Policy add deny rule test and benchmark #35714
Merged
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
[ upstream commit 4c6af59 ] Change bootstrapRepo to not generate identities directly, but via the passed in rule generation function. This way the generated identities can be tailored for the rules being used. This becomes useful with additional CIDR tests. Signed-off-by: Jarno Rajahalme <jarno@isovalent.com>
[ upstream commit 6363913 ] Add test and benchmark with a mix of deny and allow CIDR rules. Add identity for each CIDR so that 'toMapState' has some work to do. Signed-off-by: Jarno Rajahalme <jarno@isovalent.com>
7f6da65 to
71032d6
Compare
|
/test |
youngnick
approved these changes
Nov 4, 2024
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This is a partial backport of #33313, backporting only the new test and benchmark. This is being backported for comparison purposes between 1.16 and the forthcoming 1.17.
Add test and benchmark with a mix of deny and allow CIDR rules.
Add identity for each CIDR so that 'toMapState' has some work to do.
Run the new benchmark like this:
Note: To run just the matching benchmark and run no tests,
-run ^$is used as^$is a regular expression that does not match any tests.