From 32ad6fdf9e109cc2edc8684716ae320b7564fa57 Mon Sep 17 00:00:00 2001 From: shireenf-ibm <82180114+shireenf-ibm@users.noreply.github.com> Date: Mon, 30 Jan 2023 13:57:27 +0200 Subject: [PATCH] cases to exclude ipv6 addresses from connectivity reports (#412) --- README.md | 3 ++ docs/SchemeFileFormat.md | 16 +++--- nca/CoreDS/Peer.py | 34 ++++++++++--- nca/NetworkConfig/NetworkConfig.py | 23 ++++++++- nca/NetworkConfig/NetworkConfigQuery.py | 24 +++++---- nca/Parsers/CalicoPolicyYamlParser.py | 4 ++ nca/Parsers/GenericYamlParser.py | 14 ++++++ nca/Parsers/IstioPolicyYamlParser.py | 13 +++-- nca/Parsers/K8sPolicyYamlParser.py | 5 ++ nca/Resources/CalicoNetworkPolicy.py | 8 +-- nca/Resources/IstioNetworkPolicy.py | 6 ++- nca/Resources/K8sNetworkPolicy.py | 16 +++--- nca/Resources/NetworkPolicy.py | 18 ++++++- nca/Utils/OutputConfiguration.py | 2 +- nca/nca_cli.py | 6 ++- .../testcase15-with-ingress-scheme.yaml | 1 + .../testcase16-scheme_output.txt | 5 +- ...fferent-ranges-writing-additional-port.txt | 44 +--------------- ...-connectivity_map_with_labels_to_apply.txt | 2 - ...se25_mix_k8s_calico_connectivity_map_1.txt | 3 -- ...se25_mix_k8s_calico_connectivity_map_2.txt | 3 -- ...alico-istio-ingress-2_connectivity_map.txt | 3 +- ...g-1-k8s-istio-ingress_connectivity_map.txt | 9 +--- ...26-config-no-policies-connectivity-map.txt | 2 - ...nfig-1-calico-ingress-config-allow-all.txt | 4 +- .../testcase8-semantic-diff-query.txt | 4 +- .../basic_connectivity_csv_query_output.txt | 4 +- .../basic_connectivity_dot_query_output.txt | 38 +------------- .../basic_connectivity_md_query_output.txt | 4 +- .../basic_connectivity_txt_query_output.txt | 2 - .../basic_connectivity_yaml_query_output.txt | 24 +-------- .../basic_semantic_diff_csv_query_output.txt | 3 +- .../basic_semantic_diff_md_query_output.txt | 3 +- .../basic_semantic_diff_query_output.txt | 3 +- .../basic_semantic_diff_yaml_query_output.txt | 15 +----- .../basic_subset_deployment1_query_output.txt | 3 -- .../basic_subset_deployment2_query_output.txt | 2 - ..._topologies_semantic_diff_query_output.txt | 8 +-- .../helm_test_multi_chart.txt | 6 --- .../helm_test_one_chart.txt | 5 +- ...elm_test_resolved_yaml_in_template_dir.txt | 2 - .../helm_test_resolved_yaml_inside_chart.txt | 2 - .../helm_test_resolved_yaml_next_to_chart.txt | 3 -- ...est_resolved_yaml_next_to_multi_charts.txt | 3 -- .../livesim_test_all_dot.dot | 7 --- .../livesim_test_all_txt.txt | 3 -- .../calico-testcase15-scheme_output.txt | 2 - .../calico-testcase15-scheme_output.yaml | 18 ------- ...lico-testcase20-Eran_gnps_query_output.txt | 6 +-- ...ico-testcase20-Eran_gnps_query_output.yaml | 41 +-------------- ...e20-np_2_all_outbound_hep_query_output.txt | 5 +- ...20-np_2_all_outbound_hep_query_output.yaml | 26 +--------- ...-np_3_outbound_hep_to_wep_query_output.txt | 5 +- ...np_3_outbound_hep_to_wep_query_output.yaml | 26 +--------- ...und_all_namespaceSelector_query_output.txt | 5 +- ...nd_all_namespaceSelector_query_output.yaml | 26 +--------- ...nnectivity_map_allowFirst_query_output.txt | 3 +- ...nectivity_map_allowFirst_query_output.yaml | 10 +--- ...onnectivity_map_denyFirst_query_output.txt | 1 - ...nnectivity_map_denyFirst_query_output.yaml | 10 +--- .../cyclonus-simple-example-scheme_output.txt | 4 +- ...cyclonus-simple-example-scheme_output.yaml | 18 +------ .../istio-allow-all-scheme_output.txt | 4 -- .../istio-allow-all-scheme_output.yaml | 42 +--------------- .../istio-allow-nothing-1_query_output.txt | 6 +-- .../istio-allow-nothing-1_query_output.yaml | 41 +-------------- .../istio-allow-nothing-2_query_output.txt | 6 +-- .../istio-allow-nothing-2_query_output.yaml | 41 +-------------- .../istio-allow-nothing-3_query_output.txt | 5 +- .../istio-allow-nothing-3_query_output.yaml | 32 +----------- ...vity_test_methods_basic_1_query_output.txt | 5 +- ...ity_test_methods_basic_1_query_output.yaml | 26 +--------- ...vity_test_methods_basic_2_query_output.txt | 5 +- ...ity_test_methods_basic_2_query_output.yaml | 26 +--------- ...vity_test_methods_paths_1_query_output.txt | 5 +- ...ity_test_methods_paths_1_query_output.yaml | 26 +--------- ...ty_test_operation_allow_1_query_output.txt | 5 +- ...y_test_operation_allow_1_query_output.yaml | 26 +--------- ...ity_test_operation_deny_1_query_output.txt | 7 +-- ...ty_test_operation_deny_1_query_output.yaml | 44 +--------------- .../istio-deny-all-scheme_output.txt | 4 -- .../istio-deny-all-scheme_output.yaml | 41 +-------------- .../istio-test1-scheme_query1_output.txt | 7 +-- .../istio-test1-scheme_query1_output.yaml | 49 +----------------- .../istio-test1-scheme_query2_output.txt | 5 +- .../istio-test1-scheme_query2_output.yaml | 32 +----------- .../expected_output/poc1-scheme_output.csv | 1 - .../expected_output/poc1-scheme_output.dot | 2 - .../expected_output/poc1-scheme_output.md | 1 - .../expected_output/poc1-scheme_output.txt | 1 - .../expected_output/poc1-scheme_output.yaml | 10 ---- .../expected_output/poc2-scheme_output.txt | 5 +- .../expected_output/poc2-scheme_output.yaml | 26 ---------- .../expected_output/poc3-scheme_output.txt | 1 - .../expected_output/poc3-scheme_output.yaml | 10 ---- ...4_scheme_connectivity_map_query_output.txt | 5 +- ..._scheme_connectivity_map_query_output.yaml | 26 ---------- .../port_aggregation-scheme_output.txt | 2 - .../port_aggregation-scheme_output.yaml | 17 ------- .../semantic_diff_a_to_b_query_output.csv | 8 +-- .../semantic_diff_a_to_b_query_output.md | 8 +-- .../semantic_diff_a_to_b_query_output.txt | 8 +-- .../semantic_diff_a_to_b_query_output.yaml | 50 +------------------ ..._diff_a_to_b_with_ipBlock_query_output.csv | 8 +-- ...c_diff_a_to_b_with_ipBlock_query_output.md | 8 +-- ..._diff_a_to_b_with_ipBlock_query_output.txt | 8 +-- ...diff_a_to_b_with_ipBlock_query_output.yaml | 50 +------------------ .../semantic_diff_b_to_a_query_output.csv | 8 +-- .../semantic_diff_b_to_a_query_output.md | 8 +-- .../semantic_diff_b_to_a_query_output.txt | 6 --- .../semantic_diff_b_to_a_query_output.yaml | 50 +------------------ ...ff_disjoint_old1_config_a_query_output.csv | 6 +-- ...iff_disjoint_old1_config_a_query_output.md | 6 +-- ...ff_disjoint_old1_config_a_query_output.txt | 6 +-- ...f_disjoint_old1_config_a_query_output.yaml | 38 +------------- ...ic_diff_ipblocks__np1_np4_query_output.csv | 4 +- ...tic_diff_ipblocks__np1_np4_query_output.md | 4 +- ...ic_diff_ipblocks__np1_np4_query_output.txt | 4 +- ...c_diff_ipblocks__np1_np4_query_output.yaml | 18 +------ ...ports_np1_and_np2_by_pods_query_output.txt | 4 +- ...f_named_ports_np1_and_np2_query_output.csv | 3 +- ...ff_named_ports_np1_and_np2_query_output.md | 3 +- ...f_named_ports_np1_and_np2_query_output.txt | 3 +- ..._named_ports_np1_and_np2_query_output.yaml | 12 +---- .../semantic_diff_poc-scheme_output.csv | 5 +- .../semantic_diff_poc-scheme_output.md | 5 +- .../semantic_diff_poc-scheme_output.txt | 5 +- .../semantic_diff_poc-scheme_output.yaml | 29 +---------- ...et_deployment_connection_in_subset_dot.dot | 14 ------ ...on_in_subset_endpoints_deployments_dot.dot | 9 ---- ...on_in_subset_endpoints_deployments_txt.txt | 3 -- ...et_deployment_connection_in_subset_txt.txt | 4 -- ...eployment_connection_not_in_subset_dot.dot | 8 --- ...ot_in_subset_endpoints_deployments_dot.dot | 7 --- ...ot_in_subset_endpoints_deployments_txt.txt | 2 - ...eployment_connection_not_in_subset_txt.txt | 2 - ...ti_deployment_connection_in_subset_dot.dot | 16 ------ ...on_in_subset_endpoints_deployments_dot.dot | 10 ---- ...on_in_subset_endpoints_deployments_txt.txt | 3 -- ...ti_deployment_connection_in_subset_txt.txt | 4 -- ...eployment_connection_not_in_subset_dot.dot | 8 --- ...ot_in_subset_endpoints_deployments_dot.dot | 7 --- ...ot_in_subset_endpoints_deployments_txt.txt | 2 - ...eployment_connection_not_in_subset_txt.txt | 2 - .../subset_deployment_no_subset_dot.dot | 20 -------- ...nt_no_subset_endpoints_deployments_dot.dot | 13 ----- ...nt_no_subset_endpoints_deployments_txt.txt | 3 -- .../expected_output/subset_labels5_dot.dot | 25 ---------- ...bset_labels5_endpoints_deployments_dot.dot | 16 ------ ...bset_labels5_endpoints_deployments_txt.txt | 6 --- .../expected_output/subset_labels5_txt.txt | 6 --- .../expected_output/subset_no_subset_dot.dot | 1 - ...et_no_subset_endpoints_deployments_dot.dot | 1 - .../expected_output/test1-scheme_output.txt | 2 - .../expected_output/test1-scheme_output.yaml | 21 -------- .../expected_output/test10-scheme_output.txt | 6 +-- .../expected_output/test10-scheme_output.yaml | 36 ------------- .../expected_output/test11-scheme_output.txt | 2 - .../expected_output/test11-scheme_output.yaml | 20 -------- .../expected_output/test12-scheme_output.txt | 2 - .../expected_output/test12-scheme_output.yaml | 21 -------- .../expected_output/test13-scheme_output.txt | 2 - .../expected_output/test13-scheme_output.yaml | 21 -------- .../expected_output/test14-scheme_output.txt | 2 - .../expected_output/test14-scheme_output.yaml | 21 -------- .../expected_output/test15-scheme_output.txt | 2 - .../expected_output/test15-scheme_output.yaml | 21 -------- .../expected_output/test16-scheme_output.txt | 3 -- .../expected_output/test16-scheme_output.yaml | 29 ----------- .../expected_output/test18-scheme_output.txt | 2 - .../expected_output/test18-scheme_output.yaml | 16 ------ .../expected_output/test2-scheme_output.txt | 3 -- .../expected_output/test2-scheme_output.yaml | 34 ------------- ...me_connectivity_map_by_deployments_dot.dot | 1 - ...25-scheme_connectivity_map_by_pods_dot.dot | 1 - .../expected_output/test3-scheme_output.txt | 2 - .../expected_output/test3-scheme_output.yaml | 17 ------- ...scheme_query_connectivity_map_3_output.csv | 2 - ...scheme_query_connectivity_map_3_output.dot | 11 ---- ...-scheme_query_connectivity_map_3_output.md | 2 - ...scheme_query_connectivity_map_3_output.txt | 2 - ...cheme_query_connectivity_map_3_output.yaml | 21 -------- ...scheme_query_connectivity_map_4_output.csv | 4 -- ...scheme_query_connectivity_map_4_output.dot | 22 -------- ...-scheme_query_connectivity_map_4_output.md | 4 -- ...scheme_query_connectivity_map_4_output.txt | 4 -- ...cheme_query_connectivity_map_4_output.yaml | 42 ---------------- .../expected_output/test6-scheme_output.txt | 2 - .../expected_output/test6-scheme_output.yaml | 21 -------- .../expected_output/test7-scheme_output.json | 33 ------------ .../expected_output/test7-scheme_output.txt | 2 - .../expected_output/test7-scheme_output.yaml | 21 -------- .../expected_output/test8-scheme_output.txt | 2 - .../expected_output/test8-scheme_output.yaml | 21 -------- .../expected_output/test9-scheme_output.txt | 4 -- .../expected_output/test9-scheme_output.yaml | 36 ------------- .../fly-istio-ingress-test-scheme.yaml | 2 +- ...est-connectivity-map-missing-resources.dot | 23 --------- ...-and-k8s-ingress-test-connectivity-map.dot | 23 --------- ...est-connectivity-map-missing-resources.dot | 22 -------- ...ex-istio-ingress-test-connectivity-map.dot | 24 --------- ...est-connectivity-map-missing-resources.dot | 22 -------- ...-k8s-ingress-all-test-connectivity-map.dot | 24 --------- ...est-connectivity-map-missing-resources.dot | 22 -------- ...-ingress-cluster-test-connectivity-map.dot | 24 --------- ...onnectivity-map-with-missing-resources.dot | 22 -------- ...plex-k8s-ingress-test-connectivity-map.dot | 24 --------- ...nectivity-bookinfo-demo-by-deployments.dot | 27 +--------- .../connectivity-bookinfo-demo-by-pods.dot | 27 +--------- ..._adding_default_sidecar_after_specific.txt | 5 +- ...nectivity_map_bookinfo_default_sidecar.txt | 5 +- ...okinfo_ignoring_second_default_sidecar.txt | 5 +- ...ap_bookinfo_multiple_sidecar_overrides.txt | 5 +- ...ivity_map_bookinfo_productpage_sidecar.txt | 6 +-- ...info_sidecars_with_different_selectors.txt | 6 +-- ...ific_sidecar_overrides_default_sidecar.txt | 5 +- ...cific_sidecar_overrides_global_sidecar.txt | 5 +- ...rent_sidecars_override_default_sidecar.txt | 5 +- ...o_sidecars_with_same_workload_selector.txt | 6 +-- ...vity_map_global_sidecar_from_istio_ref.txt | 5 +- ...tivity_map_of_onlineboutique_resources.txt | 3 +- ...y_map_online_boutique_frontend_sidecar.txt | 7 +-- ...utique_frontend_sidecar_disable_egress.txt | 7 +-- ...ly_istio_ingress_test_connectivity_map.txt | 3 -- .../istio_ingress_test_connectivity_map.txt | 4 -- .../new_online_boutique_connectivity_map.txt | 7 +-- ...ne_boutique_synth_res_connectivity_map.txt | 6 +-- ...es_connectivity_map_with_baseline_rule.txt | 6 +-- ...online_boutique_new_input_vs_synth_res.txt | 4 +- .../services1_connectivity_map.txt | 40 --------------- .../k8s_ingress_test_connectivity_map.txt | 2 - .../new_online_boutique_connectivity_map.txt | 4 +- ...outique_synthesis_res_connectivity_map.txt | 2 - ...outique_synthesis_res_connectivity_map.txt | 5 +- ...ue_new_synthesized_vs_orig_synthesized.txt | 3 +- ...online_boutique_new_vs_synthesized_new.txt | 4 -- .../services1_connectivity_map.txt | 8 --- 237 files changed, 253 insertions(+), 2531 deletions(-) delete mode 100644 tests/expected_cmdline_output_files/basic_subset_deployment1_query_output.txt delete mode 100644 tests/expected_cmdline_output_files/basic_subset_deployment2_query_output.txt delete mode 100644 tests/fw_rules_tests/policies/expected_output/subset_deployment_connection_in_subset_dot.dot delete mode 100644 tests/fw_rules_tests/policies/expected_output/subset_deployment_connection_in_subset_endpoints_deployments_dot.dot delete mode 100644 tests/fw_rules_tests/policies/expected_output/subset_deployment_connection_in_subset_endpoints_deployments_txt.txt delete mode 100644 tests/fw_rules_tests/policies/expected_output/subset_deployment_connection_in_subset_txt.txt delete mode 100644 tests/fw_rules_tests/policies/expected_output/subset_deployment_connection_not_in_subset_dot.dot delete mode 100644 tests/fw_rules_tests/policies/expected_output/subset_deployment_connection_not_in_subset_endpoints_deployments_dot.dot delete mode 100644 tests/fw_rules_tests/policies/expected_output/subset_deployment_connection_not_in_subset_endpoints_deployments_txt.txt delete mode 100644 tests/fw_rules_tests/policies/expected_output/subset_deployment_connection_not_in_subset_txt.txt delete mode 100644 tests/fw_rules_tests/policies/expected_output/subset_deployment_multi_deployment_connection_in_subset_dot.dot delete mode 100644 tests/fw_rules_tests/policies/expected_output/subset_deployment_multi_deployment_connection_in_subset_endpoints_deployments_dot.dot delete mode 100644 tests/fw_rules_tests/policies/expected_output/subset_deployment_multi_deployment_connection_in_subset_endpoints_deployments_txt.txt delete mode 100644 tests/fw_rules_tests/policies/expected_output/subset_deployment_multi_deployment_connection_in_subset_txt.txt delete mode 100644 tests/fw_rules_tests/policies/expected_output/subset_deployment_multi_deployment_connection_not_in_subset_dot.dot delete mode 100644 tests/fw_rules_tests/policies/expected_output/subset_deployment_multi_deployment_connection_not_in_subset_endpoints_deployments_dot.dot delete mode 100644 tests/fw_rules_tests/policies/expected_output/subset_deployment_multi_deployment_connection_not_in_subset_endpoints_deployments_txt.txt delete mode 100644 tests/fw_rules_tests/policies/expected_output/subset_deployment_multi_deployment_connection_not_in_subset_txt.txt delete mode 100644 tests/fw_rules_tests/policies/expected_output/subset_deployment_no_subset_dot.dot delete mode 100644 tests/fw_rules_tests/policies/expected_output/subset_deployment_no_subset_endpoints_deployments_dot.dot delete mode 100644 tests/fw_rules_tests/policies/expected_output/subset_deployment_no_subset_endpoints_deployments_txt.txt delete mode 100644 tests/fw_rules_tests/policies/expected_output/subset_labels5_dot.dot delete mode 100644 tests/fw_rules_tests/policies/expected_output/subset_labels5_endpoints_deployments_dot.dot delete mode 100644 tests/fw_rules_tests/policies/expected_output/subset_labels5_endpoints_deployments_txt.txt delete mode 100644 tests/fw_rules_tests/policies/expected_output/subset_labels5_txt.txt rename tests/istio_testcases/{example_policies/fly-istio-ingress-test => expected_output}/fly_istio_ingress_test_connectivity_map.txt (81%) delete mode 100644 tests/k8s_testcases/example_policies/expected_output/services1_connectivity_map.txt diff --git a/README.md b/README.md index e939eca9..cd8311d5 100644 --- a/README.md +++ b/README.md @@ -97,6 +97,9 @@ The arguments to `--resource_list` and to `--base_resource_list` should be one o - `--output_endpoints`\ Choose endpoints type in output (pods/deployments).\ *default:* deployments + - `--print_ipv6`\ + include IPv6 range in the query results even when the policies of the config do not contain any IPv6 addresses. + For more information on command-line switches combinations, see [Common Query Patterns](docs/CommonQueryPatterns.md#cmdline-queries) diff --git a/docs/SchemeFileFormat.md b/docs/SchemeFileFormat.md index fb155723..7e998827 100644 --- a/docs/SchemeFileFormat.md +++ b/docs/SchemeFileFormat.md @@ -78,13 +78,15 @@ For example: `my_set/prod_ns/deny_all_policy`. If there are multiple policies na #### Output Configuration object The supported entries in the outputConfiguration object are as follows: -| Field | Description | Value | -|-----------------|--------------------------------------------------------------------------------|----------------------------------------| -| outputFormat | Output format specification. | string [ txt / yaml / csv / md / dot ] | -| outputPath | A file path to redirect output into. | string | -| outputEndpoints | Choose endpoints type in output. | string [ pods / deployments ] | -| subset | A dict object with the defined subset elements to display in the output | [subset](#subset) object | -| fullExplanation | Choose if to print all counterexamples causing the query result in the output | bool | +| Field | Description | Value | +|------------------|-----------------------------------------------------------------------------------------------------------------|----------------------------------------| +| outputFormat | Output format specification. | string [ txt / yaml / csv / md / dot ] | +| outputPath | A file path to redirect output into. | string | +| outputEndpoints | Choose endpoints type in output. | string [ pods / deployments ] | +| subset | A dict object with the defined subset elements to display in the output | [subset](#subset) object | +| fullExplanation | Choose if to print all counterexamples causing the query result in the output | bool | +| excludeIPv6Range | If the policies of the config do not contain any IPv6 addresses, do not include IPv6 range in the query results | bool [default: True] | + #### Subset object The supported entries in the subset object are as follows: diff --git a/nca/CoreDS/Peer.py b/nca/CoreDS/Peer.py index cab56b55..f4422513 100644 --- a/nca/CoreDS/Peer.py +++ b/nca/CoreDS/Peer.py @@ -327,23 +327,26 @@ def get_ip_range_or_cidr_str(self): return self.get_cidr_list_str() @staticmethod - def get_all_ips_block(): + def get_all_ips_block(exclude_ipv6=False): """ - :return: The full range of ipv4 and ipv6 addresses + :return: The full range of ipv4 and ipv6 addresses if exclude_ipv6 is False + :param bool exclude_ipv6: indicates if to exclude the IPv6 addresses :rtype: IpBlock """ res = IpBlock('0.0.0.0/0') - res.add_cidr('::/0') + if not exclude_ipv6: + res.add_cidr('::/0') return res @staticmethod - def get_all_ips_block_peer_set(): + def get_all_ips_block_peer_set(exclude_ipv6=False): """ - :return: The full range of ipv4 and ipv6 addresses + :return: The full range of ipv4 and ipv6 addresses (ipv6 if exclude_ipv6 is False) + :param bool exclude_ipv6: indicates if to exclude the IPv6 addresses :rtype: PeerSet """ res = PeerSet() - res.add(IpBlock.get_all_ips_block()) + res.add(IpBlock.get_all_ips_block(exclude_ipv6)) return res def split(self): @@ -408,7 +411,7 @@ def _add_interval_to_list(interval, non_overlapping_interval_list): non_overlapping_interval_list += to_add @staticmethod - def disjoint_ip_blocks(ip_blocks1, ip_blocks2): + def disjoint_ip_blocks(ip_blocks1, ip_blocks2, exclude_ipv6=False): """ Takes all (atomic) ip-ranges in both ip-blocks and returns a new set of ip-ranges where each ip-range is: @@ -417,6 +420,7 @@ def disjoint_ip_blocks(ip_blocks1, ip_blocks2): 3. is maximal (extending the range to either side will violate either 1 or 2) :param ip_blocks1: A set of ip blocks :param ip_blocks2: A set of ip blocks + :param bool exclude_ipv6: indicates if to exclude the IPv6 addresses in case the result is all_ips_block :return: A set of ip ranges as specified above :rtype: PeerSet """ @@ -435,10 +439,24 @@ def disjoint_ip_blocks(ip_blocks1, ip_blocks2): res.add(ip_block) if not res: - res.add(IpBlock.get_all_ips_block()) + res.add(IpBlock.get_all_ips_block(exclude_ipv6)) return res + def is_ipv4_block(self): + """ + checks whether self IpBlock includes only IPv4 addresses + :return: true if self includes only IPv4 addresses + :rtype: bool + """ + cnt = 0 + for interval in self.interval_set: + ip_address = interval.start + if isinstance(ip_address, IPNetworkAddress) and isinstance(ip_address.address, ipaddress.IPv4Address) or \ + isinstance(ip_address, ipaddress.IPv4Address): + cnt += 1 + return cnt == len(self.interval_set) + class PeerSet(set): """ diff --git a/nca/NetworkConfig/NetworkConfig.py b/nca/NetworkConfig/NetworkConfig.py index 06a8f33a..4369d939 100644 --- a/nca/NetworkConfig/NetworkConfig.py +++ b/nca/NetworkConfig/NetworkConfig.py @@ -172,17 +172,36 @@ def get_affected_pods(self, is_ingress, layer_name): return affected_pods - def get_referenced_ip_blocks(self): + def _check_for_excluding_ipv6_addresses(self, exclude_ipv6): """ + checks and returns if to exclude non-referenced IPv6 addresses from the config + Excluding the IPv6 addresses will be enabled if the exclude_ipv6 param is True and + IPv6 addresses in all the policies of the config (if existed) were added automatically by the parser + and not referenced by user + :param bool exclude_ipv6: indicates if to exclude ipv_6 non-referenced addresses + :rtype bool + """ + if not exclude_ipv6: + return False + + for policy in self.policies_container.policies.values(): + if policy.has_ipv6_addresses: # if at least one policy has referenced ipv6 addresses, ipv6 will be included + return False + return True # getting here means all policies didn't reference ipv6, it is safe to exclude ipv6 addresses + + def get_referenced_ip_blocks(self, exclude_non_ref_ipv6=False): + """ + :param bool exclude_non_ref_ipv6: indicates if to exclude non-referenced ipv_6 addresses from the result :return: All ip ranges, referenced in any of the policies' rules :rtype: Peer.PeerSet """ if self.referenced_ip_blocks is not None: return self.referenced_ip_blocks + exclude_non_ref_ipv6_from_policies = self._check_for_excluding_ipv6_addresses(exclude_non_ref_ipv6) self.referenced_ip_blocks = Peer.PeerSet() for policy in self.policies_container.policies.values(): - self.referenced_ip_blocks |= policy.referenced_ip_blocks() + self.referenced_ip_blocks |= policy.referenced_ip_blocks(exclude_non_ref_ipv6_from_policies) return self.referenced_ip_blocks diff --git a/nca/NetworkConfig/NetworkConfigQuery.py b/nca/NetworkConfig/NetworkConfigQuery.py index 9f5eff79..d3b8affa 100644 --- a/nca/NetworkConfig/NetworkConfigQuery.py +++ b/nca/NetworkConfig/NetworkConfigQuery.py @@ -676,8 +676,10 @@ def exec(self): self.config.name peers_to_compare = self.config.peer_container.get_all_peers_group() - ref_ip_blocks = IpBlock.disjoint_ip_blocks(self.config.get_referenced_ip_blocks(), - IpBlock.get_all_ips_block_peer_set()) + exclude_ipv6 = self.output_config.excludeIPv6Range + ref_ip_blocks = IpBlock.disjoint_ip_blocks(self.config.get_referenced_ip_blocks(exclude_ipv6), + IpBlock.get_all_ips_block_peer_set(exclude_ipv6), + exclude_ipv6) connections = defaultdict(list) peers = PeerSet() peers_to_compare |= ref_ip_blocks @@ -876,8 +878,9 @@ def disjoint_referenced_ip_blocks(self): :return: A set of disjoint ip-blocks :rtype: PeerSet """ - return IpBlock.disjoint_ip_blocks(self.config1.get_referenced_ip_blocks(), - self.config2.get_referenced_ip_blocks()) + exclude_ipv6 = self.output_config.excludeIPv6Range + return IpBlock.disjoint_ip_blocks(self.config1.get_referenced_ip_blocks(exclude_ipv6), + self.config2.get_referenced_ip_blocks(exclude_ipv6), exclude_ipv6) @staticmethod def clone_without_ingress(config): @@ -1100,10 +1103,13 @@ def compute_diff(self): # noqa: C901 removed_peers = old_peers - intersected_peers added_peers = new_peers - intersected_peers captured_pods = (self.config1.get_captured_pods() | self.config2.get_captured_pods()) & intersected_peers - old_ip_blocks = IpBlock.disjoint_ip_blocks(self.config1.get_referenced_ip_blocks(), - IpBlock.get_all_ips_block_peer_set()) - new_ip_blocks = IpBlock.disjoint_ip_blocks(self.config2.get_referenced_ip_blocks(), - IpBlock.get_all_ips_block_peer_set()) + exclude_ipv6 = self.output_config.excludeIPv6Range + old_ip_blocks = IpBlock.disjoint_ip_blocks(self.config1.get_referenced_ip_blocks(exclude_ipv6), + IpBlock.get_all_ips_block_peer_set(exclude_ipv6), + exclude_ipv6) + new_ip_blocks = IpBlock.disjoint_ip_blocks(self.config2.get_referenced_ip_blocks(exclude_ipv6), + IpBlock.get_all_ips_block_peer_set(exclude_ipv6), + exclude_ipv6) conn_graph_removed_per_key = dict() conn_graph_added_per_key = dict() @@ -1164,7 +1170,7 @@ def compute_diff(self): # noqa: C901 # 3.2. lost/new connections between intersected peers and ipBlocks due to changes in policies and labels key = 'Changed connections between persistent peers and ipBlocks' - disjoint_ip_blocks = IpBlock.disjoint_ip_blocks(old_ip_blocks, new_ip_blocks) + disjoint_ip_blocks = IpBlock.disjoint_ip_blocks(old_ip_blocks, new_ip_blocks, exclude_ipv6) peers = captured_pods | disjoint_ip_blocks keys_list.append(key) conn_graph_removed_per_key[key] = self.get_conn_graph_changed_conns(key, disjoint_ip_blocks, False) diff --git a/nca/Parsers/CalicoPolicyYamlParser.py b/nca/Parsers/CalicoPolicyYamlParser.py index a09aec36..14107965 100644 --- a/nca/Parsers/CalicoPolicyYamlParser.py +++ b/nca/Parsers/CalicoPolicyYamlParser.py @@ -301,6 +301,9 @@ def _get_rule_peers(self, entity_rule): elif nets or not_nets: rule_peers = PeerSet() rule_peers.add(rule_ips) + if not self.has_ipv6_addresses: # if already true, means a previous rule already had ipv6 + # and then policy has ipv6 no need for more checks + self.check_and_update_has_ipv6_addresses(rule_peers) else: rule_peers = self.peer_container.get_all_peers_group(True) @@ -641,4 +644,5 @@ def parse_policy(self): self._apply_extra_labels(policy_spec, is_profile, res_policy.name) res_policy.findings = self.warning_msgs res_policy.referenced_labels = self.referenced_labels + res_policy.has_ipv6_addresses = self.has_ipv6_addresses return res_policy diff --git a/nca/Parsers/GenericYamlParser.py b/nca/Parsers/GenericYamlParser.py index b3e51f58..2260eff0 100644 --- a/nca/Parsers/GenericYamlParser.py +++ b/nca/Parsers/GenericYamlParser.py @@ -12,6 +12,7 @@ from nca.CoreDS.ConnectionSet import ConnectionSet from nca.CoreDS.PortSet import PortSet from nca.Utils.NcaLogger import NcaLogger +from nca.CoreDS.Peer import IpBlock class GenericYamlParser: @@ -35,6 +36,7 @@ def __init__(self, yaml_file_name=''): """ self.yaml_file_name = yaml_file_name self.warning_msgs = [] # Collect all warning messages during parsing here + self.has_ipv6_addresses = False def set_file_name(self, yaml_file_name): """ @@ -239,3 +241,15 @@ def _get_connection_set_from_properties(dest_ports, method_set=MethodSet(True), res = ConnectionSet() res.add_connections('TCP', tcp_properties) return res + + def check_and_update_has_ipv6_addresses(self, peers): + """ + checks if the peer list has ipv6 addresses + updates self.has_ipv6_addresses=true if at least on peer is an IPblock with IPv6 addresses + :param PeerSet peers: list of peers + """ + for peer in peers: + if isinstance(peer, IpBlock): + if not peer.is_ipv4_block(): + self.has_ipv6_addresses = True + return # if at least one peer is ipv6 block , this policy has_ipv6, no need to continue diff --git a/nca/Parsers/IstioPolicyYamlParser.py b/nca/Parsers/IstioPolicyYamlParser.py index efb535b3..3acef2b8 100644 --- a/nca/Parsers/IstioPolicyYamlParser.py +++ b/nca/Parsers/IstioPolicyYamlParser.py @@ -157,8 +157,7 @@ def parse_namespaces(self, ns_list, not_ns_list): res -= self._parse_ns_str(ns) return res - @staticmethod - def parse_ip_block(ips_list, not_ips_list): + def parse_ip_block(self, ips_list, not_ips_list): """ parse ipBlocks elements (within a source component of a rule) :param list[str] ips_list: list of ip-block addresses (either ip address or ip-block cidr) @@ -166,14 +165,18 @@ def parse_ip_block(ips_list, not_ips_list): :return: A PeerSet containing the relevant IpBlocks :rtype: Peer.PeerSet """ - ips_list = ['0.0.0.0/0', '::/0'] if ips_list is None else ips_list # If not set, any IP is allowed + ips_list = IpBlock.get_all_ips_block() if ips_list is None else ips_list # If not set, any IP is allowed not_ips_list = [] if not_ips_list is None else not_ips_list res_ip_block = IpBlock() for cidr in ips_list: res_ip_block |= IpBlock(cidr) for cidr in not_ips_list: res_ip_block -= IpBlock(cidr) - return res_ip_block.split() + res_peer_set = res_ip_block.split() + if not self.has_ipv6_addresses: # if already true, means a previous rule already had ipv6 + # and then policy has ipv6 no need for more checks + self.check_and_update_has_ipv6_addresses(res_peer_set) + return res_peer_set def parse_key_values(self, key, values, not_values): """ @@ -558,5 +561,5 @@ def parse_policy(self): res_policy.findings = self.warning_msgs res_policy.referenced_labels = self.referenced_labels - + res_policy.has_ipv6_addresses = self.has_ipv6_addresses return res_policy diff --git a/nca/Parsers/K8sPolicyYamlParser.py b/nca/Parsers/K8sPolicyYamlParser.py index b1f0fe73..30f9a880 100644 --- a/nca/Parsers/K8sPolicyYamlParser.py +++ b/nca/Parsers/K8sPolicyYamlParser.py @@ -216,6 +216,10 @@ def parse_ip_block(self, block): self.syntax_error(str(e.args), block) except TypeError as e: self.syntax_error(str(e.args), block) + + if not self.has_ipv6_addresses: # if already true, means a previous peer already had ipv6 + # and then policy has ipv6 no need for more checks + self.check_and_update_has_ipv6_addresses(res) return res def parse_peer(self, peer): @@ -437,4 +441,5 @@ def parse_policy(self): res_policy.findings = self.warning_msgs res_policy.referenced_labels = self.referenced_labels + res_policy.has_ipv6_addresses = self.has_ipv6_addresses return res_policy diff --git a/nca/Resources/CalicoNetworkPolicy.py b/nca/Resources/CalicoNetworkPolicy.py index 082c92cf..aa6087c7 100644 --- a/nca/Resources/CalicoNetworkPolicy.py +++ b/nca/Resources/CalicoNetworkPolicy.py @@ -140,19 +140,21 @@ def clone_without_rule(self, rule_to_exclude, ingress_rule): res.add_ingress_rule(rule) return res - def referenced_ip_blocks(self): + def referenced_ip_blocks(self, exclude_ipv6=False): """ + :param bool exclude_ipv6: indicates if to exclude the automatically added IPv6 addresses in the referenced ip_blocks. + IPv6 addresses that are referenced in the policy by the user will always be included :return: A set of all ipblocks referenced in one of the policy rules (one Peer object per one ip range) :rtype: Peer.PeerSet """ res = Peer.PeerSet() for rule in self.egress_rules: for peer in rule.dst_peers: - if isinstance(peer, Peer.IpBlock): + if isinstance(peer, Peer.IpBlock) and self._include_ip_block(peer, exclude_ipv6): res |= peer.split() for rule in self.ingress_rules: for peer in rule.src_peers: - if isinstance(peer, Peer.IpBlock): + if isinstance(peer, Peer.IpBlock) and self._include_ip_block(peer, exclude_ipv6): res |= peer.split() return res diff --git a/nca/Resources/IstioNetworkPolicy.py b/nca/Resources/IstioNetworkPolicy.py index 714c2cb6..3ffe3241 100644 --- a/nca/Resources/IstioNetworkPolicy.py +++ b/nca/Resources/IstioNetworkPolicy.py @@ -92,15 +92,17 @@ def allowed_connections(self, from_peer, to_peer, is_ingress): return PolicyConnections(True, allowed_conns, denied_conns) - def referenced_ip_blocks(self): + def referenced_ip_blocks(self, exclude_ipv6=False): """ + :param bool exclude_ipv6: indicates if to exclude the automatically added IPv6 addresses in the referenced ip_blocks. + IPv6 addresses that are referenced in the policy by the user will always be included :return: A set of all ipblocks referenced in one of the policy rules (one Peer object per one ip range) :rtype: Peer.PeerSet """ res = PeerSet() for rule in self.ingress_rules: for peer in rule.peer_set: - if isinstance(peer, IpBlock): + if isinstance(peer, IpBlock) and self._include_ip_block(peer, exclude_ipv6): res |= peer.split() return res diff --git a/nca/Resources/K8sNetworkPolicy.py b/nca/Resources/K8sNetworkPolicy.py index 57b5fd95..18a944d5 100644 --- a/nca/Resources/K8sNetworkPolicy.py +++ b/nca/Resources/K8sNetworkPolicy.py @@ -83,20 +83,22 @@ def clone_without_rule(self, rule_to_exclude, ingress_rule): res.add_ingress_rule(rule) return res - def referenced_ip_blocks(self): + def referenced_ip_blocks(self, exclude_ipv6=False): """ + :param bool exclude_ipv6: indicates if to exclude the automatically added IPv6 addresses in the referenced ip_blocks. + IPv6 addresses that are referenced in the policy by the user will always be included :return: A set of all ipblocks referenced in one of the policy rules (one Peer object per one ip range) :rtype: Peer.PeerSet """ res = Peer.PeerSet() for rule in self.egress_rules: - for pod in rule.peer_set: - if isinstance(pod, Peer.IpBlock): - res |= pod.split() + for peer in rule.peer_set: + if isinstance(peer, Peer.IpBlock) and self._include_ip_block(peer, exclude_ipv6): + res |= peer.split() for rule in self.ingress_rules: - for pod in rule.peer_set: - if isinstance(pod, Peer.IpBlock): - res |= pod.split() + for peer in rule.peer_set: + if isinstance(peer, Peer.IpBlock) and self._include_ip_block(peer, exclude_ipv6): + res |= peer.split() return res diff --git a/nca/Resources/NetworkPolicy.py b/nca/Resources/NetworkPolicy.py index 958a8a1a..2c1a9d61 100644 --- a/nca/Resources/NetworkPolicy.py +++ b/nca/Resources/NetworkPolicy.py @@ -57,6 +57,8 @@ def __init__(self, name, namespace): self.findings = [] # accumulated findings which are relevant only to this policy (emptiness and redundancy) self.referenced_labels = set() self.policy_kind = NetworkPolicy.PolicyType.Unknown + self.has_ipv6_addresses = False # whether the policy referenced ip addresses (by user) + # if this flag is False, excluding ipv6 addresses from the query results will be enabled def __str__(self): return self.full_name() @@ -216,13 +218,27 @@ def egress_rule_containing(self, other_policy, other_egress_rule_index): return self.rule_containing(other_policy, other_policy.egress_rules[other_egress_rule_index - 1], other_egress_rule_index, self.egress_rules) - def referenced_ip_blocks(self): + def referenced_ip_blocks(self, exclude_ipv6=False): """ Returns ip blocks referenced by this policy, or empty PeerSet + :param bool exclude_ipv6: indicates if to exclude the automatically added IPv6 addresses in the referenced ip_blocks. + IPv6 addresses that are referenced in the policy by the user will always be included :return: PeerSet of the referenced ip blocks """ return PeerSet() # default value, can be overridden in derived classes + def _include_ip_block(self, ip_block, exclude_ipv6): + """ + returns whether to include or not the ipblock in the policy's referenced_ip_blocks + :param IpBlock ip_block: the ip_block to check + :param bool exclude_ipv6 : indicates if to exclude ipv6 addresses + excluding the ip_block will be enabled only if the policy didn't reference any ipv6 addresses. + if policy referenced only ipv4 addresses ,then the parser didn't add auto ip_blocks, all will be included. + otherwise, if the policy didn't reference any ips, this mean automatic ip_block with all ips was added, + this is the ip_block to be excluded - so query results will not consider the ipv6 full range + """ + return ip_block.is_ipv4_block() or not exclude_ipv6 + def get_order(self): """ :return: the order of the policy diff --git a/nca/Utils/OutputConfiguration.py b/nca/Utils/OutputConfiguration.py index 0b52b386..63ff50cf 100644 --- a/nca/Utils/OutputConfiguration.py +++ b/nca/Utils/OutputConfiguration.py @@ -19,7 +19,7 @@ def __init__(self, output_config_dict=None, query_name=''): 'fwRulesMaxIter': 10, 'outputFormat': 'txt', 'outputPath': None, 'fwRulesOverrideAllowedLabels': None, 'prURL': None, 'connectivityFilterIstioEdges': True, 'outputEndpoints': 'deployments', - 'subset': {}, 'fullExplanation': False} + 'subset': {}, 'fullExplanation': False, 'excludeIPv6Range': True} super().