Automated cherry pick of #2662: Add in-cluster svc fqdn e2e test #2691
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Add a new test case using in-cluster headless Services to test FQDN policies, to avoid having a dependency on external connectivity. The reason we use headless Service is that FQDN will use the IP from DNS A/AAAA records to implement flows in the egress policy table. For a non-headless Service, the DNS name resolves to the ClusterIP for the Service. But when traffic arrives to the egress table, the dstIP has already been DNATed to the Endpoints IP by AntreaProxy Service Load-Balancing, and the policies are not enforced correctly. For a headless Service, the Endpoints IP will be directly returned by the DNS server. In this case, FQDN based policies can be enforced successfully. Signed-off-by: wgrayson <wgrayson@vmware.com>
GraysonWu
added
the
kind/cherry-pick
Codecov Report
@@ Coverage Diff @@
## release-1.3 #2691 +/- ##
================================================
+ Coverage 41.05% 60.67% +19.61%
================================================
Files 158 285 +127
Lines 19243 23004 +3761
================================================
+ Hits 7900 13957 +6057
+ Misses 10596 7547 -3049
- Partials 747 1500 +753
Flags with carried forward coverage won't be shown. Click here to find out more.
|
antoninbas
approved these changes
Sep 1, 2021
|
/test-e2e |
antoninbas
deleted the
automated-cherry-pick-of-#2662-upstream-release-1.3
branch
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Cherry pick of #2662 on release-1.3.
#2662: Add in-cluster svc fqdn e2e test
For details on the cherry pick process, see the cherry pick requests page.