Skip to content

Commit 4dc76d9

Browse files
Clarify testing regime for scs-0219-v1 (#1158)
Signed-off-by: Matthias Büchse <matthias.buechse@alasca.cloud> Co-authored-by: Marvin Frommhold <depressiveRobot@users.noreply.github.com>
1 parent c1e9a1b commit 4dc76d9

3 files changed

Lines changed: 14 additions & 7 deletions

File tree

Standards/scs-0219-v1-kaas-networking.md

Lines changed: 0 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -94,7 +94,3 @@ CSPs SHOULD provide a network plugin that supports or is working on support for
9494
CSPs SHOULD offer the option for a managed, `networking.k8s.io/v1`-compliant Ingress controller and a default `IngressClass` resource for this controller.
9595

9696
CSPs MAY add default networking restrictions, using either `networking.k8s.io/v1`-compliant `NetworkPolicy` resources with a policy operator, or alternatively any cluster-wide network policy extensions provided by the CNI plugin.
97-
98-
## Conformance Tests
99-
100-
Required support for network policies will be tested using the upstream e2e tests via Sonobuoy.

Standards/scs-0219-w1-kaas-networking.md

Lines changed: 12 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,10 +1,21 @@
11
---
2-
title: "KaaS Networking Standard: Implementation Notes"
2+
title: "KaaS Networking Standard: Implementation and Testing Notes"
33
type: Supplement
44
track: KaaS
55
supplements:
66
- scs-0219-v1-kaas-networking.md
77
---
8+
9+
## Automated tests
10+
11+
We test _full support_ for network policies using the upstream e2e tests via Sonobuoy with `--e2e-focus NetworkPolicy`.
12+
13+
All testcases of this set must be passed, with some well-founded exceptions (e.g., due to bugs), that are listed in
14+
[scs-sonobuoy-config.yaml](https://raw.githubusercontent.com/SovereignCloudStack/standards/main/Tests/kaas/scs-sonobuoy-config.yaml).
15+
This list will be adapted if and when new exceptions become necessary or old ones become obsolete. Since we only react
16+
to bugs and other well-founded circumstances, these exceptions are not deemed part of the normative text, and therefore
17+
these changes do not require proportionate changes in the standard document.
18+
819
## List of compliant CNI Plugins
920

1021
The Kubernetes Network Policy API working group maintains a [list of work-in-progress implementations](https://network-policy-api.sigs.k8s.io/implementations/) of the AdminNetworkPolicy and BaselineAdminNetworkPolicy resources.

Tests/scs-compatible-kaas.yaml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -40,8 +40,8 @@ scripts:
4040
- id: kaas-networking-check
4141
lifetime: month
4242
section: heavy
43-
description: Must fulfill all requirements of scs-0219-v1.
44-
url: https://docs.scs.community/standards/scs-0219-v1-kaas-networking#decision
43+
description: Must pass all testcases of upstream CNCF Kubernetes e2e-suite focus 'NetworkPolicy'.
44+
url: https://docs.scs.community/standards/scs-0219-w1-kaas-networking#automated-tests
4545
modules:
4646
- id: cncf-k8s-conformance
4747
name: CNCF Kubernetes conformance

0 commit comments

Comments
 (0)