workflows: Remove coverage for node encryption in e2e tests

Signed-off-by: Paul Chaignon <paul.chaignon@gmail.com>

Author: pchaigno

.github/actions/cilium-config/action.yml

@@ -34,9 +34,6 @@ inputs:
   encryption:
     description: '"ipsec", "wireguard" or empty'
     default: ''
-  encryption-node:
-    description: 'Enable node-to-node encryption (WireGuard only)'
-    default: 'false'
   encryption-strict-egress:
     description: 'Enable strict mode egress encryption'
     default: ''
@@ -197,9 +194,6 @@ runs:
           ENCRYPT=""
           if [ "${{ inputs.encryption }}" != "" ]; then
             ENCRYPT="--helm-set=encryption.enabled=true --helm-set=encryption.type=${{ inputs.encryption }}"
-            if [ "${{ inputs.encryption-node }}" != "" ]; then
-              ENCRYPT+=" --helm-set=encryption.nodeEncryption=${{ inputs.encryption-node }}"
-            fi
             if [ "${{ inputs.encryption-strict-egress }}" != "" ]; then
               ENCRYPT+=" --helm-set=encryption.strictMode.egress.enabled=${{ inputs.encryption-strict-egress }}"
               ENCRYPT+=" --helm-set=encryption.strictMode.egress.cidr=10.244.0.0/16"

.github/actions/e2e/kube-proxy.yaml

@@ -42,7 +42,6 @@
   kpr: 'false'
   tunnel: 'disabled'
   encryption: 'wireguard'
-  encryption-node: 'false'
   encryption-strict-mode: 'true'
   misc: 'socketLB.enabled=true'
   local-redirect-policy: 'true'

.github/actions/e2e/wireguard.yaml

@@ -6,7 +6,6 @@
   secondary-network: 'true'
   tunnel: 'vxlan'
   encryption: 'wireguard'
-  encryption-node: 'false'
   lb-mode: 'snat'
   endpoint-routes: 'true'
   egress-gateway: 'true'
@@ -21,7 +20,6 @@
   secondary-network: 'true'
   tunnel: 'vxlan'
   encryption: 'wireguard'
-  encryption-node: 'true'
   lb-mode: 'snat'
   egress-gateway: 'true'
   ingress-controller: 'true'
@@ -38,7 +36,6 @@
   secondary-network: 'true'
   tunnel: 'disabled'
   encryption: 'wireguard'
-  encryption-node: 'true'
   encryption-strict-egress: 'true'
   lb-mode: 'snat'
   egress-gateway: 'true'
@@ -55,7 +52,6 @@
   tunnel: 'geneve'
   lb-mode: 'snat'
   encryption: 'wireguard'
-  encryption-node: 'false'
   host-fw: 'true'
   ciliumendpointslice: 'true'
   ingress-controller: 'true'
@@ -82,7 +78,6 @@
   secondary-network: 'true'
   tunnel: 'vxlan'
   encryption: 'wireguard'
-  encryption-node: 'false'
   encryption-strict-ingress: 'true'
   # Without strict egress encryption we observed unencrytped host-to-pod packets arriving at cil_from_overlay
   # during startup. This only seems to happen while the agent is still setting up the datapath, so possibly a
@@ -99,7 +94,6 @@
   secondary-network: 'true'
   tunnel: 'disabled'
   encryption: 'wireguard'
-  encryption-node: 'false'
   encryption-strict-ingress: 'true'
   encryption-strict-egress: 'true'
   # Strict ingress encryption in native routing mode is new in this release, so

.github/workflows/conformance-ipsec-e2e.yaml

@@ -200,7 +200,6 @@ jobs:
           lb-mode: ${{ matrix.lb-mode }}
           lb-acceleration: ${{ matrix.lb-acceleration }}
           encryption: 'ipsec'
-          encryption-node: ${{ matrix.encryption-node }}
           egress-gateway: ${{ matrix.egress-gateway }}
           host-fw: ${{ matrix.host-fw }}
           ingress-controller: ${{ matrix.ingress-controller }}

.github/workflows/tests-e2e-upgrade.yaml

@@ -348,7 +348,6 @@ jobs:
           lb-mode: ${{ matrix.lb-mode }}
           lb-acceleration: ${{ matrix.lb-acceleration }}
           encryption: ${{ matrix.encryption }}
-          encryption-node: ${{ matrix.encryption-node }}
           encryption-strict-egress: ${{ matrix.encryption-strict-egress }}
           encryption-strict-ingress: ${{ matrix.encryption-strict-ingress }}
           egress-gateway: ${{ matrix.egress-gateway }}
@@ -380,7 +379,6 @@ jobs:
           lb-mode: ${{ matrix.lb-mode }}
           lb-acceleration: ${{ matrix.lb-acceleration }}
           encryption: ${{ matrix.encryption }}
-          encryption-node: ${{ matrix.encryption-node }}
           encryption-strict-egress: ${{ matrix.encryption-strict-egress }}
           encryption-strict-ingress: ${{ matrix.encryption-strict-ingress }}
           egress-gateway: ${{ matrix.egress-gateway }}