__init__(default_output_config) if output_config_dict is not None: diff --git a/nca/nca_cli.py b/nca/nca_cli.py index 54e584ae..2c919ce0 100644 --- a/nca/nca_cli.py +++ b/nca/nca_cli.py @@ -150,7 +150,8 @@ def run_args(args): 'outputPath': args.file_out or None, 'prURL': args.pr_url or None, 'outputEndpoints': args.output_endpoints, - 'subset': {}}) + 'subset': {}, + 'excludeIPv6Range': not args.print_ipv6}) expected_output = None # default values are for sanity query # np_list will be taken as args. if it is not equal to the args parser's const value i.e [''] @@ -310,6 +311,9 @@ def nca_main(argv=None): parser.add_argument('--debug', '-d', action='store_true', help='Print debug information') parser.add_argument('--output_endpoints', choices=['pods', 'deployments'], help='Choose endpoints type in output (pods/deployments)', default='deployments') + parser.add_argument('--print_ipv6', action='store_true', help='Display IPv6 addresses connections too. ' + 'If the policy reference IPv6 addresses, ' + 'their connections will be printed anyway') args = parser.parse_args(argv) diff --git a/tests/calico_testcases/example_policies/testcase15-ports/testcase15-with-ingress-scheme.yaml b/tests/calico_testcases/example_policies/testcase15-ports/testcase15-with-ingress-scheme.yaml index 094ff0ee..70f516ee 100644 --- a/tests/calico_testcases/example_policies/testcase15-ports/testcase15-with-ingress-scheme.yaml +++ b/tests/calico_testcases/example_policies/testcase15-ports/testcase15-with-ingress-scheme.yaml @@ -75,6 +75,7 @@ queries: outputFormat: txt fwRulesRunInTestMode: false fwRulesGroupByLabelSinglePod: true + excludeIPv6Range: false expectedOutput: ../../expected_output/testcase15_with_ingress_connectivity_map.txt - name: no_empty_policies diff --git a/tests/calico_testcases/expected_output/testcase16-scheme_output.txt b/tests/calico_testcases/expected_output/testcase16-scheme_output.txt index 66485497..94c9b2e1 100644 --- a/tests/calico_testcases/expected_output/testcase16-scheme_output.txt +++ b/tests/calico_testcases/expected_output/testcase16-scheme_output.txt @@ -1,10 +1,7 @@ final fw rules for query: connectivity_map_testcase16, config: equiv-ranges-containment-games/kube-system/testcase16-nets-almost-all-range-smaller: src: 0.0.0.0/0 dst_ns: [default,kube-system,vendor-system] dst_pods: [*] conn: All connections -src: ::/0 dst_ns: [default,kube-system,vendor-system] dst_pods: [*] conn: All connections src_ns: [default,vendor-system] src_pods: [*] dst: 0.0.0.0/0 conn: All connections -src_ns: [default,vendor-system] src_pods: [*] dst: ::/0 conn: All connections src_ns: [default,vendor-system] src_pods: [*] dst_ns: [default,kube-system,vendor-system] dst_pods: [*] conn: All connections src_ns: [kube-system] src_pods: [!has(tier)] dst: 0.0.0.0/0 conn: All connections -src_ns: [kube-system] src_pods: [!has(tier)] dst: ::/0 conn: All connections src_ns: [kube-system] src_pods: [!has(tier)] dst_ns: [default,kube-system,vendor-system] dst_pods: [*] conn: All connections -src_ns: [kube-system] src_pods: [tier=frontend] dst: 64.0.0.0-255.255.255.255 conn: TCP +src_ns: [kube-system] src_pods: [tier=frontend] dst: 64.0.0.0-255.255.255.255 conn: TCP \ No newline at end of file diff --git a/tests/calico_testcases/expected_output/testcase18-scheme-pair-wise-interferes-different-ranges-writing-additional-port.txt b/tests/calico_testcases/expected_output/testcase18-scheme-pair-wise-interferes-different-ranges-writing-additional-port.txt index 602e1719..30ebdaca 100644 --- a/tests/calico_testcases/expected_output/testcase18-scheme-pair-wise-interferes-different-ranges-writing-additional-port.txt +++ b/tests/calico_testcases/expected_output/testcase18-scheme-pair-wise-interferes-different-ranges-writing-additional-port.txt @@ -1,7 +1,6 @@ np-ports-based/testcase18-different-ranges-writing1 interferes with np-ports-based/testcase18-different-ranges-writing-slightly-bigger Allowed connections from np-ports-based/testcase18-different-ranges-writing-slightly-bigger which are extended in np-ports-based/testcase18-different-ranges-writing1: src: kube-system/calico-kube-controllers-7694668c77-t6slc, dst: 0.0.0.0-255.255.255.255, description: TCP protocol - np-ports-based/testcase18-different-ranges-writing1 allows communication on [dst_ports=600] while np-ports-based/testcase18-different-ranges-writing-slightly-bigger does not -src: kube-system/calico-kube-controllers-7694668c77-t6slc, dst: ::-ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff, description: TCP protocol - np-ports-based/testcase18-different-ranges-writing1 allows communication on [dst_ports=600] while np-ports-based/testcase18-different-ranges-writing-slightly-bigger does not src: kube-system/calico-kube-controllers-7694668c77-t6slc, dst: default/cog-agents-d54st, description: TCP protocol - np-ports-based/testcase18-different-ranges-writing1 allows communication on [dst_ports=600] while np-ports-based/testcase18-different-ranges-writing-slightly-bigger does not src: kube-system/calico-kube-controllers-7694668c77-t6slc, dst: default/cog-agents-js4qc, description: TCP protocol - np-ports-based/testcase18-different-ranges-writing1 allows communication on [dst_ports=600] while np-ports-based/testcase18-different-ranges-writing-slightly-bigger does not src: kube-system/calico-kube-controllers-7694668c77-t6slc, dst: default/cog-agents-qr8gp, description: TCP protocol - np-ports-based/testcase18-different-ranges-writing1 allows communication on [dst_ports=600] while np-ports-based/testcase18-different-ranges-writing-slightly-bigger does not @@ -31,7 +30,6 @@ src: kube-system/calico-kube-controllers-7694668c77-t6slc, dst: vendor-system/ba src: kube-system/calico-kube-controllers-7694668c77-t6slc, dst: vendor-system/foofoo-app-r66p2, description: TCP protocol - np-ports-based/testcase18-different-ranges-writing1 allows communication on [dst_ports=600] while np-ports-based/testcase18-different-ranges-writing-slightly-bigger does not src: kube-system/calico-kube-controllers-7694668c77-t6slc, dst: vendor-system/foofoo-app-zv2ch, description: TCP protocol - np-ports-based/testcase18-different-ranges-writing1 allows communication on [dst_ports=600] while np-ports-based/testcase18-different-ranges-writing-slightly-bigger does not src: kube-system/calico-node-mgdlr, dst: 0.0.0.0-255.255.255.255, description: TCP protocol - np-ports-based/testcase18-different-ranges-writing1 allows communication on [dst_ports=600] while np-ports-based/testcase18-different-ranges-writing-slightly-bigger does not -src: kube-system/calico-node-mgdlr, dst: ::-ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff, description: TCP protocol - np-ports-based/testcase18-different-ranges-writing1 allows communication on [dst_ports=600] while np-ports-based/testcase18-different-ranges-writing-slightly-bigger does not src: kube-system/calico-node-mgdlr, dst: default/cog-agents-d54st, description: TCP protocol - np-ports-based/testcase18-different-ranges-writing1 allows communication on [dst_ports=600] while np-ports-based/testcase18-different-ranges-writing-slightly-bigger does not src: kube-system/calico-node-mgdlr, dst: default/cog-agents-js4qc, description: TCP protocol - np-ports-based/testcase18-different-ranges-writing1 allows communication on [dst_ports=600] while np-ports-based/testcase18-different-ranges-writing-slightly-bigger does not src: kube-system/calico-node-mgdlr, dst: default/cog-agents-qr8gp, description: TCP protocol - np-ports-based/testcase18-different-ranges-writing1 allows communication on [dst_ports=600] while np-ports-based/testcase18-different-ranges-writing-slightly-bigger does not @@ -61,7 +59,6 @@ src: kube-system/calico-node-mgdlr, dst: vendor-system/barbar-app-vsh47, descrip src: kube-system/calico-node-mgdlr, dst: vendor-system/foofoo-app-r66p2, description: TCP protocol - np-ports-based/testcase18-different-ranges-writing1 allows communication on [dst_ports=600] while np-ports-based/testcase18-different-ranges-writing-slightly-bigger does not src: kube-system/calico-node-mgdlr, dst: vendor-system/foofoo-app-zv2ch, description: TCP protocol - np-ports-based/testcase18-different-ranges-writing1 allows communication on [dst_ports=600] while np-ports-based/testcase18-different-ranges-writing-slightly-bigger does not src: kube-system/calico-node-ns8kw, dst: 0.0.0.0-255.255.255.255, description: TCP protocol - np-ports-based/testcase18-different-ranges-writing1 allows communication on [dst_ports=600] while np-ports-based/testcase18-different-ranges-writing-slightly-bigger does not -src: kube-system/calico-node-ns8kw, dst: ::-ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff, description: TCP protocol - np-ports-based/testcase18-different-ranges-writing1 allows communication on [dst_ports=600] while np-ports-based/testcase18-different-ranges-writing-slightly-bigger does not src: kube-system/calico-node-ns8kw, dst: default/cog-agents-d54st, description: TCP protocol - np-ports-based/testcase18-different-ranges-writing1 allows communication on [dst_ports=600] while np-ports-based/testcase18-different-ranges-writing-slightly-bigger does not src: kube-system/calico-node-ns8kw, dst: default/cog-agents-js4qc, description: TCP protocol - np-ports-based/testcase18-different-ranges-writing1 allows communication on [dst_ports=600] while np-ports-based/testcase18-different-ranges-writing-slightly-bigger does not src: kube-system/calico-node-ns8kw, dst: default/cog-agents-qr8gp, description: TCP protocol - np-ports-based/testcase18-different-ranges-writing1 allows communication on [dst_ports=600] while np-ports-based/testcase18-different-ranges-writing-slightly-bigger does not @@ -91,7 +88,6 @@ src: kube-system/calico-node-ns8kw, dst: vendor-system/barbar-app-vsh47, descrip src: kube-system/calico-node-ns8kw, dst: vendor-system/foofoo-app-r66p2, description: TCP protocol - np-ports-based/testcase18-different-ranges-writing1 allows communication on [dst_ports=600] while np-ports-based/testcase18-different-ranges-writing-slightly-bigger does not src: kube-system/calico-node-ns8kw, dst: vendor-system/foofoo-app-zv2ch, description: TCP protocol - np-ports-based/testcase18-different-ranges-writing1 allows communication on [dst_ports=600] while np-ports-based/testcase18-different-ranges-writing-slightly-bigger does not src: kube-system/calico-node-ptdgj, dst: 0.0.0.0-255.255.255.255, description: TCP protocol - np-ports-based/testcase18-different-ranges-writing1 allows communication on [dst_ports=600] while np-ports-based/testcase18-different-ranges-writing-slightly-bigger does not -src: kube-system/calico-node-ptdgj, dst: ::-ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff, description: TCP protocol - np-ports-based/testcase18-different-ranges-writing1 allows communication on [dst_ports=600] while np-ports-based/testcase18-different-ranges-writing-slightly-bigger does not src: kube-system/calico-node-ptdgj, dst: default/cog-agents-d54st, description: TCP protocol - np-ports-based/testcase18-different-ranges-writing1 allows communication on [dst_ports=600] while np-ports-based/testcase18-different-ranges-writing-slightly-bigger does not src: kube-system/calico-node-ptdgj, dst: default/cog-agents-js4qc, description: TCP protocol - np-ports-based/testcase18-different-ranges-writing1 allows communication on [dst_ports=600] while np-ports-based/testcase18-different-ranges-writing-slightly-bigger does not src: kube-system/calico-node-ptdgj, dst: default/cog-agents-qr8gp, description: TCP protocol - np-ports-based/testcase18-different-ranges-writing1 allows communication on [dst_ports=600] while np-ports-based/testcase18-different-ranges-writing-slightly-bigger does not @@ -121,7 +117,6 @@ src: kube-system/calico-node-ptdgj, dst: vendor-system/barbar-app-vsh47, descrip src: kube-system/calico-node-ptdgj, dst: vendor-system/foofoo-app-r66p2, description: TCP protocol - np-ports-based/testcase18-different-ranges-writing1 allows communication on [dst_ports=600] while np-ports-based/testcase18-different-ranges-writing-slightly-bigger does not src: kube-system/calico-node-ptdgj, dst: vendor-system/foofoo-app-zv2ch, description: TCP protocol - np-ports-based/testcase18-different-ranges-writing1 allows communication on [dst_ports=600] while np-ports-based/testcase18-different-ranges-writing-slightly-bigger does not src: kube-system/file-plugin-7bfb8b69bf-p86gk, dst: 0.0.0.0-255.255.255.255, description: TCP protocol - np-ports-based/testcase18-different-ranges-writing1 allows communication on [dst_ports=600] while np-ports-based/testcase18-different-ranges-writing-slightly-bigger does not -src: kube-system/file-plugin-7bfb8b69bf-p86gk, dst: ::-ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff, description: TCP protocol - np-ports-based/testcase18-different-ranges-writing1 allows communication on [dst_ports=600] while np-ports-based/testcase18-different-ranges-writing-slightly-bigger does not src: kube-system/file-plugin-7bfb8b69bf-p86gk, dst: default/cog-agents-d54st, description: TCP protocol - np-ports-based/testcase18-different-ranges-writing1 allows communication on [dst_ports=600] while np-ports-based/testcase18-different-ranges-writing-slightly-bigger does not src: kube-system/file-plugin-7bfb8b69bf-p86gk, dst: default/cog-agents-js4qc, description: TCP protocol - np-ports-based/testcase18-different-ranges-writing1 allows communication on [dst_ports=600] while np-ports-based/testcase18-different-ranges-writing-slightly-bigger does not src: kube-system/file-plugin-7bfb8b69bf-p86gk, dst: default/cog-agents-qr8gp, description: TCP protocol - np-ports-based/testcase18-different-ranges-writing1 allows communication on [dst_ports=600] while np-ports-based/testcase18-different-ranges-writing-slightly-bigger does not @@ -151,7 +146,6 @@ src: kube-system/file-plugin-7bfb8b69bf-p86gk, dst: vendor-system/barbar-app-vsh src: kube-system/file-plugin-7bfb8b69bf-p86gk, dst: vendor-system/foofoo-app-r66p2, description: TCP protocol - np-ports-based/testcase18-different-ranges-writing1 allows communication on [dst_ports=600] while np-ports-based/testcase18-different-ranges-writing-slightly-bigger does not src: kube-system/file-plugin-7bfb8b69bf-p86gk, dst: vendor-system/foofoo-app-zv2ch, description: TCP protocol - np-ports-based/testcase18-different-ranges-writing1 allows communication on [dst_ports=600] while np-ports-based/testcase18-different-ranges-writing-slightly-bigger does not src: kube-system/heapster-7df8cb8c66-zxkk2, dst: 0.0.0.0-255.255.255.255, description: TCP protocol - np-ports-based/testcase18-different-ranges-writing1 allows communication on [dst_ports=600] while np-ports-based/testcase18-different-ranges-writing-slightly-bigger does not -src: kube-system/heapster-7df8cb8c66-zxkk2, dst: ::-ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff, description: TCP protocol - np-ports-based/testcase18-different-ranges-writing1 allows communication on [dst_ports=600] while np-ports-based/testcase18-different-ranges-writing-slightly-bigger does not src: kube-system/heapster-7df8cb8c66-zxkk2, dst: default/cog-agents-d54st, description: TCP protocol - np-ports-based/testcase18-different-ranges-writing1 allows communication on [dst_ports=600] while np-ports-based/testcase18-different-ranges-writing-slightly-bigger does not src: kube-system/heapster-7df8cb8c66-zxkk2, dst: default/cog-agents-js4qc, description: TCP protocol - np-ports-based/testcase18-different-ranges-writing1 allows communication on [dst_ports=600] while np-ports-based/testcase18-different-ranges-writing-slightly-bigger does not src: kube-system/heapster-7df8cb8c66-zxkk2, dst: default/cog-agents-qr8gp, description: TCP protocol - np-ports-based/testcase18-different-ranges-writing1 allows communication on [dst_ports=600] while np-ports-based/testcase18-different-ranges-writing-slightly-bigger does not @@ -181,7 +175,6 @@ src: kube-system/heapster-7df8cb8c66-zxkk2, dst: vendor-system/barbar-app-vsh47, src: kube-system/heapster-7df8cb8c66-zxkk2, dst: vendor-system/foofoo-app-r66p2, description: TCP protocol - np-ports-based/testcase18-different-ranges-writing1 allows communication on [dst_ports=600] while np-ports-based/testcase18-different-ranges-writing-slightly-bigger does not src: kube-system/heapster-7df8cb8c66-zxkk2, dst: vendor-system/foofoo-app-zv2ch, description: TCP protocol - np-ports-based/testcase18-different-ranges-writing1 allows communication on [dst_ports=600] while np-ports-based/testcase18-different-ranges-writing-slightly-bigger does not src: kube-system/keepalived-watcher-57ghx, dst: 0.0.0.0-255.255.255.255, description: TCP protocol - np-ports-based/testcase18-different-ranges-writing1 allows communication on [dst_ports=600] while np-ports-based/testcase18-different-ranges-writing-slightly-bigger does not -src: kube-system/keepalived-watcher-57ghx, dst: ::-ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff, description: TCP protocol - np-ports-based/testcase18-different-ranges-writing1 allows communication on [dst_ports=600] while np-ports-based/testcase18-different-ranges-writing-slightly-bigger does not src: kube-system/keepalived-watcher-57ghx, dst: default/cog-agents-d54st, description: TCP protocol - np-ports-based/testcase18-different-ranges-writing1 allows communication on [dst_ports=600] while np-ports-based/testcase18-different-ranges-writing-slightly-bigger does not src: kube-system/keepalived-watcher-57ghx, dst: default/cog-agents-js4qc, description: TCP protocol - np-ports-based/testcase18-different-ranges-writing1 allows communication on [dst_ports=600] while np-ports-based/testcase18-different-ranges-writing-slightly-bigger does not src: kube-system/keepalived-watcher-57ghx, dst: default/cog-agents-qr8gp, description: TCP protocol - np-ports-based/testcase18-different-ranges-writing1 allows communication on [dst_ports=600] while np-ports-based/testcase18-different-ranges-writing-slightly-bigger does not @@ -211,7 +204,6 @@ src: kube-system/keepalived-watcher-57ghx, dst: vendor-system/barbar-app-vsh47, src: kube-system/keepalived-watcher-57ghx, dst: vendor-system/foofoo-app-r66p2, description: TCP protocol - np-ports-based/testcase18-different-ranges-writing1 allows communication on [dst_ports=600] while np-ports-based/testcase18-different-ranges-writing-slightly-bigger does not src: kube-system/keepalived-watcher-57ghx, dst: vendor-system/foofoo-app-zv2ch, description: TCP protocol - np-ports-based/testcase18-different-ranges-writing1 allows communication on [dst_ports=600] while np-ports-based/testcase18-different-ranges-writing-slightly-bigger does not src: kube-system/keepalived-watcher-gzdfm, dst: 0.0.0.0-255.255.255.255, description: TCP protocol - np-ports-based/testcase18-different-ranges-writing1 allows communication on [dst_ports=600] while np-ports-based/testcase18-different-ranges-writing-slightly-bigger does not -src: kube-system/keepalived-watcher-gzdfm, dst: ::-ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff, description: TCP protocol - np-ports-based/testcase18-different-ranges-writing1 allows communication on [dst_ports=600] while np-ports-based/testcase18-different-ranges-writing-slightly-bigger does not src: kube-system/keepalived-watcher-gzdfm, dst: default/cog-agents-d54st, description: TCP protocol - np-ports-based/testcase18-different-ranges-writing1 allows communication on [dst_ports=600] while np-ports-based/testcase18-different-ranges-writing-slightly-bigger does not src: kube-system/keepalived-watcher-gzdfm, dst: default/cog-agents-js4qc, description: TCP protocol - np-ports-based/testcase18-different-ranges-writing1 allows communication on [dst_ports=600] while np-ports-based/testcase18-different-ranges-writing-slightly-bigger does not src: kube-system/keepalived-watcher-gzdfm, dst: default/cog-agents-qr8gp, description: TCP protocol - np-ports-based/testcase18-different-ranges-writing1 allows communication on [dst_ports=600] while np-ports-based/testcase18-different-ranges-writing-slightly-bigger does not @@ -241,7 +233,6 @@ src: kube-system/keepalived-watcher-gzdfm, dst: vendor-system/barbar-app-vsh47, src: kube-system/keepalived-watcher-gzdfm, dst: vendor-system/foofoo-app-r66p2, description: TCP protocol - np-ports-based/testcase18-different-ranges-writing1 allows communication on [dst_ports=600] while np-ports-based/testcase18-different-ranges-writing-slightly-bigger does not src: kube-system/keepalived-watcher-gzdfm, dst: vendor-system/foofoo-app-zv2ch, description: TCP protocol - np-ports-based/testcase18-different-ranges-writing1 allows communication on [dst_ports=600] while np-ports-based/testcase18-different-ranges-writing-slightly-bigger does not src: kube-system/keepalived-watcher-wczq8, dst: 0.0.0.0-255.255.255.255, description: TCP protocol - np-ports-based/testcase18-different-ranges-writing1 allows communication on [dst_ports=600] while np-ports-based/testcase18-different-ranges-writing-slightly-bigger does not -src: kube-system/keepalived-watcher-wczq8, dst: ::-ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff, description: TCP protocol - np-ports-based/testcase18-different-ranges-writing1 allows communication on [dst_ports=600] while np-ports-based/testcase18-different-ranges-writing-slightly-bigger does not src: kube-system/keepalived-watcher-wczq8, dst: default/cog-agents-d54st, description: TCP protocol - np-ports-based/testcase18-different-ranges-writing1 allows communication on [dst_ports=600] while np-ports-based/testcase18-different-ranges-writing-slightly-bigger does not src: kube-system/keepalived-watcher-wczq8, dst: default/cog-agents-js4qc, description: TCP protocol - np-ports-based/testcase18-different-ranges-writing1 allows communication on [dst_ports=600] while np-ports-based/testcase18-different-ranges-writing-slightly-bigger does not src: kube-system/keepalived-watcher-wczq8, dst: default/cog-agents-qr8gp, description: TCP protocol - np-ports-based/testcase18-different-ranges-writing1 allows communication on [dst_ports=600] while np-ports-based/testcase18-different-ranges-writing-slightly-bigger does not @@ -271,7 +262,6 @@ src: kube-system/keepalived-watcher-wczq8, dst: vendor-system/barbar-app-vsh47, src: kube-system/keepalived-watcher-wczq8, dst: vendor-system/foofoo-app-r66p2, description: TCP protocol - np-ports-based/testcase18-different-ranges-writing1 allows communication on [dst_ports=600] while np-ports-based/testcase18-different-ranges-writing-slightly-bigger does not src: kube-system/keepalived-watcher-wczq8, dst: vendor-system/foofoo-app-zv2ch, description: TCP protocol - np-ports-based/testcase18-different-ranges-writing1 allows communication on [dst_ports=600] while np-ports-based/testcase18-different-ranges-writing-slightly-bigger does not src: kube-system/kube-dns-amd64-d66bf76db-9s486, dst: 0.0.0.0-255.255.255.255, description: TCP protocol - np-ports-based/testcase18-different-ranges-writing1 allows communication on [dst_ports=600] while np-ports-based/testcase18-different-ranges-writing-slightly-bigger does not -src: kube-system/kube-dns-amd64-d66bf76db-9s486, dst: ::-ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff, description: TCP protocol - np-ports-based/testcase18-different-ranges-writing1 allows communication on [dst_ports=600] while np-ports-based/testcase18-different-ranges-writing-slightly-bigger does not src: kube-system/kube-dns-amd64-d66bf76db-9s486, dst: default/cog-agents-d54st, description: TCP protocol - np-ports-based/testcase18-different-ranges-writing1 allows communication on [dst_ports=600] while np-ports-based/testcase18-different-ranges-writing-slightly-bigger does not src: kube-system/kube-dns-amd64-d66bf76db-9s486, dst: default/cog-agents-js4qc, description: TCP protocol - np-ports-based/testcase18-different-ranges-writing1 allows communication on [dst_ports=600] while np-ports-based/testcase18-different-ranges-writing-slightly-bigger does not src: kube-system/kube-dns-amd64-d66bf76db-9s486, dst: default/cog-agents-qr8gp, description: TCP protocol - np-ports-based/testcase18-different-ranges-writing1 allows communication on [dst_ports=600] while np-ports-based/testcase18-different-ranges-writing-slightly-bigger does not @@ -301,7 +291,6 @@ src: kube-system/kube-dns-amd64-d66bf76db-9s486, dst: vendor-system/barbar-app-v src: kube-system/kube-dns-amd64-d66bf76db-9s486, dst: vendor-system/foofoo-app-r66p2, description: TCP protocol - np-ports-based/testcase18-different-ranges-writing1 allows communication on [dst_ports=600] while np-ports-based/testcase18-different-ranges-writing-slightly-bigger does not src: kube-system/kube-dns-amd64-d66bf76db-9s486, dst: vendor-system/foofoo-app-zv2ch, description: TCP protocol - np-ports-based/testcase18-different-ranges-writing1 allows communication on [dst_ports=600] while np-ports-based/testcase18-different-ranges-writing-slightly-bigger does not src: kube-system/kube-dns-amd64-d66bf76db-bbvts, dst: 0.0.0.0-255.255.255.255, description: TCP protocol - np-ports-based/testcase18-different-ranges-writing1 allows communication on [dst_ports=600] while np-ports-based/testcase18-different-ranges-writing-slightly-bigger does not -src: kube-system/kube-dns-amd64-d66bf76db-bbvts, dst: ::-ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff, description: TCP protocol - np-ports-based/testcase18-different-ranges-writing1 allows communication on [dst_ports=600] while np-ports-based/testcase18-different-ranges-writing-slightly-bigger does not src: kube-system/kube-dns-amd64-d66bf76db-bbvts, dst: default/cog-agents-d54st, description: TCP protocol - np-ports-based/testcase18-different-ranges-writing1 allows communication on [dst_ports=600] while np-ports-based/testcase18-different-ranges-writing-slightly-bigger does not src: kube-system/kube-dns-amd64-d66bf76db-bbvts, dst: default/cog-agents-js4qc, description: TCP protocol - np-ports-based/testcase18-different-ranges-writing1 allows communication on [dst_ports=600] while np-ports-based/testcase18-different-ranges-writing-slightly-bigger does not src: kube-system/kube-dns-amd64-d66bf76db-bbvts, dst: default/cog-agents-qr8gp, description: TCP protocol - np-ports-based/testcase18-different-ranges-writing1 allows communication on [dst_ports=600] while np-ports-based/testcase18-different-ranges-writing-slightly-bigger does not @@ -331,7 +320,6 @@ src: kube-system/kube-dns-amd64-d66bf76db-bbvts, dst: vendor-system/barbar-app-v src: kube-system/kube-dns-amd64-d66bf76db-bbvts, dst: vendor-system/foofoo-app-r66p2, description: TCP protocol - np-ports-based/testcase18-different-ranges-writing1 allows communication on [dst_ports=600] while np-ports-based/testcase18-different-ranges-writing-slightly-bigger does not src: kube-system/kube-dns-amd64-d66bf76db-bbvts, dst: vendor-system/foofoo-app-zv2ch, description: TCP protocol - np-ports-based/testcase18-different-ranges-writing1 allows communication on [dst_ports=600] while np-ports-based/testcase18-different-ranges-writing-slightly-bigger does not src: kube-system/kube-dns-autoscaler-78f5fdbd46-zt2sf, dst: 0.0.0.0-255.255.255.255, description: TCP protocol - np-ports-based/testcase18-different-ranges-writing1 allows communication on [dst_ports=600] while np-ports-based/testcase18-different-ranges-writing-slightly-bigger does not -src: kube-system/kube-dns-autoscaler-78f5fdbd46-zt2sf, dst: ::-ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff, description: TCP protocol - np-ports-based/testcase18-different-ranges-writing1 allows communication on [dst_ports=600] while np-ports-based/testcase18-different-ranges-writing-slightly-bigger does not src: kube-system/kube-dns-autoscaler-78f5fdbd46-zt2sf, dst: default/cog-agents-d54st, description: TCP protocol - np-ports-based/testcase18-different-ranges-writing1 allows communication on [dst_ports=600] while np-ports-based/testcase18-different-ranges-writing-slightly-bigger does not src: kube-system/kube-dns-autoscaler-78f5fdbd46-zt2sf, dst: default/cog-agents-js4qc, description: TCP protocol - np-ports-based/testcase18-different-ranges-writing1 allows communication on [dst_ports=600] while np-ports-based/testcase18-different-ranges-writing-slightly-bigger does not src: kube-system/kube-dns-autoscaler-78f5fdbd46-zt2sf, dst: default/cog-agents-qr8gp, description: TCP protocol - np-ports-based/testcase18-different-ranges-writing1 allows communication on [dst_ports=600] while np-ports-based/testcase18-different-ranges-writing-slightly-bigger does not @@ -361,7 +349,6 @@ src: kube-system/kube-dns-autoscaler-78f5fdbd46-zt2sf, dst: vendor-system/barbar src: kube-system/kube-dns-autoscaler-78f5fdbd46-zt2sf, dst: vendor-system/foofoo-app-r66p2, description: TCP protocol - np-ports-based/testcase18-different-ranges-writing1 allows communication on [dst_ports=600] while np-ports-based/testcase18-different-ranges-writing-slightly-bigger does not src: kube-system/kube-dns-autoscaler-78f5fdbd46-zt2sf, dst: vendor-system/foofoo-app-zv2ch, description: TCP protocol - np-ports-based/testcase18-different-ranges-writing1 allows communication on [dst_ports=600] while np-ports-based/testcase18-different-ranges-writing-slightly-bigger does not src: kube-system/kube-fluentd-2qw2g, dst: 0.0.0.0-255.255.255.255, description: TCP protocol - np-ports-based/testcase18-different-ranges-writing1 allows communication on [dst_ports=600] while np-ports-based/testcase18-different-ranges-writing-slightly-bigger does not -src: kube-system/kube-fluentd-2qw2g, dst: ::-ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff, description: TCP protocol - np-ports-based/testcase18-different-ranges-writing1 allows communication on [dst_ports=600] while np-ports-based/testcase18-different-ranges-writing-slightly-bigger does not src: kube-system/kube-fluentd-2qw2g, dst: default/cog-agents-d54st, description: TCP protocol - np-ports-based/testcase18-different-ranges-writing1 allows communication on [dst_ports=600] while np-ports-based/testcase18-different-ranges-writing-slightly-bigger does not src: kube-system/kube-fluentd-2qw2g, dst: default/cog-agents-js4qc, description: TCP protocol - np-ports-based/testcase18-different-ranges-writing1 allows communication on [dst_ports=600] while np-ports-based/testcase18-different-ranges-writing-slightly-bigger does not src: kube-system/kube-fluentd-2qw2g, dst: default/cog-agents-qr8gp, description: TCP protocol - np-ports-based/testcase18-different-ranges-writing1 allows communication on [dst_ports=600] while np-ports-based/testcase18-different-ranges-writing-slightly-bigger does not @@ -391,7 +378,6 @@ src: kube-system/kube-fluentd-2qw2g, dst: vendor-system/barbar-app-vsh47, descri src: kube-system/kube-fluentd-2qw2g, dst: vendor-system/foofoo-app-r66p2, description: TCP protocol - np-ports-based/testcase18-different-ranges-writing1 allows communication on [dst_ports=600] while np-ports-based/testcase18-different-ranges-writing-slightly-bigger does not src: kube-system/kube-fluentd-2qw2g, dst: vendor-system/foofoo-app-zv2ch, description: TCP protocol - np-ports-based/testcase18-different-ranges-writing1 allows communication on [dst_ports=600] while np-ports-based/testcase18-different-ranges-writing-slightly-bigger does not src: kube-system/kube-fluentd-h6rjg, dst: 0.0.0.0-255.255.255.255, description: TCP protocol - np-ports-based/testcase18-different-ranges-writing1 allows communication on [dst_ports=600] while np-ports-based/testcase18-different-ranges-writing-slightly-bigger does not -src: kube-system/kube-fluentd-h6rjg, dst: ::-ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff, description: TCP protocol - np-ports-based/testcase18-different-ranges-writing1 allows communication on [dst_ports=600] while np-ports-based/testcase18-different-ranges-writing-slightly-bigger does not src: kube-system/kube-fluentd-h6rjg, dst: default/cog-agents-d54st, description: TCP protocol - np-ports-based/testcase18-different-ranges-writing1 allows communication on [dst_ports=600] while np-ports-based/testcase18-different-ranges-writing-slightly-bigger does not src: kube-system/kube-fluentd-h6rjg, dst: default/cog-agents-js4qc, description: TCP protocol - np-ports-based/testcase18-different-ranges-writing1 allows communication on [dst_ports=600] while np-ports-based/testcase18-different-ranges-writing-slightly-bigger does not src: kube-system/kube-fluentd-h6rjg, dst: default/cog-agents-qr8gp, description: TCP protocol - np-ports-based/testcase18-different-ranges-writing1 allows communication on [dst_ports=600] while np-ports-based/testcase18-different-ranges-writing-slightly-bigger does not @@ -421,7 +407,6 @@ src: kube-system/kube-fluentd-h6rjg, dst: vendor-system/barbar-app-vsh47, descri src: kube-system/kube-fluentd-h6rjg, dst: vendor-system/foofoo-app-r66p2, description: TCP protocol - np-ports-based/testcase18-different-ranges-writing1 allows communication on [dst_ports=600] while np-ports-based/testcase18-different-ranges-writing-slightly-bigger does not src: kube-system/kube-fluentd-h6rjg, dst: vendor-system/foofoo-app-zv2ch, description: TCP protocol - np-ports-based/testcase18-different-ranges-writing1 allows communication on [dst_ports=600] while np-ports-based/testcase18-different-ranges-writing-slightly-bigger does not src: kube-system/kube-fluentd-qmp4w, dst: 0.0.0.0-255.255.255.255, description: TCP protocol - np-ports-based/testcase18-different-ranges-writing1 allows communication on [dst_ports=600] while np-ports-based/testcase18-different-ranges-writing-slightly-bigger does not -src: kube-system/kube-fluentd-qmp4w, dst: ::-ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff, description: TCP protocol - np-ports-based/testcase18-different-ranges-writing1 allows communication on [dst_ports=600] while np-ports-based/testcase18-different-ranges-writing-slightly-bigger does not src: kube-system/kube-fluentd-qmp4w, dst: default/cog-agents-d54st, description: TCP protocol - np-ports-based/testcase18-different-ranges-writing1 allows communication on [dst_ports=600] while np-ports-based/testcase18-different-ranges-writing-slightly-bigger does not src: kube-system/kube-fluentd-qmp4w, dst: default/cog-agents-js4qc, description: TCP protocol - np-ports-based/testcase18-different-ranges-writing1 allows communication on [dst_ports=600] while np-ports-based/testcase18-different-ranges-writing-slightly-bigger does not src: kube-system/kube-fluentd-qmp4w, dst: default/cog-agents-qr8gp, description: TCP protocol - np-ports-based/testcase18-different-ranges-writing1 allows communication on [dst_ports=600] while np-ports-based/testcase18-different-ranges-writing-slightly-bigger does not @@ -451,7 +436,6 @@ src: kube-system/kube-fluentd-qmp4w, dst: vendor-system/barbar-app-vsh47, descri src: kube-system/kube-fluentd-qmp4w, dst: vendor-system/foofoo-app-r66p2, description: TCP protocol - np-ports-based/testcase18-different-ranges-writing1 allows communication on [dst_ports=600] while np-ports-based/testcase18-different-ranges-writing-slightly-bigger does not src: kube-system/kube-fluentd-qmp4w, dst: vendor-system/foofoo-app-zv2ch, description: TCP protocol - np-ports-based/testcase18-different-ranges-writing1 allows communication on [dst_ports=600] while np-ports-based/testcase18-different-ranges-writing-slightly-bigger does not src: kube-system/kubernetes-dashboard-5b5f985bcf-cvg7r, dst: 0.0.0.0-255.255.255.255, description: TCP protocol - np-ports-based/testcase18-different-ranges-writing1 allows communication on [dst_ports=600] while np-ports-based/testcase18-different-ranges-writing-slightly-bigger does not -src: kube-system/kubernetes-dashboard-5b5f985bcf-cvg7r, dst: ::-ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff, description: TCP protocol - np-ports-based/testcase18-different-ranges-writing1 allows communication on [dst_ports=600] while np-ports-based/testcase18-different-ranges-writing-slightly-bigger does not src: kube-system/kubernetes-dashboard-5b5f985bcf-cvg7r, dst: default/cog-agents-d54st, description: TCP protocol - np-ports-based/testcase18-different-ranges-writing1 allows communication on [dst_ports=600] while np-ports-based/testcase18-different-ranges-writing-slightly-bigger does not src: kube-system/kubernetes-dashboard-5b5f985bcf-cvg7r, dst: default/cog-agents-js4qc, description: TCP protocol - np-ports-based/testcase18-different-ranges-writing1 allows communication on [dst_ports=600] while np-ports-based/testcase18-different-ranges-writing-slightly-bigger does not src: kube-system/kubernetes-dashboard-5b5f985bcf-cvg7r, dst: default/cog-agents-qr8gp, description: TCP protocol - np-ports-based/testcase18-different-ranges-writing1 allows communication on [dst_ports=600] while np-ports-based/testcase18-different-ranges-writing-slightly-bigger does not @@ -481,7 +465,6 @@ src: kube-system/kubernetes-dashboard-5b5f985bcf-cvg7r, dst: vendor-system/barba src: kube-system/kubernetes-dashboard-5b5f985bcf-cvg7r, dst: vendor-system/foofoo-app-r66p2, description: TCP protocol - np-ports-based/testcase18-different-ranges-writing1 allows communication on [dst_ports=600] while np-ports-based/testcase18-different-ranges-writing-slightly-bigger does not src: kube-system/kubernetes-dashboard-5b5f985bcf-cvg7r, dst: vendor-system/foofoo-app-zv2ch, description: TCP protocol - np-ports-based/testcase18-different-ranges-writing1 allows communication on [dst_ports=600] while np-ports-based/testcase18-different-ranges-writing-slightly-bigger does not src: kube-system/public-cre08b89c167414305a1afb205d0bd346f-alb1-8489b8458f-b9j42, dst: 0.0.0.0-255.255.255.255, description: TCP protocol - np-ports-based/testcase18-different-ranges-writing1 allows communication on [dst_ports=600] while np-ports-based/testcase18-different-ranges-writing-slightly-bigger does not -src: kube-system/public-cre08b89c167414305a1afb205d0bd346f-alb1-8489b8458f-b9j42, dst: ::-ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff, description: TCP protocol - np-ports-based/testcase18-different-ranges-writing1 allows communication on [dst_ports=600] while np-ports-based/testcase18-different-ranges-writing-slightly-bigger does not src: kube-system/public-cre08b89c167414305a1afb205d0bd346f-alb1-8489b8458f-b9j42, dst: default/cog-agents-d54st, description: TCP protocol - np-ports-based/testcase18-different-ranges-writing1 allows communication on [dst_ports=600] while np-ports-based/testcase18-different-ranges-writing-slightly-bigger does not src: kube-system/public-cre08b89c167414305a1afb205d0bd346f-alb1-8489b8458f-b9j42, dst: default/cog-agents-js4qc, description: TCP protocol - np-ports-based/testcase18-different-ranges-writing1 allows communication on [dst_ports=600] while np-ports-based/testcase18-different-ranges-writing-slightly-bigger does not src: kube-system/public-cre08b89c167414305a1afb205d0bd346f-alb1-8489b8458f-b9j42, dst: default/cog-agents-qr8gp, description: TCP protocol - np-ports-based/testcase18-different-ranges-writing1 allows communication on [dst_ports=600] while np-ports-based/testcase18-different-ranges-writing-slightly-bigger does not @@ -511,7 +494,6 @@ src: kube-system/public-cre08b89c167414305a1afb205d0bd346f-alb1-8489b8458f-b9j42 src: kube-system/public-cre08b89c167414305a1afb205d0bd346f-alb1-8489b8458f-b9j42, dst: vendor-system/foofoo-app-r66p2, description: TCP protocol - np-ports-based/testcase18-different-ranges-writing1 allows communication on [dst_ports=600] while np-ports-based/testcase18-different-ranges-writing-slightly-bigger does not src: kube-system/public-cre08b89c167414305a1afb205d0bd346f-alb1-8489b8458f-b9j42, dst: vendor-system/foofoo-app-zv2ch, description: TCP protocol - np-ports-based/testcase18-different-ranges-writing1 allows communication on [dst_ports=600] while np-ports-based/testcase18-different-ranges-writing-slightly-bigger does not src: kube-system/public-cre08b89c167414305a1afb205d0bd346f-alb1-8489b8458f-hctcv, dst: 0.0.0.0-255.255.255.255, description: TCP protocol - np-ports-based/testcase18-different-ranges-writing1 allows communication on [dst_ports=600] while np-ports-based/testcase18-different-ranges-writing-slightly-bigger does not -src: kube-system/public-cre08b89c167414305a1afb205d0bd346f-alb1-8489b8458f-hctcv, dst: ::-ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff, description: TCP protocol - np-ports-based/testcase18-different-ranges-writing1 allows communication on [dst_ports=600] while np-ports-based/testcase18-different-ranges-writing-slightly-bigger does not src: kube-system/public-cre08b89c167414305a1afb205d0bd346f-alb1-8489b8458f-hctcv, dst: default/cog-agents-d54st, description: TCP protocol - np-ports-based/testcase18-different-ranges-writing1 allows communication on [dst_ports=600] while np-ports-based/testcase18-different-ranges-writing-slightly-bigger does not src: kube-system/public-cre08b89c167414305a1afb205d0bd346f-alb1-8489b8458f-hctcv, dst: default/cog-agents-js4qc, description: TCP protocol - np-ports-based/testcase18-different-ranges-writing1 allows communication on [dst_ports=600] while np-ports-based/testcase18-different-ranges-writing-slightly-bigger does not src: kube-system/public-cre08b89c167414305a1afb205d0bd346f-alb1-8489b8458f-hctcv, dst: default/cog-agents-qr8gp, description: TCP protocol - np-ports-based/testcase18-different-ranges-writing1 allows communication on [dst_ports=600] while np-ports-based/testcase18-different-ranges-writing-slightly-bigger does not @@ -541,7 +523,6 @@ src: kube-system/public-cre08b89c167414305a1afb205d0bd346f-alb1-8489b8458f-hctcv src: kube-system/public-cre08b89c167414305a1afb205d0bd346f-alb1-8489b8458f-hctcv, dst: vendor-system/foofoo-app-r66p2, description: TCP protocol - np-ports-based/testcase18-different-ranges-writing1 allows communication on [dst_ports=600] while np-ports-based/testcase18-different-ranges-writing-slightly-bigger does not src: kube-system/public-cre08b89c167414305a1afb205d0bd346f-alb1-8489b8458f-hctcv, dst: vendor-system/foofoo-app-zv2ch, description: TCP protocol - np-ports-based/testcase18-different-ranges-writing1 allows communication on [dst_ports=600] while np-ports-based/testcase18-different-ranges-writing-slightly-bigger does not src: kube-system/storage-watcher-8494b4b8bb-f8csd, dst: 0.0.0.0-255.255.255.255, description: TCP protocol - np-ports-based/testcase18-different-ranges-writing1 allows communication on [dst_ports=600] while np-ports-based/testcase18-different-ranges-writing-slightly-bigger does not -src: kube-system/storage-watcher-8494b4b8bb-f8csd, dst: ::-ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff, description: TCP protocol - np-ports-based/testcase18-different-ranges-writing1 allows communication on [dst_ports=600] while np-ports-based/testcase18-different-ranges-writing-slightly-bigger does not src: kube-system/storage-watcher-8494b4b8bb-f8csd, dst: default/cog-agents-d54st, description: TCP protocol - np-ports-based/testcase18-different-ranges-writing1 allows communication on [dst_ports=600] while np-ports-based/testcase18-different-ranges-writing-slightly-bigger does not src: kube-system/storage-watcher-8494b4b8bb-f8csd, dst: default/cog-agents-js4qc, description: TCP protocol - np-ports-based/testcase18-different-ranges-writing1 allows communication on [dst_ports=600] while np-ports-based/testcase18-different-ranges-writing-slightly-bigger does not src: kube-system/storage-watcher-8494b4b8bb-f8csd, dst: default/cog-agents-qr8gp, description: TCP protocol - np-ports-based/testcase18-different-ranges-writing1 allows communication on [dst_ports=600] while np-ports-based/testcase18-different-ranges-writing-slightly-bigger does not @@ -571,7 +552,6 @@ src: kube-system/storage-watcher-8494b4b8bb-f8csd, dst: vendor-system/barbar-app src: kube-system/storage-watcher-8494b4b8bb-f8csd, dst: vendor-system/foofoo-app-r66p2, description: TCP protocol - np-ports-based/testcase18-different-ranges-writing1 allows communication on [dst_ports=600] while np-ports-based/testcase18-different-ranges-writing-slightly-bigger does not src: kube-system/storage-watcher-8494b4b8bb-f8csd, dst: vendor-system/foofoo-app-zv2ch, description: TCP protocol - np-ports-based/testcase18-different-ranges-writing1 allows communication on [dst_ports=600] while np-ports-based/testcase18-different-ranges-writing-slightly-bigger does not src: kube-system/tiller-deploy-5c45c9966b-nqwz6, dst: 0.0.0.0-255.255.255.255, description: TCP protocol - np-ports-based/testcase18-different-ranges-writing1 allows communication on [dst_ports=600] while np-ports-based/testcase18-different-ranges-writing-slightly-bigger does not -src: kube-system/tiller-deploy-5c45c9966b-nqwz6, dst: ::-ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff, description: TCP protocol - np-ports-based/testcase18-different-ranges-writing1 allows communication on [dst_ports=600] while np-ports-based/testcase18-different-ranges-writing-slightly-bigger does not src: kube-system/tiller-deploy-5c45c9966b-nqwz6, dst: default/cog-agents-d54st, description: TCP protocol - np-ports-based/testcase18-different-ranges-writing1 allows communication on [dst_ports=600] while np-ports-based/testcase18-different-ranges-writing-slightly-bigger does not src: kube-system/tiller-deploy-5c45c9966b-nqwz6, dst: default/cog-agents-js4qc, description: TCP protocol - np-ports-based/testcase18-different-ranges-writing1 allows communication on [dst_ports=600] while np-ports-based/testcase18-different-ranges-writing-slightly-bigger does not src: kube-system/tiller-deploy-5c45c9966b-nqwz6, dst: default/cog-agents-qr8gp, description: TCP protocol - np-ports-based/testcase18-different-ranges-writing1 allows communication on [dst_ports=600] while np-ports-based/testcase18-different-ranges-writing-slightly-bigger does not @@ -601,7 +581,6 @@ src: kube-system/tiller-deploy-5c45c9966b-nqwz6, dst: vendor-system/barbar-app-v src: kube-system/tiller-deploy-5c45c9966b-nqwz6, dst: vendor-system/foofoo-app-r66p2, description: TCP protocol - np-ports-based/testcase18-different-ranges-writing1 allows communication on [dst_ports=600] while np-ports-based/testcase18-different-ranges-writing-slightly-bigger does not src: kube-system/tiller-deploy-5c45c9966b-nqwz6, dst: vendor-system/foofoo-app-zv2ch, description: TCP protocol - np-ports-based/testcase18-different-ranges-writing1 allows communication on [dst_ports=600] while np-ports-based/testcase18-different-ranges-writing-slightly-bigger does not src: kube-system/vpn-858f6d9777-2bw5m, dst: 0.0.0.0-255.255.255.255, description: TCP protocol - np-ports-based/testcase18-different-ranges-writing1 allows communication on [dst_ports=600] while np-ports-based/testcase18-different-ranges-writing-slightly-bigger does not -src: kube-system/vpn-858f6d9777-2bw5m, dst: ::-ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff, description: TCP protocol - np-ports-based/testcase18-different-ranges-writing1 allows communication on [dst_ports=600] while np-ports-based/testcase18-different-ranges-writing-slightly-bigger does not src: kube-system/vpn-858f6d9777-2bw5m, dst: default/cog-agents-d54st, description: TCP protocol - np-ports-based/testcase18-different-ranges-writing1 allows communication on [dst_ports=600] while np-ports-based/testcase18-different-ranges-writing-slightly-bigger does not src: kube-system/vpn-858f6d9777-2bw5m, dst: default/cog-agents-js4qc, description: TCP protocol - np-ports-based/testcase18-different-ranges-writing1 allows communication on [dst_ports=600] while np-ports-based/testcase18-different-ranges-writing-slightly-bigger does not src: kube-system/vpn-858f6d9777-2bw5m, dst: default/cog-agents-qr8gp, description: TCP protocol - np-ports-based/testcase18-different-ranges-writing1 allows communication on [dst_ports=600] while np-ports-based/testcase18-different-ranges-writing-slightly-bigger does not @@ -634,7 +613,6 @@ src: kube-system/vpn-858f6d9777-2bw5m, dst: vendor-system/foofoo-app-zv2ch, desc np-ports-based/testcase18-different-ranges-writing-slightly-bigger interferes with np-ports-based/testcase18-different-ranges-writing1 Allowed connections from np-ports-based/testcase18-different-ranges-writing1 which are extended in np-ports-based/testcase18-different-ranges-writing-slightly-bigger: src: kube-system/calico-kube-controllers-7694668c77-t6slc, dst: 0.0.0.0-255.255.255.255, description: np-ports-based/testcase18-different-ranges-writing-slightly-bigger allows communication using protocol UDP while np-ports-based/testcase18-different-ranges-writing1 does not. -src: kube-system/calico-kube-controllers-7694668c77-t6slc, dst: ::-ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff, description: np-ports-based/testcase18-different-ranges-writing-slightly-bigger allows communication using protocol UDP while np-ports-based/testcase18-different-ranges-writing1 does not. src: kube-system/calico-kube-controllers-7694668c77-t6slc, dst: default/cog-agents-d54st, description: np-ports-based/testcase18-different-ranges-writing-slightly-bigger allows communication using protocol UDP while np-ports-based/testcase18-different-ranges-writing1 does not. src: kube-system/calico-kube-controllers-7694668c77-t6slc, dst: default/cog-agents-js4qc, description: np-ports-based/testcase18-different-ranges-writing-slightly-bigger allows communication using protocol UDP while np-ports-based/testcase18-different-ranges-writing1 does not. src: kube-system/calico-kube-controllers-7694668c77-t6slc, dst: default/cog-agents-qr8gp, description: np-ports-based/testcase18-different-ranges-writing-slightly-bigger allows communication using protocol UDP while np-ports-based/testcase18-different-ranges-writing1 does not. @@ -664,7 +642,6 @@ src: kube-system/calico-kube-controllers-7694668c77-t6slc, dst: vendor-system/ba src: kube-system/calico-kube-controllers-7694668c77-t6slc, dst: vendor-system/foofoo-app-r66p2, description: np-ports-based/testcase18-different-ranges-writing-slightly-bigger allows communication using protocol UDP while np-ports-based/testcase18-different-ranges-writing1 does not. src: kube-system/calico-kube-controllers-7694668c77-t6slc, dst: vendor-system/foofoo-app-zv2ch, description: np-ports-based/testcase18-different-ranges-writing-slightly-bigger allows communication using protocol UDP while np-ports-based/testcase18-different-ranges-writing1 does not. src: kube-system/calico-node-mgdlr, dst: 0.0.0.0-255.255.255.255, description: np-ports-based/testcase18-different-ranges-writing-slightly-bigger allows communication using protocol UDP while np-ports-based/testcase18-different-ranges-writing1 does not. -src: kube-system/calico-node-mgdlr, dst: ::-ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff, description: np-ports-based/testcase18-different-ranges-writing-slightly-bigger allows communication using protocol UDP while np-ports-based/testcase18-different-ranges-writing1 does not. src: kube-system/calico-node-mgdlr, dst: default/cog-agents-d54st, description: np-ports-based/testcase18-different-ranges-writing-slightly-bigger allows communication using protocol UDP while np-ports-based/testcase18-different-ranges-writing1 does not. src: kube-system/calico-node-mgdlr, dst: default/cog-agents-js4qc, description: np-ports-based/testcase18-different-ranges-writing-slightly-bigger allows communication using protocol UDP while np-ports-based/testcase18-different-ranges-writing1 does not. src: kube-system/calico-node-mgdlr, dst: default/cog-agents-qr8gp, description: np-ports-based/testcase18-different-ranges-writing-slightly-bigger allows communication using protocol UDP while np-ports-based/testcase18-different-ranges-writing1 does not. @@ -694,7 +671,6 @@ src: kube-system/calico-node-mgdlr, dst: vendor-system/barbar-app-vsh47, descrip src: kube-system/calico-node-mgdlr, dst: vendor-system/foofoo-app-r66p2, description: np-ports-based/testcase18-different-ranges-writing-slightly-bigger allows communication using protocol UDP while np-ports-based/testcase18-different-ranges-writing1 does not. src: kube-system/calico-node-mgdlr, dst: vendor-system/foofoo-app-zv2ch, description: np-ports-based/testcase18-different-ranges-writing-slightly-bigger allows communication using protocol UDP while np-ports-based/testcase18-different-ranges-writing1 does not. src: kube-system/calico-node-ns8kw, dst: 0.0.0.0-255.255.255.255, description: np-ports-based/testcase18-different-ranges-writing-slightly-bigger allows communication using protocol UDP while np-ports-based/testcase18-different-ranges-writing1 does not. -src: kube-system/calico-node-ns8kw, dst: ::-ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff, description: np-ports-based/testcase18-different-ranges-writing-slightly-bigger allows communication using protocol UDP while np-ports-based/testcase18-different-ranges-writing1 does not. src: kube-system/calico-node-ns8kw, dst: default/cog-agents-d54st, description: np-ports-based/testcase18-different-ranges-writing-slightly-bigger allows communication using protocol UDP while np-ports-based/testcase18-different-ranges-writing1 does not. src: kube-system/calico-node-ns8kw, dst: default/cog-agents-js4qc, description: np-ports-based/testcase18-different-ranges-writing-slightly-bigger allows communication using protocol UDP while np-ports-based/testcase18-different-ranges-writing1 does not. src: kube-system/calico-node-ns8kw, dst: default/cog-agents-qr8gp, description: np-ports-based/testcase18-different-ranges-writing-slightly-bigger allows communication using protocol UDP while np-ports-based/testcase18-different-ranges-writing1 does not. @@ -724,7 +700,6 @@ src: kube-system/calico-node-ns8kw, dst: vendor-system/barbar-app-vsh47, descrip src: kube-system/calico-node-ns8kw, dst: vendor-system/foofoo-app-r66p2, description: np-ports-based/testcase18-different-ranges-writing-slightly-bigger allows communication using protocol UDP while np-ports-based/testcase18-different-ranges-writing1 does not. src: kube-system/calico-node-ns8kw, dst: vendor-system/foofoo-app-zv2ch, description: np-ports-based/testcase18-different-ranges-writing-slightly-bigger allows communication using protocol UDP while np-ports-based/testcase18-different-ranges-writing1 does not. src: kube-system/calico-node-ptdgj, dst: 0.0.0.0-255.255.255.255, description: np-ports-based/testcase18-different-ranges-writing-slightly-bigger allows communication using protocol UDP while np-ports-based/testcase18-different-ranges-writing1 does not. -src: kube-system/calico-node-ptdgj, dst: ::-ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff, description: np-ports-based/testcase18-different-ranges-writing-slightly-bigger allows communication using protocol UDP while np-ports-based/testcase18-different-ranges-writing1 does not. src: kube-system/calico-node-ptdgj, dst: default/cog-agents-d54st, description: np-ports-based/testcase18-different-ranges-writing-slightly-bigger allows communication using protocol UDP while np-ports-based/testcase18-different-ranges-writing1 does not. src: kube-system/calico-node-ptdgj, dst: default/cog-agents-js4qc, description: np-ports-based/testcase18-different-ranges-writing-slightly-bigger allows communication using protocol UDP while np-ports-based/testcase18-different-ranges-writing1 does not. src: kube-system/calico-node-ptdgj, dst: default/cog-agents-qr8gp, description: np-ports-based/testcase18-different-ranges-writing-slightly-bigger allows communication using protocol UDP while np-ports-based/testcase18-different-ranges-writing1 does not. @@ -754,7 +729,6 @@ src: kube-system/calico-node-ptdgj, dst: vendor-system/barbar-app-vsh47, descrip src: kube-system/calico-node-ptdgj, dst: vendor-system/foofoo-app-r66p2, description: np-ports-based/testcase18-different-ranges-writing-slightly-bigger allows communication using protocol UDP while np-ports-based/testcase18-different-ranges-writing1 does not. src: kube-system/calico-node-ptdgj, dst: vendor-system/foofoo-app-zv2ch, description: np-ports-based/testcase18-different-ranges-writing-slightly-bigger allows communication using protocol UDP while np-ports-based/testcase18-different-ranges-writing1 does not. src: kube-system/file-plugin-7bfb8b69bf-p86gk, dst: 0.0.0.0-255.255.255.255, description: np-ports-based/testcase18-different-ranges-writing-slightly-bigger allows communication using protocol UDP while np-ports-based/testcase18-different-ranges-writing1 does not. -src: kube-system/file-plugin-7bfb8b69bf-p86gk, dst: ::-ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff, description: np-ports-based/testcase18-different-ranges-writing-slightly-bigger allows communication using protocol UDP while np-ports-based/testcase18-different-ranges-writing1 does not. src: kube-system/file-plugin-7bfb8b69bf-p86gk, dst: default/cog-agents-d54st, description: np-ports-based/testcase18-different-ranges-writing-slightly-bigger allows communication using protocol UDP while np-ports-based/testcase18-different-ranges-writing1 does not. src: kube-system/file-plugin-7bfb8b69bf-p86gk, dst: default/cog-agents-js4qc, description: np-ports-based/testcase18-different-ranges-writing-slightly-bigger allows communication using protocol UDP while np-ports-based/testcase18-different-ranges-writing1 does not. src: kube-system/file-plugin-7bfb8b69bf-p86gk, dst: default/cog-agents-qr8gp, description: np-ports-based/testcase18-different-ranges-writing-slightly-bigger allows communication using protocol UDP while np-ports-based/testcase18-different-ranges-writing1 does not. @@ -784,7 +758,6 @@ src: kube-system/file-plugin-7bfb8b69bf-p86gk, dst: vendor-system/barbar-app-vsh src: kube-system/file-plugin-7bfb8b69bf-p86gk, dst: vendor-system/foofoo-app-r66p2, description: np-ports-based/testcase18-different-ranges-writing-slightly-bigger allows communication using protocol UDP while np-ports-based/testcase18-different-ranges-writing1 does not. src: kube-system/file-plugin-7bfb8b69bf-p86gk, dst: vendor-system/foofoo-app-zv2ch, description: np-ports-based/testcase18-different-ranges-writing-slightly-bigger allows communication using protocol UDP while np-ports-based/testcase18-different-ranges-writing1 does not. src: kube-system/heapster-7df8cb8c66-zxkk2, dst: 0.0.0.0-255.255.255.255, description: np-ports-based/testcase18-different-ranges-writing-slightly-bigger allows communication using protocol UDP while np-ports-based/testcase18-different-ranges-writing1 does not. -src: kube-system/heapster-7df8cb8c66-zxkk2, dst: ::-ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff, description: np-ports-based/testcase18-different-ranges-writing-slightly-bigger allows communication using protocol UDP while np-ports-based/testcase18-different-ranges-writing1 does not. src: kube-system/heapster-7df8cb8c66-zxkk2, dst: default/cog-agents-d54st, description: np-ports-based/testcase18-different-ranges-writing-slightly-bigger allows communication using protocol UDP while np-ports-based/testcase18-different-ranges-writing1 does not. src: kube-system/heapster-7df8cb8c66-zxkk2, dst: default/cog-agents-js4qc, description: np-ports-based/testcase18-different-ranges-writing-slightly-bigger allows communication using protocol UDP while np-ports-based/testcase18-different-ranges-writing1 does not. src: kube-system/heapster-7df8cb8c66-zxkk2, dst: default/cog-agents-qr8gp, description: np-ports-based/testcase18-different-ranges-writing-slightly-bigger allows communication using protocol UDP while np-ports-based/testcase18-different-ranges-writing1 does not. @@ -814,7 +787,6 @@ src: kube-system/heapster-7df8cb8c66-zxkk2, dst: vendor-system/barbar-app-vsh47, src: kube-system/heapster-7df8cb8c66-zxkk2, dst: vendor-system/foofoo-app-r66p2, description: np-ports-based/testcase18-different-ranges-writing-slightly-bigger allows communication using protocol UDP while np-ports-based/testcase18-different-ranges-writing1 does not. src: kube-system/heapster-7df8cb8c66-zxkk2, dst: vendor-system/foofoo-app-zv2ch, description: np-ports-based/testcase18-different-ranges-writing-slightly-bigger allows communication using protocol UDP while np-ports-based/testcase18-different-ranges-writing1 does not. src: kube-system/keepalived-watcher-57ghx, dst: 0.0.0.0-255.255.255.255, description: np-ports-based/testcase18-different-ranges-writing-slightly-bigger allows communication using protocol UDP while np-ports-based/testcase18-different-ranges-writing1 does not. -src: kube-system/keepalived-watcher-57ghx, dst: ::-ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff, description: np-ports-based/testcase18-different-ranges-writing-slightly-bigger allows communication using protocol UDP while np-ports-based/testcase18-different-ranges-writing1 does not. src: kube-system/keepalived-watcher-57ghx, dst: default/cog-agents-d54st, description: np-ports-based/testcase18-different-ranges-writing-slightly-bigger allows communication using protocol UDP while np-ports-based/testcase18-different-ranges-writing1 does not. src: kube-system/keepalived-watcher-57ghx, dst: default/cog-agents-js4qc, description: np-ports-based/testcase18-different-ranges-writing-slightly-bigger allows communication using protocol UDP while np-ports-based/testcase18-different-ranges-writing1 does not. src: kube-system/keepalived-watcher-57ghx, dst: default/cog-agents-qr8gp, description: np-ports-based/testcase18-different-ranges-writing-slightly-bigger allows communication using protocol UDP while np-ports-based/testcase18-different-ranges-writing1 does not. @@ -844,7 +816,6 @@ src: kube-system/keepalived-watcher-57ghx, dst: vendor-system/barbar-app-vsh47, src: kube-system/keepalived-watcher-57ghx, dst: vendor-system/foofoo-app-r66p2, description: np-ports-based/testcase18-different-ranges-writing-slightly-bigger allows communication using protocol UDP while np-ports-based/testcase18-different-ranges-writing1 does not. src: kube-system/keepalived-watcher-57ghx, dst: vendor-system/foofoo-app-zv2ch, description: np-ports-based/testcase18-different-ranges-writing-slightly-bigger allows communication using protocol UDP while np-ports-based/testcase18-different-ranges-writing1 does not. src: kube-system/keepalived-watcher-gzdfm, dst: 0.0.0.0-255.255.255.255, description: np-ports-based/testcase18-different-ranges-writing-slightly-bigger allows communication using protocol UDP while np-ports-based/testcase18-different-ranges-writing1 does not. -src: kube-system/keepalived-watcher-gzdfm, dst: ::-ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff, description: np-ports-based/testcase18-different-ranges-writing-slightly-bigger allows communication using protocol UDP while np-ports-based/testcase18-different-ranges-writing1 does not. src: kube-system/keepalived-watcher-gzdfm, dst: default/cog-agents-d54st, description: np-ports-based/testcase18-different-ranges-writing-slightly-bigger allows communication using protocol UDP while np-ports-based/testcase18-different-ranges-writing1 does not. src: kube-system/keepalived-watcher-gzdfm, dst: default/cog-agents-js4qc, description: np-ports-based/testcase18-different-ranges-writing-slightly-bigger allows communication using protocol UDP while np-ports-based/testcase18-different-ranges-writing1 does not. src: kube-system/keepalived-watcher-gzdfm, dst: default/cog-agents-qr8gp, description: np-ports-based/testcase18-different-ranges-writing-slightly-bigger allows communication using protocol UDP while np-ports-based/testcase18-different-ranges-writing1 does not. @@ -874,7 +845,6 @@ src: kube-system/keepalived-watcher-gzdfm, dst: vendor-system/barbar-app-vsh47, src: kube-system/keepalived-watcher-gzdfm, dst: vendor-system/foofoo-app-r66p2, description: np-ports-based/testcase18-different-ranges-writing-slightly-bigger allows communication using protocol UDP while np-ports-based/testcase18-different-ranges-writing1 does not. src: kube-system/keepalived-watcher-gzdfm, dst: vendor-system/foofoo-app-zv2ch, description: np-ports-based/testcase18-different-ranges-writing-slightly-bigger allows communication using protocol UDP while np-ports-based/testcase18-different-ranges-writing1 does not. src: kube-system/keepalived-watcher-wczq8, dst: 0.0.0.0-255.255.255.255, description: np-ports-based/testcase18-different-ranges-writing-slightly-bigger allows communication using protocol UDP while np-ports-based/testcase18-different-ranges-writing1 does not. -src: kube-system/keepalived-watcher-wczq8, dst: ::-ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff, description: np-ports-based/testcase18-different-ranges-writing-slightly-bigger allows communication using protocol UDP while np-ports-based/testcase18-different-ranges-writing1 does not. src: kube-system/keepalived-watcher-wczq8, dst: default/cog-agents-d54st, description: np-ports-based/testcase18-different-ranges-writing-slightly-bigger allows communication using protocol UDP while np-ports-based/testcase18-different-ranges-writing1 does not. src: kube-system/keepalived-watcher-wczq8, dst: default/cog-agents-js4qc, description: np-ports-based/testcase18-different-ranges-writing-slightly-bigger allows communication using protocol UDP while np-ports-based/testcase18-different-ranges-writing1 does not. src: kube-system/keepalived-watcher-wczq8, dst: default/cog-agents-qr8gp, description: np-ports-based/testcase18-different-ranges-writing-slightly-bigger allows communication using protocol UDP while np-ports-based/testcase18-different-ranges-writing1 does not. @@ -904,7 +874,6 @@ src: kube-system/keepalived-watcher-wczq8, dst: vendor-system/barbar-app-vsh47, src: kube-system/keepalived-watcher-wczq8, dst: vendor-system/foofoo-app-r66p2, description: np-ports-based/testcase18-different-ranges-writing-slightly-bigger allows communication using protocol UDP while np-ports-based/testcase18-different-ranges-writing1 does not. src: kube-system/keepalived-watcher-wczq8, dst: vendor-system/foofoo-app-zv2ch, description: np-ports-based/testcase18-different-ranges-writing-slightly-bigger allows communication using protocol UDP while np-ports-based/testcase18-different-ranges-writing1 does not. src: kube-system/kube-dns-amd64-d66bf76db-9s486, dst: 0.0.0.0-255.255.255.255, description: np-ports-based/testcase18-different-ranges-writing-slightly-bigger allows communication using protocol UDP while np-ports-based/testcase18-different-ranges-writing1 does not. -src: kube-system/kube-dns-amd64-d66bf76db-9s486, dst: ::-ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff, description: np-ports-based/testcase18-different-ranges-writing-slightly-bigger allows communication using protocol UDP while np-ports-based/testcase18-different-ranges-writing1 does not. src: kube-system/kube-dns-amd64-d66bf76db-9s486, dst: default/cog-agents-d54st, description: np-ports-based/testcase18-different-ranges-writing-slightly-bigger allows communication using protocol UDP while np-ports-based/testcase18-different-ranges-writing1 does not. src: kube-system/kube-dns-amd64-d66bf76db-9s486, dst: default/cog-agents-js4qc, description: np-ports-based/testcase18-different-ranges-writing-slightly-bigger allows communication using protocol UDP while np-ports-based/testcase18-different-ranges-writing1 does not. src: kube-system/kube-dns-amd64-d66bf76db-9s486, dst: default/cog-agents-qr8gp, description: np-ports-based/testcase18-different-ranges-writing-slightly-bigger allows communication using protocol UDP while np-ports-based/testcase18-different-ranges-writing1 does not. @@ -934,7 +903,6 @@ src: kube-system/kube-dns-amd64-d66bf76db-9s486, dst: vendor-system/barbar-app-v src: kube-system/kube-dns-amd64-d66bf76db-9s486, dst: vendor-system/foofoo-app-r66p2, description: np-ports-based/testcase18-different-ranges-writing-slightly-bigger allows communication using protocol UDP while np-ports-based/testcase18-different-ranges-writing1 does not. src: kube-system/kube-dns-amd64-d66bf76db-9s486, dst: vendor-system/foofoo-app-zv2ch, description: np-ports-based/testcase18-different-ranges-writing-slightly-bigger allows communication using protocol UDP while np-ports-based/testcase18-different-ranges-writing1 does not. src: kube-system/kube-dns-amd64-d66bf76db-bbvts, dst: 0.0.0.0-255.255.255.255, description: np-ports-based/testcase18-different-ranges-writing-slightly-bigger allows communication using protocol UDP while np-ports-based/testcase18-different-ranges-writing1 does not. -src: kube-system/kube-dns-amd64-d66bf76db-bbvts, dst: ::-ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff, description: np-ports-based/testcase18-different-ranges-writing-slightly-bigger allows communication using protocol UDP while np-ports-based/testcase18-different-ranges-writing1 does not. src: kube-system/kube-dns-amd64-d66bf76db-bbvts, dst: default/cog-agents-d54st, description: np-ports-based/testcase18-different-ranges-writing-slightly-bigger allows communication using protocol UDP while np-ports-based/testcase18-different-ranges-writing1 does not. src: kube-system/kube-dns-amd64-d66bf76db-bbvts, dst: default/cog-agents-js4qc, description: np-ports-based/testcase18-different-ranges-writing-slightly-bigger allows communication using protocol UDP while np-ports-based/testcase18-different-ranges-writing1 does not. src: kube-system/kube-dns-amd64-d66bf76db-bbvts, dst: default/cog-agents-qr8gp, description: np-ports-based/testcase18-different-ranges-writing-slightly-bigger allows communication using protocol UDP while np-ports-based/testcase18-different-ranges-writing1 does not. @@ -964,7 +932,6 @@ src: kube-system/kube-dns-amd64-d66bf76db-bbvts, dst: vendor-system/barbar-app-v src: kube-system/kube-dns-amd64-d66bf76db-bbvts, dst: vendor-system/foofoo-app-r66p2, description: np-ports-based/testcase18-different-ranges-writing-slightly-bigger allows communication using protocol UDP while np-ports-based/testcase18-different-ranges-writing1 does not. src: kube-system/kube-dns-amd64-d66bf76db-bbvts, dst: vendor-system/foofoo-app-zv2ch, description: np-ports-based/testcase18-different-ranges-writing-slightly-bigger allows communication using protocol UDP while np-ports-based/testcase18-different-ranges-writing1 does not. src: kube-system/kube-dns-autoscaler-78f5fdbd46-zt2sf, dst: 0.0.0.0-255.255.255.255, description: np-ports-based/testcase18-different-ranges-writing-slightly-bigger allows communication using protocol UDP while np-ports-based/testcase18-different-ranges-writing1 does not. -src: kube-system/kube-dns-autoscaler-78f5fdbd46-zt2sf, dst: ::-ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff, description: np-ports-based/testcase18-different-ranges-writing-slightly-bigger allows communication using protocol UDP while np-ports-based/testcase18-different-ranges-writing1 does not. src: kube-system/kube-dns-autoscaler-78f5fdbd46-zt2sf, dst: default/cog-agents-d54st, description: np-ports-based/testcase18-different-ranges-writing-slightly-bigger allows communication using protocol UDP while np-ports-based/testcase18-different-ranges-writing1 does not. src: kube-system/kube-dns-autoscaler-78f5fdbd46-zt2sf, dst: default/cog-agents-js4qc, description: np-ports-based/testcase18-different-ranges-writing-slightly-bigger allows communication using protocol UDP while np-ports-based/testcase18-different-ranges-writing1 does not. src: kube-system/kube-dns-autoscaler-78f5fdbd46-zt2sf, dst: default/cog-agents-qr8gp, description: np-ports-based/testcase18-different-ranges-writing-slightly-bigger allows communication using protocol UDP while np-ports-based/testcase18-different-ranges-writing1 does not. @@ -994,7 +961,6 @@ src: kube-system/kube-dns-autoscaler-78f5fdbd46-zt2sf, dst: vendor-system/barbar src: kube-system/kube-dns-autoscaler-78f5fdbd46-zt2sf, dst: vendor-system/foofoo-app-r66p2, description: np-ports-based/testcase18-different-ranges-writing-slightly-bigger allows communication using protocol UDP while np-ports-based/testcase18-different-ranges-writing1 does not. src: kube-system/kube-dns-autoscaler-78f5fdbd46-zt2sf, dst: vendor-system/foofoo-app-zv2ch, description: np-ports-based/testcase18-different-ranges-writing-slightly-bigger allows communication using protocol UDP while np-ports-based/testcase18-different-ranges-writing1 does not. src: kube-system/kube-fluentd-2qw2g, dst: 0.0.0.0-255.255.255.255, description: np-ports-based/testcase18-different-ranges-writing-slightly-bigger allows communication using protocol UDP while np-ports-based/testcase18-different-ranges-writing1 does not. -src: kube-system/kube-fluentd-2qw2g, dst: ::-ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff, description: np-ports-based/testcase18-different-ranges-writing-slightly-bigger allows communication using protocol UDP while np-ports-based/testcase18-different-ranges-writing1 does not. src: kube-system/kube-fluentd-2qw2g, dst: default/cog-agents-d54st, description: np-ports-based/testcase18-different-ranges-writing-slightly-bigger allows communication using protocol UDP while np-ports-based/testcase18-different-ranges-writing1 does not. src: kube-system/kube-fluentd-2qw2g, dst: default/cog-agents-js4qc, description: np-ports-based/testcase18-different-ranges-writing-slightly-bigger allows communication using protocol UDP while np-ports-based/testcase18-different-ranges-writing1 does not. src: kube-system/kube-fluentd-2qw2g, dst: default/cog-agents-qr8gp, description: np-ports-based/testcase18-different-ranges-writing-slightly-bigger allows communication using protocol UDP while np-ports-based/testcase18-different-ranges-writing1 does not. @@ -1024,7 +990,6 @@ src: kube-system/kube-fluentd-2qw2g, dst: vendor-system/barbar-app-vsh47, descri src: kube-system/kube-fluentd-2qw2g, dst: vendor-system/foofoo-app-r66p2, description: np-ports-based/testcase18-different-ranges-writing-slightly-bigger allows communication using protocol UDP while np-ports-based/testcase18-different-ranges-writing1 does not. src: kube-system/kube-fluentd-2qw2g, dst: vendor-system/foofoo-app-zv2ch, description: np-ports-based/testcase18-different-ranges-writing-slightly-bigger allows communication using protocol UDP while np-ports-based/testcase18-different-ranges-writing1 does not. src: kube-system/kube-fluentd-h6rjg, dst: 0.0.0.0-255.255.255.255, description: np-ports-based/testcase18-different-ranges-writing-slightly-bigger allows communication using protocol UDP while np-ports-based/testcase18-different-ranges-writing1 does not. -src: kube-system/kube-fluentd-h6rjg, dst: ::-ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff, description: np-ports-based/testcase18-different-ranges-writing-slightly-bigger allows communication using protocol UDP while np-ports-based/testcase18-different-ranges-writing1 does not. src: kube-system/kube-fluentd-h6rjg, dst: default/cog-agents-d54st, description: np-ports-based/testcase18-different-ranges-writing-slightly-bigger allows communication using protocol UDP while np-ports-based/testcase18-different-ranges-writing1 does not. src: kube-system/kube-fluentd-h6rjg, dst: default/cog-agents-js4qc, description: np-ports-based/testcase18-different-ranges-writing-slightly-bigger allows communication using protocol UDP while np-ports-based/testcase18-different-ranges-writing1 does not. src: kube-system/kube-fluentd-h6rjg, dst: default/cog-agents-qr8gp, description: np-ports-based/testcase18-different-ranges-writing-slightly-bigger allows communication using protocol UDP while np-ports-based/testcase18-different-ranges-writing1 does not. @@ -1054,7 +1019,6 @@ src: kube-system/kube-fluentd-h6rjg, dst: vendor-system/barbar-app-vsh47, descri src: kube-system/kube-fluentd-h6rjg, dst: vendor-system/foofoo-app-r66p2, description: np-ports-based/testcase18-different-ranges-writing-slightly-bigger allows communication using protocol UDP while np-ports-based/testcase18-different-ranges-writing1 does not. src: kube-system/kube-fluentd-h6rjg, dst: vendor-system/foofoo-app-zv2ch, description: np-ports-based/testcase18-different-ranges-writing-slightly-bigger allows communication using protocol UDP while np-ports-based/testcase18-different-ranges-writing1 does not. src: kube-system/kube-fluentd-qmp4w, dst: 0.0.0.0-255.255.255.255, description: np-ports-based/testcase18-different-ranges-writing-slightly-bigger allows communication using protocol UDP while np-ports-based/testcase18-different-ranges-writing1 does not. -src: kube-system/kube-fluentd-qmp4w, dst: ::-ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff, description: np-ports-based/testcase18-different-ranges-writing-slightly-bigger allows communication using protocol UDP while np-ports-based/testcase18-different-ranges-writing1 does not. src: kube-system/kube-fluentd-qmp4w, dst: default/cog-agents-d54st, description: np-ports-based/testcase18-different-ranges-writing-slightly-bigger allows communication using protocol UDP while np-ports-based/testcase18-different-ranges-writing1 does not. src: kube-system/kube-fluentd-qmp4w, dst: default/cog-agents-js4qc, description: np-ports-based/testcase18-different-ranges-writing-slightly-bigger allows communication using protocol UDP while np-ports-based/testcase18-different-ranges-writing1 does not. src: kube-system/kube-fluentd-qmp4w, dst: default/cog-agents-qr8gp, description: np-ports-based/testcase18-different-ranges-writing-slightly-bigger allows communication using protocol UDP while np-ports-based/testcase18-different-ranges-writing1 does not. @@ -1084,7 +1048,6 @@ src: kube-system/kube-fluentd-qmp4w, dst: vendor-system/barbar-app-vsh47, descri src: kube-system/kube-fluentd-qmp4w, dst: vendor-system/foofoo-app-r66p2, description: np-ports-based/testcase18-different-ranges-writing-slightly-bigger allows communication using protocol UDP while np-ports-based/testcase18-different-ranges-writing1 does not. src: kube-system/kube-fluentd-qmp4w, dst: vendor-system/foofoo-app-zv2ch, description: np-ports-based/testcase18-different-ranges-writing-slightly-bigger allows communication using protocol UDP while np-ports-based/testcase18-different-ranges-writing1 does not. src: kube-system/kubernetes-dashboard-5b5f985bcf-cvg7r, dst: 0.0.0.0-255.255.255.255, description: np-ports-based/testcase18-different-ranges-writing-slightly-bigger allows communication using protocol UDP while np-ports-based/testcase18-different-ranges-writing1 does not. -src: kube-system/kubernetes-dashboard-5b5f985bcf-cvg7r, dst: ::-ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff, description: np-ports-based/testcase18-different-ranges-writing-slightly-bigger allows communication using protocol UDP while np-ports-based/testcase18-different-ranges-writing1 does not. src: kube-system/kubernetes-dashboard-5b5f985bcf-cvg7r, dst: default/cog-agents-d54st, description: np-ports-based/testcase18-different-ranges-writing-slightly-bigger allows communication using protocol UDP while np-ports-based/testcase18-different-ranges-writing1 does not. src: kube-system/kubernetes-dashboard-5b5f985bcf-cvg7r, dst: default/cog-agents-js4qc, description: np-ports-based/testcase18-different-ranges-writing-slightly-bigger allows communication using protocol UDP while np-ports-based/testcase18-different-ranges-writing1 does not. src: kube-system/kubernetes-dashboard-5b5f985bcf-cvg7r, dst: default/cog-agents-qr8gp, description: np-ports-based/testcase18-different-ranges-writing-slightly-bigger allows communication using protocol UDP while np-ports-based/testcase18-different-ranges-writing1 does not. @@ -1114,7 +1077,6 @@ src: kube-system/kubernetes-dashboard-5b5f985bcf-cvg7r, dst: vendor-system/barba src: kube-system/kubernetes-dashboard-5b5f985bcf-cvg7r, dst: vendor-system/foofoo-app-r66p2, description: np-ports-based/testcase18-different-ranges-writing-slightly-bigger allows communication using protocol UDP while np-ports-based/testcase18-different-ranges-writing1 does not. src: kube-system/kubernetes-dashboard-5b5f985bcf-cvg7r, dst: vendor-system/foofoo-app-zv2ch, description: np-ports-based/testcase18-different-ranges-writing-slightly-bigger allows communication using protocol UDP while np-ports-based/testcase18-different-ranges-writing1 does not. src: kube-system/public-cre08b89c167414305a1afb205d0bd346f-alb1-8489b8458f-b9j42, dst: 0.0.0.0-255.255.255.255, description: np-ports-based/testcase18-different-ranges-writing-slightly-bigger allows communication using protocol UDP while np-ports-based/testcase18-different-ranges-writing1 does not. -src: kube-system/public-cre08b89c167414305a1afb205d0bd346f-alb1-8489b8458f-b9j42, dst: ::-ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff, description: np-ports-based/testcase18-different-ranges-writing-slightly-bigger allows communication using protocol UDP while np-ports-based/testcase18-different-ranges-writing1 does not. src: kube-system/public-cre08b89c167414305a1afb205d0bd346f-alb1-8489b8458f-b9j42, dst: default/cog-agents-d54st, description: np-ports-based/testcase18-different-ranges-writing-slightly-bigger allows communication using protocol UDP while np-ports-based/testcase18-different-ranges-writing1 does not. src: kube-system/public-cre08b89c167414305a1afb205d0bd346f-alb1-8489b8458f-b9j42, dst: default/cog-agents-js4qc, description: np-ports-based/testcase18-different-ranges-writing-slightly-bigger allows communication using protocol UDP while np-ports-based/testcase18-different-ranges-writing1 does not. src: kube-system/public-cre08b89c167414305a1afb205d0bd346f-alb1-8489b8458f-b9j42, dst: default/cog-agents-qr8gp, description: np-ports-based/testcase18-different-ranges-writing-slightly-bigger allows communication using protocol UDP while np-ports-based/testcase18-different-ranges-writing1 does not. @@ -1144,7 +1106,6 @@ src: kube-system/public-cre08b89c167414305a1afb205d0bd346f-alb1-8489b8458f-b9j42 src: kube-system/public-cre08b89c167414305a1afb205d0bd346f-alb1-8489b8458f-b9j42, dst: vendor-system/foofoo-app-r66p2, description: np-ports-based/testcase18-different-ranges-writing-slightly-bigger allows communication using protocol UDP while np-ports-based/testcase18-different-ranges-writing1 does not. src: kube-system/public-cre08b89c167414305a1afb205d0bd346f-alb1-8489b8458f-b9j42, dst: vendor-system/foofoo-app-zv2ch, description: np-ports-based/testcase18-different-ranges-writing-slightly-bigger allows communication using protocol UDP while np-ports-based/testcase18-different-ranges-writing1 does not. src: kube-system/public-cre08b89c167414305a1afb205d0bd346f-alb1-8489b8458f-hctcv, dst: 0.0.0.0-255.255.255.255, description: np-ports-based/testcase18-different-ranges-writing-slightly-bigger allows communication using protocol UDP while np-ports-based/testcase18-different-ranges-writing1 does not. -src: kube-system/public-cre08b89c167414305a1afb205d0bd346f-alb1-8489b8458f-hctcv, dst: ::-ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff, description: np-ports-based/testcase18-different-ranges-writing-slightly-bigger allows communication using protocol UDP while np-ports-based/testcase18-different-ranges-writing1 does not. src: kube-system/public-cre08b89c167414305a1afb205d0bd346f-alb1-8489b8458f-hctcv, dst: default/cog-agents-d54st, description: np-ports-based/testcase18-different-ranges-writing-slightly-bigger allows communication using protocol UDP while np-ports-based/testcase18-different-ranges-writing1 does not. src: kube-system/public-cre08b89c167414305a1afb205d0bd346f-alb1-8489b8458f-hctcv, dst: default/cog-agents-js4qc, description: np-ports-based/testcase18-different-ranges-writing-slightly-bigger allows communication using protocol UDP while np-ports-based/testcase18-different-ranges-writing1 does not. src: kube-system/public-cre08b89c167414305a1afb205d0bd346f-alb1-8489b8458f-hctcv, dst: default/cog-agents-qr8gp, description: np-ports-based/testcase18-different-ranges-writing-slightly-bigger allows communication using protocol UDP while np-ports-based/testcase18-different-ranges-writing1 does not. @@ -1174,7 +1135,6 @@ src: kube-system/public-cre08b89c167414305a1afb205d0bd346f-alb1-8489b8458f-hctcv src: kube-system/public-cre08b89c167414305a1afb205d0bd346f-alb1-8489b8458f-hctcv, dst: vendor-system/foofoo-app-r66p2, description: np-ports-based/testcase18-different-ranges-writing-slightly-bigger allows communication using protocol UDP while np-ports-based/testcase18-different-ranges-writing1 does not. src: kube-system/public-cre08b89c167414305a1afb205d0bd346f-alb1-8489b8458f-hctcv, dst: vendor-system/foofoo-app-zv2ch, description: np-ports-based/testcase18-different-ranges-writing-slightly-bigger allows communication using protocol UDP while np-ports-based/testcase18-different-ranges-writing1 does not. src: kube-system/storage-watcher-8494b4b8bb-f8csd, dst: 0.0.0.0-255.255.255.255, description: np-ports-based/testcase18-different-ranges-writing-slightly-bigger allows communication using protocol UDP while np-ports-based/testcase18-different-ranges-writing1 does not. -src: kube-system/storage-watcher-8494b4b8bb-f8csd, dst: ::-ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff, description: np-ports-based/testcase18-different-ranges-writing-slightly-bigger allows communication using protocol UDP while np-ports-based/testcase18-different-ranges-writing1 does not. src: kube-system/storage-watcher-8494b4b8bb-f8csd, dst: default/cog-agents-d54st, description: np-ports-based/testcase18-different-ranges-writing-slightly-bigger allows communication using protocol UDP while np-ports-based/testcase18-different-ranges-writing1 does not. src: kube-system/storage-watcher-8494b4b8bb-f8csd, dst: default/cog-agents-js4qc, description: np-ports-based/testcase18-different-ranges-writing-slightly-bigger allows communication using protocol UDP while np-ports-based/testcase18-different-ranges-writing1 does not. src: kube-system/storage-watcher-8494b4b8bb-f8csd, dst: default/cog-agents-qr8gp, description: np-ports-based/testcase18-different-ranges-writing-slightly-bigger allows communication using protocol UDP while np-ports-based/testcase18-different-ranges-writing1 does not. @@ -1204,7 +1164,6 @@ src: kube-system/storage-watcher-8494b4b8bb-f8csd, dst: vendor-system/barbar-app src: kube-system/storage-watcher-8494b4b8bb-f8csd, dst: vendor-system/foofoo-app-r66p2, description: np-ports-based/testcase18-different-ranges-writing-slightly-bigger allows communication using protocol UDP while np-ports-based/testcase18-different-ranges-writing1 does not. src: kube-system/storage-watcher-8494b4b8bb-f8csd, dst: vendor-system/foofoo-app-zv2ch, description: np-ports-based/testcase18-different-ranges-writing-slightly-bigger allows communication using protocol UDP while np-ports-based/testcase18-different-ranges-writing1 does not. src: kube-system/tiller-deploy-5c45c9966b-nqwz6, dst: 0.0.0.0-255.255.255.255, description: np-ports-based/testcase18-different-ranges-writing-slightly-bigger allows communication using protocol UDP while np-ports-based/testcase18-different-ranges-writing1 does not. -src: kube-system/tiller-deploy-5c45c9966b-nqwz6, dst: ::-ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff, description: np-ports-based/testcase18-different-ranges-writing-slightly-bigger allows communication using protocol UDP while np-ports-based/testcase18-different-ranges-writing1 does not. src: kube-system/tiller-deploy-5c45c9966b-nqwz6, dst: default/cog-agents-d54st, description: np-ports-based/testcase18-different-ranges-writing-slightly-bigger allows communication using protocol UDP while np-ports-based/testcase18-different-ranges-writing1 does not. src: kube-system/tiller-deploy-5c45c9966b-nqwz6, dst: default/cog-agents-js4qc, description: np-ports-based/testcase18-different-ranges-writing-slightly-bigger allows communication using protocol UDP while np-ports-based/testcase18-different-ranges-writing1 does not. src: kube-system/tiller-deploy-5c45c9966b-nqwz6, dst: default/cog-agents-qr8gp, description: np-ports-based/testcase18-different-ranges-writing-slightly-bigger allows communication using protocol UDP while np-ports-based/testcase18-different-ranges-writing1 does not. @@ -1234,7 +1193,6 @@ src: kube-system/tiller-deploy-5c45c9966b-nqwz6, dst: vendor-system/barbar-app-v src: kube-system/tiller-deploy-5c45c9966b-nqwz6, dst: vendor-system/foofoo-app-r66p2, description: np-ports-based/testcase18-different-ranges-writing-slightly-bigger allows communication using protocol UDP while np-ports-based/testcase18-different-ranges-writing1 does not. src: kube-system/tiller-deploy-5c45c9966b-nqwz6, dst: vendor-system/foofoo-app-zv2ch, description: np-ports-based/testcase18-different-ranges-writing-slightly-bigger allows communication using protocol UDP while np-ports-based/testcase18-different-ranges-writing1 does not. src: kube-system/vpn-858f6d9777-2bw5m, dst: 0.0.0.0-255.255.255.255, description: np-ports-based/testcase18-different-ranges-writing-slightly-bigger allows communication using protocol UDP while np-ports-based/testcase18-different-ranges-writing1 does not. -src: kube-system/vpn-858f6d9777-2bw5m, dst: ::-ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff, description: np-ports-based/testcase18-different-ranges-writing-slightly-bigger allows communication using protocol UDP while np-ports-based/testcase18-different-ranges-writing1 does not. src: kube-system/vpn-858f6d9777-2bw5m, dst: default/cog-agents-d54st, description: np-ports-based/testcase18-different-ranges-writing-slightly-bigger allows communication using protocol UDP while np-ports-based/testcase18-different-ranges-writing1 does not. src: kube-system/vpn-858f6d9777-2bw5m, dst: default/cog-agents-js4qc, description: np-ports-based/testcase18-different-ranges-writing-slightly-bigger allows communication using protocol UDP while np-ports-based/testcase18-different-ranges-writing1 does not. src: kube-system/vpn-858f6d9777-2bw5m, dst: default/cog-agents-qr8gp, description: np-ports-based/testcase18-different-ranges-writing-slightly-bigger allows communication using protocol UDP while np-ports-based/testcase18-different-ranges-writing1 does not. @@ -1262,4 +1220,4 @@ src: kube-system/vpn-858f6d9777-2bw5m, dst: kube-system/tiller-deploy-5c45c9966b src: kube-system/vpn-858f6d9777-2bw5m, dst: vendor-system/barbar-app-lp6tw, description: np-ports-based/testcase18-different-ranges-writing-slightly-bigger allows communication using protocol UDP while np-ports-based/testcase18-different-ranges-writing1 does not. src: kube-system/vpn-858f6d9777-2bw5m, dst: vendor-system/barbar-app-vsh47, description: np-ports-based/testcase18-different-ranges-writing-slightly-bigger allows communication using protocol UDP while np-ports-based/testcase18-different-ranges-writing1 does not. src: kube-system/vpn-858f6d9777-2bw5m, dst: vendor-system/foofoo-app-r66p2, description: np-ports-based/testcase18-different-ranges-writing-slightly-bigger allows communication using protocol UDP while np-ports-based/testcase18-different-ranges-writing1 does not. -src: kube-system/vpn-858f6d9777-2bw5m, dst: vendor-system/foofoo-app-zv2ch, description: np-ports-based/testcase18-different-ranges-writing-slightly-bigger allows communication using protocol UDP while np-ports-based/testcase18-different-ranges-writing1 does not. +src: kube-system/vpn-858f6d9777-2bw5m, dst: vendor-system/foofoo-app-zv2ch, description: np-ports-based/testcase18-different-ranges-writing-slightly-bigger allows communication using protocol UDP while np-ports-based/testcase18-different-ranges-writing1 does not. \ No newline at end of file diff --git a/tests/calico_testcases/expected_output/testcase19-connectivity_map_with_labels_to_apply.txt b/tests/calico_testcases/expected_output/testcase19-connectivity_map_with_labels_to_apply.txt index d3c4f589..94f0bdcb 100644 --- a/tests/calico_testcases/expected_output/testcase19-connectivity_map_with_labels_to_apply.txt +++ b/tests/calico_testcases/expected_output/testcase19-connectivity_map_with_labels_to_apply.txt @@ -1,7 +1,5 @@ final fw rules for query: connectivity_map_with_labels_to_apply, config: np9-cnc-fe-between-namespaces-with-label-to-apply: src: 0.0.0.0/0 dst_ns: [acc-research,blue-umbrella,cap-agent,cap-unauth,chaos-testing,cnc-clntn-mgmt,cnc-kt,cnc-nlp,cnc-ntsgin,cnc-pdf-tool,cnc-tooling,ctighs,ctighs-va,operia-benchmark,vtngc-data] dst_pods: [*] conn: All connections -src: ::/0 dst_ns: [acc-research,blue-umbrella,cap-agent,cap-unauth,chaos-testing,cnc-clntn-mgmt,cnc-kt,cnc-nlp,cnc-ntsgin,cnc-pdf-tool,cnc-tooling,ctighs,ctighs-va,operia-benchmark,vtngc-data] dst_pods: [*] conn: All connections src_ns: [acc-research,blue-umbrella,cap-agent,cap-unauth,chaos-testing,cnc-clntn-mgmt,cnc-kt,cnc-nlp,cnc-ntsgin,cnc-pdf-tool,cnc-tooling,ctighs,ctighs-va,operia-benchmark,vtngc-data] src_pods: [*] dst: 0.0.0.0/0 conn: All connections -src_ns: [acc-research,blue-umbrella,cap-agent,cap-unauth,chaos-testing,cnc-clntn-mgmt,cnc-kt,cnc-nlp,cnc-ntsgin,cnc-pdf-tool,cnc-tooling,ctighs,ctighs-va,operia-benchmark,vtngc-data] src_pods: [*] dst: ::/0 conn: All connections src_ns: [acc-research,blue-umbrella,cap-agent,cap-unauth,chaos-testing,cnc-clntn-mgmt,cnc-kt,cnc-nlp,cnc-ntsgin,cnc-pdf-tool,cnc-tooling,ctighs,ctighs-va,operia-benchmark,vtngc-data] src_pods: [*] dst_ns: [acc-research,blue-umbrella,cap-agent,cap-unauth,chaos-testing,cnc-clntn-mgmt,cnc-kt,cnc-nlp,cnc-ntsgin,cnc-pdf-tool,cnc-tooling,ctighs,ctighs-va,operia-benchmark,vtngc-data] dst_pods: [*] conn: All connections src_ns: [acc-research,operia-benchmark] src_pods: [*] dst_ns: [cnc-fe] dst_pods: [*] conn: All connections diff --git a/tests/calico_testcases/expected_output/testcase25_mix_k8s_calico_connectivity_map_1.txt b/tests/calico_testcases/expected_output/testcase25_mix_k8s_calico_connectivity_map_1.txt index 1399a068..2fc1ea66 100644 --- a/tests/calico_testcases/expected_output/testcase25_mix_k8s_calico_connectivity_map_1.txt +++ b/tests/calico_testcases/expected_output/testcase25_mix_k8s_calico_connectivity_map_1.txt @@ -1,10 +1,7 @@ final fw rules for query: connectivity_1, config: testcase25-config-1/kube-system/testcase25-networkpolicy: src: 0.0.0.0/0 dst_ns: [default,kube-system,vendor-system] dst_pods: [*] conn: All connections -src: ::/0 dst_ns: [default,kube-system,vendor-system] dst_pods: [*] conn: All connections src_ns: [default,vendor-system] src_pods: [*] dst: 0.0.0.0/0 conn: All connections -src_ns: [default,vendor-system] src_pods: [*] dst: ::/0 conn: All connections src_ns: [default,vendor-system] src_pods: [*] dst_ns: [default,kube-system,vendor-system] dst_pods: [*] conn: All connections src_ns: [kube-system] src_pods: [!has(app) or (has(app) and app!=kube-fluentd)] dst: 0.0.0.0/0 conn: All connections -src_ns: [kube-system] src_pods: [!has(app) or (has(app) and app!=kube-fluentd)] dst: ::/0 conn: All connections src_ns: [kube-system] src_pods: [!has(app) or (has(app) and app!=kube-fluentd)] dst_ns: [default,kube-system,vendor-system] dst_pods: [*] conn: All connections src_ns: [kube-system] src_pods: [*] dst_ns: [kube-system] dst_pods: [tier=frontend] conn: All connections diff --git a/tests/calico_testcases/expected_output/testcase25_mix_k8s_calico_connectivity_map_2.txt b/tests/calico_testcases/expected_output/testcase25_mix_k8s_calico_connectivity_map_2.txt index 10ff211e..9a6c885c 100644 --- a/tests/calico_testcases/expected_output/testcase25_mix_k8s_calico_connectivity_map_2.txt +++ b/tests/calico_testcases/expected_output/testcase25_mix_k8s_calico_connectivity_map_2.txt @@ -1,10 +1,7 @@ final fw rules for query: connectivity_2, config: testcase25-config-1/kube-system/testcase25-networkpolicy: src: 0.0.0.0/0 dst_ns: [default,vendor-system] dst_pods: [*] conn: All connections src: 0.0.0.0/0 dst_ns: [kube-system] dst_pods: [!has(tier)] conn: All connections -src: ::/0 dst_ns: [default,vendor-system] dst_pods: [*] conn: All connections -src: ::/0 dst_ns: [kube-system] dst_pods: [!has(tier)] conn: All connections src_ns: [default,kube-system,vendor-system] src_pods: [*] dst: 0.0.0.0/0 conn: All connections -src_ns: [default,kube-system,vendor-system] src_pods: [*] dst: ::/0 conn: All connections src_ns: [default,kube-system,vendor-system] src_pods: [*] dst_ns: [default,vendor-system] dst_pods: [*] conn: All connections src_ns: [default,kube-system,vendor-system] src_pods: [*] dst_ns: [kube-system] dst_pods: [!has(tier)] conn: All connections src_ns: [kube-system] src_pods: [app=kube-fluentd] dst_ns: [kube-system] dst_pods: [*] conn: TCP diff --git a/tests/calico_testcases/expected_output/testcase26-config-1-k8s-calico-istio-ingress-2_connectivity_map.txt b/tests/calico_testcases/expected_output/testcase26-config-1-k8s-calico-istio-ingress-2_connectivity_map.txt index 9c4ddfcf..62fcb143 100644 --- a/tests/calico_testcases/expected_output/testcase26-config-1-k8s-calico-istio-ingress-2_connectivity_map.txt +++ b/tests/calico_testcases/expected_output/testcase26-config-1-k8s-calico-istio-ingress-2_connectivity_map.txt @@ -1,6 +1,5 @@ For connections of type TCP, final fw rules for query: connectivity-6, config: testcase26-config-1-k8s-calico-istio-ingress-2: src: 0.0.0.0/0 dst_ns: [ingress-nginx] dst_pods: [*] conn: All connections -src: ::/0 dst_ns: [ingress-nginx] dst_pods: [*] conn: All connections src_ns: [default] src_pods: [ratings-v1-b6994bb9] dst_ns: [default] dst_pods: [productpage-v1-6b746f74dc] conn: TCP {'methods': 'GET'} src_ns: [ingress-nginx] src_pods: [*] dst_ns: [default] dst_pods: [details-v1-79f774bdb9] conn: TCP {'dst_ports': '9080', 'paths': '/details(/[\\--9A-Z_a-z]*)?'} src_ns: [ingress-nginx] src_pods: [*] dst_ns: [ingress-nginx] dst_pods: [*] conn: All connections @@ -9,4 +8,4 @@ src_ns: [istio-system] src_pods: [*] dst_ns: [istio-system] dst_pods: [*] conn: For connections of type non-TCP, final fw rules for query: connectivity-6, config: testcase26-config-1-k8s-calico-istio-ingress-2: src_ns: [default] src_pods: [ratings-v1-b6994bb9] dst_ns: [default] dst_pods: [productpage-v1-6b746f74dc] conn: UDP src_ns: [ingress-nginx] src_pods: [*] dst_ns: [ingress-nginx] dst_pods: [*] conn: All connections -src_ns: [istio-system] src_pods: [*] dst_ns: [istio-system] dst_pods: [*] conn: All connections +src_ns: [istio-system] src_pods: [*] dst_ns: [istio-system] dst_pods: [*] conn: All connections \ No newline at end of file diff --git a/tests/calico_testcases/expected_output/testcase26-config-1-k8s-istio-ingress_connectivity_map.txt b/tests/calico_testcases/expected_output/testcase26-config-1-k8s-istio-ingress_connectivity_map.txt index 24f62769..e99dd381 100644 --- a/tests/calico_testcases/expected_output/testcase26-config-1-k8s-istio-ingress_connectivity_map.txt +++ b/tests/calico_testcases/expected_output/testcase26-config-1-k8s-istio-ingress_connectivity_map.txt @@ -1,12 +1,9 @@ For connections of type TCP, final fw rules for query: connectivity-2, config: testcase26-config-1-k8s-istio-ingress: src: 0.0.0.0/0 dst_ns: [default] dst_pods: [app!=productpage] conn: All connections src: 0.0.0.0/0 dst_ns: [ingress-nginx,istio-system] dst_pods: [*] conn: All connections -src: ::/0 dst_ns: [default] dst_pods: [app!=productpage] conn: All connections -src: ::/0 dst_ns: [ingress-nginx,istio-system] dst_pods: [*] conn: All connections src_ns: [default,istio-system] src_pods: [*] dst_ns: [default] dst_pods: [ratings-v1-b6994bb9] conn: All connections src_ns: [default] src_pods: [app in (details,reviews)] dst_ns: [default] dst_pods: [app=reviews] conn: All connections src_ns: [default] src_pods: [app!=ratings] dst: 0.0.0.0/0 conn: All connections -src_ns: [default] src_pods: [app!=ratings] dst: ::/0 conn: All connections src_ns: [default] src_pods: [app!=ratings] dst_ns: [ingress-nginx,istio-system] dst_pods: [*] conn: All connections src_ns: [default] src_pods: [app=reviews] dst_ns: [default] dst_pods: [details-v1-79f774bdb9] conn: All connections src_ns: [default] src_pods: [productpage-v1-6b746f74dc] dst_ns: [default] dst_pods: [*] conn: All connections @@ -14,18 +11,14 @@ src_ns: [default] src_pods: [ratings-v1-b6994bb9] dst_ns: [default] dst_pods: [p src_ns: [ingress-nginx,istio-system] src_pods: [*] dst_ns: [ingress-nginx] dst_pods: [*] conn: All connections src_ns: [ingress-nginx] src_pods: [*] dst_ns: [default] dst_pods: [details-v1-79f774bdb9] conn: TCP {'dst_ports': '9080', 'paths': '/details(/[\\--9A-Z_a-z]*)?'} src_ns: [istio-system] src_pods: [*] dst: 0.0.0.0/0 conn: All connections -src_ns: [istio-system] src_pods: [*] dst: ::/0 conn: All connections src_ns: [istio-system] src_pods: [*] dst_ns: [default] dst_pods: [app in (details,reviews)] conn: All connections src_ns: [istio-system] src_pods: [*] dst_ns: [istio-system] dst_pods: [*] conn: All connections For connections of type non-TCP, final fw rules for query: connectivity-2, config: testcase26-config-1-k8s-istio-ingress: src: 0.0.0.0/0 dst_ns: [default,ingress-nginx,istio-system] dst_pods: [*] conn: All connections -src: ::/0 dst_ns: [default,ingress-nginx,istio-system] dst_pods: [*] conn: All connections src_ns: [default] src_pods: [*] dst_ns: [default] dst_pods: [app in (productpage,ratings)] conn: All connections src_ns: [default] src_pods: [app!=ratings] dst: 0.0.0.0/0 conn: All connections -src_ns: [default] src_pods: [app!=ratings] dst: ::/0 conn: All connections src_ns: [default] src_pods: [app!=ratings] dst_ns: [default,ingress-nginx,istio-system] dst_pods: [*] conn: All connections src_ns: [ingress-nginx,istio-system] src_pods: [*] dst_ns: [ingress-nginx] dst_pods: [*] conn: All connections src_ns: [istio-system] src_pods: [*] dst: 0.0.0.0/0 conn: All connections -src_ns: [istio-system] src_pods: [*] dst: ::/0 conn: All connections -src_ns: [istio-system] src_pods: [*] dst_ns: [default,istio-system] dst_pods: [*] conn: All connections +src_ns: [istio-system] src_pods: [*] dst_ns: [default,istio-system] dst_pods: [*] conn: All connections \ No newline at end of file diff --git a/tests/calico_testcases/expected_output/testcase26-config-no-policies-connectivity-map.txt b/tests/calico_testcases/expected_output/testcase26-config-no-policies-connectivity-map.txt index 20d689fa..07c663d1 100644 --- a/tests/calico_testcases/expected_output/testcase26-config-no-policies-connectivity-map.txt +++ b/tests/calico_testcases/expected_output/testcase26-config-no-policies-connectivity-map.txt @@ -1,6 +1,4 @@ final fw rules for query: connectivity-1, config: testcase26-config-no-policies: src: 0.0.0.0/0 dst_ns: [default,ingress-nginx,istio-system] dst_pods: [*] conn: All connections -src: ::/0 dst_ns: [default,ingress-nginx,istio-system] dst_pods: [*] conn: All connections src_ns: [default,ingress-nginx,istio-system] src_pods: [*] dst: 0.0.0.0/0 conn: All connections -src_ns: [default,ingress-nginx,istio-system] src_pods: [*] dst: ::/0 conn: All connections src_ns: [default,ingress-nginx,istio-system] src_pods: [*] dst_ns: [default,ingress-nginx,istio-system] dst_pods: [*] conn: All connections diff --git a/tests/calico_testcases/expected_output/testcase26-semanticDiff-config-1-calico-ingress-config-allow-all.txt b/tests/calico_testcases/expected_output/testcase26-semanticDiff-config-1-calico-ingress-config-allow-all.txt index b2d84e6e..864d43ea 100644 --- a/tests/calico_testcases/expected_output/testcase26-semanticDiff-config-1-calico-ingress-config-allow-all.txt +++ b/tests/calico_testcases/expected_output/testcase26-semanticDiff-config-1-calico-ingress-config-allow-all.txt @@ -10,6 +10,4 @@ src_ns: [ingress-nginx] src_pods: [*] dst_ns: [default] dst_pods: [app in (ratin Added connections between persistent peers and ipBlocks (based on topology from config: allow-all-config) : src: 0.0.0.0/0 dst_ns: [default] dst_pods: [productpage-v1-6b746f74dc] conn: All connections -src: ::/0 dst_ns: [default] dst_pods: [productpage-v1-6b746f74dc] conn: All connections -src_ns: [ingress-nginx] src_pods: [*] dst: 0.0.0.0/0 conn: All connections -src_ns: [ingress-nginx] src_pods: [*] dst: ::/0 conn: All connections +src_ns: [ingress-nginx] src_pods: [*] dst: 0.0.0.0/0 conn: All connections \ No newline at end of file diff --git a/tests/calico_testcases/expected_output/testcase8-semantic-diff-query.txt b/tests/calico_testcases/expected_output/testcase8-semantic-diff-query.txt index 4ec3dfbb..af94438a 100644 --- a/tests/calico_testcases/expected_output/testcase8-semantic-diff-query.txt +++ b/tests/calico_testcases/expected_output/testcase8-semantic-diff-query.txt @@ -7,6 +7,4 @@ src_ns: [kube-system] src_pods: [app=kube-fluentd] dst_ns: [kube-system] dst_pod Added connections between persistent peers and ipBlocks (based on topology from config: global-allow-all) : src: 0.0.0.0/0 dst_ns: [kube-system] dst_pods: [app=kube-fluentd] conn: All connections -src: ::/0 dst_ns: [kube-system] dst_pods: [app=kube-fluentd] conn: All connections -src_ns: [kube-system] src_pods: [app=kube-fluentd] dst: 0.0.0.0/0 conn: All connections -src_ns: [kube-system] src_pods: [app=kube-fluentd] dst: ::/0 conn: All connections +src_ns: [kube-system] src_pods: [app=kube-fluentd] dst: 0.0.0.0/0 conn: All connections \ No newline at end of file diff --git a/tests/expected_cmdline_output_files/basic_connectivity_csv_query_output.txt b/tests/expected_cmdline_output_files/basic_connectivity_csv_query_output.txt index e8116102..58972124 100644 --- a/tests/expected_cmdline_output_files/basic_connectivity_csv_query_output.txt +++ b/tests/expected_cmdline_output_files/basic_connectivity_csv_query_output.txt @@ -1,7 +1,5 @@ "query","src_ns","src_pods","dst_ns","dst_pods","connection", ", config: testcase8-networkpolicy1.yaml","","","","","", "","","0.0.0.0/0","[default,kube-system,kube-system-dummy-to-ignore,vendor-system]","[*]","All connections", -"","","::/0","[default,kube-system,kube-system-dummy-to-ignore,vendor-system]","[*]","All connections", "","[default,kube-system,kube-system-dummy-to-ignore,vendor-system]","[*]","","0.0.0.0/0","All connections", -"","[default,kube-system,kube-system-dummy-to-ignore,vendor-system]","[*]","","::/0","All connections", -"","[default,kube-system,kube-system-dummy-to-ignore,vendor-system]","[*]","[default,kube-system,kube-system-dummy-to-ignore,vendor-system]","[*]","All connections", +"","[default,kube-system,kube-system-dummy-to-ignore,vendor-system]","[*]","[default,kube-system,kube-system-dummy-to-ignore,vendor-system]","[*]","All connections", \ No newline at end of file diff --git a/tests/expected_cmdline_output_files/basic_connectivity_dot_query_output.txt b/tests/expected_cmdline_output_files/basic_connectivity_dot_query_output.txt index 47a24441..81d1f943 100644 --- a/tests/expected_cmdline_output_files/basic_connectivity_dot_query_output.txt +++ b/tests/expected_cmdline_output_files/basic_connectivity_dot_query_output.txt @@ -1,7 +1,6 @@ // The Connectivity Graph of testcase8-networkpolicy1.yaml digraph { "0.0.0.0/0" [label="0.0.0.0/0" color="red2" fontcolor="red2"] - "::/0" [label="::/0" color="red2" fontcolor="red2"] "default/cog-agents(DaemonSet)" [label="default/cog-agents(DaemonSet)" color="blue" fontcolor="blue"] "default/cog-local-analyzer(Deployment-StatefulSet)" [label="default/cog-local-analyzer(Deployment-StatefulSet)" color="blue" fontcolor="blue"] "kube-system-dummy-to-ignore/calico-kube-controllers(Deployment-StatefulSet)" [label="kube-system-dummy-to-ignore/calico-kube-controllers(Deployment-StatefulSet)" color="blue" fontcolor="blue"] @@ -36,25 +35,7 @@ digraph { "0.0.0.0/0" -> "kube-system/vpn(Deployment-StatefulSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] "0.0.0.0/0" -> "vendor-system/barbar-app(ReplicaSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] "0.0.0.0/0" -> "vendor-system/foofoo-app(ReplicaSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] - "::/0" -> "default/cog-agents(DaemonSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] - "::/0" -> "default/cog-local-analyzer(Deployment-StatefulSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] - "::/0" -> "kube-system-dummy-to-ignore/calico-kube-controllers(Deployment-StatefulSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] - "::/0" -> "kube-system-dummy-to-ignore/kube-dns-amd64(Deployment-StatefulSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] - "::/0" -> "kube-system-dummy-to-ignore/kube-dns-autoscaler(Deployment-StatefulSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] - "::/0" -> "kube-system-dummy-to-ignore/kubernetes-dashboard(Deployment-StatefulSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] - "::/0" -> "kube-system-dummy-to-ignore/public-cre08b89c167414305a1afb205d0bd346f-alb1(Deployment-StatefulSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] - "::/0" -> "kube-system/calico-node(DaemonSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] - "::/0" -> "kube-system/file-plugin(Deployment-StatefulSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] - "::/0" -> "kube-system/heapster(Deployment-StatefulSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] - "::/0" -> "kube-system/keepalived-watcher(DaemonSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] - "::/0" -> "kube-system/kube-fluentd(DaemonSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] - "::/0" -> "kube-system/storage-watcher(Deployment-StatefulSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] - "::/0" -> "kube-system/tiller-deploy(Deployment-StatefulSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] - "::/0" -> "kube-system/vpn(Deployment-StatefulSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] - "::/0" -> "vendor-system/barbar-app(ReplicaSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] - "::/0" -> "vendor-system/foofoo-app(ReplicaSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] "default/cog-agents(DaemonSet)" -> "0.0.0.0/0" [label="All connections" color="gold2" fontcolor="darkgreen"] - "default/cog-agents(DaemonSet)" -> "::/0" [label="All connections" color="gold2" fontcolor="darkgreen"] "default/cog-agents(DaemonSet)" -> "default/cog-agents(DaemonSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] "default/cog-agents(DaemonSet)" -> "default/cog-local-analyzer(Deployment-StatefulSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] "default/cog-agents(DaemonSet)" -> "kube-system-dummy-to-ignore/calico-kube-controllers(Deployment-StatefulSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] @@ -73,7 +54,6 @@ digraph { "default/cog-agents(DaemonSet)" -> "vendor-system/barbar-app(ReplicaSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] "default/cog-agents(DaemonSet)" -> "vendor-system/foofoo-app(ReplicaSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] "default/cog-local-analyzer(Deployment-StatefulSet)" -> "0.0.0.0/0" [label="All connections" color="gold2" fontcolor="darkgreen"] - "default/cog-local-analyzer(Deployment-StatefulSet)" -> "::/0" [label="All connections" color="gold2" fontcolor="darkgreen"] "default/cog-local-analyzer(Deployment-StatefulSet)" -> "default/cog-agents(DaemonSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] "default/cog-local-analyzer(Deployment-StatefulSet)" -> "kube-system-dummy-to-ignore/calico-kube-controllers(Deployment-StatefulSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] "default/cog-local-analyzer(Deployment-StatefulSet)" -> "kube-system-dummy-to-ignore/kube-dns-amd64(Deployment-StatefulSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] @@ -91,7 +71,6 @@ digraph { "default/cog-local-analyzer(Deployment-StatefulSet)" -> "vendor-system/barbar-app(ReplicaSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] "default/cog-local-analyzer(Deployment-StatefulSet)" -> "vendor-system/foofoo-app(ReplicaSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] "kube-system-dummy-to-ignore/calico-kube-controllers(Deployment-StatefulSet)" -> "0.0.0.0/0" [label="All connections" color="gold2" fontcolor="darkgreen"] - "kube-system-dummy-to-ignore/calico-kube-controllers(Deployment-StatefulSet)" -> "::/0" [label="All connections" color="gold2" fontcolor="darkgreen"] "kube-system-dummy-to-ignore/calico-kube-controllers(Deployment-StatefulSet)" -> "default/cog-agents(DaemonSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] "kube-system-dummy-to-ignore/calico-kube-controllers(Deployment-StatefulSet)" -> "default/cog-local-analyzer(Deployment-StatefulSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] "kube-system-dummy-to-ignore/calico-kube-controllers(Deployment-StatefulSet)" -> "kube-system-dummy-to-ignore/kube-dns-amd64(Deployment-StatefulSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] @@ -109,7 +88,6 @@ digraph { "kube-system-dummy-to-ignore/calico-kube-controllers(Deployment-StatefulSet)" -> "vendor-system/barbar-app(ReplicaSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] "kube-system-dummy-to-ignore/calico-kube-controllers(Deployment-StatefulSet)" -> "vendor-system/foofoo-app(ReplicaSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] "kube-system-dummy-to-ignore/kube-dns-amd64(Deployment-StatefulSet)" -> "0.0.0.0/0" [label="All connections" color="gold2" fontcolor="darkgreen"] - "kube-system-dummy-to-ignore/kube-dns-amd64(Deployment-StatefulSet)" -> "::/0" [label="All connections" color="gold2" fontcolor="darkgreen"] "kube-system-dummy-to-ignore/kube-dns-amd64(Deployment-StatefulSet)" -> "default/cog-agents(DaemonSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] "kube-system-dummy-to-ignore/kube-dns-amd64(Deployment-StatefulSet)" -> "default/cog-local-analyzer(Deployment-StatefulSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] "kube-system-dummy-to-ignore/kube-dns-amd64(Deployment-StatefulSet)" -> "kube-system-dummy-to-ignore/calico-kube-controllers(Deployment-StatefulSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] @@ -128,7 +106,6 @@ digraph { "kube-system-dummy-to-ignore/kube-dns-amd64(Deployment-StatefulSet)" -> "vendor-system/barbar-app(ReplicaSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] "kube-system-dummy-to-ignore/kube-dns-amd64(Deployment-StatefulSet)" -> "vendor-system/foofoo-app(ReplicaSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] "kube-system-dummy-to-ignore/kube-dns-autoscaler(Deployment-StatefulSet)" -> "0.0.0.0/0" [label="All connections" color="gold2" fontcolor="darkgreen"] - "kube-system-dummy-to-ignore/kube-dns-autoscaler(Deployment-StatefulSet)" -> "::/0" [label="All connections" color="gold2" fontcolor="darkgreen"] "kube-system-dummy-to-ignore/kube-dns-autoscaler(Deployment-StatefulSet)" -> "default/cog-agents(DaemonSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] "kube-system-dummy-to-ignore/kube-dns-autoscaler(Deployment-StatefulSet)" -> "default/cog-local-analyzer(Deployment-StatefulSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] "kube-system-dummy-to-ignore/kube-dns-autoscaler(Deployment-StatefulSet)" -> "kube-system-dummy-to-ignore/calico-kube-controllers(Deployment-StatefulSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] @@ -146,7 +123,6 @@ digraph { "kube-system-dummy-to-ignore/kube-dns-autoscaler(Deployment-StatefulSet)" -> "vendor-system/barbar-app(ReplicaSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] "kube-system-dummy-to-ignore/kube-dns-autoscaler(Deployment-StatefulSet)" -> "vendor-system/foofoo-app(ReplicaSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] "kube-system-dummy-to-ignore/kubernetes-dashboard(Deployment-StatefulSet)" -> "0.0.0.0/0" [label="All connections" color="gold2" fontcolor="darkgreen"] - "kube-system-dummy-to-ignore/kubernetes-dashboard(Deployment-StatefulSet)" -> "::/0" [label="All connections" color="gold2" fontcolor="darkgreen"] "kube-system-dummy-to-ignore/kubernetes-dashboard(Deployment-StatefulSet)" -> "default/cog-agents(DaemonSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] "kube-system-dummy-to-ignore/kubernetes-dashboard(Deployment-StatefulSet)" -> "default/cog-local-analyzer(Deployment-StatefulSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] "kube-system-dummy-to-ignore/kubernetes-dashboard(Deployment-StatefulSet)" -> "kube-system-dummy-to-ignore/calico-kube-controllers(Deployment-StatefulSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] @@ -164,7 +140,6 @@ digraph { "kube-system-dummy-to-ignore/kubernetes-dashboard(Deployment-StatefulSet)" -> "vendor-system/barbar-app(ReplicaSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] "kube-system-dummy-to-ignore/kubernetes-dashboard(Deployment-StatefulSet)" -> "vendor-system/foofoo-app(ReplicaSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] "kube-system-dummy-to-ignore/public-cre08b89c167414305a1afb205d0bd346f-alb1(Deployment-StatefulSet)" -> "0.0.0.0/0" [label="All connections" color="gold2" fontcolor="darkgreen"] - "kube-system-dummy-to-ignore/public-cre08b89c167414305a1afb205d0bd346f-alb1(Deployment-StatefulSet)" -> "::/0" [label="All connections" color="gold2" fontcolor="darkgreen"] "kube-system-dummy-to-ignore/public-cre08b89c167414305a1afb205d0bd346f-alb1(Deployment-StatefulSet)" -> "default/cog-agents(DaemonSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] "kube-system-dummy-to-ignore/public-cre08b89c167414305a1afb205d0bd346f-alb1(Deployment-StatefulSet)" -> "default/cog-local-analyzer(Deployment-StatefulSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] "kube-system-dummy-to-ignore/public-cre08b89c167414305a1afb205d0bd346f-alb1(Deployment-StatefulSet)" -> "kube-system-dummy-to-ignore/calico-kube-controllers(Deployment-StatefulSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] @@ -183,7 +158,6 @@ digraph { "kube-system-dummy-to-ignore/public-cre08b89c167414305a1afb205d0bd346f-alb1(Deployment-StatefulSet)" -> "vendor-system/barbar-app(ReplicaSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] "kube-system-dummy-to-ignore/public-cre08b89c167414305a1afb205d0bd346f-alb1(Deployment-StatefulSet)" -> "vendor-system/foofoo-app(ReplicaSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] "kube-system/calico-node(DaemonSet)" -> "0.0.0.0/0" [label="All connections" color="gold2" fontcolor="darkgreen"] - "kube-system/calico-node(DaemonSet)" -> "::/0" [label="All connections" color="gold2" fontcolor="darkgreen"] "kube-system/calico-node(DaemonSet)" -> "default/cog-agents(DaemonSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] "kube-system/calico-node(DaemonSet)" -> "default/cog-local-analyzer(Deployment-StatefulSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] "kube-system/calico-node(DaemonSet)" -> "kube-system-dummy-to-ignore/calico-kube-controllers(Deployment-StatefulSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] @@ -202,7 +176,6 @@ digraph { "kube-system/calico-node(DaemonSet)" -> "vendor-system/barbar-app(ReplicaSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] "kube-system/calico-node(DaemonSet)" -> "vendor-system/foofoo-app(ReplicaSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] "kube-system/file-plugin(Deployment-StatefulSet)" -> "0.0.0.0/0" [label="All connections" color="gold2" fontcolor="darkgreen"] - "kube-system/file-plugin(Deployment-StatefulSet)" -> "::/0" [label="All connections" color="gold2" fontcolor="darkgreen"] "kube-system/file-plugin(Deployment-StatefulSet)" -> "default/cog-agents(DaemonSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] "kube-system/file-plugin(Deployment-StatefulSet)" -> "default/cog-local-analyzer(Deployment-StatefulSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] "kube-system/file-plugin(Deployment-StatefulSet)" -> "kube-system-dummy-to-ignore/calico-kube-controllers(Deployment-StatefulSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] @@ -220,7 +193,6 @@ digraph { "kube-system/file-plugin(Deployment-StatefulSet)" -> "vendor-system/barbar-app(ReplicaSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] "kube-system/file-plugin(Deployment-StatefulSet)" -> "vendor-system/foofoo-app(ReplicaSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] "kube-system/heapster(Deployment-StatefulSet)" -> "0.0.0.0/0" [label="All connections" color="gold2" fontcolor="darkgreen"] - "kube-system/heapster(Deployment-StatefulSet)" -> "::/0" [label="All connections" color="gold2" fontcolor="darkgreen"] "kube-system/heapster(Deployment-StatefulSet)" -> "default/cog-agents(DaemonSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] "kube-system/heapster(Deployment-StatefulSet)" -> "default/cog-local-analyzer(Deployment-StatefulSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] "kube-system/heapster(Deployment-StatefulSet)" -> "kube-system-dummy-to-ignore/calico-kube-controllers(Deployment-StatefulSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] @@ -238,7 +210,6 @@ digraph { "kube-system/heapster(Deployment-StatefulSet)" -> "vendor-system/barbar-app(ReplicaSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] "kube-system/heapster(Deployment-StatefulSet)" -> "vendor-system/foofoo-app(ReplicaSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] "kube-system/keepalived-watcher(DaemonSet)" -> "0.0.0.0/0" [label="All connections" color="gold2" fontcolor="darkgreen"] - "kube-system/keepalived-watcher(DaemonSet)" -> "::/0" [label="All connections" color="gold2" fontcolor="darkgreen"] "kube-system/keepalived-watcher(DaemonSet)" -> "default/cog-agents(DaemonSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] "kube-system/keepalived-watcher(DaemonSet)" -> "default/cog-local-analyzer(Deployment-StatefulSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] "kube-system/keepalived-watcher(DaemonSet)" -> "kube-system-dummy-to-ignore/calico-kube-controllers(Deployment-StatefulSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] @@ -257,7 +228,6 @@ digraph { "kube-system/keepalived-watcher(DaemonSet)" -> "vendor-system/barbar-app(ReplicaSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] "kube-system/keepalived-watcher(DaemonSet)" -> "vendor-system/foofoo-app(ReplicaSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] "kube-system/kube-fluentd(DaemonSet)" -> "0.0.0.0/0" [label="All connections" color="gold2" fontcolor="darkgreen"] - "kube-system/kube-fluentd(DaemonSet)" -> "::/0" [label="All connections" color="gold2" fontcolor="darkgreen"] "kube-system/kube-fluentd(DaemonSet)" -> "default/cog-agents(DaemonSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] "kube-system/kube-fluentd(DaemonSet)" -> "default/cog-local-analyzer(Deployment-StatefulSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] "kube-system/kube-fluentd(DaemonSet)" -> "kube-system-dummy-to-ignore/calico-kube-controllers(Deployment-StatefulSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] @@ -276,7 +246,6 @@ digraph { "kube-system/kube-fluentd(DaemonSet)" -> "vendor-system/barbar-app(ReplicaSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] "kube-system/kube-fluentd(DaemonSet)" -> "vendor-system/foofoo-app(ReplicaSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] "kube-system/storage-watcher(Deployment-StatefulSet)" -> "0.0.0.0/0" [label="All connections" color="gold2" fontcolor="darkgreen"] - "kube-system/storage-watcher(Deployment-StatefulSet)" -> "::/0" [label="All connections" color="gold2" fontcolor="darkgreen"] "kube-system/storage-watcher(Deployment-StatefulSet)" -> "default/cog-agents(DaemonSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] "kube-system/storage-watcher(Deployment-StatefulSet)" -> "default/cog-local-analyzer(Deployment-StatefulSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] "kube-system/storage-watcher(Deployment-StatefulSet)" -> "kube-system-dummy-to-ignore/calico-kube-controllers(Deployment-StatefulSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] @@ -294,7 +263,6 @@ digraph { "kube-system/storage-watcher(Deployment-StatefulSet)" -> "vendor-system/barbar-app(ReplicaSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] "kube-system/storage-watcher(Deployment-StatefulSet)" -> "vendor-system/foofoo-app(ReplicaSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] "kube-system/tiller-deploy(Deployment-StatefulSet)" -> "0.0.0.0/0" [label="All connections" color="gold2" fontcolor="darkgreen"] - "kube-system/tiller-deploy(Deployment-StatefulSet)" -> "::/0" [label="All connections" color="gold2" fontcolor="darkgreen"] "kube-system/tiller-deploy(Deployment-StatefulSet)" -> "default/cog-agents(DaemonSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] "kube-system/tiller-deploy(Deployment-StatefulSet)" -> "default/cog-local-analyzer(Deployment-StatefulSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] "kube-system/tiller-deploy(Deployment-StatefulSet)" -> "kube-system-dummy-to-ignore/calico-kube-controllers(Deployment-StatefulSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] @@ -312,7 +280,6 @@ digraph { "kube-system/tiller-deploy(Deployment-StatefulSet)" -> "vendor-system/barbar-app(ReplicaSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] "kube-system/tiller-deploy(Deployment-StatefulSet)" -> "vendor-system/foofoo-app(ReplicaSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] "kube-system/vpn(Deployment-StatefulSet)" -> "0.0.0.0/0" [label="All connections" color="gold2" fontcolor="darkgreen"] - "kube-system/vpn(Deployment-StatefulSet)" -> "::/0" [label="All connections" color="gold2" fontcolor="darkgreen"] "kube-system/vpn(Deployment-StatefulSet)" -> "default/cog-agents(DaemonSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] "kube-system/vpn(Deployment-StatefulSet)" -> "default/cog-local-analyzer(Deployment-StatefulSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] "kube-system/vpn(Deployment-StatefulSet)" -> "kube-system-dummy-to-ignore/calico-kube-controllers(Deployment-StatefulSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] @@ -330,7 +297,6 @@ digraph { "kube-system/vpn(Deployment-StatefulSet)" -> "vendor-system/barbar-app(ReplicaSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] "kube-system/vpn(Deployment-StatefulSet)" -> "vendor-system/foofoo-app(ReplicaSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] "vendor-system/barbar-app(ReplicaSet)" -> "0.0.0.0/0" [label="All connections" color="gold2" fontcolor="darkgreen"] - "vendor-system/barbar-app(ReplicaSet)" -> "::/0" [label="All connections" color="gold2" fontcolor="darkgreen"] "vendor-system/barbar-app(ReplicaSet)" -> "default/cog-agents(DaemonSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] "vendor-system/barbar-app(ReplicaSet)" -> "default/cog-local-analyzer(Deployment-StatefulSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] "vendor-system/barbar-app(ReplicaSet)" -> "kube-system-dummy-to-ignore/calico-kube-controllers(Deployment-StatefulSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] @@ -349,7 +315,6 @@ digraph { "vendor-system/barbar-app(ReplicaSet)" -> "vendor-system/barbar-app(ReplicaSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] "vendor-system/barbar-app(ReplicaSet)" -> "vendor-system/foofoo-app(ReplicaSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] "vendor-system/foofoo-app(ReplicaSet)" -> "0.0.0.0/0" [label="All connections" color="gold2" fontcolor="darkgreen"] - "vendor-system/foofoo-app(ReplicaSet)" -> "::/0" [label="All connections" color="gold2" fontcolor="darkgreen"] "vendor-system/foofoo-app(ReplicaSet)" -> "default/cog-agents(DaemonSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] "vendor-system/foofoo-app(ReplicaSet)" -> "default/cog-local-analyzer(Deployment-StatefulSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] "vendor-system/foofoo-app(ReplicaSet)" -> "kube-system-dummy-to-ignore/calico-kube-controllers(Deployment-StatefulSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] @@ -367,5 +332,4 @@ digraph { "vendor-system/foofoo-app(ReplicaSet)" -> "kube-system/vpn(Deployment-StatefulSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] "vendor-system/foofoo-app(ReplicaSet)" -> "vendor-system/barbar-app(ReplicaSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] "vendor-system/foofoo-app(ReplicaSet)" -> "vendor-system/foofoo-app(ReplicaSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] -} - +} \ No newline at end of file diff --git a/tests/expected_cmdline_output_files/basic_connectivity_md_query_output.txt b/tests/expected_cmdline_output_files/basic_connectivity_md_query_output.txt index 5b290a8d..a76f5a9e 100644 --- a/tests/expected_cmdline_output_files/basic_connectivity_md_query_output.txt +++ b/tests/expected_cmdline_output_files/basic_connectivity_md_query_output.txt @@ -2,7 +2,5 @@ |---|---|---|---|---|---| |, config: testcase8-networkpolicy1.yaml|||||| |||0.0.0.0/0|[default,kube-system,kube-system-dummy-to-ignore,vendor-system]|[*]|All connections| -|||::/0|[default,kube-system,kube-system-dummy-to-ignore,vendor-system]|[*]|All connections| ||[default,kube-system,kube-system-dummy-to-ignore,vendor-system]|[*]||0.0.0.0/0|All connections| -||[default,kube-system,kube-system-dummy-to-ignore,vendor-system]|[*]||::/0|All connections| -||[default,kube-system,kube-system-dummy-to-ignore,vendor-system]|[*]|[default,kube-system,kube-system-dummy-to-ignore,vendor-system]|[*]|All connections| +||[default,kube-system,kube-system-dummy-to-ignore,vendor-system]|[*]|[default,kube-system,kube-system-dummy-to-ignore,vendor-system]|[*]|All connections| \ No newline at end of file diff --git a/tests/expected_cmdline_output_files/basic_connectivity_txt_query_output.txt b/tests/expected_cmdline_output_files/basic_connectivity_txt_query_output.txt index 913a417e..c3e68623 100644 --- a/tests/expected_cmdline_output_files/basic_connectivity_txt_query_output.txt +++ b/tests/expected_cmdline_output_files/basic_connectivity_txt_query_output.txt @@ -1,6 +1,4 @@ final fw rules for query: , config: testcase8-networkpolicy1.yaml: src: 0.0.0.0/0 dst_ns: [default,kube-system,kube-system-dummy-to-ignore,vendor-system] dst_pods: [*] conn: All connections -src: ::/0 dst_ns: [default,kube-system,kube-system-dummy-to-ignore,vendor-system] dst_pods: [*] conn: All connections src_ns: [default,kube-system,kube-system-dummy-to-ignore,vendor-system] src_pods: [*] dst: 0.0.0.0/0 conn: All connections -src_ns: [default,kube-system,kube-system-dummy-to-ignore,vendor-system] src_pods: [*] dst: ::/0 conn: All connections src_ns: [default,kube-system,kube-system-dummy-to-ignore,vendor-system] src_pods: [*] dst_ns: [default,kube-system,kube-system-dummy-to-ignore,vendor-system] dst_pods: [*] conn: All connections diff --git a/tests/expected_cmdline_output_files/basic_connectivity_yaml_query_output.txt b/tests/expected_cmdline_output_files/basic_connectivity_yaml_query_output.txt index 48f391cc..b05616cf 100644 --- a/tests/expected_cmdline_output_files/basic_connectivity_yaml_query_output.txt +++ b/tests/expected_cmdline_output_files/basic_connectivity_yaml_query_output.txt @@ -15,17 +15,6 @@ - '*' connection: - All connections - - src_ip_block: - - ::/0 - dst_ns: - - default - - kube-system - - kube-system-dummy-to-ignore - - vendor-system - dst_pods: - - '*' - connection: - - All connections - src_ns: - default - kube-system @@ -37,17 +26,6 @@ - 0.0.0.0/0 connection: - All connections - - src_ns: - - default - - kube-system - - kube-system-dummy-to-ignore - - vendor-system - src_pods: - - '*' - dst_ip_block: - - ::/0 - connection: - - All connections - src_ns: - default - kube-system @@ -63,4 +41,4 @@ dst_pods: - '*' connection: - - All connections + - All connections \ No newline at end of file diff --git a/tests/expected_cmdline_output_files/basic_semantic_diff_csv_query_output.txt b/tests/expected_cmdline_output_files/basic_semantic_diff_csv_query_output.txt index cb2ccda9..7e7e4c6a 100644 --- a/tests/expected_cmdline_output_files/basic_semantic_diff_csv_query_output.txt +++ b/tests/expected_cmdline_output_files/basic_semantic_diff_csv_query_output.txt @@ -5,5 +5,4 @@ "","[kube-system,kube-system-dummy-to-ignore]","[*]","[kube-system]","[*]","TCP+UDP 53", "","[vendor-system]","[*]","[kube-system]","[*]","All connections", "Removed connections between persistent peers and ipBlocks","","","","","", -"","","0.0.0.0/0","[kube-system]","[*]","TCP+UDP 53", -"","","::/0","[kube-system]","[*]","TCP+UDP 53", +"","","0.0.0.0/0","[kube-system]","[*]","TCP+UDP 53", \ No newline at end of file diff --git a/tests/expected_cmdline_output_files/basic_semantic_diff_md_query_output.txt b/tests/expected_cmdline_output_files/basic_semantic_diff_md_query_output.txt index 0da90bb6..b9091d69 100644 --- a/tests/expected_cmdline_output_files/basic_semantic_diff_md_query_output.txt +++ b/tests/expected_cmdline_output_files/basic_semantic_diff_md_query_output.txt @@ -6,5 +6,4 @@ ||[kube-system,kube-system-dummy-to-ignore]|[*]|[kube-system]|[*]|TCP+UDP 53| ||[vendor-system]|[*]|[kube-system]|[*]|All connections| |Removed connections between persistent peers and ipBlocks|||||| -|||0.0.0.0/0|[kube-system]|[*]|TCP+UDP 53| -|||::/0|[kube-system]|[*]|TCP+UDP 53| +|||0.0.0.0/0|[kube-system]|[*]|TCP+UDP 53| \ No newline at end of file diff --git a/tests/expected_cmdline_output_files/basic_semantic_diff_query_output.txt b/tests/expected_cmdline_output_files/basic_semantic_diff_query_output.txt index 96949cc4..e744cd51 100644 --- a/tests/expected_cmdline_output_files/basic_semantic_diff_query_output.txt +++ b/tests/expected_cmdline_output_files/basic_semantic_diff_query_output.txt @@ -8,5 +8,4 @@ src_ns: [kube-system,kube-system-dummy-to-ignore] src_pods: [*] dst_ns: [kube-sy src_ns: [vendor-system] src_pods: [*] dst_ns: [kube-system] dst_pods: [*] conn: All connections Removed connections between persistent peers and ipBlocks (based on topology from config: testcase7-networkpolicy2.yaml) : -src: 0.0.0.0/0 dst_ns: [kube-system] dst_pods: [*] conn: TCP+UDP 53 -src: ::/0 dst_ns: [kube-system] dst_pods: [*] conn: TCP+UDP 53 +src: 0.0.0.0/0 dst_ns: [kube-system] dst_pods: [*] conn: TCP+UDP 53 \ No newline at end of file diff --git a/tests/expected_cmdline_output_files/basic_semantic_diff_yaml_query_output.txt b/tests/expected_cmdline_output_files/basic_semantic_diff_yaml_query_output.txt index 8256361d..ced2acb5 100644 --- a/tests/expected_cmdline_output_files/basic_semantic_diff_yaml_query_output.txt +++ b/tests/expected_cmdline_output_files/basic_semantic_diff_yaml_query_output.txt @@ -66,17 +66,4 @@ - 53 - Protocol: UDP Ports: - - 53 - - src_ip_block: - - ::/0 - dst_ns: - - kube-system - dst_pods: - - '*' - connection: - - Protocol: TCP - Ports: - - 53 - - Protocol: UDP - Ports: - - 53 + - 53 \ No newline at end of file diff --git a/tests/expected_cmdline_output_files/basic_subset_deployment1_query_output.txt b/tests/expected_cmdline_output_files/basic_subset_deployment1_query_output.txt deleted file mode 100644 index a27bbd06..00000000 --- a/tests/expected_cmdline_output_files/basic_subset_deployment1_query_output.txt +++ /dev/null @@ -1,3 +0,0 @@ -final fw rules for query: , config: subset_deployment-networkpolicy.yaml: -src_ns: [default] src_pods: [my-test-deployment-C] dst_ns: [default] dst_pods: [app=B] conn: All connections - diff --git a/tests/expected_cmdline_output_files/basic_subset_deployment2_query_output.txt b/tests/expected_cmdline_output_files/basic_subset_deployment2_query_output.txt deleted file mode 100644 index 35e40352..00000000 --- a/tests/expected_cmdline_output_files/basic_subset_deployment2_query_output.txt +++ /dev/null @@ -1,2 +0,0 @@ -final fw rules for query: , config: subset_deployment-networkpolicy.yaml: - diff --git a/tests/expected_cmdline_output_files/different_topologies_semantic_diff_query_output.txt b/tests/expected_cmdline_output_files/different_topologies_semantic_diff_query_output.txt index e9ea8f4b..6c231410 100644 --- a/tests/expected_cmdline_output_files/different_topologies_semantic_diff_query_output.txt +++ b/tests/expected_cmdline_output_files/different_topologies_semantic_diff_query_output.txt @@ -6,9 +6,7 @@ src_ns: [default] src_pods: [cog-local-analyzer-7d77fb55cc] dst_ns: [default] ds Lost connections between removed peers and ipBlocks (based on topology from config: policy_a.yaml) : src: 0.0.0.0/0 dst_ns: [default] dst_pods: [app in (app-3,app-4)] conn: All connections -src: ::/0 dst_ns: [default] dst_pods: [app in (app-3,app-4)] conn: All connections src_ns: [default] src_pods: [app in (app-3,app-4)] dst: 0.0.0.0/0 conn: All connections -src_ns: [default] src_pods: [app in (app-3,app-4)] dst: ::/0 conn: All connections Lost connections between removed peers and persistent peers (based on topology from config: policy_a.yaml) : src_ns: [default] src_pods: [app in (app-3,app-4)] dst_ns: [default] dst_pods: [app in (app-0,app-2)] conn: All connections @@ -22,11 +20,9 @@ src_ns: [default] src_pods: [cog-agents] dst_ns: [default] dst_pods: [cog-agents Added connections between persistent peers and ipBlocks (based on topology from config: policy_b.yaml) : src: 0.0.0.0/0 dst_ns: [default] dst_pods: [cog-agents] conn: All connections -src: ::/0 dst_ns: [default] dst_pods: [cog-agents] conn: All connections Removed connections between persistent peers and ipBlocks (based on topology from config: policy_a.yaml) : src: 0.0.0.0/0 dst_ns: [default] dst_pods: [cog-agents] conn: All connections -src: ::/0 dst_ns: [default] dst_pods: [cog-agents] conn: All connections New connections between persistent peers and added peers (based on topology from config: policy_b.yaml) : src_ns: [default] src_pods: [app in (app-5,app-6)] dst_ns: [default] dst_pods: [app in (app-0,app-1)] conn: All connections @@ -37,6 +33,4 @@ src_ns: [default] src_pods: [cog-agents] dst_ns: [default] dst_pods: [cog-agents New connections between added peers and ipBlocks (based on topology from config: policy_b.yaml) : src: 0.0.0.0/0 dst_ns: [default] dst_pods: [app in (app-5,app-6)] conn: All connections -src: ::/0 dst_ns: [default] dst_pods: [app in (app-5,app-6)] conn: All connections -src_ns: [default] src_pods: [app in (app-5,app-6)] dst: 0.0.0.0/0 conn: All connections -src_ns: [default] src_pods: [app in (app-5,app-6)] dst: ::/0 conn: All connections +src_ns: [default] src_pods: [app in (app-5,app-6)] dst: 0.0.0.0/0 conn: All connections \ No newline at end of file diff --git a/tests/expected_cmdline_output_files/helm_test_multi_chart.txt b/tests/expected_cmdline_output_files/helm_test_multi_chart.txt index aa992126..69ec3f28 100644 --- a/tests/expected_cmdline_output_files/helm_test_multi_chart.txt +++ b/tests/expected_cmdline_output_files/helm_test_multi_chart.txt @@ -2,17 +2,11 @@ final fw rules for query: , config: **: src: 0.0.0.0/0 dst_ns: [default] dst_pods: [app.kubernetes.io/instance=nca-extract and app.kubernetes.io/name=grafana] conn: TCP 3000 src: 0.0.0.0/0 dst_ns: [default] dst_pods: [app.kubernetes.io/instance=nca-extract and app.kubernetes.io/name=redis] conn: TCP 6379,9121 src: 0.0.0.0/0 dst_ns: [default] dst_pods: [{!has(app.kubernetes.io/instance) or app.kubernetes.io/instance=nca-extract} and {!has(app.kubernetes.io/name) or app.kubernetes.io/name=kube-state-metrics}] conn: All connections -src: ::/0 dst_ns: [default] dst_pods: [app.kubernetes.io/instance=nca-extract and app.kubernetes.io/name=grafana] conn: TCP 3000 -src: ::/0 dst_ns: [default] dst_pods: [app.kubernetes.io/instance=nca-extract and app.kubernetes.io/name=redis] conn: TCP 6379,9121 -src: ::/0 dst_ns: [default] dst_pods: [{!has(app.kubernetes.io/instance) or app.kubernetes.io/instance=nca-extract} and {!has(app.kubernetes.io/name) or app.kubernetes.io/name=kube-state-metrics}] conn: All connections src_ns: [default] src_pods: [*] dst: 0.0.0.0/0 conn: UDP 53 -src_ns: [default] src_pods: [*] dst: ::/0 conn: UDP 53 src_ns: [default] src_pods: [*] dst_ns: [default] dst_pods: [app.kubernetes.io/instance=nca-extract and app.kubernetes.io/name=redis] conn: TCP 6379 src_ns: [default] src_pods: [*] dst_ns: [default] dst_pods: [{!has(app.kubernetes.io/instance) or app.kubernetes.io/instance=nca-extract} and {!has(app.kubernetes.io/name) or app.kubernetes.io/name=kube-state-metrics}] conn: UDP 53 src_ns: [default] src_pods: [{!has(app.kubernetes.io/instance) or app.kubernetes.io/instance=nca-extract} and {!has(app.kubernetes.io/name) or (has(app.kubernetes.io/name) and app.kubernetes.io/name!=redis)}] dst: 0.0.0.0/0 conn: All connections -src_ns: [default] src_pods: [{!has(app.kubernetes.io/instance) or app.kubernetes.io/instance=nca-extract} and {!has(app.kubernetes.io/name) or (has(app.kubernetes.io/name) and app.kubernetes.io/name!=redis)}] dst: ::/0 conn: All connections src_ns: [default] src_pods: [{!has(app.kubernetes.io/instance) or app.kubernetes.io/instance=nca-extract} and {!has(app.kubernetes.io/name) or (has(app.kubernetes.io/name) and app.kubernetes.io/name!=redis)}] dst_ns: [default] dst_pods: [!has(app.kubernetes.io/instance) and !has(app.kubernetes.io/name)] conn: All connections src_ns: [default] src_pods: [{!has(app.kubernetes.io/instance) or app.kubernetes.io/instance=nca-extract} and {!has(app.kubernetes.io/name) or (has(app.kubernetes.io/name) and app.kubernetes.io/name!=redis)}] dst_ns: [default] dst_pods: [app.kubernetes.io/instance=nca-extract and app.kubernetes.io/name=grafana] conn: TCP 3000 src_ns: [default] src_pods: [{!has(app.kubernetes.io/instance) or app.kubernetes.io/instance=nca-extract} and {!has(app.kubernetes.io/name) or (has(app.kubernetes.io/name) and app.kubernetes.io/name!=redis)}] dst_ns: [default] dst_pods: [app.kubernetes.io/instance=nca-extract and app.kubernetes.io/name=redis] conn: TCP 6379,9121 src_ns: [default] src_pods: [{!has(app.kubernetes.io/instance) or app.kubernetes.io/instance=nca-extract} and {!has(app.kubernetes.io/name) or app.kubernetes.io/name=grafana}] dst_ns: [default] dst_pods: [nca-extract-kube-state-metrics] conn: All connections - diff --git a/tests/expected_cmdline_output_files/helm_test_one_chart.txt b/tests/expected_cmdline_output_files/helm_test_one_chart.txt index 02974c48..6f3ef4cc 100644 --- a/tests/expected_cmdline_output_files/helm_test_one_chart.txt +++ b/tests/expected_cmdline_output_files/helm_test_one_chart.txt @@ -1,7 +1,4 @@ final fw rules for query: , config: **: src: 0.0.0.0/0 dst_ns: [default] dst_pods: [*] conn: TCP 6379,9121 -src: ::/0 dst_ns: [default] dst_pods: [*] conn: TCP 6379,9121 src_ns: [default] src_pods: [*] dst: 0.0.0.0/0 conn: UDP 53 -src_ns: [default] src_pods: [*] dst: ::/0 conn: UDP 53 -src_ns: [default] src_pods: [*] dst_ns: [default] dst_pods: [*] conn: TCP 6379 - +src_ns: [default] src_pods: [*] dst_ns: [default] dst_pods: [*] conn: TCP 6379 \ No newline at end of file diff --git a/tests/expected_cmdline_output_files/helm_test_resolved_yaml_in_template_dir.txt b/tests/expected_cmdline_output_files/helm_test_resolved_yaml_in_template_dir.txt index b9bd249d..be9bb1ef 100644 --- a/tests/expected_cmdline_output_files/helm_test_resolved_yaml_in_template_dir.txt +++ b/tests/expected_cmdline_output_files/helm_test_resolved_yaml_in_template_dir.txt @@ -1,12 +1,10 @@ final fw rules for query: , config: **: src: 0.0.0.0/0 dst_ns: [default] dst_pods: [app.kubernetes.io/instance=nca-extract and app.kubernetes.io/name=redis] conn: TCP 6379,9121 -src: ::/0 dst_ns: [default] dst_pods: [app.kubernetes.io/instance=nca-extract and app.kubernetes.io/name=redis] conn: TCP 6379,9121 src_ns: [default] src_pods: [Pod1] dst_ns: [ns2] dst_pods: [Pod3] conn: All connections src_ns: [default] src_pods: [Pod1] dst_ns: [ns3] dst_pods: [*] conn: All connections src_ns: [default] src_pods: [Pod4] dst_ns: [ns1] dst_pods: [Pod2] conn: All connections src_ns: [default] src_pods: [Pod4] dst_ns: [ns2] dst_pods: [dep=D] conn: All connections src_ns: [default] src_pods: [app.kubernetes.io/instance=nca-extract and app.kubernetes.io/name=redis] dst: 0.0.0.0/0 conn: UDP 53 -src_ns: [default] src_pods: [app.kubernetes.io/instance=nca-extract and app.kubernetes.io/name=redis] dst: ::/0 conn: UDP 53 src_ns: [default] src_pods: [app.kubernetes.io/instance=nca-extract and app.kubernetes.io/name=redis] dst_ns: [default] dst_pods: [app.kubernetes.io/instance=nca-extract and app.kubernetes.io/name=redis] conn: TCP 6379 src_ns: [ns1] src_pods: [Pod2] dst_ns: [default] dst_pods: [Pod1] conn: All connections src_ns: [ns1] src_pods: [dep=A] dst_ns: [default] dst_pods: [dep=E] conn: All connections diff --git a/tests/expected_cmdline_output_files/helm_test_resolved_yaml_inside_chart.txt b/tests/expected_cmdline_output_files/helm_test_resolved_yaml_inside_chart.txt index b9bd249d..be9bb1ef 100644 --- a/tests/expected_cmdline_output_files/helm_test_resolved_yaml_inside_chart.txt +++ b/tests/expected_cmdline_output_files/helm_test_resolved_yaml_inside_chart.txt @@ -1,12 +1,10 @@ final fw rules for query: , config: **: src: 0.0.0.0/0 dst_ns: [default] dst_pods: [app.kubernetes.io/instance=nca-extract and app.kubernetes.io/name=redis] conn: TCP 6379,9121 -src: ::/0 dst_ns: [default] dst_pods: [app.kubernetes.io/instance=nca-extract and app.kubernetes.io/name=redis] conn: TCP 6379,9121 src_ns: [default] src_pods: [Pod1] dst_ns: [ns2] dst_pods: [Pod3] conn: All connections src_ns: [default] src_pods: [Pod1] dst_ns: [ns3] dst_pods: [*] conn: All connections src_ns: [default] src_pods: [Pod4] dst_ns: [ns1] dst_pods: [Pod2] conn: All connections src_ns: [default] src_pods: [Pod4] dst_ns: [ns2] dst_pods: [dep=D] conn: All connections src_ns: [default] src_pods: [app.kubernetes.io/instance=nca-extract and app.kubernetes.io/name=redis] dst: 0.0.0.0/0 conn: UDP 53 -src_ns: [default] src_pods: [app.kubernetes.io/instance=nca-extract and app.kubernetes.io/name=redis] dst: ::/0 conn: UDP 53 src_ns: [default] src_pods: [app.kubernetes.io/instance=nca-extract and app.kubernetes.io/name=redis] dst_ns: [default] dst_pods: [app.kubernetes.io/instance=nca-extract and app.kubernetes.io/name=redis] conn: TCP 6379 src_ns: [ns1] src_pods: [Pod2] dst_ns: [default] dst_pods: [Pod1] conn: All connections src_ns: [ns1] src_pods: [dep=A] dst_ns: [default] dst_pods: [dep=E] conn: All connections diff --git a/tests/expected_cmdline_output_files/helm_test_resolved_yaml_next_to_chart.txt b/tests/expected_cmdline_output_files/helm_test_resolved_yaml_next_to_chart.txt index b9bd249d..86608c4a 100644 --- a/tests/expected_cmdline_output_files/helm_test_resolved_yaml_next_to_chart.txt +++ b/tests/expected_cmdline_output_files/helm_test_resolved_yaml_next_to_chart.txt @@ -1,16 +1,13 @@ final fw rules for query: , config: **: src: 0.0.0.0/0 dst_ns: [default] dst_pods: [app.kubernetes.io/instance=nca-extract and app.kubernetes.io/name=redis] conn: TCP 6379,9121 -src: ::/0 dst_ns: [default] dst_pods: [app.kubernetes.io/instance=nca-extract and app.kubernetes.io/name=redis] conn: TCP 6379,9121 src_ns: [default] src_pods: [Pod1] dst_ns: [ns2] dst_pods: [Pod3] conn: All connections src_ns: [default] src_pods: [Pod1] dst_ns: [ns3] dst_pods: [*] conn: All connections src_ns: [default] src_pods: [Pod4] dst_ns: [ns1] dst_pods: [Pod2] conn: All connections src_ns: [default] src_pods: [Pod4] dst_ns: [ns2] dst_pods: [dep=D] conn: All connections src_ns: [default] src_pods: [app.kubernetes.io/instance=nca-extract and app.kubernetes.io/name=redis] dst: 0.0.0.0/0 conn: UDP 53 -src_ns: [default] src_pods: [app.kubernetes.io/instance=nca-extract and app.kubernetes.io/name=redis] dst: ::/0 conn: UDP 53 src_ns: [default] src_pods: [app.kubernetes.io/instance=nca-extract and app.kubernetes.io/name=redis] dst_ns: [default] dst_pods: [app.kubernetes.io/instance=nca-extract and app.kubernetes.io/name=redis] conn: TCP 6379 src_ns: [ns1] src_pods: [Pod2] dst_ns: [default] dst_pods: [Pod1] conn: All connections src_ns: [ns1] src_pods: [dep=A] dst_ns: [default] dst_pods: [dep=E] conn: All connections src_ns: [ns1] src_pods: [dep=B] dst_ns: [ns1] dst_pods: [dep=A] conn: All connections src_ns: [ns2] src_pods: [dep=C] dst_ns: [ns1] dst_pods: [dep=A] conn: All connections src_ns: [ns3] src_pods: [*] dst_ns: [default] dst_pods: [Pod4] conn: All connections - diff --git a/tests/expected_cmdline_output_files/helm_test_resolved_yaml_next_to_multi_charts.txt b/tests/expected_cmdline_output_files/helm_test_resolved_yaml_next_to_multi_charts.txt index bf680dd4..b81b1d99 100644 --- a/tests/expected_cmdline_output_files/helm_test_resolved_yaml_next_to_multi_charts.txt +++ b/tests/expected_cmdline_output_files/helm_test_resolved_yaml_next_to_multi_charts.txt @@ -1,14 +1,11 @@ final fw rules for query: , config: **: src: 0.0.0.0/0 dst_ns: [default] dst_pods: [app.kubernetes.io/instance=nca-extract and app.kubernetes.io/name=grafana] conn: TCP 3000 src: 0.0.0.0/0 dst_ns: [default] dst_pods: [app.kubernetes.io/instance=nca-extract and app.kubernetes.io/name=redis] conn: TCP 6379,9121 -src: ::/0 dst_ns: [default] dst_pods: [app.kubernetes.io/instance=nca-extract and app.kubernetes.io/name=grafana] conn: TCP 3000 -src: ::/0 dst_ns: [default] dst_pods: [app.kubernetes.io/instance=nca-extract and app.kubernetes.io/name=redis] conn: TCP 6379,9121 src_ns: [default] src_pods: [Pod1] dst_ns: [ns2] dst_pods: [Pod3] conn: All connections src_ns: [default] src_pods: [Pod1] dst_ns: [ns3] dst_pods: [*] conn: All connections src_ns: [default] src_pods: [Pod4] dst_ns: [ns1] dst_pods: [Pod2] conn: All connections src_ns: [default] src_pods: [Pod4] dst_ns: [ns2] dst_pods: [dep=D] conn: All connections src_ns: [default] src_pods: [app.kubernetes.io/instance=nca-extract and app.kubernetes.io/name=redis] dst: 0.0.0.0/0 conn: UDP 53 -src_ns: [default] src_pods: [app.kubernetes.io/instance=nca-extract and app.kubernetes.io/name=redis] dst: ::/0 conn: UDP 53 src_ns: [default] src_pods: [app.kubernetes.io/instance=nca-extract and app.kubernetes.io/name=redis] dst_ns: [default] dst_pods: [app.kubernetes.io/instance=nca-extract and app.kubernetes.io/name=redis] conn: TCP 6379 src_ns: [ns1] src_pods: [Pod2] dst_ns: [default] dst_pods: [Pod1] conn: All connections src_ns: [ns1] src_pods: [dep=A] dst_ns: [default] dst_pods: [dep=E] conn: All connections diff --git a/tests/expected_cmdline_output_files/livesim_test_all_dot.dot b/tests/expected_cmdline_output_files/livesim_test_all_dot.dot index 73f625dc..b939721c 100644 --- a/tests/expected_cmdline_output_files/livesim_test_all_dot.dot +++ b/tests/expected_cmdline_output_files/livesim_test_all_dot.dot @@ -1,7 +1,6 @@ // The Connectivity Graph of ** digraph { "0.0.0.0/0" [label="0.0.0.0/0" color="red2" fontcolor="red2"] - "::/0" [label="::/0" color="red2" fontcolor="red2"] "default/deployment-A(Deployment)" [label="default/deployment-A(Deployment)" color="blue" fontcolor="blue"] "default/deployment-B(Deployment)" [label="default/deployment-B(Deployment)" color="blue" fontcolor="blue"] "default/foo-app(Pod)" [label="default/foo-app(Pod)" color="blue" fontcolor="blue"] @@ -14,11 +13,6 @@ digraph { "0.0.0.0/0" -> "ingress-controller-ns/ingress-controller-livesim(Pod)" [label="All connections" color="gold2" fontcolor="darkgreen"] "0.0.0.0/0" -> "istio-ingressgateway-ns/istio-ingressgateway-livesim(Pod)" [label="All connections" color="gold2" fontcolor="darkgreen"] "0.0.0.0/0" -> "kube-system/kube-dns-livesim(Pod)" [label="All connections" color="gold2" fontcolor="darkgreen"] - "::/0" -> "default/foo-app(Pod)" [label="All connections" color="gold2" fontcolor="darkgreen"] - "::/0" -> "default/httpbin(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] - "::/0" -> "ingress-controller-ns/ingress-controller-livesim(Pod)" [label="All connections" color="gold2" fontcolor="darkgreen"] - "::/0" -> "istio-ingressgateway-ns/istio-ingressgateway-livesim(Pod)" [label="All connections" color="gold2" fontcolor="darkgreen"] - "::/0" -> "kube-system/kube-dns-livesim(Pod)" [label="All connections" color="gold2" fontcolor="darkgreen"] "default/deployment-A(Deployment)" -> "default/deployment-B(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "default/deployment-A(Deployment)" -> "kube-system/kube-dns-livesim(Pod)" [label="UDP 53" color="gold2" fontcolor="darkgreen"] "default/deployment-B(Deployment)" -> "default/deployment-A(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] @@ -28,7 +22,6 @@ digraph { "ingress-controller-ns/ingress-controller-livesim(Pod)" -> "default/foo-app(Pod)" [label="TCP {'dst_ports': '5678', 'paths': '/fo{2}(/[\\--9A-Z_a-z]*)?'}" color="gold2" fontcolor="darkgreen"] "istio-ingressgateway-ns/istio-ingressgateway-livesim(Pod)" -> "default/httpbin(Deployment)" [label="TCP {'dst_ports': '80', 'paths': '/(delay|status)[\\--9A-Z_a-z]*', 'hosts': 'httpbin.example.com'}" color="gold2" fontcolor="darkgreen"] "kube-system/kube-dns-livesim(Pod)" -> "0.0.0.0/0" [label="All connections" color="gold2" fontcolor="darkgreen"] - "kube-system/kube-dns-livesim(Pod)" -> "::/0" [label="All connections" color="gold2" fontcolor="darkgreen"] "kube-system/kube-dns-livesim(Pod)" -> "default/foo-app(Pod)" [label="All connections" color="gold2" fontcolor="darkgreen"] "kube-system/kube-dns-livesim(Pod)" -> "default/httpbin(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "kube-system/kube-dns-livesim(Pod)" -> "ingress-controller-ns/ingress-controller-livesim(Pod)" [label="All connections" color="gold2" fontcolor="darkgreen"] diff --git a/tests/expected_cmdline_output_files/livesim_test_all_txt.txt b/tests/expected_cmdline_output_files/livesim_test_all_txt.txt index 455b4d21..965ccb72 100644 --- a/tests/expected_cmdline_output_files/livesim_test_all_txt.txt +++ b/tests/expected_cmdline_output_files/livesim_test_all_txt.txt @@ -1,8 +1,6 @@ final fw rules for query: , config: **: src: 0.0.0.0/0 dst_ns: [default] dst_pods: [!has(dep)] conn: All connections src: 0.0.0.0/0 dst_ns: [ingress-controller-ns,istio-ingressgateway-ns,kube-system] dst_pods: [*] conn: All connections -src: ::/0 dst_ns: [default] dst_pods: [!has(dep)] conn: All connections -src: ::/0 dst_ns: [ingress-controller-ns,istio-ingressgateway-ns,kube-system] dst_pods: [*] conn: All connections src_ns: [default] src_pods: [*] dst_ns: [kube-system] dst_pods: [*] conn: UDP 53 src_ns: [default] src_pods: [dep=A] dst_ns: [default] dst_pods: [dep=B] conn: All connections src_ns: [default] src_pods: [dep=B] dst_ns: [default] dst_pods: [dep=A] conn: All connections @@ -11,6 +9,5 @@ src_ns: [ingress-controller-ns] src_pods: [*] dst_ns: [default] dst_pods: [foo-a src_ns: [istio-ingressgateway-ns,kube-system] src_pods: [*] dst_ns: [istio-ingressgateway-ns] dst_pods: [*] conn: All connections src_ns: [istio-ingressgateway-ns] src_pods: [*] dst_ns: [default] dst_pods: [httpbin] conn: TCP {'dst_ports': '80', 'paths': '/(delay|status)[\\--9A-Z_a-z]*', 'hosts': 'httpbin.example.com'} src_ns: [kube-system] src_pods: [*] dst: 0.0.0.0/0 conn: All connections -src_ns: [kube-system] src_pods: [*] dst: ::/0 conn: All connections src_ns: [kube-system] src_pods: [*] dst_ns: [default] dst_pods: [!has(dep)] conn: All connections src_ns: [kube-system] src_pods: [*] dst_ns: [kube-system] dst_pods: [*] conn: All connections diff --git a/tests/fw_rules_tests/policies/expected_output/calico-testcase15-scheme_output.txt b/tests/fw_rules_tests/policies/expected_output/calico-testcase15-scheme_output.txt index e88e628c..97aaf90b 100644 --- a/tests/fw_rules_tests/policies/expected_output/calico-testcase15-scheme_output.txt +++ b/tests/fw_rules_tests/policies/expected_output/calico-testcase15-scheme_output.txt @@ -1,7 +1,5 @@ final fw rules for query: connectivity_map_1, config: ports-rectangles/kube-system/testcase15-named-ports-rectangles-base-2-equiv: src: 0.0.0.0/0 dst_ns: [default,vendor-system] dst_pods: [*] conn: All connections -src: ::/0 dst_ns: [default,vendor-system] dst_pods: [*] conn: All connections src_ns: [default,vendor-system] src_pods: [*] dst: 0.0.0.0/0 conn: All connections -src_ns: [default,vendor-system] src_pods: [*] dst: ::/0 conn: All connections src_ns: [default,vendor-system] src_pods: [*] dst_ns: [default,vendor-system] dst_pods: [*] conn: All connections src_ns: [kube-system] src_pods: [*] dst_ns: [kube-system] dst_pods: [has_named_port=dns-local] conn: UDP {'src_ports': '80-100', 'dst_ports': '1-10052,10054-65535'} diff --git a/tests/fw_rules_tests/policies/expected_output/calico-testcase15-scheme_output.yaml b/tests/fw_rules_tests/policies/expected_output/calico-testcase15-scheme_output.yaml index c70366aa..3a4f21dc 100644 --- a/tests/fw_rules_tests/policies/expected_output/calico-testcase15-scheme_output.yaml +++ b/tests/fw_rules_tests/policies/expected_output/calico-testcase15-scheme_output.yaml @@ -29,15 +29,6 @@ - '*' connection: - All connections - - src_ip_block: - - ::/0 - dst_ns: - - default - - vendor-system - dst_pods: - - '*' - connection: - - All connections - src_ns: - default - vendor-system @@ -47,15 +38,6 @@ - 0.0.0.0/0 connection: - All connections - - src_ns: - - default - - vendor-system - src_pods: - - '*' - dst_ip_block: - - ::/0 - connection: - - All connections - src_ns: - default - vendor-system diff --git a/tests/fw_rules_tests/policies/expected_output/calico-testcase20-Eran_gnps_query_output.txt b/tests/fw_rules_tests/policies/expected_output/calico-testcase20-Eran_gnps_query_output.txt index 2074e67f..de9bb9f7 100644 --- a/tests/fw_rules_tests/policies/expected_output/calico-testcase20-Eran_gnps_query_output.txt +++ b/tests/fw_rules_tests/policies/expected_output/calico-testcase20-Eran_gnps_query_output.txt @@ -119,13 +119,9 @@ src: 67.228.118.0/23 dst_ns: [None] dst_pods: [vendor.role=worker_public] conn: src: 67.228.120.0-75.126.60.255 dst_ns: [None] dst_pods: [vendor.role=worker_public] conn: TCP+UDP 52311,ICMP,VRRP src: 75.126.61.0/24 dst_ns: [None] dst_pods: [vendor.role=worker_public] conn: All connections src: 75.126.62.0-119.81.135.255 dst_ns: [None] dst_pods: [vendor.role=worker_public] conn: TCP+UDP 52311,ICMP,VRRP -src: ::/0 dst_ns: [None] dst_pods: [vendor.role=worker_public] conn: TCP+UDP 52311,ICMP,VRRP -src: ::/0 dst_ns: [kube-system] dst_pods: [*] conn: All connections src_ns: [None] src_pods: [vendor.role=worker_public] dst: 0.0.0.0/0 conn: All connections -src_ns: [None] src_pods: [vendor.role=worker_public] dst: ::/0 conn: All connections src_ns: [None] src_pods: [vendor.role=worker_public] dst_ns: [None] dst_pods: [vendor.role=worker_public] conn: TCP+UDP 52311,ICMP,VRRP src_ns: [None] src_pods: [vendor.role=worker_public] dst_ns: [kube-system] dst_pods: [*] conn: All connections src_ns: [kube-system] src_pods: [*] dst: 0.0.0.0/0 conn: All connections -src_ns: [kube-system] src_pods: [*] dst: ::/0 conn: All connections src_ns: [kube-system] src_pods: [*] dst_ns: [None] dst_pods: [vendor.role=worker_public] conn: TCP+UDP 52311,ICMP,VRRP -src_ns: [kube-system] src_pods: [*] dst_ns: [kube-system] dst_pods: [*] conn: All connections +src_ns: [kube-system] src_pods: [*] dst_ns: [kube-system] dst_pods: [*] conn: All connections \ No newline at end of file diff --git a/tests/fw_rules_tests/policies/expected_output/calico-testcase20-Eran_gnps_query_output.yaml b/tests/fw_rules_tests/policies/expected_output/calico-testcase20-Eran_gnps_query_output.yaml index a28e1d81..e4a676df 100644 --- a/tests/fw_rules_tests/policies/expected_output/calico-testcase20-Eran_gnps_query_output.yaml +++ b/tests/fw_rules_tests/policies/expected_output/calico-testcase20-Eran_gnps_query_output.yaml @@ -1321,21 +1321,6 @@ Ports: - 52311 - Protocol: VRRP - - src_ip_block: - - ::/0 - dst_ns: - - None - dst_pods: - - vendor.role=worker_public - connection: - - Protocol: ICMP - - Protocol: TCP - Ports: - - 52311 - - Protocol: UDP - Ports: - - 52311 - - Protocol: VRRP - src_ns: - None src_pods: @@ -1850,14 +1835,6 @@ - vendor.role=worker_public connection: - All connections - - src_ip_block: - - ::/0 - dst_ns: - - kube-system - dst_pods: - - '*' - connection: - - All connections - src_ns: - None src_pods: @@ -1866,14 +1843,6 @@ - 0.0.0.0/0 connection: - All connections - - src_ns: - - None - src_pods: - - vendor.role=worker_public - dst_ip_block: - - ::/0 - connection: - - All connections - src_ns: - None src_pods: @@ -1892,14 +1861,6 @@ - 0.0.0.0/0 connection: - All connections - - src_ns: - - kube-system - src_pods: - - '*' - dst_ip_block: - - ::/0 - connection: - - All connections - src_ns: - kube-system src_pods: @@ -1909,4 +1870,4 @@ dst_pods: - '*' connection: - - All connections + - All connections \ No newline at end of file diff --git a/tests/fw_rules_tests/policies/expected_output/calico-testcase20-np_2_all_outbound_hep_query_output.txt b/tests/fw_rules_tests/policies/expected_output/calico-testcase20-np_2_all_outbound_hep_query_output.txt index 326a8c02..98ec4ed8 100644 --- a/tests/fw_rules_tests/policies/expected_output/calico-testcase20-np_2_all_outbound_hep_query_output.txt +++ b/tests/fw_rules_tests/policies/expected_output/calico-testcase20-np_2_all_outbound_hep_query_output.txt @@ -1,8 +1,6 @@ final fw rules for query: np_2_all_outbound_hep, config: np_2_outbound_hep_all_ep: src: 0.0.0.0/0 dst_ns: [None] dst_pods: [vendor.role=worker_public] conn: All connections src: 0.0.0.0/0 dst_ns: [kube-system] dst_pods: [*] conn: All connections -src: ::/0 dst_ns: [None] dst_pods: [vendor.role=worker_public] conn: All connections -src: ::/0 dst_ns: [kube-system] dst_pods: [*] conn: All connections src_ns: [None] src_pods: [vendor.role=worker_public] dst: 198.51.100.0/22 conn: All connections src_ns: [None] src_pods: [vendor.role=worker_public] dst: 198.51.200.0/27 conn: All connections src_ns: [None] src_pods: [vendor.role=worker_public] dst: 203.0.113.0/24 conn: All connections @@ -10,6 +8,5 @@ src_ns: [None] src_pods: [vendor.role=worker_public] dst: 203.0.115.0/29 conn: A src_ns: [None] src_pods: [vendor.role=worker_public] dst_ns: [None] dst_pods: [vendor.role=worker_public] conn: All connections src_ns: [None] src_pods: [vendor.role=worker_public] dst_ns: [kube-system] dst_pods: [*] conn: All connections src_ns: [kube-system] src_pods: [*] dst: 0.0.0.0/0 conn: All connections -src_ns: [kube-system] src_pods: [*] dst: ::/0 conn: All connections src_ns: [kube-system] src_pods: [*] dst_ns: [None] dst_pods: [vendor.role=worker_public] conn: All connections -src_ns: [kube-system] src_pods: [*] dst_ns: [kube-system] dst_pods: [*] conn: All connections +src_ns: [kube-system] src_pods: [*] dst_ns: [kube-system] dst_pods: [*] conn: All connections \ No newline at end of file diff --git a/tests/fw_rules_tests/policies/expected_output/calico-testcase20-np_2_all_outbound_hep_query_output.yaml b/tests/fw_rules_tests/policies/expected_output/calico-testcase20-np_2_all_outbound_hep_query_output.yaml index 997e7744..df933f5d 100644 --- a/tests/fw_rules_tests/policies/expected_output/calico-testcase20-np_2_all_outbound_hep_query_output.yaml +++ b/tests/fw_rules_tests/policies/expected_output/calico-testcase20-np_2_all_outbound_hep_query_output.yaml @@ -20,22 +20,6 @@ - '*' connection: - All connections - - src_ip_block: - - ::/0 - dst_ns: - - None - dst_pods: - - vendor.role=worker_public - connection: - - All connections - - src_ip_block: - - ::/0 - dst_ns: - - kube-system - dst_pods: - - '*' - connection: - - All connections - src_ns: - None src_pods: @@ -96,14 +80,6 @@ - 0.0.0.0/0 connection: - All connections - - src_ns: - - kube-system - src_pods: - - '*' - dst_ip_block: - - ::/0 - connection: - - All connections - src_ns: - kube-system src_pods: @@ -123,4 +99,4 @@ dst_pods: - '*' connection: - - All connections + - All connections \ No newline at end of file diff --git a/tests/fw_rules_tests/policies/expected_output/calico-testcase20-np_3_outbound_hep_to_wep_query_output.txt b/tests/fw_rules_tests/policies/expected_output/calico-testcase20-np_3_outbound_hep_to_wep_query_output.txt index 9bf8158f..fc786edd 100644 --- a/tests/fw_rules_tests/policies/expected_output/calico-testcase20-np_3_outbound_hep_to_wep_query_output.txt +++ b/tests/fw_rules_tests/policies/expected_output/calico-testcase20-np_3_outbound_hep_to_wep_query_output.txt @@ -1,14 +1,11 @@ final fw rules for query: np_3_outbound_hep_to_wep, config: np_3_outbound_hep_to_wep: src: 0.0.0.0/0 dst_ns: [None] dst_pods: [vendor.role=worker_public] conn: All connections src: 0.0.0.0/0 dst_ns: [kube-system] dst_pods: [*] conn: All connections -src: ::/0 dst_ns: [None] dst_pods: [vendor.role=worker_public] conn: All connections -src: ::/0 dst_ns: [kube-system] dst_pods: [*] conn: All connections src_ns: [None] src_pods: [vendor.role=worker_public] dst: 198.51.100.0/22 conn: All connections src_ns: [None] src_pods: [vendor.role=worker_public] dst: 198.51.200.0/27 conn: All connections src_ns: [None] src_pods: [vendor.role=worker_public] dst: 203.0.113.0/24 conn: All connections src_ns: [None] src_pods: [vendor.role=worker_public] dst: 203.0.115.0/29 conn: All connections src_ns: [None] src_pods: [vendor.role=worker_public] dst_ns: [kube-system] dst_pods: [*] conn: All connections src_ns: [kube-system] src_pods: [*] dst: 0.0.0.0/0 conn: All connections -src_ns: [kube-system] src_pods: [*] dst: ::/0 conn: All connections src_ns: [kube-system] src_pods: [*] dst_ns: [None] dst_pods: [vendor.role=worker_public] conn: All connections -src_ns: [kube-system] src_pods: [*] dst_ns: [kube-system] dst_pods: [*] conn: All connections +src_ns: [kube-system] src_pods: [*] dst_ns: [kube-system] dst_pods: [*] conn: All connections \ No newline at end of file diff --git a/tests/fw_rules_tests/policies/expected_output/calico-testcase20-np_3_outbound_hep_to_wep_query_output.yaml b/tests/fw_rules_tests/policies/expected_output/calico-testcase20-np_3_outbound_hep_to_wep_query_output.yaml index b26b3d3a..a6e9e1b5 100644 --- a/tests/fw_rules_tests/policies/expected_output/calico-testcase20-np_3_outbound_hep_to_wep_query_output.yaml +++ b/tests/fw_rules_tests/policies/expected_output/calico-testcase20-np_3_outbound_hep_to_wep_query_output.yaml @@ -20,22 +20,6 @@ - '*' connection: - All connections - - src_ip_block: - - ::/0 - dst_ns: - - None - dst_pods: - - vendor.role=worker_public - connection: - - All connections - - src_ip_block: - - ::/0 - dst_ns: - - kube-system - dst_pods: - - '*' - connection: - - All connections - src_ns: - None src_pods: @@ -86,14 +70,6 @@ - 0.0.0.0/0 connection: - All connections - - src_ns: - - kube-system - src_pods: - - '*' - dst_ip_block: - - ::/0 - connection: - - All connections - src_ns: - kube-system src_pods: @@ -113,4 +89,4 @@ dst_pods: - '*' connection: - - All connections + - All connections \ No newline at end of file diff --git a/tests/fw_rules_tests/policies/expected_output/calico-testcase20-np_4_outbound_all_namespaceSelector_query_output.txt b/tests/fw_rules_tests/policies/expected_output/calico-testcase20-np_4_outbound_all_namespaceSelector_query_output.txt index f949801a..5ddedbf7 100644 --- a/tests/fw_rules_tests/policies/expected_output/calico-testcase20-np_4_outbound_all_namespaceSelector_query_output.txt +++ b/tests/fw_rules_tests/policies/expected_output/calico-testcase20-np_4_outbound_all_namespaceSelector_query_output.txt @@ -1,14 +1,11 @@ final fw rules for query: np_4_outbound_all_namespaceSelector, config: np_4_outbound_all_namespaceSelector: src: 0.0.0.0/0 dst_ns: [None] dst_pods: [vendor.role=worker_public] conn: All connections src: 0.0.0.0/0 dst_ns: [kube-system] dst_pods: [*] conn: All connections -src: ::/0 dst_ns: [None] dst_pods: [vendor.role=worker_public] conn: All connections -src: ::/0 dst_ns: [kube-system] dst_pods: [*] conn: All connections src_ns: [None] src_pods: [vendor.role=worker_public] dst: 198.51.100.0/22 conn: All connections src_ns: [None] src_pods: [vendor.role=worker_public] dst: 198.51.200.0/27 conn: All connections src_ns: [None] src_pods: [vendor.role=worker_public] dst: 203.0.113.0/24 conn: All connections src_ns: [None] src_pods: [vendor.role=worker_public] dst: 203.0.115.0/29 conn: All connections src_ns: [None] src_pods: [vendor.role=worker_public] dst_ns: [kube-system] dst_pods: [*] conn: All connections src_ns: [kube-system] src_pods: [*] dst: 0.0.0.0/0 conn: All connections -src_ns: [kube-system] src_pods: [*] dst: ::/0 conn: All connections src_ns: [kube-system] src_pods: [*] dst_ns: [None] dst_pods: [vendor.role=worker_public] conn: All connections -src_ns: [kube-system] src_pods: [*] dst_ns: [kube-system] dst_pods: [*] conn: All connections +src_ns: [kube-system] src_pods: [*] dst_ns: [kube-system] dst_pods: [*] conn: All connections \ No newline at end of file diff --git a/tests/fw_rules_tests/policies/expected_output/calico-testcase20-np_4_outbound_all_namespaceSelector_query_output.yaml b/tests/fw_rules_tests/policies/expected_output/calico-testcase20-np_4_outbound_all_namespaceSelector_query_output.yaml index 6043d571..65a338c2 100644 --- a/tests/fw_rules_tests/policies/expected_output/calico-testcase20-np_4_outbound_all_namespaceSelector_query_output.yaml +++ b/tests/fw_rules_tests/policies/expected_output/calico-testcase20-np_4_outbound_all_namespaceSelector_query_output.yaml @@ -20,22 +20,6 @@ - '*' connection: - All connections - - src_ip_block: - - ::/0 - dst_ns: - - None - dst_pods: - - vendor.role=worker_public - connection: - - All connections - - src_ip_block: - - ::/0 - dst_ns: - - kube-system - dst_pods: - - '*' - connection: - - All connections - src_ns: - None src_pods: @@ -86,14 +70,6 @@ - 0.0.0.0/0 connection: - All connections - - src_ns: - - kube-system - src_pods: - - '*' - dst_ip_block: - - ::/0 - connection: - - All connections - src_ns: - kube-system src_pods: @@ -113,4 +89,4 @@ dst_pods: - '*' connection: - - All connections + - All connections \ No newline at end of file diff --git a/tests/fw_rules_tests/policies/expected_output/calico-testcase5_connectivity_map_allowFirst_query_output.txt b/tests/fw_rules_tests/policies/expected_output/calico-testcase5_connectivity_map_allowFirst_query_output.txt index c070ee80..42744852 100644 --- a/tests/fw_rules_tests/policies/expected_output/calico-testcase5_connectivity_map_allowFirst_query_output.txt +++ b/tests/fw_rules_tests/policies/expected_output/calico-testcase5_connectivity_map_allowFirst_query_output.txt @@ -1,4 +1,3 @@ final fw rules for query: connectivity_map, config: np_allowFirst: src_ns: [kube-system] src_pods: [*] dst: 0.0.0.0/0 conn: All connections -src_ns: [kube-system] src_pods: [*] dst: ::/0 conn: All connections -src_ns: [kube-system] src_pods: [tier=frontend] dst_ns: [kube-system] dst_pods: [*] conn: All connections +src_ns: [kube-system] src_pods: [tier=frontend] dst_ns: [kube-system] dst_pods: [*] conn: All connections \ No newline at end of file diff --git a/tests/fw_rules_tests/policies/expected_output/calico-testcase5_connectivity_map_allowFirst_query_output.yaml b/tests/fw_rules_tests/policies/expected_output/calico-testcase5_connectivity_map_allowFirst_query_output.yaml index 803d2263..a011463f 100644 --- a/tests/fw_rules_tests/policies/expected_output/calico-testcase5_connectivity_map_allowFirst_query_output.yaml +++ b/tests/fw_rules_tests/policies/expected_output/calico-testcase5_connectivity_map_allowFirst_query_output.yaml @@ -12,14 +12,6 @@ - 0.0.0.0/0 connection: - All connections - - src_ns: - - kube-system - src_pods: - - '*' - dst_ip_block: - - ::/0 - connection: - - All connections - src_ns: - kube-system src_pods: @@ -29,4 +21,4 @@ dst_pods: - '*' connection: - - All connections + - All connections \ No newline at end of file diff --git a/tests/fw_rules_tests/policies/expected_output/calico-testcase5_connectivity_map_denyFirst_query_output.txt b/tests/fw_rules_tests/policies/expected_output/calico-testcase5_connectivity_map_denyFirst_query_output.txt index 1d8f730d..6adb05f8 100644 --- a/tests/fw_rules_tests/policies/expected_output/calico-testcase5_connectivity_map_denyFirst_query_output.txt +++ b/tests/fw_rules_tests/policies/expected_output/calico-testcase5_connectivity_map_denyFirst_query_output.txt @@ -1,5 +1,4 @@ final fw rules for query: connectivity_map, config: np_denyFirst: src_ns: [kube-system] src_pods: [(has(app) and app not in (kube-fluentd,public-cre08b89c167414305a1afb205d0bd346f-alb1))] dst_ns: [kube-system] dst_pods: [*] conn: All connections src_ns: [kube-system] src_pods: [*] dst: 0.0.0.0/0 conn: All connections -src_ns: [kube-system] src_pods: [*] dst: ::/0 conn: All connections src_ns: [kube-system] src_pods: [tier=frontend] dst_ns: [kube-system] dst_pods: [*] conn: All but TCP diff --git a/tests/fw_rules_tests/policies/expected_output/calico-testcase5_connectivity_map_denyFirst_query_output.yaml b/tests/fw_rules_tests/policies/expected_output/calico-testcase5_connectivity_map_denyFirst_query_output.yaml index 845556f5..d279ead6 100644 --- a/tests/fw_rules_tests/policies/expected_output/calico-testcase5_connectivity_map_denyFirst_query_output.yaml +++ b/tests/fw_rules_tests/policies/expected_output/calico-testcase5_connectivity_map_denyFirst_query_output.yaml @@ -32,12 +32,4 @@ dst_ip_block: - 0.0.0.0/0 connection: - - All connections - - src_ns: - - kube-system - src_pods: - - '*' - dst_ip_block: - - ::/0 - connection: - - All connections + - All connections \ No newline at end of file diff --git a/tests/fw_rules_tests/policies/expected_output/cyclonus-simple-example-scheme_output.txt b/tests/fw_rules_tests/policies/expected_output/cyclonus-simple-example-scheme_output.txt index 68debbe3..43aa1a2c 100644 --- a/tests/fw_rules_tests/policies/expected_output/cyclonus-simple-example-scheme_output.txt +++ b/tests/fw_rules_tests/policies/expected_output/cyclonus-simple-example-scheme_output.txt @@ -1,7 +1,5 @@ final fw rules for query: connectivity_map, config: cyclonus-simple-example: src: 0.0.0.0/0 dst_ns: [y] dst_pods: [b] conn: All connections src: 0.0.0.0/24 dst_ns: [y] dst_pods: [c] conn: All connections -src: ::/0 dst_ns: [y] dst_pods: [b] conn: All connections src_ns: [y] src_pods: [a] dst_ns: [y] dst_pods: [b] conn: All connections -src_ns: [y] src_pods: [pod!=c] dst: 0.0.0.0/0 conn: All connections -src_ns: [y] src_pods: [pod!=c] dst: ::/0 conn: All connections +src_ns: [y] src_pods: [pod!=c] dst: 0.0.0.0/0 conn: All connections \ No newline at end of file diff --git a/tests/fw_rules_tests/policies/expected_output/cyclonus-simple-example-scheme_output.yaml b/tests/fw_rules_tests/policies/expected_output/cyclonus-simple-example-scheme_output.yaml index 964867e3..489182cc 100644 --- a/tests/fw_rules_tests/policies/expected_output/cyclonus-simple-example-scheme_output.yaml +++ b/tests/fw_rules_tests/policies/expected_output/cyclonus-simple-example-scheme_output.yaml @@ -20,14 +20,6 @@ - c connection: - All connections - - src_ip_block: - - ::/0 - dst_ns: - - y - dst_pods: - - b - connection: - - All connections - src_ns: - y src_pods: @@ -45,12 +37,4 @@ dst_ip_block: - 0.0.0.0/0 connection: - - All connections - - src_ns: - - y - src_pods: - - pod!=c - dst_ip_block: - - ::/0 - connection: - - All connections + - All connections \ No newline at end of file diff --git a/tests/fw_rules_tests/policies/expected_output/istio-allow-all-scheme_output.txt b/tests/fw_rules_tests/policies/expected_output/istio-allow-all-scheme_output.txt index 9a665583..4b97fe95 100644 --- a/tests/fw_rules_tests/policies/expected_output/istio-allow-all-scheme_output.txt +++ b/tests/fw_rules_tests/policies/expected_output/istio-allow-all-scheme_output.txt @@ -1,13 +1,9 @@ For connections of type TCP, final fw rules for query: istio-allow-all, config: istio-allow-all: src: 0.0.0.0/0 dst_ns: [default,kube-system,vendor-system] dst_pods: [*] conn: All connections -src: ::/0 dst_ns: [default,kube-system,vendor-system] dst_pods: [*] conn: All connections src_ns: [default,kube-system,vendor-system] src_pods: [*] dst: 0.0.0.0/0 conn: All connections -src_ns: [default,kube-system,vendor-system] src_pods: [*] dst: ::/0 conn: All connections src_ns: [default,kube-system,vendor-system] src_pods: [*] dst_ns: [default,kube-system,vendor-system] dst_pods: [*] conn: All connections For connections of type non-TCP, final fw rules for query: istio-allow-all, config: istio-allow-all: src: 0.0.0.0/0 dst_ns: [default,kube-system,vendor-system] dst_pods: [*] conn: All connections -src: ::/0 dst_ns: [default,kube-system,vendor-system] dst_pods: [*] conn: All connections src_ns: [default,kube-system,vendor-system] src_pods: [*] dst: 0.0.0.0/0 conn: All connections -src_ns: [default,kube-system,vendor-system] src_pods: [*] dst: ::/0 conn: All connections src_ns: [default,kube-system,vendor-system] src_pods: [*] dst_ns: [default,kube-system,vendor-system] dst_pods: [*] conn: All connections diff --git a/tests/fw_rules_tests/policies/expected_output/istio-allow-all-scheme_output.yaml b/tests/fw_rules_tests/policies/expected_output/istio-allow-all-scheme_output.yaml index ae614135..a2a76f37 100644 --- a/tests/fw_rules_tests/policies/expected_output/istio-allow-all-scheme_output.yaml +++ b/tests/fw_rules_tests/policies/expected_output/istio-allow-all-scheme_output.yaml @@ -14,16 +14,6 @@ - '*' connection: - All connections - - src_ip_block: - - ::/0 - dst_ns: - - default - - kube-system - - vendor-system - dst_pods: - - '*' - connection: - - All connections - src_ns: - default - kube-system @@ -34,16 +24,6 @@ - 0.0.0.0/0 connection: - All connections - - src_ns: - - default - - kube-system - - vendor-system - src_pods: - - '*' - dst_ip_block: - - ::/0 - connection: - - All connections - src_ns: - default - kube-system @@ -69,16 +49,6 @@ - '*' connection: - All connections - - src_ip_block: - - ::/0 - dst_ns: - - default - - kube-system - - vendor-system - dst_pods: - - '*' - connection: - - All connections - src_ns: - default - kube-system @@ -89,16 +59,6 @@ - 0.0.0.0/0 connection: - All connections - - src_ns: - - default - - kube-system - - vendor-system - src_pods: - - '*' - dst_ip_block: - - ::/0 - connection: - - All connections - src_ns: - default - kube-system @@ -112,4 +72,4 @@ dst_pods: - '*' connection: - - All connections + - All connections \ No newline at end of file diff --git a/tests/fw_rules_tests/policies/expected_output/istio-allow-nothing-1_query_output.txt b/tests/fw_rules_tests/policies/expected_output/istio-allow-nothing-1_query_output.txt index 94f32dca..402f3724 100644 --- a/tests/fw_rules_tests/policies/expected_output/istio-allow-nothing-1_query_output.txt +++ b/tests/fw_rules_tests/policies/expected_output/istio-allow-nothing-1_query_output.txt @@ -1,13 +1,9 @@ For connections of type TCP, final fw rules for query: istio-allow-nothing-1, config: istio-allow-nothing-1: src: 0.0.0.0/0 dst_ns: [kube-system,vendor-system] dst_pods: [*] conn: All connections -src: ::/0 dst_ns: [kube-system,vendor-system] dst_pods: [*] conn: All connections src_ns: [default,kube-system,vendor-system] src_pods: [*] dst: 0.0.0.0/0 conn: All connections -src_ns: [default,kube-system,vendor-system] src_pods: [*] dst: ::/0 conn: All connections src_ns: [default,kube-system,vendor-system] src_pods: [*] dst_ns: [kube-system,vendor-system] dst_pods: [*] conn: All connections For connections of type non-TCP, final fw rules for query: istio-allow-nothing-1, config: istio-allow-nothing-1: src: 0.0.0.0/0 dst_ns: [default,kube-system,vendor-system] dst_pods: [*] conn: All connections -src: ::/0 dst_ns: [default,kube-system,vendor-system] dst_pods: [*] conn: All connections src_ns: [default,kube-system,vendor-system] src_pods: [*] dst: 0.0.0.0/0 conn: All connections -src_ns: [default,kube-system,vendor-system] src_pods: [*] dst: ::/0 conn: All connections -src_ns: [default,kube-system,vendor-system] src_pods: [*] dst_ns: [default,kube-system,vendor-system] dst_pods: [*] conn: All connections +src_ns: [default,kube-system,vendor-system] src_pods: [*] dst_ns: [default,kube-system,vendor-system] dst_pods: [*] conn: All connections \ No newline at end of file diff --git a/tests/fw_rules_tests/policies/expected_output/istio-allow-nothing-1_query_output.yaml b/tests/fw_rules_tests/policies/expected_output/istio-allow-nothing-1_query_output.yaml index e6f89fc1..ffd51313 100644 --- a/tests/fw_rules_tests/policies/expected_output/istio-allow-nothing-1_query_output.yaml +++ b/tests/fw_rules_tests/policies/expected_output/istio-allow-nothing-1_query_output.yaml @@ -13,15 +13,6 @@ - '*' connection: - All connections - - src_ip_block: - - ::/0 - dst_ns: - - kube-system - - vendor-system - dst_pods: - - '*' - connection: - - All connections - src_ns: - default - kube-system @@ -32,16 +23,6 @@ - 0.0.0.0/0 connection: - All connections - - src_ns: - - default - - kube-system - - vendor-system - src_pods: - - '*' - dst_ip_block: - - ::/0 - connection: - - All connections - src_ns: - default - kube-system @@ -66,16 +47,6 @@ - '*' connection: - All connections - - src_ip_block: - - ::/0 - dst_ns: - - default - - kube-system - - vendor-system - dst_pods: - - '*' - connection: - - All connections - src_ns: - default - kube-system @@ -86,16 +57,6 @@ - 0.0.0.0/0 connection: - All connections - - src_ns: - - default - - kube-system - - vendor-system - src_pods: - - '*' - dst_ip_block: - - ::/0 - connection: - - All connections - src_ns: - default - kube-system @@ -109,4 +70,4 @@ dst_pods: - '*' connection: - - All connections + - All connections \ No newline at end of file diff --git a/tests/fw_rules_tests/policies/expected_output/istio-allow-nothing-2_query_output.txt b/tests/fw_rules_tests/policies/expected_output/istio-allow-nothing-2_query_output.txt index ba59b850..1cd4b859 100644 --- a/tests/fw_rules_tests/policies/expected_output/istio-allow-nothing-2_query_output.txt +++ b/tests/fw_rules_tests/policies/expected_output/istio-allow-nothing-2_query_output.txt @@ -1,13 +1,9 @@ For connections of type TCP, final fw rules for query: istio-allow-nothing-2, config: istio-allow-nothing-2: src: 0.0.0.0/0 dst_ns: [kube-system,vendor-system] dst_pods: [*] conn: All connections -src: ::/0 dst_ns: [kube-system,vendor-system] dst_pods: [*] conn: All connections src_ns: [default,kube-system,vendor-system] src_pods: [*] dst: 0.0.0.0/0 conn: All connections -src_ns: [default,kube-system,vendor-system] src_pods: [*] dst: ::/0 conn: All connections src_ns: [default,kube-system,vendor-system] src_pods: [*] dst_ns: [kube-system,vendor-system] dst_pods: [*] conn: All connections For connections of type non-TCP, final fw rules for query: istio-allow-nothing-2, config: istio-allow-nothing-2: src: 0.0.0.0/0 dst_ns: [default,kube-system,vendor-system] dst_pods: [*] conn: All connections -src: ::/0 dst_ns: [default,kube-system,vendor-system] dst_pods: [*] conn: All connections src_ns: [default,kube-system,vendor-system] src_pods: [*] dst: 0.0.0.0/0 conn: All connections -src_ns: [default,kube-system,vendor-system] src_pods: [*] dst: ::/0 conn: All connections -src_ns: [default,kube-system,vendor-system] src_pods: [*] dst_ns: [default,kube-system,vendor-system] dst_pods: [*] conn: All connections +src_ns: [default,kube-system,vendor-system] src_pods: [*] dst_ns: [default,kube-system,vendor-system] dst_pods: [*] conn: All connections \ No newline at end of file diff --git a/tests/fw_rules_tests/policies/expected_output/istio-allow-nothing-2_query_output.yaml b/tests/fw_rules_tests/policies/expected_output/istio-allow-nothing-2_query_output.yaml index 8cd57fd5..b33e3635 100644 --- a/tests/fw_rules_tests/policies/expected_output/istio-allow-nothing-2_query_output.yaml +++ b/tests/fw_rules_tests/policies/expected_output/istio-allow-nothing-2_query_output.yaml @@ -13,15 +13,6 @@ - '*' connection: - All connections - - src_ip_block: - - ::/0 - dst_ns: - - kube-system - - vendor-system - dst_pods: - - '*' - connection: - - All connections - src_ns: - default - kube-system @@ -32,16 +23,6 @@ - 0.0.0.0/0 connection: - All connections - - src_ns: - - default - - kube-system - - vendor-system - src_pods: - - '*' - dst_ip_block: - - ::/0 - connection: - - All connections - src_ns: - default - kube-system @@ -66,16 +47,6 @@ - '*' connection: - All connections - - src_ip_block: - - ::/0 - dst_ns: - - default - - kube-system - - vendor-system - dst_pods: - - '*' - connection: - - All connections - src_ns: - default - kube-system @@ -86,16 +57,6 @@ - 0.0.0.0/0 connection: - All connections - - src_ns: - - default - - kube-system - - vendor-system - src_pods: - - '*' - dst_ip_block: - - ::/0 - connection: - - All connections - src_ns: - default - kube-system @@ -109,4 +70,4 @@ dst_pods: - '*' connection: - - All connections + - All connections \ No newline at end of file diff --git a/tests/fw_rules_tests/policies/expected_output/istio-allow-nothing-3_query_output.txt b/tests/fw_rules_tests/policies/expected_output/istio-allow-nothing-3_query_output.txt index 8cf1de96..8676e66b 100644 --- a/tests/fw_rules_tests/policies/expected_output/istio-allow-nothing-3_query_output.txt +++ b/tests/fw_rules_tests/policies/expected_output/istio-allow-nothing-3_query_output.txt @@ -1,10 +1,7 @@ For connections of type TCP, final fw rules for query: istio-allow-nothing-3, config: istio-allow-nothing-3: src_ns: [default,kube-system,vendor-system] src_pods: [*] dst: 0.0.0.0/0 conn: All connections -src_ns: [default,kube-system,vendor-system] src_pods: [*] dst: ::/0 conn: All connections For connections of type non-TCP, final fw rules for query: istio-allow-nothing-3, config: istio-allow-nothing-3: src: 0.0.0.0/0 dst_ns: [default,kube-system,vendor-system] dst_pods: [*] conn: All connections -src: ::/0 dst_ns: [default,kube-system,vendor-system] dst_pods: [*] conn: All connections src_ns: [default,kube-system,vendor-system] src_pods: [*] dst: 0.0.0.0/0 conn: All connections -src_ns: [default,kube-system,vendor-system] src_pods: [*] dst: ::/0 conn: All connections -src_ns: [default,kube-system,vendor-system] src_pods: [*] dst_ns: [default,kube-system,vendor-system] dst_pods: [*] conn: All connections +src_ns: [default,kube-system,vendor-system] src_pods: [*] dst_ns: [default,kube-system,vendor-system] dst_pods: [*] conn: All connections \ No newline at end of file diff --git a/tests/fw_rules_tests/policies/expected_output/istio-allow-nothing-3_query_output.yaml b/tests/fw_rules_tests/policies/expected_output/istio-allow-nothing-3_query_output.yaml index bd27acc8..691bba78 100644 --- a/tests/fw_rules_tests/policies/expected_output/istio-allow-nothing-3_query_output.yaml +++ b/tests/fw_rules_tests/policies/expected_output/istio-allow-nothing-3_query_output.yaml @@ -14,16 +14,6 @@ - 0.0.0.0/0 connection: - All connections - - src_ns: - - default - - kube-system - - vendor-system - src_pods: - - '*' - dst_ip_block: - - ::/0 - connection: - - All connections non-TCP_rules: - src_ip_block: - 0.0.0.0/0 @@ -35,16 +25,6 @@ - '*' connection: - All connections - - src_ip_block: - - ::/0 - dst_ns: - - default - - kube-system - - vendor-system - dst_pods: - - '*' - connection: - - All connections - src_ns: - default - kube-system @@ -55,16 +35,6 @@ - 0.0.0.0/0 connection: - All connections - - src_ns: - - default - - kube-system - - vendor-system - src_pods: - - '*' - dst_ip_block: - - ::/0 - connection: - - All connections - src_ns: - default - kube-system @@ -78,4 +48,4 @@ dst_pods: - '*' connection: - - All connections + - All connections \ No newline at end of file diff --git a/tests/fw_rules_tests/policies/expected_output/istio-bookinfo-connectivity_test_methods_basic_1_query_output.txt b/tests/fw_rules_tests/policies/expected_output/istio-bookinfo-connectivity_test_methods_basic_1_query_output.txt index 9f486ef0..89a30525 100644 --- a/tests/fw_rules_tests/policies/expected_output/istio-bookinfo-connectivity_test_methods_basic_1_query_output.txt +++ b/tests/fw_rules_tests/policies/expected_output/istio-bookinfo-connectivity_test_methods_basic_1_query_output.txt @@ -1,12 +1,9 @@ For connections of type TCP, final fw rules for query: connectivity-istio-test-methods-basic-1, config: istio-test-methods-basic-1: src_ns: [default] src_pods: [*] dst: 0.0.0.0/0 conn: All connections -src_ns: [default] src_pods: [*] dst: ::/0 conn: All connections src_ns: [default] src_pods: [app=productpage] dst_ns: [default] dst_pods: [app=details] conn: TCP {'dst_ports': '80', 'methods': 'GET'} src_ns: [default] src_pods: [app=productpage] dst_ns: [default] dst_pods: [app=reviews] conn: All connections For connections of type non-TCP, final fw rules for query: connectivity-istio-test-methods-basic-1, config: istio-test-methods-basic-1: src: 0.0.0.0/0 dst_ns: [default] dst_pods: [*] conn: All connections -src: ::/0 dst_ns: [default] dst_pods: [*] conn: All connections src_ns: [default] src_pods: [*] dst: 0.0.0.0/0 conn: All connections -src_ns: [default] src_pods: [*] dst: ::/0 conn: All connections -src_ns: [default] src_pods: [*] dst_ns: [default] dst_pods: [*] conn: All connections +src_ns: [default] src_pods: [*] dst_ns: [default] dst_pods: [*] conn: All connections \ No newline at end of file diff --git a/tests/fw_rules_tests/policies/expected_output/istio-bookinfo-connectivity_test_methods_basic_1_query_output.yaml b/tests/fw_rules_tests/policies/expected_output/istio-bookinfo-connectivity_test_methods_basic_1_query_output.yaml index bc694375..ce436c12 100644 --- a/tests/fw_rules_tests/policies/expected_output/istio-bookinfo-connectivity_test_methods_basic_1_query_output.yaml +++ b/tests/fw_rules_tests/policies/expected_output/istio-bookinfo-connectivity_test_methods_basic_1_query_output.yaml @@ -26,14 +26,6 @@ - 0.0.0.0/0 connection: - All connections - - src_ns: - - default - src_pods: - - '*' - dst_ip_block: - - ::/0 - connection: - - All connections - src_ns: - default src_pods: @@ -53,14 +45,6 @@ - '*' connection: - All connections - - src_ip_block: - - ::/0 - dst_ns: - - default - dst_pods: - - '*' - connection: - - All connections - src_ns: - default src_pods: @@ -69,14 +53,6 @@ - 0.0.0.0/0 connection: - All connections - - src_ns: - - default - src_pods: - - '*' - dst_ip_block: - - ::/0 - connection: - - All connections - src_ns: - default src_pods: @@ -86,4 +62,4 @@ dst_pods: - '*' connection: - - All connections + - All connections \ No newline at end of file diff --git a/tests/fw_rules_tests/policies/expected_output/istio-bookinfo-connectivity_test_methods_basic_2_query_output.txt b/tests/fw_rules_tests/policies/expected_output/istio-bookinfo-connectivity_test_methods_basic_2_query_output.txt index 1639fbce..ba8690f7 100644 --- a/tests/fw_rules_tests/policies/expected_output/istio-bookinfo-connectivity_test_methods_basic_2_query_output.txt +++ b/tests/fw_rules_tests/policies/expected_output/istio-bookinfo-connectivity_test_methods_basic_2_query_output.txt @@ -1,12 +1,9 @@ For connections of type TCP, final fw rules for query: connectivity-istio-test-methods-basic-2, config: istio-test-methods-basic-2: src_ns: [default] src_pods: [*] dst: 0.0.0.0/0 conn: All connections -src_ns: [default] src_pods: [*] dst: ::/0 conn: All connections src_ns: [default] src_pods: [app=productpage] dst_ns: [default] dst_pods: [app=details] conn: TCP {'methods': 'all but GET'} src_ns: [default] src_pods: [app=productpage] dst_ns: [default] dst_pods: [app=reviews] conn: TCP {'methods': 'PUT'} For connections of type non-TCP, final fw rules for query: connectivity-istio-test-methods-basic-2, config: istio-test-methods-basic-2: src: 0.0.0.0/0 dst_ns: [default] dst_pods: [*] conn: All connections -src: ::/0 dst_ns: [default] dst_pods: [*] conn: All connections src_ns: [default] src_pods: [*] dst: 0.0.0.0/0 conn: All connections -src_ns: [default] src_pods: [*] dst: ::/0 conn: All connections -src_ns: [default] src_pods: [*] dst_ns: [default] dst_pods: [*] conn: All connections +src_ns: [default] src_pods: [*] dst_ns: [default] dst_pods: [*] conn: All connections \ No newline at end of file diff --git a/tests/fw_rules_tests/policies/expected_output/istio-bookinfo-connectivity_test_methods_basic_2_query_output.yaml b/tests/fw_rules_tests/policies/expected_output/istio-bookinfo-connectivity_test_methods_basic_2_query_output.yaml index 358c470d..51738231 100644 --- a/tests/fw_rules_tests/policies/expected_output/istio-bookinfo-connectivity_test_methods_basic_2_query_output.yaml +++ b/tests/fw_rules_tests/policies/expected_output/istio-bookinfo-connectivity_test_methods_basic_2_query_output.yaml @@ -36,14 +36,6 @@ - 0.0.0.0/0 connection: - All connections - - src_ns: - - default - src_pods: - - '*' - dst_ip_block: - - ::/0 - connection: - - All connections non-TCP_rules: - src_ip_block: - 0.0.0.0/0 @@ -53,14 +45,6 @@ - '*' connection: - All connections - - src_ip_block: - - ::/0 - dst_ns: - - default - dst_pods: - - '*' - connection: - - All connections - src_ns: - default src_pods: @@ -69,14 +53,6 @@ - 0.0.0.0/0 connection: - All connections - - src_ns: - - default - src_pods: - - '*' - dst_ip_block: - - ::/0 - connection: - - All connections - src_ns: - default src_pods: @@ -86,4 +62,4 @@ dst_pods: - '*' connection: - - All connections + - All connections \ No newline at end of file diff --git a/tests/fw_rules_tests/policies/expected_output/istio-bookinfo-connectivity_test_methods_paths_1_query_output.txt b/tests/fw_rules_tests/policies/expected_output/istio-bookinfo-connectivity_test_methods_paths_1_query_output.txt index fbec0212..ecfa9310 100644 --- a/tests/fw_rules_tests/policies/expected_output/istio-bookinfo-connectivity_test_methods_paths_1_query_output.txt +++ b/tests/fw_rules_tests/policies/expected_output/istio-bookinfo-connectivity_test_methods_paths_1_query_output.txt @@ -1,11 +1,8 @@ For connections of type TCP, final fw rules for query: connectivity-istio-test-methods-paths-1, config: istio-test-methods-paths-1: src_ns: [default] src_pods: [*] dst: 0.0.0.0/0 conn: All connections -src_ns: [default] src_pods: [*] dst: ::/0 conn: All connections src_ns: [default] src_pods: [app=productpage] dst_ns: [default] dst_pods: [app=details] conn: TCP {'dst_ports': '80', 'methods': 'GET', 'paths': '/good_path1, /good_path2, /some/path2', 'hosts': 'all but disallowed-host.com'},{'dst_ports': '80', 'methods': 'GET', 'paths': 'all but /bad/path1, /bad/path3, /good_path1, /good_path2, /some/path2', 'hosts': 'allowed-host.com'},{'dst_ports': '80', 'methods': 'PUT', 'paths': '/good_path1, /good_path2, /some/path2', 'hosts': 'all but disallowed-host.com'},{'dst_ports': '80', 'methods': 'all but GET, PUT', 'paths': 'all but /bad/path1, /bad/path3, /some/path2', 'hosts': 'allowed-host.com'},{'dst_ports': '90', 'methods': 'GET, PUT', 'paths': '/good_path1, /good_path2, /some/path2', 'hosts': 'all but disallowed-host.com'},{'dst_ports': '100', 'methods': 'all but PUT', 'paths': '/some/path3'},{'dst_ports': '100', 'methods': 'all but PUT', 'paths': 'all but /bad/path1, /bad/path3, /some/path2, /some/path3', 'hosts': 'allowed-host.com'},{'dst_ports': '100', 'methods': 'PUT', 'paths': '/some/path3'},{'dst_ports': '1-79,81-89,91-99,101-65535', 'methods': 'all but PUT', 'paths': 'all but /bad/path1, /bad/path3, /some/path2', 'hosts': 'allowed-host.com'} For connections of type non-TCP, final fw rules for query: connectivity-istio-test-methods-paths-1, config: istio-test-methods-paths-1: src: 0.0.0.0/0 dst_ns: [default] dst_pods: [*] conn: All connections -src: ::/0 dst_ns: [default] dst_pods: [*] conn: All connections src_ns: [default] src_pods: [*] dst: 0.0.0.0/0 conn: All connections -src_ns: [default] src_pods: [*] dst: ::/0 conn: All connections -src_ns: [default] src_pods: [*] dst_ns: [default] dst_pods: [*] conn: All connections +src_ns: [default] src_pods: [*] dst_ns: [default] dst_pods: [*] conn: All connections \ No newline at end of file diff --git a/tests/fw_rules_tests/policies/expected_output/istio-bookinfo-connectivity_test_methods_paths_1_query_output.yaml b/tests/fw_rules_tests/policies/expected_output/istio-bookinfo-connectivity_test_methods_paths_1_query_output.yaml index 76224e63..639a295f 100644 --- a/tests/fw_rules_tests/policies/expected_output/istio-bookinfo-connectivity_test_methods_paths_1_query_output.yaml +++ b/tests/fw_rules_tests/policies/expected_output/istio-bookinfo-connectivity_test_methods_paths_1_query_output.yaml @@ -69,14 +69,6 @@ - 0.0.0.0/0 connection: - All connections - - src_ns: - - default - src_pods: - - '*' - dst_ip_block: - - ::/0 - connection: - - All connections non-TCP_rules: - src_ip_block: - 0.0.0.0/0 @@ -86,14 +78,6 @@ - '*' connection: - All connections - - src_ip_block: - - ::/0 - dst_ns: - - default - dst_pods: - - '*' - connection: - - All connections - src_ns: - default src_pods: @@ -102,14 +86,6 @@ - 0.0.0.0/0 connection: - All connections - - src_ns: - - default - src_pods: - - '*' - dst_ip_block: - - ::/0 - connection: - - All connections - src_ns: - default src_pods: @@ -119,4 +95,4 @@ dst_pods: - '*' connection: - - All connections + - All connections \ No newline at end of file diff --git a/tests/fw_rules_tests/policies/expected_output/istio-bookinfo-connectivity_test_operation_allow_1_query_output.txt b/tests/fw_rules_tests/policies/expected_output/istio-bookinfo-connectivity_test_operation_allow_1_query_output.txt index ae3cf41e..ed177362 100644 --- a/tests/fw_rules_tests/policies/expected_output/istio-bookinfo-connectivity_test_operation_allow_1_query_output.txt +++ b/tests/fw_rules_tests/policies/expected_output/istio-bookinfo-connectivity_test_operation_allow_1_query_output.txt @@ -1,11 +1,8 @@ For connections of type TCP, final fw rules for query: connectivity-istio-test-operation-allow-1, config: istio-test-operation-allow-1: src_ns: [default] src_pods: [*] dst: 0.0.0.0/0 conn: All connections -src_ns: [default] src_pods: [*] dst: ::/0 conn: All connections src_ns: [default] src_pods: [app=productpage] dst_ns: [default] dst_pods: [app=details] conn: TCP {'methods': 'GET', 'paths': '/info[\\--9A-Z_a-z]*'},{'methods': 'POST', 'paths': '/data'} For connections of type non-TCP, final fw rules for query: connectivity-istio-test-operation-allow-1, config: istio-test-operation-allow-1: src: 0.0.0.0/0 dst_ns: [default] dst_pods: [*] conn: All connections -src: ::/0 dst_ns: [default] dst_pods: [*] conn: All connections src_ns: [default] src_pods: [*] dst: 0.0.0.0/0 conn: All connections -src_ns: [default] src_pods: [*] dst: ::/0 conn: All connections -src_ns: [default] src_pods: [*] dst_ns: [default] dst_pods: [*] conn: All connections +src_ns: [default] src_pods: [*] dst_ns: [default] dst_pods: [*] conn: All connections \ No newline at end of file diff --git a/tests/fw_rules_tests/policies/expected_output/istio-bookinfo-connectivity_test_operation_allow_1_query_output.yaml b/tests/fw_rules_tests/policies/expected_output/istio-bookinfo-connectivity_test_operation_allow_1_query_output.yaml index e040365a..201d5b91 100644 --- a/tests/fw_rules_tests/policies/expected_output/istio-bookinfo-connectivity_test_operation_allow_1_query_output.yaml +++ b/tests/fw_rules_tests/policies/expected_output/istio-bookinfo-connectivity_test_operation_allow_1_query_output.yaml @@ -27,14 +27,6 @@ - 0.0.0.0/0 connection: - All connections - - src_ns: - - default - src_pods: - - '*' - dst_ip_block: - - ::/0 - connection: - - All connections non-TCP_rules: - src_ip_block: - 0.0.0.0/0 @@ -44,14 +36,6 @@ - '*' connection: - All connections - - src_ip_block: - - ::/0 - dst_ns: - - default - dst_pods: - - '*' - connection: - - All connections - src_ns: - default src_pods: @@ -60,14 +44,6 @@ - 0.0.0.0/0 connection: - All connections - - src_ns: - - default - src_pods: - - '*' - dst_ip_block: - - ::/0 - connection: - - All connections - src_ns: - default src_pods: @@ -77,4 +53,4 @@ dst_pods: - '*' connection: - - All connections + - All connections \ No newline at end of file diff --git a/tests/fw_rules_tests/policies/expected_output/istio-bookinfo-connectivity_test_operation_deny_1_query_output.txt b/tests/fw_rules_tests/policies/expected_output/istio-bookinfo-connectivity_test_operation_deny_1_query_output.txt index 85c890d5..f4813978 100644 --- a/tests/fw_rules_tests/policies/expected_output/istio-bookinfo-connectivity_test_operation_deny_1_query_output.txt +++ b/tests/fw_rules_tests/policies/expected_output/istio-bookinfo-connectivity_test_operation_deny_1_query_output.txt @@ -1,17 +1,12 @@ For connections of type TCP, final fw rules for query: connectivity-istio-test-operation-deny-1, config: istio-test-operation-deny-1: src: 0.0.0.0/0 dst_ns: [default] dst_pods: [*] conn: TCP {'methods': 'all but GET'} src: 0.0.0.0/0 dst_ns: [default] dst_pods: [app!