Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

CI: Add IPsec key rotation test #27203

Merged
merged 2 commits into from
Aug 28, 2023
Merged

CI: Add IPsec key rotation test #27203

merged 2 commits into from
Aug 28, 2023

Commits on Aug 28, 2023

  1. ci-ipsec-e2e: Add IPsec key rotation test 

    This commit adds a step in conformance-ipsec-e2e to perform IPsec key
rotation and conn-disrupt-test.

The commands to perform IPsec key rotation are copied from
https://docs.cilium.io/en/latest/security/network/encryption-ipsec/#key-rotation with a few improvements:
* To pass commands with "$" character to conn-disrupt-test action, "$"
  must be escaped as "\$".
* To have a new IPsec key in a bare VM, a string of hex is hard coded
  without using xxd.

Fixes: #26350

Signed-off-by: Zhichuan Liang <gray.liang@isovalent.com>
    @jschwinger233
    jschwinger233 committed Aug 28, 2023
    Configuration menu
    Copy the full SHA
    400f56c View commit details
    Browse the repository at this point in the history

  2. ci-ipsec-upgrade: Use conn-disrupt-test action for tests-ipsec-upgrade 

    Signed-off-by: Zhichuan Liang <gray.liang@isovalent.com>
    @jschwinger233
    jschwinger233 committed Aug 28, 2023
    Configuration menu
    Copy the full SHA
    4810d82 View commit details
    Browse the repository at this point in the history