Skip to content

Add support for IPv6-only kind cluster creation #39545

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Merged
merged 1 commit into from
May 26, 2025
Merged

Add support for IPv6-only kind cluster creation #39545

merged 1 commit into from
May 26, 2025

Conversation

liyihuang
Copy link
Contributor

Introduces a new Makefile target kind-ipv6 to create of an IPv6-only kind cluster for Cilium development. This doesn't resolve the issue that the container on KIND can't access the Internet.

I have run the test and can see only the external tests are failing. I dont think there is an easy way to fix it. Maybe we need to include some "external" container as the external in the future.

❌ 14/72 tests failed (60/524 actions), 43 tests skipped, 2 scenarios skipped:
Test [no-policies]:
  ❌ no-policies/pod-to-cidr/external-1111-0: cilium-test-1/client2-66475877c6-xtqw7 (fd00::f1) -> external-1111 (1.1.1.1:443)
  ❌ no-policies/pod-to-cidr/external-1111-1: cilium-test-1/client3-795488bf5-xhmkv (fd00::1f1) -> external-1111 (1.1.1.1:443)
  ❌ no-policies/pod-to-cidr/external-1111-2: cilium-test-1/client-645b68dcf7-fhcjh (fd00::27) -> external-1111 (1.1.1.1:443)
  ❌ no-policies/pod-to-cidr/external-1001-0: cilium-test-1/client-645b68dcf7-fhcjh (fd00::27) -> external-1001 (1.0.0.1:443)
  ❌ no-policies/pod-to-cidr/external-1001-1: cilium-test-1/client2-66475877c6-xtqw7 (fd00::f1) -> external-1001 (1.0.0.1:443)
  ❌ no-policies/pod-to-cidr/external-1001-2: cilium-test-1/client3-795488bf5-xhmkv (fd00::1f1) -> external-1001 (1.0.0.1:443)
Test [all-ingress-deny]:
  ❌ all-ingress-deny/pod-to-cidr/external-1111-0: cilium-test-1/client-645b68dcf7-fhcjh (fd00::27) -> external-1111 (1.1.1.1:443)
  ❌ all-ingress-deny/pod-to-cidr/external-1111-1: cilium-test-1/client2-66475877c6-xtqw7 (fd00::f1) -> external-1111 (1.1.1.1:443)
  ❌ all-ingress-deny/pod-to-cidr/external-1111-2: cilium-test-1/client3-795488bf5-xhmkv (fd00::1f1) -> external-1111 (1.1.1.1:443)
  ❌ all-ingress-deny/pod-to-cidr/external-1001-0: cilium-test-1/client-645b68dcf7-fhcjh (fd00::27) -> external-1001 (1.0.0.1:443)
  ❌ all-ingress-deny/pod-to-cidr/external-1001-1: cilium-test-1/client2-66475877c6-xtqw7 (fd00::f1) -> external-1001 (1.0.0.1:443)
  ❌ all-ingress-deny/pod-to-cidr/external-1001-2: cilium-test-1/client3-795488bf5-xhmkv (fd00::1f1) -> external-1001 (1.0.0.1:443)
Test [all-ingress-deny-knp]:
  ❌ all-ingress-deny-knp/pod-to-cidr/external-1111-0: cilium-test-1/client-645b68dcf7-fhcjh (fd00::27) -> external-1111 (1.1.1.1:443)
  ❌ all-ingress-deny-knp/pod-to-cidr/external-1111-1: cilium-test-1/client2-66475877c6-xtqw7 (fd00::f1) -> external-1111 (1.1.1.1:443)
  ❌ all-ingress-deny-knp/pod-to-cidr/external-1111-2: cilium-test-1/client3-795488bf5-xhmkv (fd00::1f1) -> external-1111 (1.1.1.1:443)
  ❌ all-ingress-deny-knp/pod-to-cidr/external-1001-0: cilium-test-1/client-645b68dcf7-fhcjh (fd00::27) -> external-1001 (1.0.0.1:443)
  ❌ all-ingress-deny-knp/pod-to-cidr/external-1001-1: cilium-test-1/client2-66475877c6-xtqw7 (fd00::f1) -> external-1001 (1.0.0.1:443)
  ❌ all-ingress-deny-knp/pod-to-cidr/external-1001-2: cilium-test-1/client3-795488bf5-xhmkv (fd00::1f1) -> external-1001 (1.0.0.1:443)
Test [to-cidr-external]:
  ❌ to-cidr-external/pod-to-cidr/external-1111-0: cilium-test-1/client-645b68dcf7-fhcjh (fd00::27) -> external-1111 (1.1.1.1:443)
  ❌ to-cidr-external/pod-to-cidr/external-1111-1: cilium-test-1/client2-66475877c6-xtqw7 (fd00::f1) -> external-1111 (1.1.1.1:443)
  ❌ to-cidr-external/pod-to-cidr/external-1111-2: cilium-test-1/client3-795488bf5-xhmkv (fd00::1f1) -> external-1111 (1.1.1.1:443)
  ❌ to-cidr-external/pod-to-cidr/external-1001-0: cilium-test-1/client-645b68dcf7-fhcjh (fd00::27) -> external-1001 (1.0.0.1:443)
  ❌ to-cidr-external/pod-to-cidr/external-1001-1: cilium-test-1/client2-66475877c6-xtqw7 (fd00::f1) -> external-1001 (1.0.0.1:443)
  ❌ to-cidr-external/pod-to-cidr/external-1001-2: cilium-test-1/client3-795488bf5-xhmkv (fd00::1f1) -> external-1001 (1.0.0.1:443)
Test [to-cidr-external-knp]:
  ❌ to-cidr-external-knp/pod-to-cidr/external-1111-0: cilium-test-1/client-645b68dcf7-fhcjh (fd00::27) -> external-1111 (1.1.1.1:443)
  ❌ to-cidr-external-knp/pod-to-cidr/external-1111-1: cilium-test-1/client2-66475877c6-xtqw7 (fd00::f1) -> external-1111 (1.1.1.1:443)
  ❌ to-cidr-external-knp/pod-to-cidr/external-1111-2: cilium-test-1/client3-795488bf5-xhmkv (fd00::1f1) -> external-1111 (1.1.1.1:443)
  ❌ to-cidr-external-knp/pod-to-cidr/external-1001-0: cilium-test-1/client2-66475877c6-xtqw7 (fd00::f1) -> external-1001 (1.0.0.1:443)
  ❌ to-cidr-external-knp/pod-to-cidr/external-1001-1: cilium-test-1/client3-795488bf5-xhmkv (fd00::1f1) -> external-1001 (1.0.0.1:443)
  ❌ to-cidr-external-knp/pod-to-cidr/external-1001-2: cilium-test-1/client-645b68dcf7-fhcjh (fd00::27) -> external-1001 (1.0.0.1:443)
Test [client-egress-to-cidr-deny]:
  ❌ client-egress-to-cidr-deny/pod-to-cidr/external-1111-0: cilium-test-1/client-645b68dcf7-fhcjh (fd00::27) -> external-1111 (1.1.1.1:443)
  ❌ client-egress-to-cidr-deny/pod-to-cidr/external-1111-1: cilium-test-1/client2-66475877c6-xtqw7 (fd00::f1) -> external-1111 (1.1.1.1:443)
  ❌ client-egress-to-cidr-deny/pod-to-cidr/external-1111-2: cilium-test-1/client3-795488bf5-xhmkv (fd00::1f1) -> external-1111 (1.1.1.1:443)
Test [client-egress-to-cidrgroup-deny]:
  ❌ client-egress-to-cidrgroup-deny/pod-to-cidr/external-1111-0: cilium-test-1/client-645b68dcf7-fhcjh (fd00::27) -> external-1111 (1.1.1.1:443)
  ❌ client-egress-to-cidrgroup-deny/pod-to-cidr/external-1111-1: cilium-test-1/client2-66475877c6-xtqw7 (fd00::f1) -> external-1111 (1.1.1.1:443)
  ❌ client-egress-to-cidrgroup-deny/pod-to-cidr/external-1111-2: cilium-test-1/client3-795488bf5-xhmkv (fd00::1f1) -> external-1111 (1.1.1.1:443)
Test [client-egress-to-cidrgroup-deny-by-label]:
  ❌ client-egress-to-cidrgroup-deny-by-label/pod-to-cidr/external-1111-0: cilium-test-1/client-645b68dcf7-fhcjh (fd00::27) -> external-1111 (1.1.1.1:443)
  ❌ client-egress-to-cidrgroup-deny-by-label/pod-to-cidr/external-1111-1: cilium-test-1/client2-66475877c6-xtqw7 (fd00::f1) -> external-1111 (1.1.1.1:443)
  ❌ client-egress-to-cidrgroup-deny-by-label/pod-to-cidr/external-1111-2: cilium-test-1/client3-795488bf5-xhmkv (fd00::1f1) -> external-1111 (1.1.1.1:443)
Test [client-egress-l7-tls-headers-sni]:
  ❌ client-egress-l7-tls-headers-sni/pod-to-world-with-tls-intercept/https-to-one.one.one.one.-0: cilium-test-1/client-645b68dcf7-fhcjh (fd00::27) -> one.one.one.one.-https (one.one.one.one.:443)
  ❌ client-egress-l7-tls-headers-sni/pod-to-world-with-tls-intercept/https-to-one.one.one.one.-1: cilium-test-1/client2-66475877c6-xtqw7 (fd00::f1) -> one.one.one.one.-https (one.one.one.one.:443)
  ❌ client-egress-l7-tls-headers-sni/pod-to-world-with-tls-intercept/https-to-one.one.one.one.-2: cilium-test-1/client3-795488bf5-xhmkv (fd00::1f1) -> one.one.one.one.-https (one.one.one.one.:443)
Test [client-egress-l7-tls-headers-other-sni]:
  ❌ client-egress-l7-tls-headers-other-sni/pod-to-world-with-tls-intercept/https-to-one.one.one.one.-0: cilium-test-1/client-645b68dcf7-fhcjh (fd00::27) -> one.one.one.one.-https (one.one.one.one.:443)
  ❌ client-egress-l7-tls-headers-other-sni/pod-to-world-with-tls-intercept/https-to-one.one.one.one.-1: cilium-test-1/client2-66475877c6-xtqw7 (fd00::f1) -> one.one.one.one.-https (one.one.one.one.:443)
  ❌ client-egress-l7-tls-headers-other-sni/pod-to-world-with-tls-intercept/https-to-one.one.one.one.-2: cilium-test-1/client3-795488bf5-xhmkv (fd00::1f1) -> one.one.one.one.-https (one.one.one.one.:443)
Test [seq-client-egress-l7-tls-deny-without-headers]:
  ❌ seq-client-egress-l7-tls-deny-without-headers/pod-to-world-with-tls-intercept/https-to-one.one.one.one.-0: cilium-test-1/client-645b68dcf7-fhcjh (fd00::27) -> one.one.one.one.-https (one.one.one.one.:443)
  ❌ seq-client-egress-l7-tls-deny-without-headers/pod-to-world-with-tls-intercept/https-to-one.one.one.one.-1: cilium-test-1/client2-66475877c6-xtqw7 (fd00::f1) -> one.one.one.one.-https (one.one.one.one.:443)
  ❌ seq-client-egress-l7-tls-deny-without-headers/pod-to-world-with-tls-intercept/https-to-one.one.one.one.-2: cilium-test-1/client3-795488bf5-xhmkv (fd00::1f1) -> one.one.one.one.-https (one.one.one.one.:443)
Test [seq-client-egress-l7-tls-headers]:
  ❌ seq-client-egress-l7-tls-headers/pod-to-world-with-tls-intercept/https-to-one.one.one.one.-0: cilium-test-1/client2-66475877c6-xtqw7 (fd00::f1) -> one.one.one.one.-https (one.one.one.one.:443)
  ❌ seq-client-egress-l7-tls-headers/pod-to-world-with-tls-intercept/https-to-one.one.one.one.-1: cilium-test-1/client3-795488bf5-xhmkv (fd00::1f1) -> one.one.one.one.-https (one.one.one.one.:443)
  ❌ seq-client-egress-l7-tls-headers/pod-to-world-with-tls-intercept/https-to-one.one.one.one.-2: cilium-test-1/client-645b68dcf7-fhcjh (fd00::27) -> one.one.one.one.-https (one.one.one.one.:443)
Test [seq-client-egress-l7-extra-tls-headers]:
  ❌ seq-client-egress-l7-extra-tls-headers/pod-to-world-with-extra-tls-intercept/https-to-one.one.one.one.-0: cilium-test-1/client-645b68dcf7-fhcjh (fd00::27) -> one.one.one.one.-https (one.one.one.one.:443)
  ❌ seq-client-egress-l7-extra-tls-headers/pod-to-world-with-extra-tls-intercept/https-to-k8s.io.-0: cilium-test-1/client-645b68dcf7-fhcjh (fd00::27) -> k8s.io.-https (k8s.io.:443)
  ❌ seq-client-egress-l7-extra-tls-headers/pod-to-world-with-extra-tls-intercept/https-to-one.one.one.one.-1: cilium-test-1/client2-66475877c6-xtqw7 (fd00::f1) -> one.one.one.one.-https (one.one.one.one.:443)
  ❌ seq-client-egress-l7-extra-tls-headers/pod-to-world-with-extra-tls-intercept/https-to-k8s.io.-1: cilium-test-1/client2-66475877c6-xtqw7 (fd00::f1) -> k8s.io.-https (k8s.io.:443)
  ❌ seq-client-egress-l7-extra-tls-headers/pod-to-world-with-extra-tls-intercept/https-to-one.one.one.one.-2: cilium-test-1/client3-795488bf5-xhmkv (fd00::1f1) -> one.one.one.one.-https (one.one.one.one.:443)
  ❌ seq-client-egress-l7-extra-tls-headers/pod-to-world-with-extra-tls-intercept/https-to-k8s.io.-2: cilium-test-1/client3-795488bf5-xhmkv (fd00::1f1) -> k8s.io.-https (k8s.io.:443)
Test [seq-client-egress-l7-tls-headers-port-range]:
  ❌ seq-client-egress-l7-tls-headers-port-range/pod-to-world-with-tls-intercept/https-to-one.one.one.one.-0: cilium-test-1/client-645b68dcf7-fhcjh (fd00::27) -> one.one.one.one.-https (one.one.one.one.:443)
  ❌ seq-client-egress-l7-tls-headers-port-range/pod-to-world-with-tls-intercept/https-to-one.one.one.one.-1: cilium-test-1/client2-66475877c6-xtqw7 (fd00::f1) -> one.one.one.one.-https (one.one.one.one.:443)
  ❌ seq-client-egress-l7-tls-headers-port-range/pod-to-world-with-tls-intercept/https-to-one.one.one.one.-2: cilium-test-1/client3-795488bf5-xhmkv (fd00::1f1) -> one.one.one.one.-https (one.one.one.one.:443)
[cilium-test-1] 14 tests failed

