Skip to content

CNTRLPLANE-1445: test(network-ploicy) WIP: Initial attempt of aks net policy e2e #7273

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Draft
wants to merge 2 commits into
base: main
Choose a base branch
from
Draft

CNTRLPLANE-1445: test(network-ploicy) WIP: Initial attempt of aks net policy e2e #7273

wants to merge 2 commits into from
+1,020 −0

Conversation

@devguyio
Copy link
Contributor

@devguyio devguyio commented Nov 21, 2025

What this PR does / why we need it:

Initial /jira-solve attempt. Verifying the main intent behind the JIRA though.

WIP do not merge~

Which issue(s) this PR fixes:

Fixes

Special notes for your reviewer:

Checklist:

  • Subject and description added to both, commit and PR.
  • Relevant issues have been referenced.
  • This change includes docs.
  • This change includes unit tests.

devguyio and others added 2 commits November 21, 2025 18:09
@devguyio @claude
docs: add NetworkPolicy e2e test specification for Azure
6c6b6dd 
Add detailed specification document for implementing NetworkPolicy e2e test on ARO HCP clusters.

This spec analyzes the failed PR openshift#6377 approach and outlines the correct implementation strategy for testing user-facing NetworkPolicy functionality in the guest cluster.

🤖 Generated with Claude Code (claude-sonnet-4-5@20250929) via /jira-solve CNTRLPLANE-1445

Co-Authored-By: Claude <[email protected]>
Signed-off-by: Ahmed Abdalla <[email protected]>
@devguyio @claude
test(e2e): add NetworkPolicy validation test for Azure
bc58c71 
Add e2e test to validate NetworkPolicy functionality on ARO HCP (Azure) clusters.

The test validates user workload NetworkPolicy enforcement in the guest cluster by:
- Creating test namespaces with explicit labels
- Deploying server and client pods
- Testing baseline connectivity without policies
- Applying deny-all NetworkPolicy and verifying traffic blocking
- Applying selective allow NetworkPolicy and verifying allowed traffic

This addresses CNTRLPLANE-1445 by ensuring Azure CNI properly enforces NetworkPolicy rules for customer workloads.

🤖 Generated with Claude Code (claude-sonnet-4-5@20250929) via /jira-solve CNTRLPLANE-1445

Co-Authored-By: Claude <[email protected]>
Signed-off-by: Ahmed Abdalla <[email protected]>
@openshift-ci-robot
Copy link

openshift-ci-robot commented Nov 21, 2025 •
edited by openshift-ci bot
Loading

@devguyio: This pull request references CNTRLPLANE-1445 which is a valid jira issue.

In response to this:

What this PR does / why we need it:

Initial /jira-solve attempt. Verifying the main intent behind the JIRA though.

WIP do not merge~

Which issue(s) this PR fixes:

Fixes

Special notes for your reviewer:

Checklist:

  • Subject and description added to both, commit and PR.
  • Relevant issues have been referenced.
  • This change includes docs.
  • This change includes unit tests.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository.

@openshift-ci-robot openshift-ci-robot added the jira/valid-reference Indicates that this PR references a valid Jira ticket of any type. label Nov 21, 2025
@coderabbitai
Copy link
Contributor

coderabbitai bot commented Nov 21, 2025 •
edited
Loading

Important

Review skipped

Auto reviews are limited based on label configuration.

🚫 Excluded labels (none allowed) (1)
  • do-not-merge/work-in-progress

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

✨ Finishing touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Post copyable unit tests in a comment

Comment @coderabbitai help to get the list of available commands and usage tips.

@openshift-ci openshift-ci bot added do-not-merge/work-in-progress Indicates that a PR should not merge because it is a work in progress. do-not-merge/needs-area labels Nov 21, 2025
@openshift-ci
Copy link
Contributor

openshift-ci bot commented Nov 21, 2025

Skipping CI for Draft Pull Request.
If you want CI signal for your change, please convert it to an actual PR.
You can still manually trigger a test run with /test all

@openshift-ci openshift-ci bot added area/testing Indicates the PR includes changes for e2e testing and removed do-not-merge/needs-area labels Nov 21, 2025
@openshift-ci
Copy link
Contributor

openshift-ci bot commented Nov 21, 2025

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: devguyio
Once this PR has been reviewed and has the lgtm label, please assign enxebre for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

area/testing Indicates the PR includes changes for e2e testing do-not-merge/work-in-progress Indicates that a PR should not merge because it is a work in progress. jira/valid-reference Indicates that this PR references a valid Jira ticket of any type.

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@devguyio @openshift-ci-robot