test: Minimal test for the host firewall in IPv4-only mode

[ upstream commit 44c122d ]

This test is meant to catch complexity regressions such as fixed
in the previous commit. It runs only on GKE for now and will be extended
in follow up PRs.

Signed-off-by: Paul Chaignon <paul@cilium.io>

test/k8sT/DatapathConfiguration.go

@@ -623,6 +623,23 @@ var _ = Describe("K8sDatapathConfig", func() {
 			Expect(testPodConnectivityAcrossNodes(kubectl)).Should(BeTrue(), "Connectivity test between nodes failed")
 		})
 	})
+
+	Context("Host firewall", func() {
+		SkipItIf(func() bool {
+			return !helpers.IsIntegration(helpers.CIIntegrationGKE)
+		}, "Check connectivity with IPv6 disabled", func() {
+			deploymentManager.DeployCilium(map[string]string{
+				"ipv4.enabled": "true",
+				"ipv6.enabled": "false",
+				"hostFirewall": "true",
+				// We need the default GKE config. except for per-endpoint
+				// routes (incompatible with host firewall for now).
+				"gke.enabled": "false",
+				"tunnel":      "disabled",
+			}, DeployCiliumOptionsAndDNS)
+			Expect(testPodConnectivityAcrossNodes(kubectl)).Should(BeTrue(), "Connectivity test between nodes failed")
+		})
+	})
 })
 
 func testPodConnectivityAcrossNodes(kubectl *helpers.Kubectl) bool {