New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
test: Remove special case for host identity when remote-node identity is disabled #16450
test: Remove special case for host identity when remote-node identity is disabled #16450
Conversation
75a6c0b
to
565a812
Compare
test-me-please |
I think the tests are stuck |
test-1.20-4.19 |
test-1.21-4.9 |
Was there a discussion about this anywhere? I don't see a detailed analysis either in the issue #15491 or here in this PR.
From what I can tell, this test was about policy handling for remote nodes in the cluster, where the "world" entities policy is expected to allow traffic directly from remote nodes in native mode + remote-node-identity=disabled. Can you explain further what you mean by it is no longer needed? Do we no longer want to make such a guarantee? Or you think that this behaviour is already covered by another test in the testsuite? Or something else? |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Please provide a more concrete rationale before we merge this (see comment above).
From out-of-band discussion with @pchaigno it sounds like basically this test code being removed is either (1) not run in regular test environments or (2) not effective in evaluating whether the remote-node identity option is performing correctly, so the extra test code is unnecessary. @romanspb80 would you mind updating the commit message to include the above detail as well? If for whatever reason we find out in future that this test code was actually useful or necessary, it could be helpful to be able to read back through the git commit logs to find these details out. With that I think this should be OK to merge. |
565a812
to
8390ff1
Compare
OK. Done. |
This test code being removed has no effect on the CI currently, so it either doesn't run in regular test environments or is otherwise not effective in evaluating whether the remote-node identity option is performing correctly, so the extra test code is unnecessary. Fixes: cilium#15491 Signed-off-by: Roman Ptitcyn <romanspb@yahoo.com>
8390ff1
to
f28f543
Compare
👍 Only change was to update the commit message, good to merge. @romanspb80 just to let you know in future, if you configure your email / name in git using the following commands, then you can use
|
The test-case "Installing fromEntities host and world policy" with disabled remote-node identity is no longer needed due to lack of any network endpoints outside of the cluster.
Fixes: #15491
Signed-off-by: Roman Ptitcyn romanspb@yahoo.com