Skip to content

Conversation

ldelossa
Copy link
Contributor

@ldelossa ldelossa commented May 8, 2025

Upstream cilium CLI now runs north-south conn disruptions more liberally.

This was made possible by EoL'ing the 5.4 kernel tests.

However, stable branches will still test 5.4 kernel.

Therefore, we need to ensure north-south conn disrupt tests do not run for stable branches which still place the 5.4 kernel under test.

ci: do not run north-south conn disrupt tests for 5.4 kernels

@maintainer-s-little-helper maintainer-s-little-helper bot added backport/1.17 This PR represents a backport for Cilium 1.17.x of a PR that was merged to main. kind/backports This PR provides functionality previously merged into master. labels May 8, 2025
@ldelossa
Copy link
Contributor Author

/test

@ldelossa ldelossa marked this pull request as ready for review May 13, 2025 13:24
@ldelossa ldelossa requested review from a team as code owners May 13, 2025 13:24
@ldelossa ldelossa requested a review from Artyop May 13, 2025 13:24
Copy link
Contributor

@Artyop Artyop left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

lgtm

@maintainer-s-little-helper maintainer-s-little-helper bot added the ready-to-merge This PR has passed all tests and received consensus from code owners to merge. label May 13, 2025
@ldelossa ldelossa added this pull request to the merge queue May 13, 2025
@github-merge-queue github-merge-queue bot removed this pull request from the merge queue due to failed status checks May 13, 2025
@julianwiedmann julianwiedmann added the dont-merge/waiting-for-upstream Only merge once upstream library or kernel features have landed label May 13, 2025
@Artyop Artyop added the dont-merge/discussion A discussion is ongoing and should be resolved before merging, regardless of reviews & tests status. label May 13, 2025
@julianwiedmann
Copy link
Member

I'd like to merge this along with the new CLI version once it's released, so we know that it actually works. Let's please park the change until then? :)

@ldelossa ldelossa force-pushed the ldelossa/ignore-ns-tests-kernel-5.4 branch 2 times, most recently from 1e3cf10 to dd1bb4b Compare May 13, 2025 18:34
@Artyop Artyop requested a review from nbusseneau May 14, 2025 07:41
@ldelossa ldelossa force-pushed the ldelossa/ignore-ns-tests-kernel-5.4 branch from dd1bb4b to 897568d Compare May 14, 2025 12:55
@Artyop Artyop removed the dont-merge/discussion A discussion is ongoing and should be resolved before merging, regardless of reviews & tests status. label May 14, 2025
@joestringer joestringer removed the ready-to-merge This PR has passed all tests and received consensus from code owners to merge. label May 28, 2025
@gentoo-root gentoo-root added the dont-merge/wait-until-release Freeze window for current release is blocking non-bugfix PRs label Jun 12, 2025
@gentoo-root gentoo-root removed the dont-merge/wait-until-release Freeze window for current release is blocking non-bugfix PRs label Jun 19, 2025
@joestringer joestringer added the release-note/ci This PR makes changes to the CI. label Jun 20, 2025
@pchaigno pchaigno added backport/1.18 This PR represents a backport for Cilium 1.18.x of a PR that was merged to main. and removed dont-merge/waiting-for-upstream Only merge once upstream library or kernel features have landed backport/1.18 This PR represents a backport for Cilium 1.18.x of a PR that was merged to main. labels Jul 8, 2025
@pchaigno pchaigno enabled auto-merge July 8, 2025 13:51
Upstream cilium CLI now runs north-south conn disruptions more
liberally.

This was made possible by EoL'ing the 5.4 kernel tests.

However, stable branches will still test 5.4 kernel.

Therefore, we need to ensure north-south conn disrupt tests do not run
for stable branches which still place the 5.4 kernel under test.

Signed-off-by: Louis DeLosSantos <louis.delos@isovalent.com>
@ldelossa ldelossa force-pushed the ldelossa/ignore-ns-tests-kernel-5.4 branch from 897568d to 4fd2139 Compare July 8, 2025 13:51
@pchaigno pchaigno linked an issue Jul 8, 2025 that may be closed by this pull request
@ldelossa
Copy link
Contributor Author

ldelossa commented Jul 8, 2025

/test

@pchaigno pchaigno added this pull request to the merge queue Jul 8, 2025
@maintainer-s-little-helper maintainer-s-little-helper bot added the ready-to-merge This PR has passed all tests and received consensus from code owners to merge. label Jul 8, 2025
Merged via the queue into v1.17 with commit e7cdb26 Jul 8, 2025
386 of 396 checks passed
@pchaigno pchaigno deleted the ldelossa/ignore-ns-tests-kernel-5.4 branch July 8, 2025 15:28
smagnani96 added a commit that referenced this pull request Jul 9, 2025
This commit updates the e2e-upgrade and ipsec-upgrade workflows to
not run the north-south connection disruption test on 5.4 kernel when
downgrading Cilium version. In #39443 we introduced the fix, using a
`kernel` variable that will be sanitized and compared against version
"5.4" to skip the test. This commit completes the fix by adding the
check also when downgrading Cilium, otherwise the flake "FIB lookup failed"
would still happen in the downgrade case.

Signed-off-by: Simone Magnani <simone.magnani@isovalent.com>
github-merge-queue bot pushed a commit that referenced this pull request Jul 9, 2025
This commit updates the e2e-upgrade and ipsec-upgrade workflows to
not run the north-south connection disruption test on 5.4 kernel when
downgrading Cilium version. In #39443 we introduced the fix, using a
`kernel` variable that will be sanitized and compared against version
"5.4" to skip the test. This commit completes the fix by adding the
check also when downgrading Cilium, otherwise the flake "FIB lookup failed"
would still happen in the downgrade case.

Signed-off-by: Simone Magnani <simone.magnani@isovalent.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
backport/1.17 This PR represents a backport for Cilium 1.17.x of a PR that was merged to main. kind/backports This PR provides functionality previously merged into master. ready-to-merge This PR has passed all tests and received consensus from code owners to merge. release-note/ci This PR makes changes to the CI.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

[v1.17] CI: Cilium IPsec upgrade - FIB lookup failed
7 participants