introduces a new Makefile target `kind-ipv6` to create of an IPv6-only kind cluster for Cilium development

@liyihuang liyihuang added area/misc Impacts miscellaneous areas of the code not otherwise owned by another area. release-note/misc This PR makes changes that have no direct user impact. labels May 14, 2025
@liyihuang
Copy link
Contributor Author

/test

@liyihuang liyihuang marked this pull request as ready for review May 15, 2025 01:23
@liyihuang liyihuang requested review from a team as code owners May 15, 2025 01:23
@liyihuang liyihuang requested review from bimmlerd and borkmann May 15, 2025 01:23
bimmlerd
bimmlerd requested changes May 15, 2025
View reviewed changes
@liyihuang liyihuang force-pushed the pr/liyihuang/kind-ipv6-only branch 2 times, most recently from 1b721e8 to f9eb936 Compare May 15, 2025 15:22
@liyihuang
Copy link
Contributor Author

/test

@liyihuang
New ipv6 only target for makefile
b6c1a47 
This commit introduces a new Makefile target `kind-ipv6` to create of an IPv6-only kind cluster for Cilium development.

Signed-off-by: Liyi Huang <liyi.huang@isovalent.com>
@liyihuang liyihuang force-pushed the pr/liyihuang/kind-ipv6-only branch from f9eb936 to b6c1a47 Compare May 24, 2025 01:42
@liyihuang
Copy link
Contributor Author

/test

@maintainer-s-little-helper maintainer-s-little-helper bot added the ready-to-merge This PR has passed all tests and received consensus from code owners to merge. label May 24, 2025
@julianwiedmann julianwiedmann added the feature/ipv6-only Relates to single-stack IPv6 support. label May 26, 2025
@julianwiedmann julianwiedmann added this pull request to the merge queue May 26, 2025
Merged via the queue into cilium:main with commit 031157d May 26, 2025
67 checks passed
@liyihuang liyihuang deleted the pr/liyihuang/kind-ipv6-only branch August 13, 2025 19:19
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@borkmann borkmann borkmann approved these changes

@bimmlerd bimmlerd bimmlerd approved these changes

Assignees
No one assigned
Labels
area/misc Impacts miscellaneous areas of the code not otherwise owned by another area. feature/ipv6-only Relates to single-stack IPv6 support. ready-to-merge This PR has passed all tests and received consensus from code owners to merge. release-note/misc This PR makes changes that have no direct user impact.
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
4 participants
@liyihuang @borkmann @bimmlerd @julianwiedmann