[WIP] fixes flakes with networkPolicy egress upstream tests#385
[WIP] fixes flakes with networkPolicy egress upstream tests#385JacobTanenbaum wants to merge 3 commits intoopenshift:masterfrom
Conversation
|
[APPROVALNOTIFIER] This PR is NOT APPROVED This pull-request has been approved by: JacobTanenbaum The full list of commands accepted by this bot can be found here. DetailsNeeds approval from an approver in each of these files:Approvers can indicate their approval by writing |
1581d35 to
b8c4c61
Compare
7356616 to
3b20e86
Compare
attempts to add NetworkPolicy Egress tests in origin PR openshift/origin#26647 are flaky because of assumptions made about when it is safe to unisolate pods new pods that existing networkPolicies apply to Becuase the syncFlows is rate limited it is not safe to assume that all flows are synced when returning from np.refreshPodNetworkPolicies(). This PR changes how the flows that restrict new pods are removed by removing the isolating flows as part of syncFlows if a recalulation is required.
3b20e86 to
ee92110
Compare
|
/retest |
1 similar comment
|
/retest |
42144c9 to
7dd0bed
Compare
|
@JacobTanenbaum: The following tests failed, say
Full PR test history. Your PR dashboard. DetailsInstructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository. I understand the commands that are listed here. |
|
Issues go stale after 90d of inactivity. Mark the issue as fresh by commenting If this issue is safe to close now please do so with /lifecycle stale |
|
Stale issues rot after 30d of inactivity. Mark the issue as fresh by commenting If this issue is safe to close now please do so with /lifecycle rotten |
|
Rotten issues close after 30d of inactivity. Reopen the issue by commenting /close |
|
@openshift-bot: Closed this PR. DetailsIn response to this:
Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository. |
attempts to add NetworkPolicy Egress tests in origin PR
openshift/origin#26647 are flaky because of
assumptions made about when it is safe to unisolate pods new pods that
existing networkPolicies apply to
Because the syncFlows() is rate limited it is not safe to assume that
all flows are synced when returning from np.refreshPodNetworkPolicies().
This PR changes how the flows that restrict new pods are removed by
removing the isolating flows as part of syncFlows if a recalulation is
required.