-
Notifications
You must be signed in to change notification settings - Fork 210
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
connectivity: Misc enc test case changes #2055
Conversation
639bbda
to
8b5a580
Compare
8b5a580
to
03246d7
Compare
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Cool! A few comment inline.
connectivity/tests/encryption.go
Outdated
// a packet to the tunnel netdev, and only afterwards redirects to the WG netdev | ||
// for the encryption. | ||
func getInterNodeIface(ctx context.Context, t *check.Test, | ||
client, clientHost, server, serverHost *check.Pod, ipFam features.IPFamily) string { |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Nit. I wonder if it could make sense to rename client and server to source and destination for additional clarity, given that this function is used to determine the interface on both sides, with swapped parameters.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I will do that in a separate PR!
func getFilter(ctx context.Context, t *check.Test, client, clientHost *check.Pod, | ||
server, serverHost *check.Pod, |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Same here about the possibility of renaming client and server to source and destination for additional clarity.
connectivity/tests/encryption.go
Outdated
if enc, ok := t.Context().Feature(features.EncryptionPod); tunnelEnabled && ok && | ||
enc.Enabled && enc.Mode == "wireguard" { |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I guess that the version compatibility check would be appropriate also here.
49d7775
to
b3e5158
Compare
b3e5158
to
c7b7ce7
Compare
An upcoming commit will move the whole tcpdump filter derivation into the function. Signed-off-by: Martynas Pumputis <[email protected]>
Instead of modifying the src filter. A subsequent commit will move the filter derivation logic into getFilter. Signed-off-by: Martynas Pumputis <[email protected]>
Signed-off-by: Martynas Pumputis <[email protected]>
Signed-off-by: Martynas Pumputis <[email protected]>
As the iface derivation now might depend on the src/dst host IP, pass both host pods to testNoTrafficLeak() invocations in the node-to-node test case. Signed-off-by: Martynas Pumputis <[email protected]>
Unfortunately, this makes the inverse tests (assertNoLeaks=false) noop for this special case. But an additional check for leaks is going to be added outside the CLI. Signed-off-by: Martynas Pumputis <[email protected]>
c7b7ce7
to
ce1da30
Compare
ce1da30
to
3e4fb5c
Compare
3e4fb5c
to
7f47895
Compare
7f47895
to
23556b9
Compare
Signed-off-by: Martynas Pumputis <[email protected]>
23556b9
to
888883f
Compare
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
cilium/cli
✔️
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
/lgtm
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM
Also, bump the CLI to include those tests [1]. [1]: cilium/cilium-cli#2055 Signed-off-by: Martynas Pumputis <[email protected]>
To include the encryption suite changes [1]. [1]: cilium/cilium-cli#2055 Signed-off-by: Martynas Pumputis <[email protected]>
To include the encryption suite changes [1]. [1]: cilium/cilium-cli#2055 Signed-off-by: Martynas Pumputis <[email protected]>
To include the encryption suite changes [1]. [1]: cilium/cilium-cli#2055 Signed-off-by: Martynas Pumputis <[email protected]>
To include the encryption suite changes [1]. [1]: cilium/cilium-cli#2055 Signed-off-by: Martynas Pumputis <[email protected]>
Also, bump the CLI to include those tests [1]. [1]: cilium/cilium-cli#2055 Signed-off-by: Martynas Pumputis <[email protected]>
To include the encryption suite changes [1] [2] [1]: cilium/cilium-cli#2055 [2]: cilium/cilium-cli#2089 Signed-off-by: Martynas Pumputis <[email protected]>
To include the encryption suite changes [1] [2] [1]: cilium/cilium-cli#2055 [2]: cilium/cilium-cli#2089 Signed-off-by: Martynas Pumputis <[email protected]>
To include the encryption suite changes [1] [2] [1]: cilium/cilium-cli#2055 [2]: cilium/cilium-cli#2089 Signed-off-by: Martynas Pumputis <[email protected]>
No description provided.