Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

E2E test for auth on network policy #24600

Closed
Tracked by #22215
meyskens opened this issue Mar 28, 2023 · 1 comment
Closed
Tracked by #22215

E2E test for auth on network policy #24600

meyskens opened this issue Mar 28, 2023 · 1 comment
Assignees
@meyskens
Labels
area/servicemesh GH issues or PRs regarding servicemesh sig/agent Cilium agent related.

Comments

@meyskens
Copy link
Member

Part of #22215

An e2e test should be added to cilium-cli when an auth handler is enabled:

  • it should set auth: mtls-spiffe and test i pods can comminucate
  • it should check if auth actually happened (see Make authed-flows visible in Hubble #24598)
  • an always-fail auth handler should be implemented to test regressions against the datapath

Part of this work is already done by me to test things but is blocked by changing from contract to authmap and will be continued after those PRs merge.
@meyskens meyskens added sig/agent Cilium agent related. area/servicemesh GH issues or PRs regarding servicemesh labels Mar 28, 2023
@meyskens meyskens self-assigned this Mar 28, 2023
This was referenced Mar 28, 2023
Closed
Merged
@meyskens
Copy link
Member Author

Fixed in cilium/cilium-cli#1505

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@meyskens meyskens

Labels
area/servicemesh GH issues or PRs regarding servicemesh sig/agent Cilium agent related.
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
1 participant
@meyskens