 2021-05-19 13:28:22 +02:00
Antonio Ojea
c822a1f2c6 gcp ingress only supports ImplementationSpecific path type 2021-05-19 11:48:01 +02:00
Antonio Ojea
7b38012e74 add pathtype to scale ingress 2021-05-19 11:41:49 +02:00
Antonio Ojea
0839ed41ac mark test that restart kcm as disruptive 2021-05-19 09:31:57 +02:00
Antonio Ojea
8f5020a3aa skip nginx controller e2e tests 2021-05-18 22:49:07 +02:00
Antonio Ojea
7d7179ebfd bump e2e test to ingress v1 2021-05-18 21:42:48 +02:00
Antonio Ojea
2dc4dba562 conformance test for Services should validate behavior
Current test for service with endpoints only validate the API objects,
however, doesn't validate that the implementation of Services works.

This mean that a cluster without any component implementing Services,
can pass Conformance.
2021-05-03 17:19:54 +02:00
Kubernetes Prow Robot
db70c2a96a Merge pull request #99348 from chymy/e2e-rck-unused
Remove unused code in test/e2e/{upgrades,storage,network}
2021-04-28 21:02:50 -07:00
Dan Williams
f86ddbea70 e2e/network/firewall: don't assume nodes are exposed externally
If no nodes have NodeExternalIP addresses, then clearly none of the
services are exposed externally, and the test should succeed.
Seen in OpenShift CI.
2021-04-26 10:25:21 -05:00
Kubernetes Prow Robot
113f828553 Merge pull request #101442 from aramase/ds-cleanup
update dual-stack test description to remove duplicate tag
2021-04-24 13:57:00 -07:00
Anish Ramasekar
24f37695e5 update dual-stack test description to remove duplicate tag
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2021-04-23 16:32:36 -07:00
Antonio Ojea
0695bc45cf e2e create pods only on schedulable nodes
We were avoiding the scheduled using the pod.Spec.NodeName directly,
however, once we switched to using the node selector, the no_snat
e2e test started to fail because was trying to schedule pods on
nodes with taints, hence, failing the test.
2021-04-17 12:05:40 +02:00
Antonio Ojea
60c3480740 e2e don't set pod.Spec.NodeName directly
based on this comment in
ea07644522/test/e2e/framework/pod/node_selection.go (L96-L101)

// pod.Spec.NodeName should not be set directly because
// it will bypass the scheduler, potentially causing
// kubelet to Fail the pod immediately if it's out of
// resources. Instead, we want the pod to remain
// pending in the scheduler until the node has resources
// freed up.
2021-04-16 15:58:16 +02:00
Kubernetes Prow Robot
e824c59913 Merge pull request #99696 from JornShen/refactor_netpol_policies
refactor netpol/policies.go
2021-04-14 15:17:07 -07:00
Kubernetes Prow Robot
c51450609f Merge pull request #100839 from jayunit100/patch-25
add network-policy label automatically
2021-04-10 19:03:47 -07:00
Kubernetes Prow Robot
fded3d71e5 Merge pull request #100676 from squeed/netpol-v6-test
test/e2e: handle ipv6 addresses in netpol tests
2021-04-09 05:19:53 -07:00
Kubernetes Prow Robot
4959cd6339 Merge pull request #100671 from Niekvdplas/spelling-mistakes
Fixed several spelling mistakes
2021-04-09 05:19:45 -07:00
Antonio Ojea
7c7d003e5c e2e test with hostNetwork pods can't run in parallel
the tests with pods using hostNetwork need to bind pods for the
test. Since they use hostNetwork the ports are limited, hence, if
more than one run in parallel, one is going to fail because will not
be able to get the port.
2021-04-07 20:07:18 +02:00