Skip to content

Commit f33efa8

Browse files
atykhyyjoestringer
authored andcommitted
cilium-cli: disable host-firewall-egress-to-fqnds test on RHEL
host-firewall-egress-to-fqdns consistently fails in the kube-proxy-1 configuration (using rhel8.10 kernel) although it appears to succeed in all other cases it runs in. It is unclear why this happens. Note that other L7 tests (to-fqdns, client-egress-l7, client-egress-l7-named-port, client-egress-tls-cni) using pod-to-world scenarios are disabled on RHEL kernels, see commit message in b1d70aa. Possibly the reason this test fails on RHEL is related to that. However that may be, this commit disables the test on RHEL to make scheduled CI runs usable. Signed-off-by: Anton Tykhyy <atykhyy@gmail.com>
1 parent 1dcbab2 commit f33efa8

1 file changed

Lines changed: 1 addition & 0 deletions

File tree

cilium-cli/connectivity/builder/host_firewall_egress_to_fqdns.go

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -23,6 +23,7 @@ func (t hostFirewallEgressToFqdns) build(ct *check.ConnectivityTest, templates m
2323
WithCondition(differentExternalTargets).
2424
WithFeatureRequirements(
2525
features.RequireDisabled(features.EndpointRoutes), // currently broken when proxying to in-cluster endpoints, see #45957
26+
features.RequireDisabled(features.RHEL), // currently broken, see #47921
2627
features.RequireEnabled(features.L7Proxy),
2728
features.RequireEnabled(features.HostFirewall)).
2829
WithCiliumClusterwidePolicy(templates["hostFirewallEgressToFQDNsPolicyYAML"]).

0 commit comments

Comments
 (0)