Run certgen when upgrading by zhaohuabing · Pull Request #2934 · envoyproxy/gateway

zhaohuabing · 2024-03-15T07:11:25Z

Run certgen when upgrading EG helm chart because a new secret(HMAC) has been added after v0.0.6, and more may be added later.

Fix #2930

Signed-off-by: huabing zhao <zhaohuabing@gmail.com>

codecov · 2024-03-15T07:16:10Z

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 64.57%. Comparing base (36505f4) to head (6994bf7).

Additional details and impacted files

@@            Coverage Diff             @@
##             main    #2934      +/-   ##
==========================================
- Coverage   64.59%   64.57%   -0.02%     
==========================================
  Files         122      122              
  Lines       21115    21115              
==========================================
- Hits        13640    13636       -4     
- Misses       6630     6632       +2     
- Partials      845      847       +2

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

zirain · 2024-03-15T07:42:49Z

is there anyway to make sure it worked as excepted?

zhaohuabing · 2024-03-15T07:51:48Z

is there anyway to make sure it worked as excepted?

Just manually tested it on my dev environment：-）

zirain · 2024-03-15T08:01:53Z

is there anyway to make sure it worked as excepted?

Just manually tested it on my dev environment：-）

I recall there's an upgrade test?

zhaohuabing · 2024-03-15T09:02:37Z

The test looks like uninstalling the old version and then installing the new version, not exactly helm upgrade.

We should have a proper upgrade test that helm upgrade the old release and run all the conformance tests and e2e tests on the upgrade version, this could be solved later.

gateway/test/e2e/tests/eg_upgrade.go

Lines 66 to 72 in 36505f4

    
           err := helmUninstall(relName, depNS, t) 
        
           if err != nil { 
        
           	t.Fatalf("Failed to upgrade the release: %s", err.Error()) 
        
           } 
        
           t.Log("Install the last version tag") 
        
           err = helmInstall(relName, depNS, lastVersionTag, suite.TimeoutConfig.NamespacesMustBeReady, t)

zirain · 2024-03-15T09:28:48Z

The test looks like uninstalling the old version and then installing the new version, not exactly helm upgrade.

We should have a proper upgrade test that helm upgrade the old release and run all the conformance tests and e2e tests on the upgrade version, this could be solved later.

gateway/test/e2e/tests/eg_upgrade.go

Lines 66 to 72 in 36505f4

err := helmUninstall(relName, depNS, t)

if err != nil {

t.Fatalf("Failed to upgrade the release: %s", err.Error())

}

t.Log("Install the last version tag")

err = helmInstall(relName, depNS, lastVersionTag, suite.TimeoutConfig.NamespacesMustBeReady, t)

can you update the test?

guydc · 2024-03-15T12:21:25Z

@zhaohuabing , @zirain
The test is:

Uninstalling main (in use by the regular conformance/e2e suite)
Installing latest rel
Upgrading from latest rel => main

gateway/test/e2e/tests/eg_upgrade.go

Line 81 in 36505f4

err = helmUpgradeChartFromPath(relName, depNS, "../../../charts/gateway-helm", suite.TimeoutConfig.NamespacesMustBeReady, t)

guydc · 2024-03-15T12:47:08Z

Are there any possible adverse effects? e.g. will cert-gen override some other existing secrets that may block installation or break the pre-upgraded instance? For example, if some components are not dynamically reloading these secrets?

zhaohuabing · 2024-03-15T13:16:49Z

Are there any possible adverse effects? e.g. will cert-gen override some other existing secrets that may block installation or break the pre-upgraded instance? For example, if some components are not dynamically reloading these secrets?

Just adds the missing HMAC secret, won't overwrite existing ones. I think the upgrade test has already covered this upgrade (from v 0.0.6 to the latest) , right? @guydc

run certgen when upgrading Signed-off-by: huabing zhao <zhaohuabing@gmail.com> (cherry picked from commit 62ecf15) Signed-off-by: Arko Dasgupta <arko@tetrate.io>

* Run certgen when upgrading (#2934) run certgen when upgrading Signed-off-by: huabing zhao <zhaohuabing@gmail.com> (cherry picked from commit 62ecf15) Signed-off-by: Arko Dasgupta <arko@tetrate.io> * Fix: nil secret in resourceversiontable (#2982) * fix nil secret in resourceversiontable Signed-off-by: huabing zhao <zhaohuabing@gmail.com> * check secrets in the xds result Signed-off-by: huabing zhao <zhaohuabing@gmail.com> --------- Signed-off-by: huabing zhao <zhaohuabing@gmail.com> (cherry picked from commit e880439) Signed-off-by: Arko Dasgupta <arko@tetrate.io> * fix: add missing http filters to the http filter chain (#2970) * fix: add missing http filters to the http filter chain Signed-off-by: huabing zhao <zhaohuabing@gmail.com> * refactor Signed-off-by: huabing zhao <zhaohuabing@gmail.com> * fix lint Signed-off-by: huabing zhao <zhaohuabing@gmail.com> * add comments Signed-off-by: huabing zhao <zhaohuabing@gmail.com> * remove refactor Signed-off-by: huabing zhao <zhaohuabing@gmail.com> * remove refactor Signed-off-by: huabing zhao <zhaohuabing@gmail.com> * fix gen Signed-off-by: huabing zhao <zhaohuabing@gmail.com> * fix lint Signed-off-by: Huabing Zhao <zhaohuabing@gmail.com> --------- Signed-off-by: huabing zhao <zhaohuabing@gmail.com> Signed-off-by: Huabing Zhao <zhaohuabing@gmail.com> (cherry picked from commit f699edf) Signed-off-by: Arko Dasgupta <arko@tetrate.io> * fix: allow websockets in url rewrite (#3022) allow websockets in url rewrite Signed-off-by: Jesse Haka <haka.jesse@gmail.com> Co-authored-by: zirain <zirain2009@gmail.com> (cherry picked from commit 3d51933) Signed-off-by: Arko Dasgupta <arko@tetrate.io> * Set host for http health checker explicitly to avoid using the cluster name as host header for http health checking request. (#3057) * Set host for http health checker explictly to avoid using the cluster name as host header for http health checking request Signed-off-by: lemonlinger <lemonlinger@gmail.com> * fix broken tests Signed-off-by: lemonlinger <lemonlinger@gmail.com> * fix health-check test case in xds translation Signed-off-by: lemonlinger <lemonlinger@gmail.com> * Simplify code and concise comments Signed-off-by: lemonlinger <lemonlinger@gmail.com> --------- Signed-off-by: lemonlinger <lemonlinger@gmail.com> (cherry picked from commit 8f450a9) Signed-off-by: Arko Dasgupta <arko@tetrate.io> * fix: do not create infra resources when missing translated listeners (#3043) * fix: do not create infra resources when missing translated listeners Signed-off-by: Karol Szwaj <karol.szwaj@gmail.com> * remove empty line Signed-off-by: Karol Szwaj <karol.szwaj@gmail.com> * skip infra creation on empty listeners and log it Signed-off-by: Karol Szwaj <karol.szwaj@gmail.com> --------- Signed-off-by: Karol Szwaj <karol.szwaj@gmail.com> (cherry picked from commit 36d7141) Signed-off-by: Arko Dasgupta <arko@tetrate.io> * Fix: double slashes in redirect URL (#2998) * fix: double trailing splashs in redirect URL Signed-off-by: huabing zhao <zhaohuabing@gmail.com> * add e2e tests Signed-off-by: huabing zhao <zhaohuabing@gmail.com> * fix lint Signed-off-by: huabing zhao <zhaohuabing@gmail.com> * fix test Signed-off-by: huabing zhao <zhaohuabing@gmail.com> * fix test Signed-off-by: huabing zhao <zhaohuabing@gmail.com> * fix test Signed-off-by: huabing zhao <zhaohuabing@gmail.com> * fix test Signed-off-by: huabing zhao <zhaohuabing@gmail.com> * add e2e tests Signed-off-by: huabing zhao <zhaohuabing@gmail.com> * fix test Signed-off-by: huabing zhao <zhaohuabing@gmail.com> * revert Signed-off-by: huabing zhao <zhaohuabing@gmail.com> * use regex rewrite to generate the redirect url Signed-off-by: huabing zhao <zhaohuabing@gmail.com> * use regex rewrite to generate the redirect url Signed-off-by: huabing zhao <zhaohuabing@gmail.com> * use regex rewrite