New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Revisit policy enforcement check #2398

Open

viktor-kurchenko opened this issue Mar 13, 2024 · 0 comments

Assignees

Contributor

viktor-kurchenko commented Mar 13, 2024 •

edited

We want to run tests in parallel in different namespaces.

Review and improve policy enforcement check if needed, so a test runs only after policy is applied.

Looks like we can try the following algorithm:

1. Read policy UID via `cilium policy get`
2. Apply policy
3. Read policy UID and revision number until:
  3.1. policy appears in the output (create case)
  3.2. new policy UID appears in the output compared to the step 1 output (update case)
4. Run cilium policy wait <revision> --max-wait-time ... to make sure that policy has been applied

More context: cilium/cilium#4248

The text was updated successfully, but these errors were encountered:

viktor-kurchenko self-assigned this

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment