conformance: make backend TLS tests IPv6-safe (#4120)

howardjohn · web-flow · commit ab6b5a251c59 · 2025-09-24T11:02:16.000-07:00
otherwise we send requests to
`http://[fc00/backendtlspolicy-nonexistent-ca-certificate-ref"` which is
very wrong
diff --git a/conformance/utils/kubernetes/helpers.go b/conformance/utils/kubernetes/helpers.go
@@ -344,7 +344,7 @@ func GatewayAndRoutesMustBeAccepted(t *testing.T, c client.Client, timeoutConfig
 	// If the Gateway has multiple listeners, get a portless gwAddr.
 	// Otherwise, you get the first listener's port, which might not be the one you want.
 	if !usePort {
-		gwAddr, _, _ = strings.Cut(gwAddr, ":")
+		gwAddr, _, _ = net.SplitHostPort(gwAddr)
 	}
 
 	ns := gatewayv1.Namespace(gw.Namespace)

Original file line number	Diff line number	Diff line change
`@@ -344,7 +344,7 @@ func GatewayAndRoutesMustBeAccepted(t *testing.T, c client.Client, timeoutConfig`
`344`	`344`	`// If the Gateway has multiple listeners, get a portless gwAddr.`
`345`	`345`	`// Otherwise, you get the first listener's port, which might not be the one you want.`
`346`	`346`	`if !usePort {`
`347`		`- gwAddr, _, _ = strings.Cut(gwAddr, ":")`
	`347`	`+ gwAddr, _, _ = net.SplitHostPort(gwAddr)`
`348`	`348`	`}`
`349`	`349`
`350`	`350`	`ns := gatewayv1.Namespace(gw.Namespace)`