Skip to content

NETOBSERV-2243 Add IPsec support to netobserv CLI#286

Merged
jpinsonneau merged 5 commits intonetobserv:mainfrom
msherif1234:add_ipsec
May 13, 2025
Merged

NETOBSERV-2243 Add IPsec support to netobserv CLI#286
jpinsonneau merged 5 commits intonetobserv:mainfrom
msherif1234:add_ipsec

Conversation

@msherif1234
Copy link
Contributor

@msherif1234 msherif1234 commented Apr 30, 2025

Description

Add IPsec support to CLI

Dependencies

n/a

Checklist

If you are not familiar with our processes or don't know what to answer in the list below, let us know in a comment: the maintainers will take care of that.

  • Is this PR backed with a JIRA ticket? If so, make sure it is written as a title prefix (in general, PRs affecting the NetObserv/Network Observability product should be backed with a JIRA ticket - especially if they bring user facing changes).
  • Does this PR require product documentation?
    • If so, make sure the JIRA epic is labelled with "documentation" and provides a description relevant for doc writers, such as use cases or scenarios. Any required step to activate or configure the feature should be documented there, such as new CRD knobs.
  • Does this PR require a product release notes entry?
    • If so, fill in "Release Note Text" in the JIRA.
  • Is there anything else the QE team should know before testing? E.g: configuration changes, environment setup, etc.
    • If so, make sure it is described in the JIRA ticket.
  • QE requirements (check 1 from the list):
    • Standard QE validation, with pre-merge tests unless stated otherwise.
    • Regression tests only (e.g. refactoring with no user-facing change).
    • No QE (e.g. trivial change with high reviewer's confidence, or per agreement with the QE team).

@msherif1234 msherif1234 requested a review from jpinsonneau April 30, 2025 12:39
Copy link
Member

@jpinsonneau jpinsonneau left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Hey, nice to see you around @msherif1234 👋

This will require a config update, adding the feature in the columns and the graphs in the dashboard for metrics

@msherif1234
Copy link
Contributor Author

Hey, nice to see you around @msherif1234 👋

This will require a config update, adding the feature in the columns and the graphs in the dashboard for metrics

it seems u have already taken care of the metrics bits Thanks!!

@jpinsonneau
Copy link
Member

I'm still getting n/a for now.

I guess we need to bump FLP dependency since it's embedded in eBPF agent here

@codecov
Copy link

codecov bot commented Apr 30, 2025

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 22.60%. Comparing base (20cf5fd) to head (c91e422).
Report is 1 commits behind head on main.

Additional details and impacted files
@@           Coverage Diff           @@
##             main     #286   +/-   ##
=======================================
  Coverage   22.60%   22.60%           
=======================================
  Files          14       14           
  Lines        1451     1451           
=======================================
  Hits          328      328           
  Misses       1099     1099           
  Partials       24       24           
Flag Coverage Δ
unittests 22.60% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

Files with missing lines Coverage Δ
cmd/options.go 25.00% <ø> (ø)
🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

@msherif1234
Copy link
Contributor Author

/ok-to-test

@github-actions
Copy link

New image:
quay.io/netobserv/network-observability-cli:ae5d621

It will expire after two weeks.

To use this build, update your commands using:

USER=netobserv VERSION=ae5d621 make commands

or download the updated commands.

@msherif1234 msherif1234 force-pushed the add_ipsec branch 3 times, most recently from 8c4d73e to fb2aaf7 Compare May 5, 2025 15:32
@msherif1234 msherif1234 requested a review from jpinsonneau May 5, 2025 15:33
@msherif1234
Copy link
Contributor Author

/ok-to-test

@github-actions
Copy link

github-actions bot commented May 5, 2025

New image:
quay.io/netobserv/network-observability-cli:677b419

It will expire after two weeks.

To use this build, update your commands using:

USER=netobserv VERSION=677b419 make commands

or download the updated commands.

@jpinsonneau
Copy link
Member

/retest

@jpinsonneau jpinsonneau changed the title Add IPsec support to netobserv CLI NETOBSERV-2243 Add IPsec support to netobserv CLI May 6, 2025
@jpinsonneau
Copy link
Member

jpinsonneau commented May 6, 2025

The e2e failure is related to #285

I have fixed it in #209 81b9def and cherry picked here

@msherif1234
Copy link
Contributor Author

/ok-to-test

@msherif1234
Copy link
Contributor Author

Hi @jpinsonneau can pls check that PR one more time and merge before any other conflicts, not sure if QE wanted to give it a try ?

@github-actions
Copy link

github-actions bot commented May 7, 2025

New image:
quay.io/netobserv/network-observability-cli:9017911

It will expire after two weeks.

To use this build, update your commands using:

USER=netobserv VERSION=9017911 make commands

or download the updated commands.

Copy link
Member

@jpinsonneau jpinsonneau left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Hey @msherif1234

That's good to me ! Thanks
Let's wait for @memodi / @Amoghrd tests unless we have the go for post merge testing 😉

@memodi
Copy link
Member

memodi commented May 7, 2025

@jpinsonneau I'll take a look this week if you don't mind waiting.

Copy link
Member

@memodi memodi left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I verified this, works well. Just minor comment about alphabetical order for the options. thanks @msherif1234

@openshift-ci openshift-ci bot removed the lgtm label May 8, 2025
@memodi
Copy link
Member

memodi commented May 8, 2025

Hi @msherif1234 quick question from UX perspective, currently we report 2 fields/columns - IPSecRetCode an IPSecSuccess - since typically 0 return code translates to true IPSecSuccess - would we lose anything if we consolidate to single field/column say "IPSecSuccess" to have values of true/false/n/a?
Not sure if there could be more than 2 return codes besides 0/1 for IPSecRetCode with different meanings in which case IMO we should enumerate them in code to show them single column alongside true/false

@msherif1234
Copy link
Contributor Author

Hi @memodi IPsec return code is actually Linux errno values so can be anything but you are right when IPsec success is true the IPsec return code is 0 it's possible in UI to only show IPsec return code where 0 is good and != 0 is bad

@msherif1234
Copy link
Contributor Author

Hi @jpinsonneau sorry I mistakenly overwrote your commit that fix the e2e can pls readd it and if all good lets merge this Thanks!!

@jpinsonneau
Copy link
Member

Hi @jpinsonneau sorry I mistakenly overwrote your commit that fix the e2e can pls readd it and if all good lets merge this Thanks!!

Here we go: 7b58f63

Copy link
Member

@memodi memodi left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

thanks @msherif1234 @jpinsonneau

/label qe-approved

msherif1234 and others added 5 commits May 12, 2025 12:36
Signed-off-by: Mohamed S. Mahmoud <mmahmoud2201@gmail.com>
Signed-off-by: Mohamed S. Mahmoud <mmahmoud2201@gmail.com>
Signed-off-by: Mohamed S. Mahmoud <mmahmoud2201@gmail.com>
@openshift-ci
Copy link

openshift-ci bot commented May 12, 2025

New changes are detected. LGTM label has been removed.

@openshift-ci
Copy link

openshift-ci bot commented May 13, 2025

[APPROVALNOTIFIER] This PR is APPROVED

Approval requirements bypassed by manually added approval.

This pull-request has been approved by:

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@jpinsonneau
Copy link
Member

Konflux failing because of quay outage. Merging

@jpinsonneau jpinsonneau merged commit 9cceb49 into netobserv:main May 13, 2025
7 of 10 checks passed
@msherif1234 msherif1234 deleted the add_ipsec branch May 13, 2025 11:34
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants