Skip to content

Add e2e test for EgressIP pod IP leakage on secondary host interface - #31427

Open
arghosh93 wants to merge 1 commit into
openshift:mainfrom
arghosh93:egressip-secondary-host-leak-test
Open

Add e2e test for EgressIP pod IP leakage on secondary host interface#31427
arghosh93 wants to merge 1 commit into
openshift:mainfrom
arghosh93:egressip-secondary-host-leak-test

Conversation

@arghosh93

@arghosh93 arghosh93 commented Jul 24, 2026

Copy link
Copy Markdown

Tests that a new pod's real IP does not leak as source during EgressIP reconciliation when using a secondary (non-OVN) host interface.

upstream PR: ovn-kubernetes/ovn-kubernetes#6591

Summary by CodeRabbit

  • Tests
    • Added a new end-to-end scenario validating EgressIP with a configured secondary network interface on BareMetal clusters running OVN-Kubernetes.
    • Creates packet-sniffing and load/stress workloads on egress nodes, deploys a node-affined trigger pod, and generates a unique identifier to correlate observed traffic.
    • Verifies packet capture includes the expected secondary EgressIP as the source, confirms the trigger pod IP is never seen as a source, and cleans up temporary resources after the run.

Loading
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants