Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add CI testing of network restrictions #1207

Open
Tracked by #681
mjnagel opened this issue Jan 17, 2025 · 1 comment
Open
Tracked by #681

Add CI testing of network restrictions #1207

mjnagel opened this issue Jan 17, 2025 · 1 comment
Assignees
Labels
ci Issues pertaining to CI / Pipelines / Testing enhancement New feature or request

Comments

@mjnagel
Copy link
Contributor

mjnagel commented Jan 17, 2025

Is your feature request related to a problem? Please describe.

Currently the operator generates network policies based on the Package CR spec (network.allow). These are not currently validated in CI (e2e) to confirm that they are properly restricting ingress/egress.

Describe the solution you'd like

Add testing of network restrictions to e2e test suite covering:

  • ingress restictions
  • egress restrictions
  • allowed and denied networking

Additional context

As we move to istio ambient we will be changing the mechanism for network traffic restrictions and would like to have confidence that the new method of restricting traffic is working 1:1 with the current network policies.

@mjnagel mjnagel added enhancement New feature or request ci Issues pertaining to CI / Pipelines / Testing labels Jan 17, 2025
@mjnagel
Copy link
Contributor Author

mjnagel commented Jan 17, 2025

May be useful to leverage the existing test package for building this out.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
ci Issues pertaining to CI / Pipelines / Testing enhancement New feature or request
Projects
None yet
Development

No branches or pull requests

2 participants