Skip to content

Commit 579435f

Browse files
k8s-ci-robotk8s-ci-robot
authored
Merge pull request #109 from tssurya/add-conformance-tests-banp
Add BANP conformance tests for .Spec.Ingress and .Spec.Egress fields
2 parents 7321d85 + 8c46a56 commit 579435f

24 files changed

+1226
-6
lines changed

‎conformance/tests/admin-network-policy-core-egress-sctp-rules_base.yaml renamed to ‎conformance/base/admin_network_policy/core-egress-sctp-rules.yaml

File renamed without changes.

‎conformance/tests/admin-network-policy-core-egress-tcp-rules_base.yaml renamed to ‎conformance/base/admin_network_policy/core-egress-tcp-rules.yaml

File renamed without changes.

‎conformance/tests/admin-network-policy-core-egress-udp-rules_base.yaml renamed to ‎conformance/base/admin_network_policy/core-egress-udp-rules.yaml

File renamed without changes.

‎conformance/tests/admin-network-policy-core-ingress-sctp-rules_base.yaml renamed to ‎conformance/base/admin_network_policy/core-ingress-sctp-rules.yaml

File renamed without changes.

‎conformance/tests/admin-network-policy-core-ingress-tcp-rules_base.yaml renamed to ‎conformance/base/admin_network_policy/core-ingress-tcp-rules.yaml

File renamed without changes.

‎conformance/tests/admin-network-policy-core-ingress-udp-rules_base.yaml renamed to ‎conformance/base/admin_network_policy/core-ingress-udp-rules.yaml

File renamed without changes.

‎conformance/base/baseline_admin_network_policy/core-egress-sctp-rules.yaml

Lines changed: 53 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,53 @@
1+
apiVersion: policy.networking.k8s.io/v1alpha1
2+
kind: BaselineAdminNetworkPolicy
3+
metadata:
4+
name: default
5+
spec:
6+
subject:
7+
namespaces:
8+
matchLabels:
9+
kubernetes.io/metadata.name: network-policy-conformance-ravenclaw
10+
egress:
11+
- name: "allow-to-gryffindor-everything"
12+
action: "Allow"
13+
to:
14+
- namespaces:
15+
namespaceSelector:
16+
matchLabels:
17+
kubernetes.io/metadata.name: network-policy-conformance-gryffindor
18+
- name: "deny-to-gryffindor-everything"
19+
action: "Deny"
20+
to:
21+
- namespaces:
22+
namespaceSelector:
23+
matchLabels:
24+
kubernetes.io/metadata.name: network-policy-conformance-gryffindor
25+
- name: "deny-to-slytherin-at-port-9003"
26+
action: "Deny"
27+
to:
28+
- namespaces:
29+
namespaceSelector:
30+
matchLabels:
31+
kubernetes.io/metadata.name: network-policy-conformance-slytherin
32+
ports:
33+
- portNumber:
34+
protocol: SCTP
35+
port: 9003
36+
- name: "allow-to-hufflepuff-at-port-9003"
37+
action: "Allow"
38+
to:
39+
- namespaces:
40+
namespaceSelector:
41+
matchLabels:
42+
kubernetes.io/metadata.name: network-policy-conformance-hufflepuff
43+
ports:
44+
- portNumber:
45+
protocol: SCTP
46+
port: 9003
47+
- name: "deny-to-hufflepuff-everything-else"
48+
action: "Deny"
49+
to:
50+
- namespaces:
51+
namespaceSelector:
52+
matchLabels:
53+
kubernetes.io/metadata.name: network-policy-conformance-hufflepuff

‎conformance/base/baseline_admin_network_policy/core-egress-tcp-rules.yaml

Lines changed: 53 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,53 @@
1+
apiVersion: policy.networking.k8s.io/v1alpha1
2+
kind: BaselineAdminNetworkPolicy
3+
metadata:
4+
name: default
5+
spec:
6+
subject:
7+
namespaces:
8+
matchLabels:
9+
kubernetes.io/metadata.name: network-policy-conformance-gryffindor
10+
egress:
11+
- name: "allow-to-ravenclaw-everything"
12+
action: "Allow"
13+
to:
14+
- namespaces:
15+
namespaceSelector:
16+
matchLabels:
17+
kubernetes.io/metadata.name: network-policy-conformance-ravenclaw
18+
- name: "deny-to-ravenclaw-everything"
19+
action: "Deny"
20+
to:
21+
- namespaces:
22+
namespaceSelector:
23+
matchLabels:
24+
kubernetes.io/metadata.name: network-policy-conformance-ravenclaw
25+
- name: "deny-to-slytherin-at-port-80"
26+
action: "Deny"
27+
to:
28+
- namespaces:
29+
namespaceSelector:
30+
matchLabels:
31+
kubernetes.io/metadata.name: network-policy-conformance-slytherin
32+
ports:
33+
- portNumber:
34+
protocol: TCP
35+
port: 80
36+
- name: "allow-to-hufflepuff-at-port-8080"
37+
action: "Allow"
38+
to:
39+
- namespaces:
40+
namespaceSelector:
41+
matchLabels:
42+
kubernetes.io/metadata.name: network-policy-conformance-hufflepuff
43+
ports:
44+
- portNumber:
45+
protocol: TCP
46+
port: 8080
47+
- name: "deny-to-hufflepuff-everything-else"
48+
action: "Deny"
49+
to:
50+
- namespaces:
51+
namespaceSelector:
52+
matchLabels:
53+
kubernetes.io/metadata.name: network-policy-conformance-hufflepuff

‎conformance/base/baseline_admin_network_policy/core-egress-udp-rules.yaml

Lines changed: 53 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,53 @@
1+
apiVersion: policy.networking.k8s.io/v1alpha1
2+
kind: BaselineAdminNetworkPolicy
3+
metadata:
4+
name: default
5+
spec:
6+
subject:
7+
namespaces:
8+
matchLabels:
9+
kubernetes.io/metadata.name: network-policy-conformance-hufflepuff
10+
egress:
11+
- name: "allow-to-ravenclaw-everything"
12+
action: "Allow"
13+
to:
14+
- namespaces:
15+
namespaceSelector:
16+
matchLabels:
17+
kubernetes.io/metadata.name: network-policy-conformance-ravenclaw
18+
- name: "deny-to-ravenclaw-everything"
19+
action: "Deny"
20+
to:
21+
- namespaces:
22+
namespaceSelector:
23+
matchLabels:
24+
kubernetes.io/metadata.name: network-policy-conformance-ravenclaw
25+
- name: "deny-to-slytherin-at-port-5353"
26+
action: "Deny"
27+
to:
28+
- namespaces:
29+
namespaceSelector:
30+
matchLabels:
31+
kubernetes.io/metadata.name: network-policy-conformance-slytherin
32+
ports:
33+
- portNumber:
34+
protocol: UDP
35+
port: 5353
36+
- name: "allow-to-gryffindor-at-port-53"
37+
action: "Allow"
38+
to:
39+
- namespaces:
40+
namespaceSelector:
41+
matchLabels:
42+
kubernetes.io/metadata.name: network-policy-conformance-gryffindor
43+
ports:
44+
- portNumber:
45+
protocol: UDP
46+
port: 53
47+
- name: "deny-to-gryffindor-everything-else"
48+
action: "Deny"
49+
to:
50+
- namespaces:
51+
namespaceSelector:
52+
matchLabels:
53+
kubernetes.io/metadata.name: network-policy-conformance-gryffindor

‎conformance/base/baseline_admin_network_policy/core-ingress-sctp-rules.yaml

Lines changed: 53 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,53 @@
1+
apiVersion: policy.networking.k8s.io/v1alpha1
2+
kind: BaselineAdminNetworkPolicy
3+
metadata:
4+
name: default
5+
spec:
6+
subject:
7+
namespaces:
8+
matchLabels:
9+
kubernetes.io/metadata.name: network-policy-conformance-ravenclaw
10+
ingress:
11+
- name: "allow-from-gryffindor-everything"
12+
action: "Allow"
13+
from:
14+
- namespaces:
15+
namespaceSelector:
16+
matchLabels:
17+
kubernetes.io/metadata.name: network-policy-conformance-gryffindor
18+
- name: "deny-from-gryffindor-everything"
19+
action: "Deny"
20+
from:
21+
- namespaces:
22+
namespaceSelector:
23+
matchLabels:
24+
kubernetes.io/metadata.name: network-policy-conformance-gryffindor
25+
- name: "deny-from-slytherin-at-port-9003"
26+
action: "Deny"
27+
from:
28+
- namespaces:
29+
namespaceSelector:
30+
matchLabels:
31+
kubernetes.io/metadata.name: network-policy-conformance-slytherin
32+
ports:
33+
- portNumber:
34+
protocol: SCTP
35+
port: 9003
36+
- name: "allow-from-hufflepuff-at-port-9003"
37+
action: "Allow"
38+
from:
39+
- namespaces:
40+
namespaceSelector:
41+
matchLabels:
42+
kubernetes.io/metadata.name: network-policy-conformance-hufflepuff
43+
ports:
44+
- portNumber:
45+
protocol: SCTP
46+
port: 9003
47+
- name: "deny-from-hufflepuff-everything-else"
48+
action: "Deny"
49+
from:
50+
- namespaces:
51+
namespaceSelector:
52+
matchLabels:
53+
kubernetes.io/metadata.name: network-policy-conformance-hufflepuff

0 commit comments

Comments
 (0)