connectivity: Skip IPv6 requests in north-south-loadbalancing-with-l7…

…-policy when running on < 1.14.0 Cilium

cilium/cilium#21954 for the IPv6 path was
resolved only for v1.14, but not for v1.13. In order to be able to run
the latest connectivity tests on v1.13, we need to skip curl requests to
the IPv6 addresses in that particular test.

Fixes: cilium#1627

Signed-off-by: Zhichuan Liang <gray.liang@isovalent.com>

connectivity/check/test.go

@@ -655,3 +655,11 @@ func (t *Test) ForEachIPFamily(do func(IPFamily)) {
 func (t *Test) CertificateCAs() map[string][]byte {
 	return t.certificateCAs
 }
+
+func (t *Test) CiliumNetworkPolicies() map[string]*ciliumv2.CiliumNetworkPolicy {
+	return t.cnps
+}
+
+func (t *Test) KubernetesNetworkPolicies() map[string]*networkingv1.NetworkPolicy {
+	return t.knps
+}

connectivity/tests/service.go

@@ -9,6 +9,8 @@ import (
 
 	corev1 "k8s.io/api/core/v1"
 
+	"github.com/cilium/cilium/pkg/versioncheck"
+
 	"github.com/cilium/cilium-cli/connectivity/check"
 )
 
@@ -214,6 +216,13 @@ func curlNodePort(ctx context.Context, s check.Scenario, t *check.Test,
 				}
 			}
 
+			//  Skip IPv6 requests when running on <1.14.0 Cilium with CNPs
+			if check.GetIPFamily(addr.Address) == check.IPFamilyV6 &&
+				versioncheck.MustCompile("<1.14.0")(t.Context().CiliumVersion) &&
+				(len(t.CiliumNetworkPolicies()) > 0 || len(t.KubernetesNetworkPolicies()) > 0) {
+				continue
+			}
+
 			// Manually construct an HTTP endpoint to override the destination IP
 			// and port of the request.
 			ep := check.HTTPEndpoint(name, fmt.Sprintf("%s://%s:%d%s", svc.Scheme(), addr.Address, np, svc.Path()))