ci: add cilium ebpf e2e overlay and podsubnet test #4073
Merged
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Contributor
Author
|
/azp run Azure Container Networking PR |
|
Azure Pipelines successfully started running 1 pipeline(s). |
Contributor
There was a problem hiding this comment.
Pull Request Overview
This PR adds an E2E test stage for overlay Cilium eBPF host routing to the CI pipeline, along with reorganizing pipeline infrastructure and introducing new Makefile targets for cluster deployment.
- Adds new eBPF overlay Cilium test configuration with required Kubernetes manifests
- Introduces pipeline infrastructure for testing overlay Cilium with eBPF dataplane
- Refactors Makefile structure to support eBPF deployment patterns
Reviewed Changes
Copilot reviewed 15 out of 16 changed files in this pull request and generated 2 comments.
Show a summary per file
| File | Description |
|---|---|
| test/validate/linux_validate.go | Adds container name specification for cilium agent validation |
| test/integration/manifests/cilium/v1.17/ebpf/overlay/static/* | New static configuration files for eBPF overlay Cilium deployment |
| test/integration/manifests/cilium/v1.17/ebpf/overlay/cilium.yaml | Main Cilium DaemonSet configuration with eBPF and overlay networking |
| test/integration/manifests/cilium/v1.17/ebpf/common/* | Common eBPF configuration files including RBAC and network policies |
| hack/aks/deploy.mk | New Makefile with deployment targets for eBPF Cilium configurations |
| hack/aks/Makefile | Updated with eBPF cluster creation and common deployment infrastructure |
| .pipelines/templates/* | New pipeline templates for environment setup and cluster creation |
| .pipelines/singletenancy/cilium-overlay-ebpf/* | Complete pipeline configuration for eBPF overlay testing |
| .pipelines/pipeline.yaml | Integration of new eBPF test stage into main pipeline |
Tip: Customize your code reviews with copilot-instructions.md. Create the file or learn how to get started.
.pipelines/singletenancy/cilium-overlay-ebpf/cilium-overlay-e2e-step-template.yaml
Show resolved
Hide resolved
Member
|
can we add e2e for pod subnet too? |
QxBytes
force-pushed
the
alew/ebpf-e2e-test
branch
from
d9e5fd5 to
1b3164c
Compare
QxBytes
force-pushed
the
alew/ebpf-e2e-test
branch
from
1b3164c to
8211742
Compare
the only difference between the two is overlay has check that deletes the cilium test namespace and validates the state-- otherwise the cilium tests template is identical previous commit passed
QxBytes
changed the title
QxBytes
force-pushed
the
alew/ebpf-e2e-test
branch
from
10091a0 to
f1f9e5a
Compare
QxBytes
force-pushed
the
alew/ebpf-e2e-test
branch
from
f1f9e5a to
0926778
Compare
tamilmani1989
approved these changes
Oct 13, 2025
This comment was marked as outdated.
This comment was marked as outdated.
Sorry, something went wrong.
santhoshmprabhu
approved these changes
Oct 13, 2025
Contributor
santhoshmprabhu
left a comment
santhoshmprabhu
left a comment
There was a problem hiding this comment.
Checked with Alexander about a couple of concerns, we'll have a follow up PR for 1 more test case.
Contributor
Author
|
/azp run Azure Container Networking PR |
|
Azure Pipelines successfully started running 1 pipeline(s). |
sivakami-projects
pushed a commit
that referenced
this pull request
Oct 23, 2025
* add initial ebpf overlay modifications * hardcode values for testing * add depends to delete * make ebpf use cilium v1.17 * hardcode cluster name for testing * export makefile variables * add container for cilium command * add default os sku without the default value for osSKU, it is set to the empty string which is not "undefined", and so the the makefile's ?= default value is not used either, leading to the os SKU in the makefile being "" * move pod cidr to variable * add ccnp to deploys to block wireserver * amend ccnp to not block imds yet * Revert "hardcode cluster name for testing" This reverts commit 5945c63. * Revert "hardcode values for testing" This reverts commit f3ddf71. * rename targets and files * apply crd before custom resource * test ebpf with test iptables monitor and merger images * begin templating- previous commit passed * remove hubble and nightly copied code * remove unused vars and rename target (noop) * test ebpf podsubnet * reuse existing template the only difference between the two is overlay has check that deletes the cilium test namespace and validates the state-- otherwise the cilium tests template is identical previous commit passed * increase timeout to 20 minutes * swap podsubnet to ubuntu 24 * register ubuntu 2404 preview feature
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Reason for Change:
Adds an E2E stage for overlay and podsubnet cilium ebpf host routing enabled. Deploys relevant components and runs the standard e2e suite (wireserver, cilium connectivity, statefile validation, restarting, async delete). Should use the built versions of iptables monitor (iptables block), ip masq merger, and cns.
Begins reorganizing some of the pipeline steps and makefile targets.
Issue Fixed:
Requirements:
Notes:
green run: https://msazure.visualstudio.com/One/_build/results?buildId=139934789&view=results