cilium-cli: IPv6 connectivity tests for PodToIngress by gentoo-root · Pull Request #39667 · cilium/cilium

gentoo-root · 2025-05-21T18:10:21Z

Test both IPv4 and IPv6 explicitly. ForEachIPFamily ensures testing those address families that are supported in the cluster.

Fixes: #37137

gentoo-root · 2025-05-21T19:31:12Z

/test

gentoo-root · 2025-05-22T22:15:28Z

/test

gentoo-root · 2025-05-26T14:36:16Z

Blocked by: #39730

github-actions · 2025-06-26T02:11:45Z

This pull request has been automatically marked as stale because it
has not had recent activity. It will be closed if no further activity
occurs. Thank you for your contributions.

gentoo-root · 2025-06-26T16:29:51Z

/test

gentoo-root · 2025-06-27T14:22:30Z

Weird, I'm still getting:

Test [pod-to-ingress-service-deny-backend-service]:
  🟥 pod-to-ingress-service-deny-backend-service/pod-to-ingress-service:curl-ipv4-0: cilium-test-4/client-645b68dcf7-wqqlt (10.244.1.146) -> cilium-test-4/cilium-ingress-same-node (10.96.168.153:80): command "curl --silent --fail --show-error --connect-timeout 2 --max-time 10 -4 -w %{local_ip}:%{local_port} -> %{remote_ip}:%{remote_port} = %{response_code}\n --output /dev/null [http://10.96.168.153:80](http://10.96.168.153/)" succeeded while it should have failed: 10.244.1.146:52346 -> 10.96.168.153:80 = 200

even after #39730 has been fixed (the steps to reproduce no longer work).

gentoo-root · 2025-08-13T17:15:01Z

/test

gentoo-root · 2025-08-14T15:45:53Z

/test

mhofstetter

🎉 nice, thanks!

One suggestion to improve readability by using ptr.To(...) functionalty. But I already approve - under the assumption that you're going to refactor this.

operator/pkg/model/translation/ingress/dedicated_ingress.go

operator/pkg/model/translation/ingress/dedicated_ingress_test.go

mhofstetter

(form re-submission issue 😄 )

… ) (#222) This PR contains the following updates: | Package | Update | Change | |---|---|---| | [aqua:cilium/cilium-cli](https://redirect.github.com/cilium/cilium-cli) | patch | `0.18.6` -> `0.18.7` | --- > [!WARNING] > Some dependencies could not be looked up. Check the Dependency Dashboard for more information. --- ### Release Notes <details> <summary>cilium/cilium-cli (aqua:cilium/cilium-cli)</summary> ### [`v0.18.7`](https://redirect.github.com/cilium/cilium-cli/releases/tag/v0.18.7) [Compare Source](https://redirect.github.com/cilium/cilium-cli/compare/v0.18.6...v0.18.7) #### What's Changed ## Summary of Changes **Minor Changes:** - clustermesh: cli: accept more than one service IPs (excluding when connecting to NodePort Services) when connecting to remote clustermesh-apiserver ([cilium/cilium#41253](https://redirect.github.com/cilium/cilium/issues/41253), [@MrFreezeex](https://redirect.github.com/MrFreezeex)) - clustermesh: cli: add support for dict for helm values `clustermesh.config.clusters` ([cilium/cilium#40879](https://redirect.github.com/cilium/cilium/issues/40879), [@MrFreezeex](https://redirect.github.com/MrFreezeex)) - clustermesh: cli: support outputting `clustermesh.config.clusters` to the new dict format if the cluster is running Cilium >= 1.20 ([cilium/cilium#40959](https://redirect.github.com/cilium/cilium/issues/40959), [@MrFreezeex](https://redirect.github.com/MrFreezeex)) **Bugfixes:** - Add l7 proxy check to policy-local-cluster-egress connectivity test ([cilium/cilium#40797](https://redirect.github.com/cilium/cilium/issues/40797), [@camrynl](https://redirect.github.com/camrynl)) - cilium-cli: also restart cilium-operator pods on config changes ([cilium/cilium#41067](https://redirect.github.com/cilium/cilium/issues/41067), [@aanm](https://redirect.github.com/aanm)) **CI Changes:** - Allow Egress Gateway connectivity tests to run concurrently ([cilium/cilium#40980](https://redirect.github.com/cilium/cilium/issues/40980), [@tommyp1ckles](https://redirect.github.com/tommyp1ckles)) - cilium-cli: connectivity tests: Ignore some logs in error log check ([cilium/cilium#40690](https://redirect.github.com/cilium/cilium/issues/40690), [@jrife](https://redirect.github.com/jrife)) - cilium-cli: IPv6 connectivity tests for PodToIngress ([cilium/cilium#39667](https://redirect.github.com/cilium/cilium/issues/39667), [@gentoo-root](https://redirect.github.com/gentoo-root)) **Misc Changes:** - chore(deps): update all-dependencies (main) ([cilium/cilium#40893](https://redirect.github.com/cilium/cilium/issues/40893), [@cilium-renovate](https://redirect.github.com/cilium-renovate)\[bot]) - chore(deps): update all-dependencies (main) ([cilium/cilium#41046](https://redirect.github.com/cilium/cilium/issues/41046), [@cilium-renovate](https://redirect.github.com/cilium-renovate)\[bot]) - chore(deps): update all-dependencies (main) ([cilium/cilium#41340](https://redirect.github.com/cilium/cilium/issues/41340), [@cilium-renovate](https://redirect.github.com/cilium-renovate)\[bot]) - chore(deps): update all-dependencies (main) ([cilium/cilium#41433](https://redirect.github.com/cilium/cilium/issues/41433), [@cilium-renovate](https://redirect.github.com/cilium-renovate)\[bot]) - chore(deps): update docker.io/library/golang:1.25.0 docker digest to [`5502b0e`](https://redirect.github.com/cilium/cilium-cli/commit/5502b0e) (main) ([cilium/cilium#41343](https://redirect.github.com/cilium/cilium/issues/41343), [@cilium-renovate](https://redirect.github.com/cilium-renovate)\[bot]) - chore(deps): update go to v1.24.6 (main) ([cilium/cilium#40992](https://redirect.github.com/cilium/cilium/issues/40992), [@cilium-renovate](https://redirect.github.com/cilium-renovate)\[bot]) - cilium-cli: Optimized feature detection by running cluster-wide checks once ([cilium/cilium#40715](https://redirect.github.com/cilium/cilium/issues/40715), [@HadrienPatte](https://redirect.github.com/HadrienPatte)) - Include bgp remote peer capabilities in the sysdump ([cilium/cilium#40719](https://redirect.github.com/cilium/cilium/issues/40719), [@liyihuang](https://redirect.github.com/liyihuang)) - Update all-dependencies (main) ([cilium/cilium#41175](https://redirect.github.com/cilium/cilium/issues/41175), [@cilium-renovate](https://redirect.github.com/cilium-renovate)\[bot]) - Update docker.io/alpine/socat:1.8.0.3 Docker digest to [`29d0f24`](https://redirect.github.com/cilium/cilium-cli/commit/29d0f24) (main) ([cilium/cilium#41204](https://redirect.github.com/cilium/cilium/issues/41204), [@cilium-renovate](https://redirect.github.com/cilium-renovate)\[bot]) - Update Go to v1.25.0 (main) ([cilium/cilium#41209](https://redirect.github.com/cilium/cilium/issues/41209), [@cilium-renovate](https://redirect.github.com/cilium-renovate)\[bot]) - Update stable release to v0.18.6 by [@tklauser](https://redirect.github.com/tklauser) in [#3075](https://redirect.github.com/cilium/cilium-cli/pull/3075) - chore(deps): update golangci/golangci-lint docker tag to v2.3.1 by [@renovate](https://redirect.github.com/renovate)\[bot] in [#3076](https://redirect.github.com/cilium/cilium-cli/pull/3076) - chore(deps): update golang docker tag to v1.24.6 by [@renovate](https://redirect.github.com/renovate)\[bot] in [#3079](https://redirect.github.com/cilium/cilium-cli/pull/3079) - chore(deps): update gcr.io/distroless/static:latest docker digest to [`2e114d2`](https://redirect.github.com/cilium/cilium-cli/commit/2e114d2) by [@renovate](https://redirect.github.com/renovate)\[bot] in [#3077](https://redirect.github.com/cilium/cilium-cli/pull/3077) - chore(deps): update docker/login-action action to v3.5.0 by [@renovate](https://redirect.github.com/renovate)\[bot] in [#3078](https://redirect.github.com/cilium/cilium-cli/pull/3078) - chore(deps): update go to v1.24.6 (patch) by [@renovate](https://redirect.github.com/renovate)\[bot] in [#3080](https://redirect.github.com/cilium/cilium-cli/pull/3080) - chore(deps): update actions/checkout action to v5 by [@renovate](https://redirect.github.com/renovate)\[bot] in [#3082](https://redirect.github.com/cilium/cilium-cli/pull/3082) - chore(deps): update golangci/golangci-lint docker tag to v2.4.0 by [@renovate](https://redirect.github.com/renovate)\[bot] in [#3086](https://redirect.github.com/cilium/cilium-cli/pull/3086) - chore(deps): update golang docker tag to v1.25.0 by [@renovate](https://redirect.github.com/renovate)\[bot] in [#3085](https://redirect.github.com/cilium/cilium-cli/pull/3085) - chore(deps): update go to v1.25.0 (minor) by [@renovate](https://redirect.github.com/renovate)\[bot] in [#3088](https://redirect.github.com/cilium/cilium-cli/pull/3088) - chore(deps): update dependency cilium/cilium to v1.18.1 by [@renovate](https://redirect.github.com/renovate)\[bot] in [#3089](https://redirect.github.com/cilium/cilium-cli/pull/3089) - chore(deps): update dependency kubernetes-sigs/kind to v0.30.0 by [@renovate](https://redirect.github.com/renovate)\[bot] in [#3091](https://redirect.github.com/cilium/cilium-cli/pull/3091) - chore(deps): update golang-images - autoclosed by [@renovate](https://redirect.github.com/renovate)\[bot] in [#3090](https://redirect.github.com/cilium/cilium-cli/pull/3090) - Prepare for v0.18.7 release by [@michi-covalent](https://redirect.github.com/michi-covalent) in [#3092](https://redirect.github.com/cilium/cilium-cli/pull/3092) **Full Changelog**: <cilium/cilium-cli@v0.18.6...v0.18.7> </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate).  Co-authored-by: zocimek-renovate[bot] <134739422+zocimek-renovate[bot]@users.noreply.github.com> Co-authored-by: Łukasz Pospiech <zocimek@users.noreply.github.com>

joamaki · 2025-10-02T08:37:32Z

Skipped in backports and marked as backport/author as this is making changes to cilium-cli/... which does not exist in the released branches. Please backport manually if still necessary.

gentoo-root · 2025-10-02T14:08:04Z

as this is making changes to cilium-cli/...

@joamaki, these should be dropped; only the changes from other directories are to be backported. It's needed to fix #41577

joamaki · 2025-10-03T08:54:39Z

as this is making changes to cilium-cli/...

@joamaki, these should be dropped; only the changes from other directories are to be backported. It's needed to fix #41577

I've included this now into both v1.17 and v1.18 backports with the cilium-cli changes dropped.

gentoo-root · 2025-10-03T14:49:02Z

Thank you!

Looking at the failures [0] when running these tests against v1.16, it seems like we might be missing #39736. Rather than backporting more & more fixes into old stable releases, roll back the testing to the old behavior before #39667 was merged. Note that the `v1.17.0` is just a guess, we might actually require a more recent patch version of v1.17. Signed-off-by: Julian Wiedmann <jwi@isovalent.com>

julianwiedmann · 2025-10-13T06:55:52Z

@gentoo-root 👋 nice to see this land! What's your gut feeling, will these tests currently pass on Cilium v1.15 (oldest release we test in CI, when downgrading from the v1.16 branch). Asking as it seems to require #39736, which didn't get the full-blown backport treatment so far.

Otherwise we might want to add a versioncheck?

Doing so here: #42148

Looking at the failures [0] when running these tests against v1.16, it seems like we might be missing #39736. Rather than backporting more & more fixes into old stable releases, roll back the testing to the old behavior before #39667 was merged. Note that the `v1.17.0` is just a guess, we might actually require a more recent patch version of v1.17. Signed-off-by: Julian Wiedmann <jwi@isovalent.com>

Looking at the failures [0] when running these tests against v1.16, it seems like we might be missing cilium#39736. Rather than backporting more & more fixes into old stable releases, roll back the testing to the old behavior before cilium#39667 was merged. Note that the `v1.17.0` is just a guess, we might actually require a more recent patch version of v1.17. Signed-off-by: Julian Wiedmann <jwi@isovalent.com>

gentoo-root added area/CI Continuous Integration testing issue or flake release-note/ci This PR makes changes to the CI. labels May 21, 2025

github-actions bot added cilium-cli This PR contains changes related with cilium-cli cilium-cli-exclusive This PR only impacts cilium-cli binary labels May 21, 2025

julianwiedmann added the feature/ipv6 Relates to IPv6 protocol support label May 22, 2025

gentoo-root force-pushed the pr/max/ipv6-tests-3 branch from d300762 to 18bd490 Compare May 22, 2025 22:11

gentoo-root force-pushed the pr/max/ipv6-tests-3 branch from 18bd490 to eca31ef Compare May 23, 2025 13:33

gentoo-root mentioned this pull request May 26, 2025

egressDeny policy doesn't block ClusterIP service traffic #39730

Closed

3 tasks

github-actions bot added the stale The stale bot thinks this issue is old. Add "pinned" label to prevent this from becoming stale. label Jun 26, 2025

gentoo-root added the pinned These issues are not marked stale by our issue bot. label Jun 26, 2025

gentoo-root force-pushed the pr/max/ipv6-tests-3 branch from eca31ef to efd43fe Compare June 26, 2025 16:29

gentoo-root removed the stale The stale bot thinks this issue is old. Add "pinned" label to prevent this from becoming stale. label Jun 26, 2025

gentoo-root force-pushed the pr/max/ipv6-tests-3 branch from efd43fe to bd068d1 Compare August 13, 2025 17:07

gentoo-root force-pushed the pr/max/ipv6-tests-3 branch from bd068d1 to 6381b33 Compare August 14, 2025 15:03

gentoo-root marked this pull request as ready for review August 18, 2025 11:42

gentoo-root requested review from a team as code owners August 18, 2025 11:42

gentoo-root requested review from aditighag and mhofstetter August 18, 2025 11:42

mhofstetter approved these changes Aug 18, 2025

View reviewed changes

operator/pkg/model/translation/ingress/dedicated_ingress.go Outdated Show resolved Hide resolved

operator/pkg/model/translation/ingress/dedicated_ingress_test.go Outdated Show resolved Hide resolved

mhofstetter approved these changes Aug 18, 2025

View reviewed changes

gentoo-root force-pushed the pr/max/ipv6-tests-3 branch from 6381b33 to 270c806 Compare August 18, 2025 12:07

aanm mentioned this pull request Sep 8, 2025

Unable to update cilium-cli to v0.18.7 on all stable branches #41577

Closed

gentoo-root added needs-backport/1.16 needs-backport/1.17 This PR / issue needs backporting to the v1.17 branch needs-backport/1.18 This PR / issue needs backporting to the v1.18 branch labels Sep 26, 2025

joamaki mentioned this pull request Oct 1, 2025

v1.18 Backports 2025-10-01 #41968

Merged

14 tasks

joamaki mentioned this pull request Oct 2, 2025

v1.17 Backports 2025-10-02 #41983

Merged

3 tasks

joamaki added the backport/author The backport will be carried out by the author of the PR. label Oct 2, 2025

joamaki removed the backport/author The backport will be carried out by the author of the PR. label Oct 3, 2025

github-actions bot added backport-done/1.17 The backport for Cilium 1.17.x for this PR is done. backport-done/1.18 The backport for Cilium 1.18.x for this PR is done. labels Oct 4, 2025

julianwiedmann removed needs-backport/1.17 This PR / issue needs backporting to the v1.17 branch needs-backport/1.18 This PR / issue needs backporting to the v1.18 branch labels Oct 6, 2025

tklauser mentioned this pull request Oct 7, 2025

v1.16 Backports 2025-10-07 #42057

Merged

2 tasks

tklauser added backport-pending/1.16 and removed needs-backport/1.16 labels Oct 7, 2025

github-actions bot added backport-done/1.16 The backport for Cilium 1.16.x for this PR is done. and removed backport-pending/1.16 labels Oct 9, 2025

julianwiedmann mentioned this pull request Oct 13, 2025

connectivity-tests: limit IPv6 PodToIngress to Cilium >= v1.17 #42148

Merged

julianwiedmann added the feature/k8s-ingress label Oct 13, 2025

cilium-release-bot bot added this to cilium v1.19.0 Feb 3, 2026

cilium-release-bot bot moved this to Released in cilium v1.19.0 Feb 3, 2026

Conversation

gentoo-root commented May 21, 2025

Uh oh!

gentoo-root commented May 21, 2025

Uh oh!

gentoo-root commented May 22, 2025

Uh oh!

gentoo-root commented May 26, 2025

Uh oh!

github-actions bot commented Jun 26, 2025

Uh oh!

gentoo-root commented Jun 26, 2025

Uh oh!

gentoo-root commented Jun 27, 2025

Uh oh!

gentoo-root commented Aug 13, 2025

Uh oh!

gentoo-root commented Aug 14, 2025

Uh oh!

mhofstetter left a comment

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Uh oh!

mhofstetter left a comment • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Choose a reason for hiding this comment

Uh oh!

joamaki commented Oct 2, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

gentoo-root commented Oct 2, 2025

Uh oh!

joamaki commented Oct 3, 2025

Uh oh!

gentoo-root commented Oct 3, 2025

Uh oh!

julianwiedmann commented Oct 13, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

8 participants

mhofstetter left a comment •

edited

Loading

joamaki commented Oct 2, 2025 •

edited

Loading