From fc941538bd29946fd75322c03f179ff46e26a93c Mon Sep 17 00:00:00 2001 From: Mengxin Liu Date: Fri, 17 Oct 2025 02:05:57 +0000 Subject: [PATCH] add e2e for networkpolicy lax mode Signed-off-by: Mengxin Liu --- .github/workflows/build-x86-image.yaml | 10 ++++++++++ dist/images/install.sh | 2 ++ 2 files changed, 12 insertions(+) diff --git a/.github/workflows/build-x86-image.yaml b/.github/workflows/build-x86-image.yaml index 9dbb68ab379..2ec1634d7c7 100644 --- a/.github/workflows/build-x86-image.yaml +++ b/.github/workflows/build-x86-image.yaml @@ -695,6 +695,9 @@ jobs: - ipv4 - ipv6 - dual + np-enforcement: + - standard + - lax steps: - uses: jlumbroso/free-disk-space@v1.3.1 with: @@ -755,6 +758,8 @@ jobs: ${{ runner.os }}-e2e-go-${{ env.GO_VERSION }}-x86-${{ github.base_ref }}- - name: Install kind + env: + NP_ENFORCEMENT: "${{ matrix.np-enforcement }}" uses: helm/kind-action@v1.12.0 with: version: ${{ env.KIND_VERSION }} @@ -890,6 +895,9 @@ jobs: - ipv4 - ipv6 - dual + np-enforcement: + - standard + - lax steps: - uses: jlumbroso/free-disk-space@v1.3.1 with: @@ -957,6 +965,8 @@ jobs: make kind-ghcr-pull kind-init-${{ matrix.ip-family }} - name: Install Kube-OVN + env: + NP_ENFORCEMENT: "${{ matrix.np-enforcement }}" id: install run: make kind-install-${{ matrix.ip-family }} diff --git a/dist/images/install.sh b/dist/images/install.sh index 8f1b5590b8c..62a151fae2b 100755 --- a/dist/images/install.sh +++ b/dist/images/install.sh @@ -13,6 +13,7 @@ VLAN_NIC=${VLAN_NIC:-} HW_OFFLOAD=${HW_OFFLOAD:-false} ENABLE_LB=${ENABLE_LB:-true} ENABLE_NP=${ENABLE_NP:-true} +NP_ENFORCEMENT=${NP_ENFORCEMENT:-standard} ENABLE_EIP_SNAT=${ENABLE_EIP_SNAT:-true} LS_DNAT_MOD_DL_DST=${LS_DNAT_MOD_DL_DST:-true} LS_CT_SKIP_DST_LPORT_IPS=${LS_CT_SKIP_DST_LPORT_IPS:-true} @@ -4691,6 +4692,7 @@ spec: - --pod-nic-type=$POD_NIC_TYPE - --enable-lb=$ENABLE_LB - --enable-np=$ENABLE_NP + - --np-enforcement=$NP_ENFORCEMENT - --enable-eip-snat=$ENABLE_EIP_SNAT - --enable-external-vpc=$ENABLE_EXTERNAL_VPC - --logtostderr=false