Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

workflow: Reenable L7 tests on EKS + IPsec #22617

Merged
merged 2 commits into from Dec 9, 2022

Conversation

pchaigno
Copy link
Member

@pchaigno pchaigno commented Dec 8, 2022

This pull request reenables the L7 tests in the IPsec portion of the EKS workflow as they seem to be fixed.

10 runs and discovered that this change may cause the timeout to be reached (2/10). After fixing that, the workflow ran successfully 20 more times. One example of the 5 parallel runs: https://github.com/cilium/cilium/actions/runs/3650907671.

Fixes: #17139.

@pchaigno pchaigno added area/CI Continuous Integration testing issue or flake area/proxy Impacts proxy components, including DNS, Kafka, Envoy and/or XDS servers. area/encryption Impacts encryption support such as IPSec, WireGuard, or kTLS. release-note/ci This PR makes changes to the CI. integration/cloud Related to integration with cloud environments such as AKS, EKS, GKE, etc. labels Dec 8, 2022
@pchaigno pchaigno force-pushed the pr/pchaigno/reenable-workflow-eks-ipsec-l7 branch from 1f57e70 to 1065c98 Compare December 8, 2022 23:07
@pchaigno pchaigno marked this pull request as ready for review December 8, 2022 23:09
@pchaigno pchaigno requested review from a team as code owners December 8, 2022 23:09
@aanm aanm added the dont-merge/needs-rebase This PR needs to be rebased because it has merge conflicts. label Dec 9, 2022
Copy link
Member

@aanm aanm left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM @pchaigno just a heads-up that since we have branched v1.13, this PR needs to be rebased against master and the file .github/workflows/conformance-eks-v1.13.yaml needs to be modified as well.

We've recently reenabled IPsec tests on EKS; it's time to try to
reenable the L7 portion of those tests.

It seems likely to be working because the connectivity tests now
includes new L7 tests that are not disabled here and those are passing.
We've also made a fair amount of changes (refactoring and one seemingly
unrelated fix) to IPsec recently, so maybe we fixed whatever issue we
had there for L7.

Signed-off-by: Paul Chaignon <paul@cilium.io>
The few new tests that were added are enough for the EKS workflow to
reach its timeout once in a while (2 out of 10 tests). Let's bump it.

Signed-off-by: Paul Chaignon <paul@cilium.io>
@pchaigno pchaigno force-pushed the pr/pchaigno/reenable-workflow-eks-ipsec-l7 branch from 1065c98 to d4b695c Compare December 9, 2022 14:36
@pchaigno pchaigno removed the dont-merge/needs-rebase This PR needs to be rebased because it has merge conflicts. label Dec 9, 2022
@pchaigno pchaigno merged commit f635cf0 into master Dec 9, 2022
@pchaigno pchaigno deleted the pr/pchaigno/reenable-workflow-eks-ipsec-l7 branch December 9, 2022 17:30
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
area/CI Continuous Integration testing issue or flake area/encryption Impacts encryption support such as IPSec, WireGuard, or kTLS. area/proxy Impacts proxy components, including DNS, Kafka, Envoy and/or XDS servers. integration/cloud Related to integration with cloud environments such as AKS, EKS, GKE, etc. release-note/ci This PR makes changes to the CI.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

CI: new CLI 0.8.6's L7 tests failures on EKS with IPsec enabled
3 participants