Extends TestProxyRulesInUserNS with a new TestProxyTopologyInUserNS test
that builds the ns-pod1 <-> ns-kproxy <-> ns-pod2 topology described in
issue 130926 using veth pairs inside an unprivileged user+network namespace.
The topology uses two veth pairs:
veth0 (10.0.1.1/24 in ns-kproxy) <-> veth0-peer (10.0.1.2/24 in ns-pod1)
veth1 (10.0.2.1/24 in ns-kproxy) <-> veth1-peer (10.0.2.2/24 in ns-pod2)
This is phase 2 of the rootless kube-proxy integration testing work.
Phase 3 will install real Service/Endpoint rules via the proxier and
verify packet forwarding behaviour end-to-end.
Related to kubernetes/kubernetes#130926
Switch e2e tests to the freshly promoted test images:
- agnhost 2.66.1
- nginx 1.27.0-2 and 1.28.0-2
- glibc-dns-testing 2.1.1
Promoted in kubernetes/k8s.io#9787 and kubernetes/k8s.io#9788.
All four tags verified live on registry.k8s.io with digests
matching the promotion manifests.
The agnhost bump follows build/dependencies.yaml refPaths: the
manifest.go config, the kitten and nautilus BASEIMAGE files, and
the yaml fixtures that hardcode the tag.
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
Also update build/pause/cloudbuild.yaml and build/dependencies.yaml to
keep them in sync with test/images/cloudbuild.yaml, fixing the
verify-external-dependencies-version check.
The new version includes a generic /envvar endpoint in netexec that
reads any named environment variable, enabling e2e tests to retrieve
spec.nodeName via the Downward API instead of relying on os.Hostname().
Ref: https://github.com/kubernetes/k8s.io/pull/9608
Signed-off-by: Jitesh Kumar <jiteshkumardj@gmail.com>
Update node-problem-detector from v1.34.0 to v1.35.2 and remove all
related addon manifests and install logic that is no longer needed:
- Update version in build/dependencies.yaml, test/e2e_node/image_list.go
and test/kubemark/resources/hollow-node_template.yaml.
- Remove cluster/addons/node-problem-detector/ entirely. No e2e tests
depend on these manifests: e2e_node tests create NPD pods inline and
GCE standalone mode runs NPD as a systemd service.
- Remove install-node-problem-detector function and DEFAULT_NPD_* vars
from cluster/gce/gci/configure.sh along with the conditional that
invoked it, since NPD is no longer installed as a standalone binary
via this script.
- Remove the setup-addon-manifests calls for node-problem-detector from
cluster/gce/gci/configure-helper.sh since the source directory no
longer exists.
- Remove stale refPaths in build/dependencies.yaml that pointed to the
deleted addon files.
Signed-off-by: Humble Devassy Chirammal <humble.devassy@gmail.com>
As it can be seen in build/pause/CHANGELOG.md the PATCH
level version for pause was introduced due to requirements
from the pause image for Windows. This however invalidated
our build/depedencies.yaml validation as it only accounted for
the MAJOR.MINOR version of pause (e.g. 3.10, not 3.10.1).
Enforce full SemVer validation for the pause image dependents.