Skip to content

Commit

Permalink
test: add iptables masquerading without random-fully test
Browse files Browse the repository at this point in the history
As suggested in the ticket, let's add a test for iptables masqueranding
_without_ the random-fully option. This should tell us if the
"K8sDatapathConfig Encapsulation Check iptables masquerading with
random-fully" test is failing due to the random-fully option or not.

Related-to: #13773

Signed-off-by: Gilberto Bertin <gilberto@isovalent.com>
  • Loading branch information
jibi authored and aanm committed Dec 28, 2020
1 parent b25bea2 commit b942010
Showing 1 changed file with 11 additions and 0 deletions.
11 changes: 11 additions & 0 deletions test/k8sT/DatapathConfiguration.go
Original file line number Diff line number Diff line change
Expand Up @@ -280,6 +280,17 @@ var _ = Describe("K8sDatapathConfig", func() {
Expect(testPodHTTPToOutside(kubectl, "http://google.com", false, false)).
Should(BeTrue(), "Connectivity test to http://google.com failed")
})

It("Check iptables masquerading without random-fully", func() {
deploymentManager.DeployCilium(map[string]string{
"bpf.masquerade": "false",
}, DeployCiliumOptionsAndDNS)
Expect(testPodConnectivityAcrossNodes(kubectl)).Should(BeTrue(), "Connectivity test between nodes failed")

By("Test iptables masquerading")
Expect(testPodHTTPToOutside(kubectl, "http://google.com", false, false)).
Should(BeTrue(), "Connectivity test to http://google.com failed")
})
})

// DirectRouting without AutoDirectNodeRoutes not supported outside of GKE.
Expand Down

0 comments on commit b942010

Please sign in to comment.