More Cilium test fixes (#2764)

Author: rarescosma

helmfile.d/charts/grafana-dashboards/dashboards/cilium-networkpolicy-dashboard.json

@@ -262,6 +262,7 @@
             }
           },
           "mappings": [],
+          "noValue": "missing",
           "thresholds": {
             "mode": "absolute",
             "steps": [
@@ -360,6 +361,7 @@
             }
           },
           "mappings": [],
+          "noValue": "missing",
           "thresholds": {
             "mode": "absolute",
             "steps": [

…-manager/resources/calico-allow-all.yaml …n/network-policies/calico-allow-all.yamltests/end-to-end/log-manager/resources/calico-allow-all.yaml renamed to tests/common/network-policies/calico-allow-all.yaml tests/end-to-end/log-manager/resources/calico-allow-all.yaml renamed to tests/common/network-policies/calico-allow-all.yaml

@@ -0,0 +1,23 @@
+---
+apiVersion: cilium.io/v2
+kind: CiliumClusterwideNetworkPolicy
+metadata:
+  name: global-allow-all-traffic
+spec:
+  endpointSelector: {}
+  ingress:
+  - fromEntities:
+    - "all"
+  - fromEndpoints:
+    - {}
+  - fromCIDR:
+    - "0.0.0.0/0"
+    - "::/0"
+  egress:
+  - toEntities:
+    - "all"
+  - toEndpoints:
+    - {}
+  - toCIDR:
+    - "0.0.0.0/0"
+    - "::/0"

tests/common/network-policies/cilium-allow-all.yaml

@@ -10,10 +10,14 @@ setup_suite() {
 
   # Temporarily allow all traffic to not cause dropped packets and fail the Network Policy test suite.
   if kubectl get crd globalnetworkpolicies.crd.projectcalico.org; then
-    kubectl apply -f "${BATS_CWD}/end-to-end/log-manager/resources/calico-allow-all.yaml" >&3 2>&1
+    kubectl apply -f "${BATS_CWD}/common/network-policies/calico-allow-all.yaml" >&3 2>&1
     # Give the CNI a bit of time to settle (arbitrary, I know..)
     sleep 15
   fi
+  if kubectl get crd ciliumclusterwidenetworkpolicies.cilium.io; then
+    kubectl apply -f "${BATS_CWD}/common/network-policies/cilium-allow-all.yaml" >&3 2>&1
+    sleep 15
+  fi
 
   # Both Prometheus and the blackbox exporter will attempt to reach inexisting pods if they aren't
   # scaled down, causing dropped packets and failing the Network Policy test suite.
@@ -56,7 +60,10 @@ teardown_suite() {
 
   # Delete the allow-all policy
   if kubectl get crd globalnetworkpolicies.crd.projectcalico.org; then
-    kubectl delete -f "${BATS_CWD}/end-to-end/log-manager/resources/calico-allow-all.yaml" --ignore-not-found >&3 2>&1
+    kubectl delete -f "${BATS_CWD}/common/network-policies/calico-allow-all.yaml" --ignore-not-found >&3 2>&1
+  fi
+  if kubectl get crd ciliumclusterwidenetworkpolicies.cilium.io; then
+    kubectl delete -f "${BATS_CWD}/common/network-policies/cilium-allow-all.yaml" --ignore-not-found >&3 2>&1
   fi
 }