=details] conn: All connections -src: ::/0 dst_ns: [default] dst_pods: [*] conn: TCP {'methods': 'all but GET'} -src: ::/0 dst_ns: [default] dst_pods: [app!=details] conn: All connections src_ns: [default] src_pods: [*] dst: 0.0.0.0/0 conn: All connections -src_ns: [default] src_pods: [*] dst: ::/0 conn: All connections src_ns: [default] src_pods: [*] dst_ns: [default] dst_pods: [*] conn: TCP {'methods': 'all but GET'} src_ns: [default] src_pods: [*] dst_ns: [default] dst_pods: [app!=details] conn: All connections src_ns: [default] src_pods: [app=details] dst_ns: [default] dst_pods: [*] conn: All connections For connections of type non-TCP, final fw rules for query: connectivity-istio-test-operation-deny-1, config: istio-test-operation-deny-1: src: 0.0.0.0/0 dst_ns: [default] dst_pods: [*] conn: All connections -src: ::/0 dst_ns: [default] dst_pods: [*] conn: All connections src_ns: [default] src_pods: [*] dst: 0.0.0.0/0 conn: All connections -src_ns: [default] src_pods: [*] dst: ::/0 conn: All connections -src_ns: [default] src_pods: [*] dst_ns: [default] dst_pods: [*] conn: All connections +src_ns: [default] src_pods: [*] dst_ns: [default] dst_pods: [*] conn: All connections \ No newline at end of file diff --git a/tests/fw_rules_tests/policies/expected_output/istio-bookinfo-connectivity_test_operation_deny_1_query_output.yaml b/tests/fw_rules_tests/policies/expected_output/istio-bookinfo-connectivity_test_operation_deny_1_query_output.yaml index 6b7f0be6..423c4282 100644 --- a/tests/fw_rules_tests/policies/expected_output/istio-bookinfo-connectivity_test_operation_deny_1_query_output.yaml +++ b/tests/fw_rules_tests/policies/expected_output/istio-bookinfo-connectivity_test_operation_deny_1_query_output.yaml @@ -14,16 +14,6 @@ - Protocol: TCP properties: - methods: all but GET - - src_ip_block: - - ::/0 - dst_ns: - - default - dst_pods: - - '*' - connection: - - Protocol: TCP - properties: - - methods: all but GET - src_ns: - default src_pods: @@ -44,14 +34,6 @@ - app!=details connection: - All connections - - src_ip_block: - - ::/0 - dst_ns: - - default - dst_pods: - - app!=details - connection: - - All connections - src_ns: - default src_pods: @@ -60,14 +42,6 @@ - 0.0.0.0/0 connection: - All connections - - src_ns: - - default - src_pods: - - '*' - dst_ip_block: - - ::/0 - connection: - - All connections - src_ns: - default src_pods: @@ -97,14 +71,6 @@ - '*' connection: - All connections - - src_ip_block: - - ::/0 - dst_ns: - - default - dst_pods: - - '*' - connection: - - All connections - src_ns: - default src_pods: @@ -113,14 +79,6 @@ - 0.0.0.0/0 connection: - All connections - - src_ns: - - default - src_pods: - - '*' - dst_ip_block: - - ::/0 - connection: - - All connections - src_ns: - default src_pods: @@ -130,4 +88,4 @@ dst_pods: - '*' connection: - - All connections + - All connections \ No newline at end of file diff --git a/tests/fw_rules_tests/policies/expected_output/istio-deny-all-scheme_output.txt b/tests/fw_rules_tests/policies/expected_output/istio-deny-all-scheme_output.txt index 27b410f1..0f698c3d 100644 --- a/tests/fw_rules_tests/policies/expected_output/istio-deny-all-scheme_output.txt +++ b/tests/fw_rules_tests/policies/expected_output/istio-deny-all-scheme_output.txt @@ -1,13 +1,9 @@ For connections of type TCP, final fw rules for query: istio-deny-all, config: istio-deny-all: src: 0.0.0.0/0 dst_ns: [kube-system,vendor-system] dst_pods: [*] conn: All connections -src: ::/0 dst_ns: [kube-system,vendor-system] dst_pods: [*] conn: All connections src_ns: [default,kube-system,vendor-system] src_pods: [*] dst: 0.0.0.0/0 conn: All connections -src_ns: [default,kube-system,vendor-system] src_pods: [*] dst: ::/0 conn: All connections src_ns: [default,kube-system,vendor-system] src_pods: [*] dst_ns: [kube-system,vendor-system] dst_pods: [*] conn: All connections For connections of type non-TCP, final fw rules for query: istio-deny-all, config: istio-deny-all: src: 0.0.0.0/0 dst_ns: [default,kube-system,vendor-system] dst_pods: [*] conn: All connections -src: ::/0 dst_ns: [default,kube-system,vendor-system] dst_pods: [*] conn: All connections src_ns: [default,kube-system,vendor-system] src_pods: [*] dst: 0.0.0.0/0 conn: All connections -src_ns: [default,kube-system,vendor-system] src_pods: [*] dst: ::/0 conn: All connections src_ns: [default,kube-system,vendor-system] src_pods: [*] dst_ns: [default,kube-system,vendor-system] dst_pods: [*] conn: All connections diff --git a/tests/fw_rules_tests/policies/expected_output/istio-deny-all-scheme_output.yaml b/tests/fw_rules_tests/policies/expected_output/istio-deny-all-scheme_output.yaml index f23dd07e..089e6d63 100644 --- a/tests/fw_rules_tests/policies/expected_output/istio-deny-all-scheme_output.yaml +++ b/tests/fw_rules_tests/policies/expected_output/istio-deny-all-scheme_output.yaml @@ -13,15 +13,6 @@ - '*' connection: - All connections - - src_ip_block: - - ::/0 - dst_ns: - - kube-system - - vendor-system - dst_pods: - - '*' - connection: - - All connections - src_ns: - default - kube-system @@ -32,16 +23,6 @@ - 0.0.0.0/0 connection: - All connections - - src_ns: - - default - - kube-system - - vendor-system - src_pods: - - '*' - dst_ip_block: - - ::/0 - connection: - - All connections - src_ns: - default - kube-system @@ -66,16 +47,6 @@ - '*' connection: - All connections - - src_ip_block: - - ::/0 - dst_ns: - - default - - kube-system - - vendor-system - dst_pods: - - '*' - connection: - - All connections - src_ns: - default - kube-system @@ -86,16 +57,6 @@ - 0.0.0.0/0 connection: - All connections - - src_ns: - - default - - kube-system - - vendor-system - src_pods: - - '*' - dst_ip_block: - - ::/0 - connection: - - All connections - src_ns: - default - kube-system @@ -109,4 +70,4 @@ dst_pods: - '*' connection: - - All connections + - All connections \ No newline at end of file diff --git a/tests/fw_rules_tests/policies/expected_output/istio-test1-scheme_query1_output.txt b/tests/fw_rules_tests/policies/expected_output/istio-test1-scheme_query1_output.txt index 3903bd1f..71507294 100644 --- a/tests/fw_rules_tests/policies/expected_output/istio-test1-scheme_query1_output.txt +++ b/tests/fw_rules_tests/policies/expected_output/istio-test1-scheme_query1_output.txt @@ -2,17 +2,12 @@ For connections of type TCP, final fw rules for query: istio-policy1, config: is src: 0.0.0.0/0 dst_ns: [default] dst_pods: [app=special_skydive] conn: All connections src: 0.0.0.0/0 dst_ns: [kube-system,vendor-system] dst_pods: [*] conn: All connections src: 1.2.3.0/24 dst_ns: [default] dst_pods: [app=skydive] conn: TCP 26257 -src: ::/0 dst_ns: [default] dst_pods: [app=special_skydive] conn: All connections -src: ::/0 dst_ns: [kube-system,vendor-system] dst_pods: [*] conn: All connections src_ns: [default,kube-system,vendor-system] src_pods: [*] dst: 0.0.0.0/0 conn: All connections -src_ns: [default,kube-system,vendor-system] src_pods: [*] dst: ::/0 conn: All connections src_ns: [default,kube-system,vendor-system] src_pods: [*] dst_ns: [default] dst_pods: [app=special_skydive] conn: All connections src_ns: [default,kube-system,vendor-system] src_pods: [*] dst_ns: [kube-system,vendor-system] dst_pods: [*] conn: All connections src_ns: [default,vendor-system] src_pods: [*] dst_ns: [default] dst_pods: [*] conn: TCP 26257 For connections of type non-TCP, final fw rules for query: istio-policy1, config: istio-policy1: src: 0.0.0.0/0 dst_ns: [default,kube-system,vendor-system] dst_pods: [*] conn: All connections -src: ::/0 dst_ns: [default,kube-system,vendor-system] dst_pods: [*] conn: All connections src_ns: [default,kube-system,vendor-system] src_pods: [*] dst: 0.0.0.0/0 conn: All connections -src_ns: [default,kube-system,vendor-system] src_pods: [*] dst: ::/0 conn: All connections -src_ns: [default,kube-system,vendor-system] src_pods: [*] dst_ns: [default,kube-system,vendor-system] dst_pods: [*] conn: All connections +src_ns: [default,kube-system,vendor-system] src_pods: [*] dst_ns: [default,kube-system,vendor-system] dst_pods: [*] conn: All connections \ No newline at end of file diff --git a/tests/fw_rules_tests/policies/expected_output/istio-test1-scheme_query1_output.yaml b/tests/fw_rules_tests/policies/expected_output/istio-test1-scheme_query1_output.yaml index 7f9f50d9..744b112f 100644 --- a/tests/fw_rules_tests/policies/expected_output/istio-test1-scheme_query1_output.yaml +++ b/tests/fw_rules_tests/policies/expected_output/istio-test1-scheme_query1_output.yaml @@ -44,23 +44,6 @@ - '*' connection: - All connections - - src_ip_block: - - ::/0 - dst_ns: - - default - dst_pods: - - app=special_skydive - connection: - - All connections - - src_ip_block: - - ::/0 - dst_ns: - - kube-system - - vendor-system - dst_pods: - - '*' - connection: - - All connections - src_ns: - default - kube-system @@ -71,16 +54,6 @@ - 0.0.0.0/0 connection: - All connections - - src_ns: - - default - - kube-system - - vendor-system - src_pods: - - '*' - dst_ip_block: - - ::/0 - connection: - - All connections - src_ns: - default - kube-system @@ -117,16 +90,6 @@ - '*' connection: - All connections - - src_ip_block: - - ::/0 - dst_ns: - - default - - kube-system - - vendor-system - dst_pods: - - '*' - connection: - - All connections - src_ns: - default - kube-system @@ -137,16 +100,6 @@ - 0.0.0.0/0 connection: - All connections - - src_ns: - - default - - kube-system - - vendor-system - src_pods: - - '*' - dst_ip_block: - - ::/0 - connection: - - All connections - src_ns: - default - kube-system @@ -160,4 +113,4 @@ dst_pods: - '*' connection: - - All connections + - All connections \ No newline at end of file diff --git a/tests/fw_rules_tests/policies/expected_output/istio-test1-scheme_query2_output.txt b/tests/fw_rules_tests/policies/expected_output/istio-test1-scheme_query2_output.txt index 4eca1752..4b6b62d3 100644 --- a/tests/fw_rules_tests/policies/expected_output/istio-test1-scheme_query2_output.txt +++ b/tests/fw_rules_tests/policies/expected_output/istio-test1-scheme_query2_output.txt @@ -2,13 +2,10 @@ For connections of type TCP, final fw rules for query: istio-policy2, config: is src: 1.2.3.0/24 dst_ns: [default] dst_pods: [app=skydive] conn: TCP 30,50 src: 2.2.2.2/32 dst_ns: [default] dst_pods: [app=skydive] conn: TCP 30,50 src_ns: [default,kube-system,vendor-system] src_pods: [*] dst: 0.0.0.0/0 conn: All connections -src_ns: [default,kube-system,vendor-system] src_pods: [*] dst: ::/0 conn: All connections src_ns: [default,kube-system] src_pods: [*] dst_ns: [default] dst_pods: [app=skydive] conn: TCP 30,50 src_ns: [default] src_pods: [app=special_skydive] dst_ns: [default] dst_pods: [*] conn: TCP 30,50 For connections of type non-TCP, final fw rules for query: istio-policy2, config: istio-policy2: src: 0.0.0.0/0 dst_ns: [default,kube-system,vendor-system] dst_pods: [*] conn: All connections -src: ::/0 dst_ns: [default,kube-system,vendor-system] dst_pods: [*] conn: All connections src_ns: [default,kube-system,vendor-system] src_pods: [*] dst: 0.0.0.0/0 conn: All connections -src_ns: [default,kube-system,vendor-system] src_pods: [*] dst: ::/0 conn: All connections -src_ns: [default,kube-system,vendor-system] src_pods: [*] dst_ns: [default,kube-system,vendor-system] dst_pods: [*] conn: All connections +src_ns: [default,kube-system,vendor-system] src_pods: [*] dst_ns: [default,kube-system,vendor-system] dst_pods: [*] conn: All connections \ No newline at end of file diff --git a/tests/fw_rules_tests/policies/expected_output/istio-test1-scheme_query2_output.yaml b/tests/fw_rules_tests/policies/expected_output/istio-test1-scheme_query2_output.yaml index ab834b74..288d276e 100644 --- a/tests/fw_rules_tests/policies/expected_output/istio-test1-scheme_query2_output.yaml +++ b/tests/fw_rules_tests/policies/expected_output/istio-test1-scheme_query2_output.yaml @@ -63,16 +63,6 @@ - 0.0.0.0/0 connection: - All connections - - src_ns: - - default - - kube-system - - vendor-system - src_pods: - - '*' - dst_ip_block: - - ::/0 - connection: - - All connections non-TCP_rules: - src_ip_block: - 0.0.0.0/0 @@ -84,16 +74,6 @@ - '*' connection: - All connections - - src_ip_block: - - ::/0 - dst_ns: - - default - - kube-system - - vendor-system - dst_pods: - - '*' - connection: - - All connections - src_ns: - default - kube-system @@ -104,16 +84,6 @@ - 0.0.0.0/0 connection: - All connections - - src_ns: - - default - - kube-system - - vendor-system - src_pods: - - '*' - dst_ip_block: - - ::/0 - connection: - - All connections - src_ns: - default - kube-system @@ -127,4 +97,4 @@ dst_pods: - '*' connection: - - All connections + - All connections \ No newline at end of file diff --git a/tests/fw_rules_tests/policies/expected_output/poc1-scheme_output.csv b/tests/fw_rules_tests/policies/expected_output/poc1-scheme_output.csv index cb02f7c3..5f038f88 100644 --- a/tests/fw_rules_tests/policies/expected_output/poc1-scheme_output.csv +++ b/tests/fw_rules_tests/policies/expected_output/poc1-scheme_output.csv @@ -8,7 +8,6 @@ "","[default]","[app in (checkoutservice,frontend)]","[default]","[currencyservice]","TCP 7000", "","[default]","[app in (checkoutservice,frontend)]","[default]","[cartservice]","TCP 7070", "","","0.0.0.0/0","[default]","[frontend]","TCP 8080", -"","","::/0","[default]","[frontend]","TCP 8080", "","[default]","[checkoutservice]","[default]","[emailservice]","TCP 8080", "","[default]","[frontend]","[default]","[recommendationservice]","TCP 8080", "","[default]","[loadgenerator]","[default]","[frontend]","TCP 8080", diff --git a/tests/fw_rules_tests/policies/expected_output/poc1-scheme_output.dot b/tests/fw_rules_tests/policies/expected_output/poc1-scheme_output.dot index 768c6ec3..096877ed 100644 --- a/tests/fw_rules_tests/policies/expected_output/poc1-scheme_output.dot +++ b/tests/fw_rules_tests/policies/expected_output/poc1-scheme_output.dot @@ -2,7 +2,6 @@ digraph { HEADER [shape="box" label=< connectivity_map_dot/poc1 > fontsize=30 color=webmaroon fontcolor=webmaroon]; "0.0.0.0/0" [label="0.0.0.0/0" color="red2" fontcolor="red2"] - "::/0" [label="::/0" color="red2" fontcolor="red2"] "default/adservice(Deployment)" [label="default/adservice(Deployment)" color="blue" fontcolor="blue"] "default/cartservice(Deployment)" [label="default/cartservice(Deployment)" color="blue" fontcolor="blue"] "default/checkoutservice(Deployment)" [label="default/checkoutservice(Deployment)" color="blue" fontcolor="blue"] @@ -16,7 +15,6 @@ digraph { "default/redis-cart(Deployment)" [label="default/redis-cart(Deployment)" color="blue" fontcolor="blue"] "default/shippingservice(Deployment)" [label="default/shippingservice(Deployment)" color="blue" fontcolor="blue"] "0.0.0.0/0" -> "default/frontend(Deployment)" [label="TCP 8080" color="gold2" fontcolor="darkgreen"] - "::/0" -> "default/frontend(Deployment)" [label="TCP 8080" color="gold2" fontcolor="darkgreen"] "default/cartservice(Deployment)" -> "default/redis-cart(Deployment)" [label="TCP 6379" color="gold2" fontcolor="darkgreen"] "default/checkoutservice(Deployment)" -> "default/cartservice(Deployment)" [label="TCP 7070" color="gold2" fontcolor="darkgreen"] "default/checkoutservice(Deployment)" -> "default/currencyservice(Deployment)" [label="TCP 7000" color="gold2" fontcolor="darkgreen"] diff --git a/tests/fw_rules_tests/policies/expected_output/poc1-scheme_output.md b/tests/fw_rules_tests/policies/expected_output/poc1-scheme_output.md index 6d530437..0a30780e 100644 --- a/tests/fw_rules_tests/policies/expected_output/poc1-scheme_output.md +++ b/tests/fw_rules_tests/policies/expected_output/poc1-scheme_output.md @@ -9,7 +9,6 @@ ||[default]|[app in (checkoutservice,frontend)]|[default]|[currencyservice]|TCP 7000| ||[default]|[app in (checkoutservice,frontend)]|[default]|[cartservice]|TCP 7070| |||0.0.0.0/0|[default]|[frontend]|TCP 8080| -|||::/0|[default]|[frontend]|TCP 8080| ||[default]|[checkoutservice]|[default]|[emailservice]|TCP 8080| ||[default]|[frontend]|[default]|[recommendationservice]|TCP 8080| ||[default]|[loadgenerator]|[default]|[frontend]|TCP 8080| diff --git a/tests/fw_rules_tests/policies/expected_output/poc1-scheme_output.txt b/tests/fw_rules_tests/policies/expected_output/poc1-scheme_output.txt index 4c8c0096..ec60d206 100644 --- a/tests/fw_rules_tests/policies/expected_output/poc1-scheme_output.txt +++ b/tests/fw_rules_tests/policies/expected_output/poc1-scheme_output.txt @@ -1,6 +1,5 @@ final fw rules for query: connectivity_map, config: poc1: src: 0.0.0.0/0 dst_ns: [default] dst_pods: [frontend] conn: TCP 8080 -src: ::/0 dst_ns: [default] dst_pods: [frontend] conn: TCP 8080 src_ns: [default] src_pods: [app in (checkoutservice,frontend)] dst_ns: [default] dst_pods: [cartservice] conn: TCP 7070 src_ns: [default] src_pods: [app in (checkoutservice,frontend)] dst_ns: [default] dst_pods: [currencyservice] conn: TCP 7000 src_ns: [default] src_pods: [app in (checkoutservice,frontend)] dst_ns: [default] dst_pods: [shippingservice] conn: TCP 50051 diff --git a/tests/fw_rules_tests/policies/expected_output/poc1-scheme_output.yaml b/tests/fw_rules_tests/policies/expected_output/poc1-scheme_output.yaml index 94e523f9..1172f890 100644 --- a/tests/fw_rules_tests/policies/expected_output/poc1-scheme_output.yaml +++ b/tests/fw_rules_tests/policies/expected_output/poc1-scheme_output.yaml @@ -98,16 +98,6 @@ - Protocol: TCP Ports: - 8080 - - src_ip_block: - - ::/0 - dst_ns: - - default - dst_pods: - - frontend - connection: - - Protocol: TCP - Ports: - - 8080 - src_ns: - default src_pods: diff --git a/tests/fw_rules_tests/policies/expected_output/poc2-scheme_output.txt b/tests/fw_rules_tests/policies/expected_output/poc2-scheme_output.txt index 15a49832..cd05e6a8 100644 --- a/tests/fw_rules_tests/policies/expected_output/poc2-scheme_output.txt +++ b/tests/fw_rules_tests/policies/expected_output/poc2-scheme_output.txt @@ -1,8 +1,6 @@ final fw rules for query: connectivity_map, config: poc2: src: 0.0.0.0/0 dst_ns: [default] dst_pods: [frontend] conn: TCP 8080 src: 0.0.0.0/0 dst_ns: [kube-system] dst_pods: [*] conn: All connections -src: ::/0 dst_ns: [default] dst_pods: [frontend] conn: TCP 8080 -src: ::/0 dst_ns: [kube-system] dst_pods: [*] conn: All connections src_ns: [default] src_pods: [app in (cartservice,checkoutservice,frontend,loadgenerator,recommendationservice)] dst_ns: [kube-system] dst_pods: [*] conn: UDP 53 src_ns: [default] src_pods: [app in (checkoutservice,frontend)] dst_ns: [default] dst_pods: [cartservice] conn: TCP 7070 src_ns: [default] src_pods: [app in (checkoutservice,frontend)] dst_ns: [default] dst_pods: [currencyservice] conn: TCP 7000 @@ -16,6 +14,5 @@ src_ns: [default] src_pods: [frontend] dst_ns: [default] dst_pods: [checkoutserv src_ns: [default] src_pods: [frontend] dst_ns: [default] dst_pods: [recommendationservice] conn: TCP 8080 src_ns: [default] src_pods: [loadgenerator] dst_ns: [default] dst_pods: [frontend] conn: TCP 8080 src_ns: [kube-system] src_pods: [*] dst: 0.0.0.0/0 conn: All connections -src_ns: [kube-system] src_pods: [*] dst: ::/0 conn: All connections src_ns: [kube-system] src_pods: [*] dst_ns: [default] dst_pods: [frontend] conn: TCP 8080 -src_ns: [kube-system] src_pods: [*] dst_ns: [kube-system] dst_pods: [*] conn: All connections +src_ns: [kube-system] src_pods: [*] dst_ns: [kube-system] dst_pods: [*] conn: All connections \ No newline at end of file diff --git a/tests/fw_rules_tests/policies/expected_output/poc2-scheme_output.yaml b/tests/fw_rules_tests/policies/expected_output/poc2-scheme_output.yaml index 0cfdcb7b..bf8ba580 100644 --- a/tests/fw_rules_tests/policies/expected_output/poc2-scheme_output.yaml +++ b/tests/fw_rules_tests/policies/expected_output/poc2-scheme_output.yaml @@ -98,16 +98,6 @@ - Protocol: TCP Ports: - 8080 - - src_ip_block: - - ::/0 - dst_ns: - - default - dst_pods: - - frontend - connection: - - Protocol: TCP - Ports: - - 8080 - src_ns: - default src_pods: @@ -188,14 +178,6 @@ - '*' connection: - All connections - - src_ip_block: - - ::/0 - dst_ns: - - kube-system - dst_pods: - - '*' - connection: - - All connections - src_ns: - kube-system src_pods: @@ -204,14 +186,6 @@ - 0.0.0.0/0 connection: - All connections - - src_ns: - - kube-system - src_pods: - - '*' - dst_ip_block: - - ::/0 - connection: - - All connections - src_ns: - kube-system src_pods: diff --git a/tests/fw_rules_tests/policies/expected_output/poc3-scheme_output.txt b/tests/fw_rules_tests/policies/expected_output/poc3-scheme_output.txt index 8ce8cbd9..f4e18a56 100644 --- a/tests/fw_rules_tests/policies/expected_output/poc3-scheme_output.txt +++ b/tests/fw_rules_tests/policies/expected_output/poc3-scheme_output.txt @@ -1,6 +1,5 @@ final fw rules for query: connectivity_map, config: poc3: src: 0.0.0.0/0 dst_ns: [default] dst_pods: [frontend] conn: TCP 8080 -src: ::/0 dst_ns: [default] dst_pods: [frontend] conn: TCP 8080 src_ns: [default] src_pods: [app in (cartservice,checkoutservice,frontend,loadgenerator,recommendationservice)] dst_ns: [kube-system] dst_pods: [k8s-app=kube-dns] conn: UDP 53 src_ns: [default] src_pods: [app in (checkoutservice,frontend)] dst_ns: [default] dst_pods: [cartservice] conn: TCP 7070 src_ns: [default] src_pods: [app in (checkoutservice,frontend)] dst_ns: [default] dst_pods: [currencyservice] conn: TCP 7000 diff --git a/tests/fw_rules_tests/policies/expected_output/poc3-scheme_output.yaml b/tests/fw_rules_tests/policies/expected_output/poc3-scheme_output.yaml index c36c77a9..1ea54f5f 100644 --- a/tests/fw_rules_tests/policies/expected_output/poc3-scheme_output.yaml +++ b/tests/fw_rules_tests/policies/expected_output/poc3-scheme_output.yaml @@ -98,16 +98,6 @@ - Protocol: TCP Ports: - 8080 - - src_ip_block: - - ::/0 - dst_ns: - - default - dst_pods: - - frontend - connection: - - Protocol: TCP - Ports: - - 8080 - src_ns: - default src_pods: diff --git a/tests/fw_rules_tests/policies/expected_output/poc4_scheme_connectivity_map_query_output.txt b/tests/fw_rules_tests/policies/expected_output/poc4_scheme_connectivity_map_query_output.txt index 673fb1fe..c08d6b68 100644 --- a/tests/fw_rules_tests/policies/expected_output/poc4_scheme_connectivity_map_query_output.txt +++ b/tests/fw_rules_tests/policies/expected_output/poc4_scheme_connectivity_map_query_output.txt @@ -1,8 +1,6 @@ final fw rules for query: connectivity_map, config: poc4: src: 0.0.0.0/0 dst_ns: [default] dst_pods: [frontend] conn: TCP 8080 src: 0.0.0.0/0 dst_ns: [kube-system] dst_pods: [*] conn: All connections -src: ::/0 dst_ns: [default] dst_pods: [frontend] conn: TCP 8080 -src: ::/0 dst_ns: [kube-system] dst_pods: [*] conn: All connections src_ns: [default] src_pods: [app in (cartservice,checkoutservice,frontend,loadgenerator,recommendationservice)] dst_ns: [kube-system] dst_pods: [k8s-app=kube-dns] conn: UDP 53 src_ns: [default] src_pods: [app in (checkoutservice,frontend)] dst_ns: [default] dst_pods: [cartservice] conn: TCP 7070 src_ns: [default] src_pods: [app in (checkoutservice,frontend)] dst_ns: [default] dst_pods: [currencyservice] conn: TCP 7000 @@ -16,6 +14,5 @@ src_ns: [default] src_pods: [frontend] dst_ns: [default] dst_pods: [checkoutserv src_ns: [default] src_pods: [frontend] dst_ns: [default] dst_pods: [recommendationservice] conn: TCP 8080 src_ns: [default] src_pods: [loadgenerator] dst_ns: [default] dst_pods: [frontend] conn: TCP 23,8080 src_ns: [kube-system] src_pods: [*] dst: 0.0.0.0/0 conn: All connections -src_ns: [kube-system] src_pods: [*] dst: ::/0 conn: All connections src_ns: [kube-system] src_pods: [*] dst_ns: [default] dst_pods: [frontend] conn: TCP 8080 -src_ns: [kube-system] src_pods: [*] dst_ns: [kube-system] dst_pods: [*] conn: All connections +src_ns: [kube-system] src_pods: [*] dst_ns: [kube-system] dst_pods: [*] conn: All connections \ No newline at end of file diff --git a/tests/fw_rules_tests/policies/expected_output/poc4_scheme_connectivity_map_query_output.yaml b/tests/fw_rules_tests/policies/expected_output/poc4_scheme_connectivity_map_query_output.yaml index 92e1860c..8577c70e 100644 --- a/tests/fw_rules_tests/policies/expected_output/poc4_scheme_connectivity_map_query_output.yaml +++ b/tests/fw_rules_tests/policies/expected_output/poc4_scheme_connectivity_map_query_output.yaml @@ -111,16 +111,6 @@ - Protocol: TCP Ports: - 8080 - - src_ip_block: - - ::/0 - dst_ns: - - default - dst_pods: - - frontend - connection: - - Protocol: TCP - Ports: - - 8080 - src_ns: - default src_pods: @@ -189,14 +179,6 @@ - '*' connection: - All connections - - src_ip_block: - - ::/0 - dst_ns: - - kube-system - dst_pods: - - '*' - connection: - - All connections - src_ns: - kube-system src_pods: @@ -205,14 +187,6 @@ - 0.0.0.0/0 connection: - All connections - - src_ns: - - kube-system - src_pods: - - '*' - dst_ip_block: - - ::/0 - connection: - - All connections - src_ns: - kube-system src_pods: diff --git a/tests/fw_rules_tests/policies/expected_output/port_aggregation-scheme_output.txt b/tests/fw_rules_tests/policies/expected_output/port_aggregation-scheme_output.txt index e5c67b72..4aeb2cf6 100644 --- a/tests/fw_rules_tests/policies/expected_output/port_aggregation-scheme_output.txt +++ b/tests/fw_rules_tests/policies/expected_output/port_aggregation-scheme_output.txt @@ -1,7 +1,5 @@ final fw rules for query: connectivity_map, config: np3: src: 0.0.0.0/0 dst_ns: [default] dst_pods: [*] conn: All connections -src: ::/0 dst_ns: [default] dst_pods: [*] conn: All connections src_ns: [default,kube-system-new] src_pods: [*] dst: 0.0.0.0/0 conn: All connections -src_ns: [default,kube-system-new] src_pods: [*] dst: ::/0 conn: All connections src_ns: [default,kube-system-new] src_pods: [*] dst_ns: [default] dst_pods: [*] conn: All connections src_ns: [default,kube-system-new] src_pods: [*] dst_ns: [kube-system-new] dst_pods: [*] conn: TCP+UDP 11-16,21-23,34,42,44,46,56,65-66,TCP 24-26,41,43,45,52-55,62-64,71,73,75,77,79,81-84,UDP 31-33,35-36,57-59,67-68,72,74,76,78,86-89 diff --git a/tests/fw_rules_tests/policies/expected_output/port_aggregation-scheme_output.yaml b/tests/fw_rules_tests/policies/expected_output/port_aggregation-scheme_output.yaml index 54b4662b..cfbf2927 100644 --- a/tests/fw_rules_tests/policies/expected_output/port_aggregation-scheme_output.yaml +++ b/tests/fw_rules_tests/policies/expected_output/port_aggregation-scheme_output.yaml @@ -51,14 +51,6 @@ - '*' connection: - All connections - - src_ip_block: - - ::/0 - dst_ns: - - default - dst_pods: - - '*' - connection: - - All connections - src_ns: - default - kube-system-new @@ -68,15 +60,6 @@ - 0.0.0.0/0 connection: - All connections - - src_ns: - - default - - kube-system-new - src_pods: - - '*' - dst_ip_block: - - ::/0 - connection: - - All connections - src_ns: - default - kube-system-new diff --git a/tests/fw_rules_tests/policies/expected_output/semantic_diff_a_to_b_query_output.csv b/tests/fw_rules_tests/policies/expected_output/semantic_diff_a_to_b_query_output.csv index 560a7364..44448e5c 100644 --- a/tests/fw_rules_tests/policies/expected_output/semantic_diff_a_to_b_query_output.csv +++ b/tests/fw_rules_tests/policies/expected_output/semantic_diff_a_to_b_query_output.csv @@ -4,9 +4,7 @@ "","[default]","[app=app-4]","[default]","[app=app-3]","All connections", "semantic_diff, config1: config_a, config2: config_b, key: Lost connections between removed peers and ipBlocks","","","","","", "","","0.0.0.0/0","[default]","[app in (app-3,app-4)]","All connections", -"","","::/0","[default]","[app in (app-3,app-4)]","All connections", "","[default]","[app in (app-3,app-4)]","","0.0.0.0/0","All connections", -"","[default]","[app in (app-3,app-4)]","","::/0","All connections", "semantic_diff, config1: config_a, config2: config_b, key: Lost connections between removed peers and persistent peers","","","","","", "","[default]","[app in (app-3,app-4)]","[default]","[app in (app-0,app-2)]","All connections", "","[default]","[app not in (app-3,app-4)]","[default]","[app in (app-3,app-4)]","All connections", @@ -16,10 +14,8 @@ "","[default]","[app=app-0]","[default]","[app=app-2]","All connections", "semantic_diff, config1: config_a, config2: config_b, key: Added connections between persistent peers and ipBlocks","","","","","", "","","0.0.0.0/0","[default]","[app=app-1]","All connections", -"","","::/0","[default]","[app=app-1]","All connections", "semantic_diff, config1: config_a, config2: config_b, key: Removed connections between persistent peers and ipBlocks","","","","","", "","","0.0.0.0/0","[default]","[app=app-2]","All connections", -"","","::/0","[default]","[app=app-2]","All connections", "semantic_diff, config1: config_a, config2: config_b, key: New connections between persistent peers and added peers","","","","","", "","[default]","[app in (app-5,app-6)]","[default]","[app in (app-0,app-1)]","All connections", "","[default]","[app not in (app-5,app-6)]","[default]","[app in (app-5,app-6)]","All connections", @@ -28,6 +24,4 @@ "","[default]","[app=app-6]","[default]","[app=app-5]","All connections", "semantic_diff, config1: config_a, config2: config_b, key: New connections between added peers and ipBlocks","","","","","", "","","0.0.0.0/0","[default]","[app in (app-5,app-6)]","All connections", -"","","::/0","[default]","[app in (app-5,app-6)]","All connections", -"","[default]","[app in (app-5,app-6)]","","0.0.0.0/0","All connections", -"","[default]","[app in (app-5,app-6)]","","::/0","All connections", +"","[default]","[app in (app-5,app-6)]","","0.0.0.0/0","All connections", \ No newline at end of file diff --git a/tests/fw_rules_tests/policies/expected_output/semantic_diff_a_to_b_query_output.md b/tests/fw_rules_tests/policies/expected_output/semantic_diff_a_to_b_query_output.md index 9b31b3fd..7545d2fa 100644 --- a/tests/fw_rules_tests/policies/expected_output/semantic_diff_a_to_b_query_output.md +++ b/tests/fw_rules_tests/policies/expected_output/semantic_diff_a_to_b_query_output.md @@ -5,9 +5,7 @@ ||[default]|[app=app-4]|[default]|[app=app-3]|All connections| |semantic_diff, config1: config_a, config2: config_b, key: Lost connections between removed peers and ipBlocks|||||| |||0.0.0.0/0|[default]|[app in (app-3,app-4)]|All connections| -|||::/0|[default]|[app in (app-3,app-4)]|All connections| ||[default]|[app in (app-3,app-4)]||0.0.0.0/0|All connections| -||[default]|[app in (app-3,app-4)]||::/0|All connections| |semantic_diff, config1: config_a, config2: config_b, key: Lost connections between removed peers and persistent peers|||||| ||[default]|[app in (app-3,app-4)]|[default]|[app in (app-0,app-2)]|All connections| ||[default]|[app not in (app-3,app-4)]|[default]|[app in (app-3,app-4)]|All connections| @@ -17,10 +15,8 @@ ||[default]|[app=app-0]|[default]|[app=app-2]|All connections| |semantic_diff, config1: config_a, config2: config_b, key: Added connections between persistent peers and ipBlocks|||||| |||0.0.0.0/0|[default]|[app=app-1]|All connections| -|||::/0|[default]|[app=app-1]|All connections| |semantic_diff, config1: config_a, config2: config_b, key: Removed connections between persistent peers and ipBlocks|||||| |||0.0.0.0/0|[default]|[app=app-2]|All connections| -|||::/0|[default]|[app=app-2]|All connections| |semantic_diff, config1: config_a, config2: config_b, key: New connections between persistent peers and added peers|||||| ||[default]|[app in (app-5,app-6)]|[default]|[app in (app-0,app-1)]|All connections| ||[default]|[app not in (app-5,app-6)]|[default]|[app in (app-5,app-6)]|All connections| @@ -29,6 +25,4 @@ ||[default]|[app=app-6]|[default]|[app=app-5]|All connections| |semantic_diff, config1: config_a, config2: config_b, key: New connections between added peers and ipBlocks|||||| |||0.0.0.0/0|[default]|[app in (app-5,app-6)]|All connections| -|||::/0|[default]|[app in (app-5,app-6)]|All connections| -||[default]|[app in (app-5,app-6)]||0.0.0.0/0|All connections| -||[default]|[app in (app-5,app-6)]||::/0|All connections| +||[default]|[app in (app-5,app-6)]||0.0.0.0/0|All connections| \ No newline at end of file diff --git a/tests/fw_rules_tests/policies/expected_output/semantic_diff_a_to_b_query_output.txt b/tests/fw_rules_tests/policies/expected_output/semantic_diff_a_to_b_query_output.txt index 849bb942..801cb904 100644 --- a/tests/fw_rules_tests/policies/expected_output/semantic_diff_a_to_b_query_output.txt +++ b/tests/fw_rules_tests/policies/expected_output/semantic_diff_a_to_b_query_output.txt @@ -6,9 +6,7 @@ src_ns: [default] src_pods: [app=app-4] dst_ns: [default] dst_pods: [app=app-3] Lost connections between removed peers and ipBlocks (based on topology from config: config_a) : src: 0.0.0.0/0 dst_ns: [default] dst_pods: [app in (app-3,app-4)] conn: All connections -src: ::/0 dst_ns: [default] dst_pods: [app in (app-3,app-4)] conn: All connections src_ns: [default] src_pods: [app in (app-3,app-4)] dst: 0.0.0.0/0 conn: All connections -src_ns: [default] src_pods: [app in (app-3,app-4)] dst: ::/0 conn: All connections Lost connections between removed peers and persistent peers (based on topology from config: config_a) : src_ns: [default] src_pods: [app in (app-3,app-4)] dst_ns: [default] dst_pods: [app in (app-0,app-2)] conn: All connections @@ -22,11 +20,9 @@ src_ns: [default] src_pods: [app=app-0] dst_ns: [default] dst_pods: [app=app-2] Added connections between persistent peers and ipBlocks (based on topology from config: config_b) : src: 0.0.0.0/0 dst_ns: [default] dst_pods: [app=app-1] conn: All connections -src: ::/0 dst_ns: [default] dst_pods: [app=app-1] conn: All connections Removed connections between persistent peers and ipBlocks (based on topology from config: config_a) : src: 0.0.0.0/0 dst_ns: [default] dst_pods: [app=app-2] conn: All connections -src: ::/0 dst_ns: [default] dst_pods: [app=app-2] conn: All connections New connections between persistent peers and added peers (based on topology from config: config_b) : src_ns: [default] src_pods: [app in (app-5,app-6)] dst_ns: [default] dst_pods: [app in (app-0,app-1)] conn: All connections @@ -38,6 +34,4 @@ src_ns: [default] src_pods: [app=app-6] dst_ns: [default] dst_pods: [app=app-5] New connections between added peers and ipBlocks (based on topology from config: config_b) : src: 0.0.0.0/0 dst_ns: [default] dst_pods: [app in (app-5,app-6)] conn: All connections -src: ::/0 dst_ns: [default] dst_pods: [app in (app-5,app-6)] conn: All connections -src_ns: [default] src_pods: [app in (app-5,app-6)] dst: 0.0.0.0/0 conn: All connections -src_ns: [default] src_pods: [app in (app-5,app-6)] dst: ::/0 conn: All connections +src_ns: [default] src_pods: [app in (app-5,app-6)] dst: 0.0.0.0/0 conn: All connections \ No newline at end of file diff --git a/tests/fw_rules_tests/policies/expected_output/semantic_diff_a_to_b_query_output.yaml b/tests/fw_rules_tests/policies/expected_output/semantic_diff_a_to_b_query_output.yaml index 20cff215..95b68635 100644 --- a/tests/fw_rules_tests/policies/expected_output/semantic_diff_a_to_b_query_output.yaml +++ b/tests/fw_rules_tests/policies/expected_output/semantic_diff_a_to_b_query_output.yaml @@ -37,14 +37,6 @@ - app in (app-3,app-4) connection: - All connections - - src_ip_block: - - ::/0 - dst_ns: - - default - dst_pods: - - app in (app-3,app-4) - connection: - - All connections - src_ns: - default src_pods: @@ -53,14 +45,6 @@ - 0.0.0.0/0 connection: - All connections - - src_ns: - - default - src_pods: - - app in (app-3,app-4) - dst_ip_block: - - ::/0 - connection: - - All connections - description: Lost connections between removed peers and persistent peers rules: - src_ns: @@ -117,14 +101,6 @@ - app=app-1 connection: - All connections - - src_ip_block: - - ::/0 - dst_ns: - - default - dst_pods: - - app=app-1 - connection: - - All connections - description: Removed connections between persistent peers and ipBlocks rules: - src_ip_block: @@ -135,14 +111,6 @@ - app=app-2 connection: - All connections - - src_ip_block: - - ::/0 - dst_ns: - - default - dst_pods: - - app=app-2 - connection: - - All connections - description: New connections between persistent peers and added peers rules: - src_ns: @@ -197,14 +165,6 @@ - app in (app-5,app-6) connection: - All connections - - src_ip_block: - - ::/0 - dst_ns: - - default - dst_pods: - - app in (app-5,app-6) - connection: - - All connections - src_ns: - default src_pods: @@ -212,12 +172,4 @@ dst_ip_block: - 0.0.0.0/0 connection: - - All connections - - src_ns: - - default - src_pods: - - app in (app-5,app-6) - dst_ip_block: - - ::/0 - connection: - - All connections + - All connections \ No newline at end of file diff --git a/tests/fw_rules_tests/policies/expected_output/semantic_diff_a_to_b_with_ipBlock_query_output.csv b/tests/fw_rules_tests/policies/expected_output/semantic_diff_a_to_b_with_ipBlock_query_output.csv index ece6d1a0..48619097 100644 --- a/tests/fw_rules_tests/policies/expected_output/semantic_diff_a_to_b_with_ipBlock_query_output.csv +++ b/tests/fw_rules_tests/policies/expected_output/semantic_diff_a_to_b_with_ipBlock_query_output.csv @@ -4,9 +4,7 @@ "","[default]","[app=app-4]","[default]","[app=app-3]","All connections", "semantic_diff, config1: config_a_with_ipBlock, config2: config_b_with_ipBlock, key: Lost connections between removed peers and ipBlocks","","","","","", "","","0.0.0.0/0","[default]","[app in (app-3,app-4)]","All connections", -"","","::/0","[default]","[app in (app-3,app-4)]","All connections", "","[default]","[app in (app-3,app-4)]","","0.0.0.0/0","All connections", -"","[default]","[app in (app-3,app-4)]","","::/0","All connections", "semantic_diff, config1: config_a_with_ipBlock, config2: config_b_with_ipBlock, key: Lost connections between removed peers and persistent peers","","","","","", "","[default]","[app in (app-3,app-4)]","[default]","[app in (app-0,app-2)]","All connections", "","[default]","[app not in (app-3,app-4)]","[default]","[app in (app-3,app-4)]","All connections", @@ -18,14 +16,12 @@ "","","0.0.0.0-9.255.255.255","[default]","[app=app-1]","All connections", "","","10.10.0.0/16","[default]","[app=app-1]","All connections", "","","11.0.0.0-255.255.255.255","[default]","[app=app-1]","All connections", -"","","::/0","[default]","[app=app-1]","All connections", "semantic_diff, config1: config_a_with_ipBlock, config2: config_b_with_ipBlock, key: Removed connections between persistent peers and ipBlocks","","","","","", "","","10.0.0.0-10.10.255.255","[default]","[app=app-2]","All but UDP 53", "","","10.12.0.0-10.255.255.255","[default]","[app=app-2]","All but UDP 53", "","","0.0.0.0-9.255.255.255","[default]","[app=app-2]","All connections", "","","10.11.0.0/16","[default]","[app=app-2]","All connections", "","","11.0.0.0-255.255.255.255","[default]","[app=app-2]","All connections", -"","","::/0","[default]","[app=app-2]","All connections", "semantic_diff, config1: config_a_with_ipBlock, config2: config_b_with_ipBlock, key: New connections between persistent peers and added peers","","","","","", "","[default]","[app in (app-5,app-6)]","[default]","[app in (app-0,app-1)]","All connections", "","[default]","[app not in (app-5,app-6)]","[default]","[app in (app-5,app-6)]","All connections", @@ -34,6 +30,4 @@ "","[default]","[app=app-6]","[default]","[app=app-5]","All