Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[v1.14] gh/workflows: IPsec key rotation improvements #31429

Merged
merged 5 commits into from
Apr 9, 2024
Merged

[v1.14] gh/workflows: IPsec key rotation improvements #31429

merged 5 commits into from
Apr 9, 2024

Commits on Apr 8, 2024

  1. ci-ipsec-e2e: Use cilium-config 

    [ upstream commit 3afd9c3 ]

[ backporter's notes: resolve conflict because 1.14 doesn't have
  4498ec9 (".github: re-use common helm values from a single action") ]

To remove the boilerplate.

Signed-off-by: Martynas Pumputis <m@lambda.lt>
Signed-off-by: Julian Wiedmann <jwi@isovalent.com>
    @brb @julianwiedmann
    brb authored and julianwiedmann committed Apr 8, 2024
    Configuration menu
    Copy the full SHA
    c6c89a5 View commit details
    Browse the repository at this point in the history

  2. ci-ipsec-e2e: Add more key types 

    [ upstream commit 5c988ee ]

Signed-off-by: Martynas Pumputis <m@lambda.lt>
Signed-off-by: Julian Wiedmann <jwi@isovalent.com>
    @brb @julianwiedmann
    brb authored and julianwiedmann committed Apr 8, 2024
    Configuration menu
    Copy the full SHA
    bd3fb99 View commit details
    Browse the repository at this point in the history

  3. gh/actions: Add ipsec-key-rotate 

    [ upstream commit 687a4f5 ]

[ backporter's notes: also apply diff from e448644
  and e8ddc88 to support new key system ]

The action is for testing whether IPsec key rotations do not cause
any packet drops.

NB for backporters: this commit just moves the code for the workflow
into the new action, and the timeout increase.

Signed-off-by: Martynas Pumputis <m@lambda.lt>
Signed-off-by: Julian Wiedmann <jwi@isovalent.com>
    @brb @julianwiedmann
    brb authored and julianwiedmann committed Apr 8, 2024
    Configuration menu
    Copy the full SHA
    6bd6728 View commit details
    Browse the repository at this point in the history

  4. ci-eks: Add IPsec key rotation tests 

    [ upstream commit 5c06c8e ]

First, this commit includes the IPsec key rotation tests action.

Second, it changes the CLI exec name and path to "./cilium-cli", so that
it can be used by the key rotation action and friends.

Third, it runs the IPsec tests only if the matrix.ipsec is set to
"true". A subsequent commit will extend the matrix configuration
accordingly.

Signed-off-by: Martynas Pumputis <m@lambda.lt>
Signed-off-by: Julian Wiedmann <jwi@isovalent.com>
    @brb @julianwiedmann
    brb authored and julianwiedmann committed Apr 8, 2024
    Configuration menu
    Copy the full SHA
    8f4ad48 View commit details
    Browse the repository at this point in the history

  5. gh/actions: Add IPsec config to aws/k8s-versions.yaml 

    [ upstream commit f99ddb9 ]

The file name is non-ideal, but changing it would require changing many
files :-(

For each PR we will run 1.25 w/o IPsec and 1.28 w/ IPsec.

Signed-off-by: Martynas Pumputis <m@lambda.lt>
Signed-off-by: Julian Wiedmann <jwi@isovalent.com>
    @brb @julianwiedmann
    brb authored and julianwiedmann committed Apr 8, 2024
    Configuration menu
    Copy the full SHA
    f4b64a5 View commit details
    Browse the repository at this point in the history