CiliumNetworkPolicy test

.github/workflows/ci.yml

@@ -25,6 +25,8 @@ jobs:
       # Test reasonably complicated CRDs; promethesurules and servicemonitors
       - run: just test-pr
       - run: just test-sm
+      # Cilium with a non/spec-status model
+      - run: just test-cilium-netpol
       # Test a fake CRD with multiple versions
       - run: just test-mv
       # Test argocd Application

justfile

@@ -85,5 +85,12 @@ test-istio-destrule:
   # NB: this currently fails because of an empty status object with preserve-unknown-fields
   cargo test --test runner -- --nocapture
 
+test-cilium-netpol:
+  kubectl apply --server-side -f tests/ciliumnetpol-crd.yaml
+  cargo run --bin kopium -- -A ciliumnetworkpolicies.cilium.io > tests/gen.rs
+  echo "pub type CR = CiliumNetworkPolicy;" >> tests/gen.rs
+  kubectl apply -f tests/ciliumnetpol-working.yaml
+  cargo test --test runner -- --nocapture
+
 release:
   cargo release minor --execute

tests/ciliumnetpol-broken.yaml

@@ -0,0 +1,15 @@
+apiVersion: "cilium.io/v2"
+kind: CiliumNetworkPolicy
+metadata:
+  name: "gen"
+specs:
+  - endpointSelector:
+      matchLabels: {}
+    egress:
+    - toEndpoints:
+      - matchLabels:
+          "k8s:io.kubernetes.pod.namespace": default
+    ingress:
+    - fromEndpoints:
+      - matchLabels:
+          "k8s:io.kubernetes.pod.namespace": default