Skip to content

[VC-48226] Enable default NetworkPolicies in best-practice installation e2e tests#8387

Merged
cert-manager-prow[bot] merged 1 commit intocert-manager:masterfrom
wallrj-cyberark:networkpolicies-enabled-e2e-tests
Jan 20, 2026
Merged

[VC-48226] Enable default NetworkPolicies in best-practice installation e2e tests#8387
cert-manager-prow[bot] merged 1 commit intocert-manager:masterfrom
wallrj-cyberark:networkpolicies-enabled-e2e-tests

Conversation

@wallrj-cyberark
Copy link
Copy Markdown
Member

@wallrj-cyberark wallrj-cyberark commented Jan 9, 2026 •
edited
Loading

I've updated the NetworkPolicy recommendations on cert-manager.io "release-next" branch, to use the new NetworkPolicy Helm chart values.
This PR ensures that those new recommended values are used in our daily "best-practice" E2E tests.
Building upon these previous PRs:

/kind cleanup

NONE

CyberArk tracker: VC-48411

Testing

I triggered the best-practice E2E tests on this branch and they passed. See test results below.

@cert-manager-prow cert-manager-prow bot added kind/cleanup Categorizes issue or PR as related to cleaning up code, process, or technical debt. release-note-none Denotes a PR that doesn't merit a release note. dco-signoff: yes Indicates that all commits in the pull request have the valid DCO sign-off message. area/deploy Indicates a PR modifies deployment configuration size/L Denotes a PR that changes 100-499 lines, ignoring generated files. labels Jan 9, 2026
@wallrj-cyberark
Copy link
Copy Markdown
Member Author

wallrj-cyberark commented Jan 9, 2026

/test pull-cert-manager-master-e2e-v1-35-bestpractice-install

@wallrj-cyberark wallrj-cyberark mentioned this pull request Jan 9, 2026
Merged
@wallrj-cyberark
Copy link
Copy Markdown
Member Author

wallrj-cyberark commented Jan 9, 2026 •
edited
Loading

pull-cert-manager-master-e2e-v1-35-bestpractice-install failed, but it might be a flake. Retrying:

/home/prow/go/src/github.com/cert-manager/cert-manager/_bin/tools/kubectl apply --server-side -f make/config/kyverno/policy.yaml >/dev/null
Error from server (InternalError): Internal error occurred: failed calling webhook "mutate-policy.kyverno.svc": failed to call webhook: Post "https://kyverno-svc.kyverno.svc:443/policymutate?timeout=10s": dial tcp 10.0.9.135:443: connect: connection refused
Error from server (InternalError): Internal error occurred: failed calling webhook "mutate-policy.kyverno.svc": failed to call webhook: Post "https://kyverno-svc.kyverno.svc:443/policymutate?timeout=10s": dial tcp 10.0.9.135:443: connect: connection refused

https://prow.infra.cert-manager.io/view/gs/cert-manager-prow-artifacts/pr-logs/pull/cert-manager_cert-manager/8387/pull-cert-manager-master-e2e-v1-35-bestpractice-install/2009661521742794752

/retest

@wallrj-cyberark wallrj-cyberark force-pushed the networkpolicies-enabled-e2e-tests branch from a8bcea4 to 91376d1 Compare January 9, 2026 16:44
@wallrj-cyberark wallrj-cyberark mentioned this pull request Jan 9, 2026
Merged
@wallrj-cyberark wallrj-cyberark force-pushed the networkpolicies-enabled-e2e-tests branch from 91376d1 to f92a24d Compare January 9, 2026 17:47
@cert-manager-prow cert-manager-prow bot added size/XL Denotes a PR that changes 500-999 lines, ignoring generated files. and removed size/L Denotes a PR that changes 100-499 lines, ignoring generated files. labels Jan 9, 2026
@wallrj-cyberark
Copy link
Copy Markdown
Member Author

wallrj-cyberark commented Jan 9, 2026

/test pull-cert-manager-master-e2e-v1-35-bestpractice-install

@wallrj-cyberark wallrj-cyberark added the cybr Used by CyberArk-employed maintainers to report to line management what's being worked on. label Jan 13, 2026
@wallrj-cyberark wallrj-cyberark force-pushed the networkpolicies-enabled-e2e-tests branch from f92a24d to 76b08e8 Compare January 14, 2026 15:20
@wallrj-cyberark
Copy link
Copy Markdown
Member Author

wallrj-cyberark commented Jan 14, 2026

/test pull-cert-manager-master-e2e-v1-35-bestpractice-install

@cert-manager-prow cert-manager-prow bot added size/L Denotes a PR that changes 100-499 lines, ignoring generated files. and removed size/XL Denotes a PR that changes 500-999 lines, ignoring generated files. labels Jan 14, 2026
@wallrj-cyberark
Copy link
Copy Markdown
Member Author

wallrj-cyberark commented Jan 14, 2026

/test pull-cert-manager-master-make-test

@wallrj-cyberark wallrj-cyberark force-pushed the networkpolicies-enabled-e2e-tests branch from 76b08e8 to 3e8848d Compare January 15, 2026 17:33
@wallrj-cyberark
Copy link
Copy Markdown
Member Author

wallrj-cyberark commented Jan 15, 2026

/test pull-cert-manager-master-e2e-v1-35-bestpractice-install

@wallrj-cyberark
Copy link
Copy Markdown
Member Author

wallrj-cyberark commented Jan 15, 2026

/retest

1 similar comment
@wallrj-cyberark
Copy link
Copy Markdown
Member Author

wallrj-cyberark commented Jan 16, 2026

/retest

@wallrj-cyberark wallrj-cyberark mentioned this pull request Jan 16, 2026
Merged
@wallrj-cyberark wallrj-cyberark force-pushed the networkpolicies-enabled-e2e-tests branch from 3e8848d to 42613a8 Compare January 16, 2026 17:20
@cert-manager-prow cert-manager-prow bot added size/XS Denotes a PR that changes 0-9 lines, ignoring generated files. and removed size/L Denotes a PR that changes 100-499 lines, ignoring generated files. labels Jan 16, 2026
@wallrj-cyberark
Copy link
Copy Markdown
Member Author

wallrj-cyberark commented Jan 16, 2026

/test pull-cert-manager-master-e2e-v1-35-bestpractice-install

1 similar comment
@wallrj-cyberark
Copy link
Copy Markdown
Member Author

wallrj-cyberark commented Jan 16, 2026

/test pull-cert-manager-master-e2e-v1-35-bestpractice-install

@wallrj-cyberark
[VC-48226] Use the latest best-practices Helm chart values in the E2E…
198e4fa 
… tests

Signed-off-by: Richard Wall <richard.wall@cyberark.com>
@wallrj-cyberark wallrj-cyberark force-pushed the networkpolicies-enabled-e2e-tests branch from 42613a8 to 198e4fa Compare January 19, 2026 07:22
@wallrj-cyberark
Copy link
Copy Markdown
Member Author

wallrj-cyberark commented Jan 19, 2026

/test pull-cert-manager-master-e2e-v1-35-bestpractice-install

erikgb
erikgb reviewed Jan 20, 2026
View reviewed changes
Copy link
Copy Markdown
Member

@erikgb erikgb left a comment •
edited
Loading

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks, @wallrj-cyberark! In a follow-up PR, we could try to configure Renovate to maintain the website commit SHA.

/lgtm
/approve

@cert-manager-prow cert-manager-prow bot added the lgtm Indicates that a PR is ready to be merged. label Jan 20, 2026
@cert-manager-prow
Copy link
Copy Markdown
Contributor

cert-manager-prow bot commented Jan 20, 2026

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: erikgb

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@cert-manager-prow cert-manager-prow bot added the approved Indicates a PR has been approved by an approver from all required OWNERS files. label Jan 20, 2026
@cert-manager-prow cert-manager-prow bot merged commit 00c743d into cert-manager:master Jan 20, 2026
7 checks passed
@wallrj-cyberark wallrj-cyberark deleted the networkpolicies-enabled-e2e-tests branch January 20, 2026 10:01
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@erikgb erikgb erikgb left review comments

Assignees

No one assigned

Labels

approved Indicates a PR has been approved by an approver from all required OWNERS files. area/deploy Indicates a PR modifies deployment configuration cybr Used by CyberArk-employed maintainers to report to line management what's being worked on. dco-signoff: yes Indicates that all commits in the pull request have the valid DCO sign-off message. kind/cleanup Categorizes issue or PR as related to cleaning up code, process, or technical debt. lgtm Indicates that a PR is ready to be merged. release-note-none Denotes a PR that doesn't merit a release note. size/XS Denotes a PR that changes 0-9 lines, ignoring generated files.

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@wallrj-cyberark @erikgb