avoid kindnet network policies

Author: aojea

.github/workflows/e2e.yml

@@ -120,13 +120,13 @@ jobs:
 
     - name: Install kube-network-policies
       run: |
+        # stop kindnet of applying network policies
+        kubectl -n kube-system set image ds kindnet kindnet-cni=docker.io/kindest/kindnetd:v20230809-80a64d96
         # preload kube-network-policies image
         docker load --input kube-network-policies-image.tar
         /usr/local/bin/kind load docker-image registry.k8s.io/networking/kube-network-policies:test --name ${{ env.KIND_CLUSTER_NAME}}
         sed -i s#registry.k8s.io/networking/kube-network-policies.*#registry.k8s.io/networking/kube-network-policies:test# install.yaml
         /usr/local/bin/kubectl apply -f ./install.yaml
-        # stop kindnet of checking network policies
-        kubectl -n kube-system delete clusterrolebinding kindnet
 
     - name: Get Cluster status
       run: |

.github/workflows/npa.yml

@@ -109,15 +109,15 @@ jobs:
 
     - name: Install kube-network-policies
       run: |
+        # stop kindnet of applying network policies
+        kubectl -n kube-system set image ds kindnet kindnet-cni=docker.io/kindest/kindnetd:v20230809-80a64d96
         /usr/local/bin/kubectl apply -f https://raw.githubusercontent.com/kubernetes-sigs/network-policy-api/main/config/crd/experimental/policy.networking.k8s.io_adminnetworkpolicies.yaml
         /usr/local/bin/kubectl apply -f https://raw.githubusercontent.com/kubernetes-sigs/network-policy-api/main/config/crd/experimental/policy.networking.k8s.io_baselineadminnetworkpolicies.yaml
         # preload kube-network-policies image
         docker load --input kube-network-policies-image.tar
         /usr/local/bin/kind load docker-image registry.k8s.io/networking/kube-network-policies:test --name ${{ env.KIND_CLUSTER_NAME}}
         sed -i s#registry.k8s.io/networking/kube-network-policies.*#registry.k8s.io/networking/kube-network-policies:test# install-anp.yaml
         /usr/local/bin/kubectl apply -f ./install-anp.yaml
-        # stop kindnet of checking network policies
-        kubectl -n kube-system delete clusterrolebinding kindnet
 
     - name: Get Cluster status
       run: |

hack/ci/e2e.sh

@@ -136,6 +136,9 @@ EOF
   # Patch kube-proxy to set the verbosity level
   kubectl patch -n kube-system daemonset/kube-proxy \
     --type='json' -p='[{"op": "add", "path": "/spec/template/spec/containers/0/command/-", "value": "--v='"${KIND_CLUSTER_LOG_LEVEL}"'" }]'
+    
+  # stop kindnet of applying network policies
+  kubectl -n kube-system set image ds kindnet kindnet-cni=docker.io/kindest/kindnetd:v20230809-80a64d96
 }
 
 # run e2es with ginkgo-e2e.sh
@@ -208,8 +211,6 @@ run_tests() {
 }
 
 install_kube_network_policy() {
-  # stop kindnet of checking network policies
-  kubectl -n kube-system delete clusterrolebinding kindnet
   # Install kube-network-policies
   export IMAGE_NAME="registry.k8s.io/networking/kube-network-policies"
   # Build the image

tests/setup_suite.bash

@@ -34,8 +34,8 @@ EOF
   printf '%s' "${_install}" | kubectl apply -f -
   kubectl wait --for=condition=ready pods --namespace=kube-system -l k8s-app=kube-network-policies
 
-  # stop kindnet of checking network policies
-  kubectl -n kube-system delete clusterrolebinding kindnet
+  # stop kindnet of applying network policies
+  kubectl -n kube-system set image ds kindnet kindnet-cni=docker.io/kindest/kindnetd:v20230809-80a64d96
   
   # Expose a webserver in the default namespace
   kubectl run web --image=httpd:2 --labels="app=web" --expose --port=80