to generate the redirect url Signed-off-by: huabing zhao <zhaohuabing@gmail.com> * remove comments Signed-off-by: huabing zhao <zhaohuabing@gmail.com> * extract method Signed-off-by: huabing zhao <zhaohuabing@gmail.com> * address comments Signed-off-by: huabing zhao <zhaohuabing@gmail.com> --------- Signed-off-by: huabing zhao <zhaohuabing@gmail.com> (cherry picked from commit ceb697f) Signed-off-by: Arko Dasgupta <arko@tetrate.io> * fix: Allow Policy to attach to multiple http listeners (#2967) * Fixing the clienttrafficpolicy validation. Signed-off-by: Lior Okman <lior.okman@sap.com> * Make SecurityPolicy validate correctly. Signed-off-by: Lior Okman <lior.okman@sap.com> * Reverted the SecurityPolicy validation - handled differently via another feature. Signed-off-by: Lior Okman <lior.okman@sap.com> * Updated the tests to reflect that this validation isn't required for SecurityPolicy Signed-off-by: Lior Okman <lior.okman@sap.com> * Added some comments to explain the validation being performed. Signed-off-by: Lior Okman <lior.okman@sap.com> * Updated the error message as requested in the review. Signed-off-by: Lior Okman <lior.okman@sap.com> --------- Signed-off-by: Lior Okman <lior.okman@sap.com> (cherry picked from commit f9409e4) Signed-off-by: Arko Dasgupta <arko@tetrate.io> * fix: set path prefix for http ext auth service (#3018) Signed-off-by: huabing zhao <zhaohuabing@gmail.com> (cherry picked from commit 2882b7c) Signed-off-by: Arko Dasgupta <arko@tetrate.io> * Change route sorting order to Exact > RegularExpression > PathPrefix (#2579) * Change route sorting order to Exact > RegularExpression > PathPrefix kubernetes-sigs/gateway-api#1770 kubernetes-sigs/gateway-api#1855 Signed-off-by: Stéphane Cottin <stephane.cottin@vixns.com> (cherry picked from commit 11f56fd) Signed-off-by: Arko Dasgupta <arko@tetrate.io> * fix: infraIR duplicate port translation for merged gateways (#3061) * fix: duplicate port translation for merged gateways Signed-off-by: Karol Szwaj <karol.szwaj@gmail.com> * refactor to map Signed-off-by: Karol Szwaj <karol.szwaj@gmail.com> * rename map Signed-off-by: Karol Szwaj <karol.szwaj@gmail.com> * add seperate testcase Signed-off-by: Karol Szwaj <karol.szwaj@gmail.com> --------- Signed-off-by: Karol Szwaj <karol.szwaj@gmail.com> (cherry picked from commit 29946b0) Signed-off-by: Arko Dasgupta <arko@tetrate.io> * translator: set SpawnUpstreamSpan to true (#3102) * translator: set SpawnUpstreamSpan to true Signed-off-by: zirain <zirain2009@gmail.com> * update Signed-off-by: zirain <zirain2009@gmail.com> --------- Signed-off-by: zirain <zirain2009@gmail.com> (cherry picked from commit 635ebfc) Signed-off-by: Arko Dasgupta <arko@tetrate.io> * fix: rate limit doesn't work with two(and more) listeners (#3085) * fix: rate limit doesn't work with two listeners Signed-off-by: huabing zhao <zhaohuabing@gmail.com> * add e2e test for rate limit on multiple listeners Signed-off-by: huabing zhao <zhaohuabing@gmail.com> * address comments Signed-off-by: huabing zhao <zhaohuabing@gmail.com> --------- Signed-off-by: huabing zhao <zhaohuabing@gmail.com> Co-authored-by: Xunzhuo <bitliu@tencent.com> (cherry picked from commit a5bedbc) Signed-off-by: Arko Dasgupta <arko@tetrate.io> * rerun make testdata Signed-off-by: Arko Dasgupta <arko@tetrate.io> --------- Signed-off-by: huabing zhao <zhaohuabing@gmail.com> Signed-off-by: Arko Dasgupta <arko@tetrate.io> Signed-off-by: Huabing Zhao <zhaohuabing@gmail.com> Signed-off-by: Jesse Haka <haka.jesse@gmail.com> Signed-off-by: lemonlinger <lemonlinger@gmail.com> Signed-off-by: Karol Szwaj <karol.szwaj@gmail.com> Signed-off-by: Lior Okman <lior.okman@sap.com> Signed-off-by: Stéphane Cottin <stephane.cottin@vixns.com> Signed-off-by: zirain <zirain2009@gmail.com> Co-authored-by: Huabing Zhao <zhaohuabing@gmail.com> Co-authored-by: Jesse Haka <haka.jesse@gmail.com> Co-authored-by: zirain <zirain2009@gmail.com> Co-authored-by: Meng <lemonlinger@gmail.com> Co-authored-by: Karol Szwaj <karol.szwaj@gmail.com> Co-authored-by: Lior Okman <lior.okman@sap.com> Co-authored-by: vixns <stephane.cottin@vixns.com> Co-authored-by: Xunzhuo <bitliu@tencent.com>

run certgen when upgrading

6994bf7

Signed-off-by: huabing zhao <zhaohuabing@gmail.com>

zhaohuabing requested a review from a team as a code owner March 15, 2024 07:11

cnvergence approved these changes Mar 15, 2024

View reviewed changes

guydc approved these changes Mar 15, 2024

View reviewed changes

zirain approved these changes Mar 15, 2024

View reviewed changes

zirain merged commit 62ecf15 into envoyproxy:main Mar 15, 2024

arkodg added the cherrypick/release-v1.0 label Mar 15, 2024

arkodg mentioned this pull request Mar 15, 2024

Perform Helm Upgrade in E2E Upgrade Test #2941

Closed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Run certgen when upgrading#2934

Run certgen when upgrading#2934
zirain merged 1 commit intoenvoyproxy:mainfrom
zhaohuabing:run-certgen-when-upgrade

zhaohuabing commented Mar 15, 2024 •

edited

Loading

Uh oh!

codecov bot commented Mar 15, 2024

Uh oh!

zirain commented Mar 15, 2024

Uh oh!

zhaohuabing commented Mar 15, 2024

Uh oh!

zirain commented Mar 15, 2024 •

edited

Loading

Uh oh!

zhaohuabing commented Mar 15, 2024 •

edited

Loading

Uh oh!

zirain commented Mar 15, 2024

Uh oh!

guydc commented Mar 15, 2024 •

edited

Loading

Uh oh!

guydc commented Mar 15, 2024

Uh oh!

zhaohuabing commented Mar 15, 2024 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

5 participants

Conversation

zhaohuabing commented Mar 15, 2024 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

codecov bot commented Mar 15, 2024

Codecov Report

Uh oh!

zirain commented Mar 15, 2024

Uh oh!

zhaohuabing commented Mar 15, 2024

Uh oh!

zirain commented Mar 15, 2024 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

zhaohuabing commented Mar 15, 2024 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

zirain commented Mar 15, 2024

Uh oh!

guydc commented Mar 15, 2024 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

guydc commented Mar 15, 2024

Uh oh!

zhaohuabing commented Mar 15, 2024 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

5 participants

zhaohuabing commented Mar 15, 2024 •

edited

Loading

zirain commented Mar 15, 2024 •

edited

Loading

zhaohuabing commented Mar 15, 2024 •

edited

Loading

guydc commented Mar 15, 2024 •

edited

Loading

zhaohuabing commented Mar 15, 2024 •

edited

Loading