connections", "semantic_diff, config1: config_a_with_ipBlock, config2: config_b_with_ipBlock, key: New connections between added peers and ipBlocks","","","","","", "","","0.0.0.0/0","[default]","[app in (app-5,app-6)]","All connections", -"","","::/0","[default]","[app in (app-5,app-6)]","All connections", -"","[default]","[app in (app-5,app-6)]","","0.0.0.0/0","All connections", -"","[default]","[app in (app-5,app-6)]","","::/0","All connections", +"","[default]","[app in (app-5,app-6)]","","0.0.0.0/0","All connections", \ No newline at end of file diff --git a/tests/fw_rules_tests/policies/expected_output/semantic_diff_a_to_b_with_ipBlock_query_output.md b/tests/fw_rules_tests/policies/expected_output/semantic_diff_a_to_b_with_ipBlock_query_output.md index 6018179d..11cae30e 100644 --- a/tests/fw_rules_tests/policies/expected_output/semantic_diff_a_to_b_with_ipBlock_query_output.md +++ b/tests/fw_rules_tests/policies/expected_output/semantic_diff_a_to_b_with_ipBlock_query_output.md @@ -5,9 +5,7 @@ ||[default]|[app=app-4]|[default]|[app=app-3]|All connections| |semantic_diff, config1: config_a_with_ipBlock, config2: config_b_with_ipBlock, key: Lost connections between removed peers and ipBlocks|||||| |||0.0.0.0/0|[default]|[app in (app-3,app-4)]|All connections| -|||::/0|[default]|[app in (app-3,app-4)]|All connections| ||[default]|[app in (app-3,app-4)]||0.0.0.0/0|All connections| -||[default]|[app in (app-3,app-4)]||::/0|All connections| |semantic_diff, config1: config_a_with_ipBlock, config2: config_b_with_ipBlock, key: Lost connections between removed peers and persistent peers|||||| ||[default]|[app in (app-3,app-4)]|[default]|[app in (app-0,app-2)]|All connections| ||[default]|[app not in (app-3,app-4)]|[default]|[app in (app-3,app-4)]|All connections| @@ -19,14 +17,12 @@ |||0.0.0.0-9.255.255.255|[default]|[app=app-1]|All connections| |||10.10.0.0/16|[default]|[app=app-1]|All connections| |||11.0.0.0-255.255.255.255|[default]|[app=app-1]|All connections| -|||::/0|[default]|[app=app-1]|All connections| |semantic_diff, config1: config_a_with_ipBlock, config2: config_b_with_ipBlock, key: Removed connections between persistent peers and ipBlocks|||||| |||10.0.0.0-10.10.255.255|[default]|[app=app-2]|All but UDP 53| |||10.12.0.0-10.255.255.255|[default]|[app=app-2]|All but UDP 53| |||0.0.0.0-9.255.255.255|[default]|[app=app-2]|All connections| |||10.11.0.0/16|[default]|[app=app-2]|All connections| |||11.0.0.0-255.255.255.255|[default]|[app=app-2]|All connections| -|||::/0|[default]|[app=app-2]|All connections| |semantic_diff, config1: config_a_with_ipBlock, config2: config_b_with_ipBlock, key: New connections between persistent peers and added peers|||||| ||[default]|[app in (app-5,app-6)]|[default]|[app in (app-0,app-1)]|All connections| ||[default]|[app not in (app-5,app-6)]|[default]|[app in (app-5,app-6)]|All connections| @@ -35,6 +31,4 @@ ||[default]|[app=app-6]|[default]|[app=app-5]|All connections| |semantic_diff, config1: config_a_with_ipBlock, config2: config_b_with_ipBlock, key: New connections between added peers and ipBlocks|||||| |||0.0.0.0/0|[default]|[app in (app-5,app-6)]|All connections| -|||::/0|[default]|[app in (app-5,app-6)]|All connections| -||[default]|[app in (app-5,app-6)]||0.0.0.0/0|All connections| -||[default]|[app in (app-5,app-6)]||::/0|All connections| +||[default]|[app in (app-5,app-6)]||0.0.0.0/0|All connections| \ No newline at end of file diff --git a/tests/fw_rules_tests/policies/expected_output/semantic_diff_a_to_b_with_ipBlock_query_output.txt b/tests/fw_rules_tests/policies/expected_output/semantic_diff_a_to_b_with_ipBlock_query_output.txt index 09ee44f5..fe96732d 100644 --- a/tests/fw_rules_tests/policies/expected_output/semantic_diff_a_to_b_with_ipBlock_query_output.txt +++ b/tests/fw_rules_tests/policies/expected_output/semantic_diff_a_to_b_with_ipBlock_query_output.txt @@ -6,9 +6,7 @@ src_ns: [default] src_pods: [app=app-4] dst_ns: [default] dst_pods: [app=app-3] Lost connections between removed peers and ipBlocks (based on topology from config: config_a_with_ipBlock) : src: 0.0.0.0/0 dst_ns: [default] dst_pods: [app in (app-3,app-4)] conn: All connections -src: ::/0 dst_ns: [default] dst_pods: [app in (app-3,app-4)] conn: All connections src_ns: [default] src_pods: [app in (app-3,app-4)] dst: 0.0.0.0/0 conn: All connections -src_ns: [default] src_pods: [app in (app-3,app-4)] dst: ::/0 conn: All connections Lost connections between removed peers and persistent peers (based on topology from config: config_a_with_ipBlock) : src_ns: [default] src_pods: [app in (app-3,app-4)] dst_ns: [default] dst_pods: [app in (app-0,app-2)] conn: All connections @@ -24,7 +22,6 @@ Added connections between persistent peers and ipBlocks (based on topology from src: 0.0.0.0-9.255.255.255 dst_ns: [default] dst_pods: [app=app-1] conn: All connections src: 10.10.0.0/16 dst_ns: [default] dst_pods: [app=app-1] conn: All connections src: 11.0.0.0-255.255.255.255 dst_ns: [default] dst_pods: [app=app-1] conn: All connections -src: ::/0 dst_ns: [default] dst_pods: [app=app-1] conn: All connections Removed connections between persistent peers and ipBlocks (based on topology from config: config_a_with_ipBlock) : src: 0.0.0.0-9.255.255.255 dst_ns: [default] dst_pods: [app=app-2] conn: All connections @@ -32,7 +29,6 @@ src: 10.0.0.0-10.10.255.255 dst_ns: [default] dst_pods: [app=app-2] conn: All bu src: 10.11.0.0/16 dst_ns: [default] dst_pods: [app=app-2] conn: All connections src: 10.12.0.0-10.255.255.255 dst_ns: [default] dst_pods: [app=app-2] conn: All but UDP 53 src: 11.0.0.0-255.255.255.255 dst_ns: [default] dst_pods: [app=app-2] conn: All connections -src: ::/0 dst_ns: [default] dst_pods: [app=app-2] conn: All connections New connections between persistent peers and added peers (based on topology from config: config_b_with_ipBlock) : src_ns: [default] src_pods: [app in (app-5,app-6)] dst_ns: [default] dst_pods: [app in (app-0,app-1)] conn: All connections @@ -44,6 +40,4 @@ src_ns: [default] src_pods: [app=app-6] dst_ns: [default] dst_pods: [app=app-5] New connections between added peers and ipBlocks (based on topology from config: config_b_with_ipBlock) : src: 0.0.0.0/0 dst_ns: [default] dst_pods: [app in (app-5,app-6)] conn: All connections -src: ::/0 dst_ns: [default] dst_pods: [app in (app-5,app-6)] conn: All connections -src_ns: [default] src_pods: [app in (app-5,app-6)] dst: 0.0.0.0/0 conn: All connections -src_ns: [default] src_pods: [app in (app-5,app-6)] dst: ::/0 conn: All connections +src_ns: [default] src_pods: [app in (app-5,app-6)] dst: 0.0.0.0/0 conn: All connections \ No newline at end of file diff --git a/tests/fw_rules_tests/policies/expected_output/semantic_diff_a_to_b_with_ipBlock_query_output.yaml b/tests/fw_rules_tests/policies/expected_output/semantic_diff_a_to_b_with_ipBlock_query_output.yaml index 5fb6173a..144c9027 100644 --- a/tests/fw_rules_tests/policies/expected_output/semantic_diff_a_to_b_with_ipBlock_query_output.yaml +++ b/tests/fw_rules_tests/policies/expected_output/semantic_diff_a_to_b_with_ipBlock_query_output.yaml @@ -38,14 +38,6 @@ - app in (app-3,app-4) connection: - All connections - - src_ip_block: - - ::/0 - dst_ns: - - default - dst_pods: - - app in (app-3,app-4) - connection: - - All connections - src_ns: - default src_pods: @@ -54,14 +46,6 @@ - 0.0.0.0/0 connection: - All connections - - src_ns: - - default - src_pods: - - app in (app-3,app-4) - dst_ip_block: - - ::/0 - connection: - - All connections - description: Lost connections between removed peers and persistent peers rules: - src_ns: @@ -140,14 +124,6 @@ - app=app-1 connection: - All connections - - src_ip_block: - - ::/0 - dst_ns: - - default - dst_pods: - - app=app-1 - connection: - - All connections - description: Removed connections between persistent peers and ipBlocks rules: - src_ip_block: @@ -208,14 +184,6 @@ - app=app-2 connection: - All connections - - src_ip_block: - - ::/0 - dst_ns: - - default - dst_pods: - - app=app-2 - connection: - - All connections - description: New connections between persistent peers and added peers rules: - src_ns: @@ -270,14 +238,6 @@ - app in (app-5,app-6) connection: - All connections - - src_ip_block: - - ::/0 - dst_ns: - - default - dst_pods: - - app in (app-5,app-6) - connection: - - All connections - src_ns: - default src_pods: @@ -285,12 +245,4 @@ dst_ip_block: - 0.0.0.0/0 connection: - - All connections - - src_ns: - - default - src_pods: - - app in (app-5,app-6) - dst_ip_block: - - ::/0 - connection: - - All connections + - All connections \ No newline at end of file diff --git a/tests/fw_rules_tests/policies/expected_output/semantic_diff_b_to_a_query_output.csv b/tests/fw_rules_tests/policies/expected_output/semantic_diff_b_to_a_query_output.csv index d37c6bf5..a95b522f 100644 --- a/tests/fw_rules_tests/policies/expected_output/semantic_diff_b_to_a_query_output.csv +++ b/tests/fw_rules_tests/policies/expected_output/semantic_diff_b_to_a_query_output.csv @@ -4,9 +4,7 @@ "","[default]","[app=app-6]","[default]","[app=app-5]","All connections", "semantic_diff, config1: config_b, config2: config_a, key: Lost connections between removed peers and ipBlocks","","","","","", "","","0.0.0.0/0","[default]","[app in (app-5,app-6)]","All connections", -"","","::/0","[default]","[app in (app-5,app-6)]","All connections", "","[default]","[app in (app-5,app-6)]","","0.0.0.0/0","All connections", -"","[default]","[app in (app-5,app-6)]","","::/0","All connections", "semantic_diff, config1: config_b, config2: config_a, key: Lost connections between removed peers and persistent peers","","","","","", "","[default]","[app in (app-5,app-6)]","[default]","[app in (app-0,app-1)]","All connections", "","[default]","[app not in (app-5,app-6)]","[default]","[app in (app-5,app-6)]","All connections", @@ -16,10 +14,8 @@ "","[default]","[app=app-0]","[default]","[app=app-1]","All connections", "semantic_diff, config1: config_b, config2: config_a, key: Added connections between persistent peers and ipBlocks","","","","","", "","","0.0.0.0/0","[default]","[app=app-2]","All connections", -"","","::/0","[default]","[app=app-2]","All connections", "semantic_diff, config1: config_b, config2: config_a, key: Removed connections between persistent peers and ipBlocks","","","","","", "","","0.0.0.0/0","[default]","[app=app-1]","All connections", -"","","::/0","[default]","[app=app-1]","All connections", "semantic_diff, config1: config_b, config2: config_a, key: New connections between persistent peers and added peers","","","","","", "","[default]","[app in (app-3,app-4)]","[default]","[app in (app-0,app-2)]","All connections", "","[default]","[app not in (app-3,app-4)]","[default]","[app in (app-3,app-4)]","All connections", @@ -28,6 +24,4 @@ "","[default]","[app=app-4]","[default]","[app=app-3]","All connections", "semantic_diff, config1: config_b, config2: config_a, key: New connections between added peers and ipBlocks","","","","","", "","","0.0.0.0/0","[default]","[app in (app-3,app-4)]","All connections", -"","","::/0","[default]","[app in (app-3,app-4)]","All connections", -"","[default]","[app in (app-3,app-4)]","","0.0.0.0/0","All connections", -"","[default]","[app in (app-3,app-4)]","","::/0","All connections", +"","[default]","[app in (app-3,app-4)]","","0.0.0.0/0","All connections", \ No newline at end of file diff --git a/tests/fw_rules_tests/policies/expected_output/semantic_diff_b_to_a_query_output.md b/tests/fw_rules_tests/policies/expected_output/semantic_diff_b_to_a_query_output.md index 70d0829b..ae7b5b95 100644 --- a/tests/fw_rules_tests/policies/expected_output/semantic_diff_b_to_a_query_output.md +++ b/tests/fw_rules_tests/policies/expected_output/semantic_diff_b_to_a_query_output.md @@ -5,9 +5,7 @@ ||[default]|[app=app-6]|[default]|[app=app-5]|All connections| |semantic_diff, config1: config_b, config2: config_a, key: Lost connections between removed peers and ipBlocks|||||| |||0.0.0.0/0|[default]|[app in (app-5,app-6)]|All connections| -|||::/0|[default]|[app in (app-5,app-6)]|All connections| ||[default]|[app in (app-5,app-6)]||0.0.0.0/0|All connections| -||[default]|[app in (app-5,app-6)]||::/0|All connections| |semantic_diff, config1: config_b, config2: config_a, key: Lost connections between removed peers and persistent peers|||||| ||[default]|[app in (app-5,app-6)]|[default]|[app in (app-0,app-1)]|All connections| ||[default]|[app not in (app-5,app-6)]|[default]|[app in (app-5,app-6)]|All connections| @@ -17,10 +15,8 @@ ||[default]|[app=app-0]|[default]|[app=app-1]|All connections| |semantic_diff, config1: config_b, config2: config_a, key: Added connections between persistent peers and ipBlocks|||||| |||0.0.0.0/0|[default]|[app=app-2]|All connections| -|||::/0|[default]|[app=app-2]|All connections| |semantic_diff, config1: config_b, config2: config_a, key: Removed connections between persistent peers and ipBlocks|||||| |||0.0.0.0/0|[default]|[app=app-1]|All connections| -|||::/0|[default]|[app=app-1]|All connections| |semantic_diff, config1: config_b, config2: config_a, key: New connections between persistent peers and added peers|||||| ||[default]|[app in (app-3,app-4)]|[default]|[app in (app-0,app-2)]|All connections| ||[default]|[app not in (app-3,app-4)]|[default]|[app in (app-3,app-4)]|All connections| @@ -29,6 +25,4 @@ ||[default]|[app=app-4]|[default]|[app=app-3]|All connections| |semantic_diff, config1: config_b, config2: config_a, key: New connections between added peers and ipBlocks|||||| |||0.0.0.0/0|[default]|[app in (app-3,app-4)]|All connections| -|||::/0|[default]|[app in (app-3,app-4)]|All connections| -||[default]|[app in (app-3,app-4)]||0.0.0.0/0|All connections| -||[default]|[app in (app-3,app-4)]||::/0|All connections| +||[default]|[app in (app-3,app-4)]||0.0.0.0/0|All connections| \ No newline at end of file diff --git a/tests/fw_rules_tests/policies/expected_output/semantic_diff_b_to_a_query_output.txt b/tests/fw_rules_tests/policies/expected_output/semantic_diff_b_to_a_query_output.txt index 99035f7d..c29fad6b 100644 --- a/tests/fw_rules_tests/policies/expected_output/semantic_diff_b_to_a_query_output.txt +++ b/tests/fw_rules_tests/policies/expected_output/semantic_diff_b_to_a_query_output.txt @@ -6,9 +6,7 @@ src_ns: [default] src_pods: [app=app-6] dst_ns: [default] dst_pods: [app=app-5] Lost connections between removed peers and ipBlocks (based on topology from config: config_b) : src: 0.0.0.0/0 dst_ns: [default] dst_pods: [app in (app-5,app-6)] conn: All connections -src: ::/0 dst_ns: [default] dst_pods: [app in (app-5,app-6)] conn: All connections src_ns: [default] src_pods: [app in (app-5,app-6)] dst: 0.0.0.0/0 conn: All connections -src_ns: [default] src_pods: [app in (app-5,app-6)] dst: ::/0 conn: All connections Lost connections between removed peers and persistent peers (based on topology from config: config_b) : src_ns: [default] src_pods: [app in (app-5,app-6)] dst_ns: [default] dst_pods: [app in (app-0,app-1)] conn: All connections @@ -22,11 +20,9 @@ src_ns: [default] src_pods: [app=app-0] dst_ns: [default] dst_pods: [app=app-1] Added connections between persistent peers and ipBlocks (based on topology from config: config_a) : src: 0.0.0.0/0 dst_ns: [default] dst_pods: [app=app-2] conn: All connections -src: ::/0 dst_ns: [default] dst_pods: [app=app-2] conn: All connections Removed connections between persistent peers and ipBlocks (based on topology from config: config_b) : src: 0.0.0.0/0 dst_ns: [default] dst_pods: [app=app-1] conn: All connections -src: ::/0 dst_ns: [default] dst_pods: [app=app-1] conn: All connections New connections between persistent peers and added peers (based on topology from config: config_a) : src_ns: [default] src_pods: [app in (app-3,app-4)] dst_ns: [default] dst_pods: [app in (app-0,app-2)] conn: All connections @@ -38,6 +34,4 @@ src_ns: [default] src_pods: [app=app-4] dst_ns: [default] dst_pods: [app=app-3] New connections between added peers and ipBlocks (based on topology from config: config_a) : src: 0.0.0.0/0 dst_ns: [default] dst_pods: [app in (app-3,app-4)] conn: All connections -src: ::/0 dst_ns: [default] dst_pods: [app in (app-3,app-4)] conn: All connections src_ns: [default] src_pods: [app in (app-3,app-4)] dst: 0.0.0.0/0 conn: All connections -src_ns: [default] src_pods: [app in (app-3,app-4)] dst: ::/0 conn: All connections diff --git a/tests/fw_rules_tests/policies/expected_output/semantic_diff_b_to_a_query_output.yaml b/tests/fw_rules_tests/policies/expected_output/semantic_diff_b_to_a_query_output.yaml index db515ee3..74023edb 100644 --- a/tests/fw_rules_tests/policies/expected_output/semantic_diff_b_to_a_query_output.yaml +++ b/tests/fw_rules_tests/policies/expected_output/semantic_diff_b_to_a_query_output.yaml @@ -37,14 +37,6 @@ - app in (app-5,app-6) connection: - All connections - - src_ip_block: - - ::/0 - dst_ns: - - default - dst_pods: - - app in (app-5,app-6) - connection: - - All connections - src_ns: - default src_pods: @@ -53,14 +45,6 @@ - 0.0.0.0/0 connection: - All connections - - src_ns: - - default - src_pods: - - app in (app-5,app-6) - dst_ip_block: - - ::/0 - connection: - - All connections - description: Lost connections between removed peers and persistent peers rules: - src_ns: @@ -117,14 +101,6 @@ - app=app-2 connection: - All connections - - src_ip_block: - - ::/0 - dst_ns: - - default - dst_pods: - - app=app-2 - connection: - - All connections - description: Removed connections between persistent peers and ipBlocks rules: - src_ip_block: @@ -135,14 +111,6 @@ - app=app-1 connection: - All connections - - src_ip_block: - - ::/0 - dst_ns: - - default - dst_pods: - - app=app-1 - connection: - - All connections - description: New connections between persistent peers and added peers rules: - src_ns: @@ -197,14 +165,6 @@ - app in (app-3,app-4) connection: - All connections - - src_ip_block: - - ::/0 - dst_ns: - - default - dst_pods: - - app in (app-3,app-4) - connection: - - All connections - src_ns: - default src_pods: @@ -212,12 +172,4 @@ dst_ip_block: - 0.0.0.0/0 connection: - - All connections - - src_ns: - - default - src_pods: - - app in (app-3,app-4) - dst_ip_block: - - ::/0 - connection: - - All connections + - All connections \ No newline at end of file diff --git a/tests/fw_rules_tests/policies/expected_output/semantic_diff_disjoint_old1_config_a_query_output.csv b/tests/fw_rules_tests/policies/expected_output/semantic_diff_disjoint_old1_config_a_query_output.csv index c02dc5f8..ec649138 100644 --- a/tests/fw_rules_tests/policies/expected_output/semantic_diff_disjoint_old1_config_a_query_output.csv +++ b/tests/fw_rules_tests/policies/expected_output/semantic_diff_disjoint_old1_config_a_query_output.csv @@ -3,14 +3,10 @@ "","[default,kube-system,vendor-system]","[*]","[default,kube-system,vendor-system]","[*]","All connections", "semantic_diff, config1: old1, config2: config_a, key: Lost connections between removed peers and ipBlocks","","","","","", "","","0.0.0.0/0","[default,kube-system,vendor-system]","[*]","All connections", -"","","::/0","[default,kube-system,vendor-system]","[*]","All connections", "","[default,kube-system,vendor-system]","[*]","","0.0.0.0/0","All connections", -"","[default,kube-system,vendor-system]","[*]","","::/0","All connections", "semantic_diff, config1: old1, config2: config_a, key: New connections between added peers","","","","","", "","[default]","[*]","[default]","[app!=app-1]","All connections", "","[default]","[app in (app-1,app-2)]","[default]","[*]","All connections", "semantic_diff, config1: old1, config2: config_a, key: New connections between added peers and ipBlocks","","","","","", "","","0.0.0.0/0","[default]","[app!=app-1]","All connections", -"","","::/0","[default]","[app!=app-1]","All connections", -"","[default]","[*]","","0.0.0.0/0","All connections", -"","[default]","[*]","","::/0","All connections", +"","[default]","[*]","","0.0.0.0/0","All connections", \ No newline at end of file diff --git a/tests/fw_rules_tests/policies/expected_output/semantic_diff_disjoint_old1_config_a_query_output.md b/tests/fw_rules_tests/policies/expected_output/semantic_diff_disjoint_old1_config_a_query_output.md index 33c98bac..bceb1e45 100644 --- a/tests/fw_rules_tests/policies/expected_output/semantic_diff_disjoint_old1_config_a_query_output.md +++ b/tests/fw_rules_tests/policies/expected_output/semantic_diff_disjoint_old1_config_a_query_output.md @@ -4,14 +4,10 @@ ||[default,kube-system,vendor-system]|[*]|[default,kube-system,vendor-system]|[*]|All connections| |semantic_diff, config1: old1, config2: config_a, key: Lost connections between removed peers and ipBlocks|||||| |||0.0.0.0/0|[default,kube-system,vendor-system]|[*]|All connections| -|||::/0|[default,kube-system,vendor-system]|[*]|All connections| ||[default,kube-system,vendor-system]|[*]||0.0.0.0/0|All connections| -||[default,kube-system,vendor-system]|[*]||::/0|All connections| |semantic_diff, config1: old1, config2: config_a, key: New connections between added peers|||||| ||[default]|[*]|[default]|[app!=app-1]|All connections| ||[default]|[app in (app-1,app-2)]|[default]|[*]|All connections| |semantic_diff, config1: old1, config2: config_a, key: New connections between added peers and ipBlocks|||||| |||0.0.0.0/0|[default]|[app!=app-1]|All connections| -|||::/0|[default]|[app!=app-1]|All connections| -||[default]|[*]||0.0.0.0/0|All connections| -||[default]|[*]||::/0|All connections| +||[default]|[*]||0.0.0.0/0|All connections| \ No newline at end of file diff --git a/tests/fw_rules_tests/policies/expected_output/semantic_diff_disjoint_old1_config_a_query_output.txt b/tests/fw_rules_tests/policies/expected_output/semantic_diff_disjoint_old1_config_a_query_output.txt index 37f70bce..1592b826 100644 --- a/tests/fw_rules_tests/policies/expected_output/semantic_diff_disjoint_old1_config_a_query_output.txt +++ b/tests/fw_rules_tests/policies/expected_output/semantic_diff_disjoint_old1_config_a_query_output.txt @@ -5,9 +5,7 @@ src_ns: [default,kube-system,vendor-system] src_pods: [*] dst_ns: [default,kube- Lost connections between removed peers and ipBlocks (based on topology from config: old1) : src: 0.0.0.0/0 dst_ns: [default,kube-system,vendor-system] dst_pods: [*] conn: All connections -src: ::/0 dst_ns: [default,kube-system,vendor-system] dst_pods: [*] conn: All connections src_ns: [default,kube-system,vendor-system] src_pods: [*] dst: 0.0.0.0/0 conn: All connections -src_ns: [default,kube-system,vendor-system] src_pods: [*] dst: ::/0 conn: All connections New connections between added peers (based on topology from config: config_a) : src_ns: [default] src_pods: [*] dst_ns: [default] dst_pods: [app!=app-1] conn: All connections @@ -15,6 +13,4 @@ src_ns: [default] src_pods: [app in (app-1,app-2)] dst_ns: [default] dst_pods: [ New connections between added peers and ipBlocks (based on topology from config: config_a) : src: 0.0.0.0/0 dst_ns: [default] dst_pods: [app!=app-1] conn: All connections -src: ::/0 dst_ns: [default] dst_pods: [app!=app-1] conn: All connections -src_ns: [default] src_pods: [*] dst: 0.0.0.0/0 conn: All connections -src_ns: [default] src_pods: [*] dst: ::/0 conn: All connections +src_ns: [default] src_pods: [*] dst: 0.0.0.0/0 conn: All connections \ No newline at end of file diff --git a/tests/fw_rules_tests/policies/expected_output/semantic_diff_disjoint_old1_config_a_query_output.yaml b/tests/fw_rules_tests/policies/expected_output/semantic_diff_disjoint_old1_config_a_query_output.yaml index 89302ced..76643479 100644 --- a/tests/fw_rules_tests/policies/expected_output/semantic_diff_disjoint_old1_config_a_query_output.yaml +++ b/tests/fw_rules_tests/policies/expected_output/semantic_diff_disjoint_old1_config_a_query_output.yaml @@ -33,16 +33,6 @@ - '*' connection: - All connections - - src_ip_block: - - ::/0 - dst_ns: - - default - - kube-system - - vendor-system - dst_pods: - - '*' - connection: - - All connections - src_ns: - default - kube-system @@ -53,16 +43,6 @@ - 0.0.0.0/0 connection: - All connections - - src_ns: - - default - - kube-system - - vendor-system - src_pods: - - '*' - dst_ip_block: - - ::/0 - connection: - - All connections - description: New connections between added peers rules: - src_ns: @@ -95,14 +75,6 @@ - app!=app-1 connection: - All connections - - src_ip_block: - - ::/0 - dst_ns: - - default - dst_pods: - - app!=app-1 - connection: - - All connections - src_ns: - default src_pods: @@ -110,12 +82,4 @@ dst_ip_block: - 0.0.0.0/0 connection: - - All connections - - src_ns: - - default - src_pods: - - '*' - dst_ip_block: - - ::/0 - connection: - - All connections + - All connections \ No newline at end of file diff --git a/tests/fw_rules_tests/policies/expected_output/semantic_diff_ipblocks__np1_np4_query_output.csv b/tests/fw_rules_tests/policies/expected_output/semantic_diff_ipblocks__np1_np4_query_output.csv index 2e587385..37099268 100644 --- a/tests/fw_rules_tests/policies/expected_output/semantic_diff_ipblocks__np1_np4_query_output.csv +++ b/tests/fw_rules_tests/policies/expected_output/semantic_diff_ipblocks__np1_np4_query_output.csv @@ -13,7 +13,6 @@ "","","10.0.0.0/8","[kube-system]","[tier=frontend]","All connections", "","","172.21.0.0/16","[kube-system]","[tier=frontend]","All connections", "","","172.30.0.0/16","[kube-system]","[tier=frontend]","All connections", -"","","::/0","[kube-system]","[tier=frontend]","All connections", "semantic_diff, config1: np1, config2: np4, key: Removed connections between persistent peers and ipBlocks","","","","","", "","[kube-system]","[tier=frontend]","","0.0.0.0-49.49.255.255","All connections", "","[kube-system]","[tier=frontend]","","49.50.0.1/32","All connections", @@ -24,5 +23,4 @@ "","[kube-system]","[tier=frontend]","","49.50.0.3/32","All connections", "","[kube-system]","[tier=frontend]","","49.50.0.5/32","All connections", "","[kube-system]","[tier=frontend]","","49.50.0.7/32","All connections", -"","[kube-system]","[tier=frontend]","","49.50.0.9/32","All connections", -"","[kube-system]","[tier=frontend]","","::/0","All connections", +"","[kube-system]","[tier=frontend]","","49.50.0.9/32","All connections", \ No newline at end of file diff --git a/tests/fw_rules_tests/policies/expected_output/semantic_diff_ipblocks__np1_np4_query_output.md b/tests/fw_rules_tests/policies/expected_output/semantic_diff_ipblocks__np1_np4_query_output.md index c98c2453..31f0bb00 100644 --- a/tests/fw_rules_tests/policies/expected_output/semantic_diff_ipblocks__np1_np4_query_output.md +++ b/tests/fw_rules_tests/policies/expected_output/semantic_diff_ipblocks__np1_np4_query_output.md @@ -14,7 +14,6 @@ |||10.0.0.0/8|[kube-system]|[tier=frontend]|All connections| |||172.21.0.0/16|[kube-system]|[tier=frontend]|All connections| |||172.30.0.0/16|[kube-system]|[tier=frontend]|All connections| -|||::/0|[kube-system]|[tier=frontend]|All connections| |semantic_diff, config1: np1, config2: np4, key: Removed connections between persistent peers and ipBlocks|||||| ||[kube-system]|[tier=frontend]||0.0.0.0-49.49.255.255|All connections| ||[kube-system]|[tier=frontend]||49.50.0.1/32|All connections| @@ -25,5 +24,4 @@ ||[kube-system]|[tier=frontend]||49.50.0.3/32|All connections| ||[kube-system]|[tier=frontend]||49.50.0.5/32|All connections| ||[kube-system]|[tier=frontend]||49.50.0.7/32|All connections| -||[kube-system]|[tier=frontend]||49.50.0.9/32|All connections| -||[kube-system]|[tier=frontend]||::/0|All connections| +||[kube-system]|[tier=frontend]||49.50.0.9/32|All connections| \ No newline at end of file diff --git a/tests/fw_rules_tests/policies/expected_output/semantic_diff_ipblocks__np1_np4_query_output.txt b/tests/fw_rules_tests/policies/expected_output/semantic_diff_ipblocks__np1_np4_query_output.txt index d9ec9454..dbbebc86 100644 --- a/tests/fw_rules_tests/policies/expected_output/semantic_diff_ipblocks__np1_np4_query_output.txt +++ b/tests/fw_rules_tests/policies/expected_output/semantic_diff_ipblocks__np1_np4_query_output.txt @@ -16,7 +16,6 @@ src: 172.21.0.0/16 dst_ns: [kube-system] dst_pods: [tier=frontend] conn: All con src: 172.22.0.0-172.29.255.255 dst_ns: [kube-system] dst_pods: [tier=frontend] conn: All but UDP 53 src: 172.30.0.0/16 dst_ns: [kube-system] dst_pods: [tier=frontend] conn: All connections src: 172.31.0.0-255.255.255.255 dst_ns: [kube-system] dst_pods: [tier=frontend] conn: All but UDP 53 -src: ::/0 dst_ns: [kube-system] dst_pods: [tier=frontend] conn: All connections Removed connections between persistent peers and ipBlocks (based on topology from config: np1) : src_ns: [kube-system] src_pods: [tier=frontend] dst: 0.0.0.0-49.49.255.255 conn: All connections @@ -28,5 +27,4 @@ src_ns: [kube-system] src_pods: [tier=frontend] dst: 49.50.0.17-255.255.255.255 src_ns: [kube-system] src_pods: [tier=frontend] dst: 49.50.0.3/32 conn: All connections src_ns: [kube-system] src_pods: [tier=frontend] dst: 49.50.0.5/32 conn: All connections src_ns: [kube-system] src_pods: [tier=frontend] dst: 49.50.0.7/32 conn: All connections -src_ns: [kube-system] src_pods: [tier=frontend] dst: 49.50.0.9/32 conn: All connections -src_ns: [kube-system] src_pods: [tier=frontend] dst: ::/0 conn: All connections +src_ns: [kube-system] src_pods: [tier=frontend] dst: 49.50.0.9/32 conn: All connections \ No newline at end of file diff --git a/tests/fw_rules_tests/policies/expected_output/semantic_diff_ipblocks__np1_np4_query_output.yaml b/tests/fw_rules_tests/policies/expected_output/semantic_diff_ipblocks__np1_np4_query_output.yaml index cc609c4e..92c853db 100644 --- a/tests/fw_rules_tests/policies/expected_output/semantic_diff_ipblocks__np1_np4_query_output.yaml +++ b/tests/fw_rules_tests/policies/expected_output/semantic_diff_ipblocks__np1_np4_query_output.yaml @@ -143,14 +143,6 @@ - tier=frontend connection: - All connections - - src_ip_block: - - ::/0 - dst_ns: - - kube-system - dst_pods: - - tier=frontend - connection: - - All connections - description: Removed connections between persistent peers and ipBlocks rules: - src_ns: @@ -261,12 +253,4 @@ dst_ip_block: - 49.50.0.9/32 connection: - - All connections - - src_ns: - - kube-system - src_pods: - - tier=frontend - dst_ip_block: - - ::/0 - connection: - - All connections + - All connections \ No newline at end of file diff --git a/tests/fw_rules_tests/policies/expected_output/semantic_diff_named_ports_np1_and_np2_by_pods_query_output.txt b/tests/fw_rules_tests/policies/expected_output/semantic_diff_named_ports_np1_and_np2_by_pods_query_output.txt index 8ac8e8b7..a1d2888d 100644 --- a/tests/fw_rules_tests/policies/expected_output/semantic_diff_named_ports_np1_and_np2_by_pods_query_output.txt +++ b/tests/fw_rules_tests/policies/expected_output/semantic_diff_named_ports_np1_and_np2_by_pods_query_output.txt @@ -6,6 +6,4 @@ src_ns: [default,kube-system,kube-system-dummy-to-ignore,vendor-system] src_pods Added connections between persistent peers and ipBlocks (based on topology from config: np2_named_ports) : src: 0.0.0.0/0 dst_ns: [kube-system-dummy-to-ignore] dst_pods: [kube-dns-amd64-d66bf76db-9s486] conn: TCP 10054 -src: 0.0.0.0/0 dst_ns: [kube-system-dummy-to-ignore] dst_pods: [kube-dns-amd64-d66bf76db-bbvts] conn: TCP 10054 -src: ::/0 dst_ns: [kube-system-dummy-to-ignore] dst_pods: [kube-dns-amd64-d66bf76db-9s486] conn: TCP 10054 -src: ::/0 dst_ns: [kube-system-dummy-to-ignore] dst_pods: [kube-dns-amd64-d66bf76db-bbvts] conn: TCP 10054 +src: 0.0.0.0/0 dst_ns: [kube-system-dummy-to-ignore] dst_pods: [kube-dns-amd64-d66bf76db-bbvts] conn: TCP 10054 \ No newline at end of file diff --git a/tests/fw_rules_tests/policies/expected_output/semantic_diff_named_ports_np1_and_np2_query_output.csv b/tests/fw_rules_tests/policies/expected_output/semantic_diff_named_ports_np1_and_np2_query_output.csv index b34e549f..659bd5d9 100644 --- a/tests/fw_rules_tests/policies/expected_output/semantic_diff_named_ports_np1_and_np2_query_output.csv +++ b/tests/fw_rules_tests/policies/expected_output/semantic_diff_named_ports_np1_and_np2_query_output.csv @@ -2,5 +2,4 @@ "semantic_diff, config1: np1_named_ports, config2: np2_named_ports, key: Added connections between persistent peers","","","","","", "","[default,kube-system,kube-system-dummy-to-ignore,vendor-system]","[*]","[kube-system-dummy-to-ignore]","[kube-dns-amd64-d66bf76db]","TCP 10054", "semantic_diff, config1: np1_named_ports, config2: np2_named_ports, key: Added connections between persistent peers and ipBlocks","","","","","", -"","","0.0.0.0/0","[kube-system-dummy-to-ignore]","[kube-dns-amd64-d66bf76db]","TCP 10054", -"","","::/0","[kube-system-dummy-to-ignore]","[kube-dns-amd64-d66bf76db]","TCP 10054", +"","","0.0.0.0/0","[kube-system-dummy-to-ignore]","[kube-dns-amd64-d66bf76db]","TCP 10054", \ No newline at end of file diff --git a/tests/fw_rules_tests/policies/expected_output/semantic_diff_named_ports_np1_and_np2_query_output.md b/tests/fw_rules_tests/policies/expected_output/semantic_diff_named_ports_np1_and_np2_query_output.md index a252f491..bb1a36e4 100644 --- a/tests/fw_rules_tests/policies/expected_output/semantic_diff_named_ports_np1_and_np2_query_output.md +++ b/tests/fw_rules_tests/policies/expected_output/semantic_diff_named_ports_np1_and_np2_query_output.md @@ -3,5 +3,4 @@ |semantic_diff, config1: np1_named_ports, config2: np2_named_ports, key: Added connections between persistent peers|||||| ||[default,kube-system,kube-system-dummy-to-ignore,vendor-system]|[*]|[kube-system-dummy-to-ignore]|[kube-dns-amd64-d66bf76db]|TCP 10054| |semantic_diff, config1: np1_named_ports, config2: np2_named_ports, key: Added connections between persistent peers and ipBlocks|||||| -|||0.0.0.0/0|[kube-system-dummy-to-ignore]|[kube-dns-amd64-d66bf76db]|TCP 10054| -|||::/0|[kube-system-dummy-to-ignore]|[kube-dns-amd64-d66bf76db]|TCP 10054| +|||0.0.0.0/0|[kube-system-dummy-to-ignore]|[kube-dns-amd64-d66bf76db]|TCP 10054| \ No newline at end of file diff --git a/tests/fw_rules_tests/policies/expected_output/semantic_diff_named_ports_np1_and_np2_query_output.txt b/tests/fw_rules_tests/policies/expected_output/semantic_diff_named_ports_np1_and_np2_query_output.txt index b3609607..3e1e822e 100644 --- a/tests/fw_rules_tests/policies/expected_output/semantic_diff_named_ports_np1_and_np2_query_output.txt +++ b/tests/fw_rules_tests/policies/expected_output/semantic_diff_named_ports_np1_and_np2_query_output.txt @@ -4,5 +4,4 @@ Added connections between persistent peers (based on topology from config: np2_n src_ns: [default,kube-system,kube-system-dummy-to-ignore,vendor-system] src_pods: [*] dst_ns: [kube-system-dummy-to-ignore] dst_pods: [kube-dns-amd64-d66bf76db] conn: TCP 10054 Added connections between persistent peers and ipBlocks (based on topology from config: np2_named_ports) : -src: 0.0.0.0/0 dst_ns: [kube-system-dummy-to-ignore] dst_pods: [kube-dns-amd64-d66bf76db] conn: TCP 10054 -src: ::/0 dst_ns: [kube-system-dummy-to-ignore] dst_pods: [kube-dns-amd64-d66bf76db] conn: TCP 10054 +src: 0.0.0.0/0 dst_ns: [kube-system-dummy-to-ignore] dst_pods: [kube-dns-amd64-d66bf76db] conn: TCP 10054 \ No newline at end of file diff --git a/tests/fw_rules_tests/policies/expected_output/semantic_diff_named_ports_np1_and_np2_query_output.yaml b/tests/fw_rules_tests/policies/expected_output/semantic_diff_named_ports_np1_and_np2_query_output.yaml index 3f99bf20..def51337 100644 --- a/tests/fw_rules_tests/policies/expected_output/semantic_diff_named_ports_np1_and_np2_query_output.yaml +++ b/tests/fw_rules_tests/policies/expected_output/semantic_diff_named_ports_np1_and_np2_query_output.yaml @@ -33,14 +33,4 @@ connection: - Protocol: TCP Ports: - - 10054 - - src_ip_block: - - ::/0 - dst_ns: - - kube-system-dummy-to-ignore - dst_pods: - - kube-dns-amd64-d66bf76db - connection: - - Protocol: TCP - Ports: - - 10054 + - 10054 \ No newline at end of file diff --git a/tests/fw_rules_tests/policies/expected_output/semantic_diff_poc-scheme_output.csv b/tests/fw_rules_tests/policies/expected_output/semantic_diff_poc-scheme_output.csv index e9256c8c..24bb1499 100644 --- a/tests/fw_rules_tests/policies/expected_output/semantic_diff_poc-scheme_output.csv +++ b/tests/fw_rules_tests/policies/expected_output/semantic_diff_poc-scheme_output.csv @@ -23,8 +23,5 @@ "","[kube-system]","[*]","[default]","[app!=frontend]","All connections", "semantic_diff, config1: allow_all, config2: poc3, key: Removed connections between persistent peers and ipBlocks","","","","","", "","","0.0.0.0/0","[default]","[*]","All but TCP 8080", -"","","::/0","[default]","[*]","All but TCP 8080", "","","0.0.0.0/0","[default]","[app!=frontend]","All connections", -"","","::/0","[default]","[app!=frontend]","All connections", -"","[default]","[*]","","0.0.0.0/0","All connections", -"","[default]","[*]","","::/0","All connections", +"","[default]","[*]","","0.0.0.0/0","All connections", \ No newline at end of file diff --git a/tests/fw_rules_tests/policies/expected_output/semantic_diff_poc-scheme_output.md b/tests/fw_rules_tests/policies/expected_output/semantic_diff_poc-scheme_output.md index ca7987c6..55b21740 100644 --- a/tests/fw_rules_tests/policies/expected_output/semantic_diff_poc-scheme_output.md +++ b/tests/fw_rules_tests/policies/expected_output/semantic_diff_poc-scheme_output.md @@ -24,8 +24,5 @@ ||[kube-system]|[*]|[default]|[app!=frontend]|All connections| |semantic_diff, config1: allow_all, config2: poc3, key: Removed connections between persistent peers and ipBlocks|||||| |||0.0.0.0/0|[default]|[*]|All but TCP 8080| -|||::/0|[default]|[*]|All but TCP 8080| |||0.0.0.0/0|[default]|[app!=frontend]|All connections| -|||::/0|[default]|[app!=frontend]|All connections| -||[default]|[*]||0.0.0.0/0|All connections| -||[default]|[*]||::/0|All connections| +||[default]|[*]||0.0.0.0/0|All connections| \ No newline at end of file diff --git a/tests/fw_rules_tests/policies/expected_output/semantic_diff_poc-scheme_output.txt b/tests/fw_rules_tests/policies/expected_output/semantic_diff_poc-scheme_output.txt index 713f6367..6e9c3749 100644 --- a/tests/fw_rules_tests/policies/expected_output/semantic_diff_poc-scheme_output.txt +++ b/tests/fw_rules_tests/policies/expected_output/semantic_diff_poc-scheme_output.txt @@ -26,7 +26,4 @@ src_ns: [kube-system] src_pods: [*] dst_ns: [default] dst_pods: [app!=frontend] Removed connections between persistent peers and ipBlocks (based on topology from config: allow_all) : src: 0.0.0.0/0 dst_ns: [default] dst_pods: [*] conn: All but TCP 8080 src: 0.0.0.0/0 dst_ns: [default] dst_pods: [app!=frontend] conn: All connections -src: ::/0 dst_ns: [default] dst_pods: [*] conn: All but TCP 8080 -src: ::/0 dst_ns: [default] dst_pods: [app!=frontend] conn: All connections -src_ns: [default] src_pods: [*] dst: 0.0.0.0/0 conn: All connections -src_ns: [default] src_pods: [*] dst: ::/0 conn: All connections +src_ns: [default] src_pods: [*] dst: 0.0.0.0/0 conn: All connections \ No newline at end of file diff --git a/tests/fw_rules_tests/policies/expected_output/semantic_diff_poc-scheme_output.yaml b/tests/fw_rules_tests/policies/expected_output/semantic_diff_poc-scheme_output.yaml index 1dd5c33c..9a0b21e4 100644 --- a/tests/fw_rules_tests/policies/expected_output/semantic_diff_poc-scheme_output.yaml +++ b/tests/fw_rules_tests/policies/expected_output/semantic_diff_poc-scheme_output.yaml @@ -267,17 +267,6 @@ - Protocol: TCP Ports: - 8080 - - src_ip_block: - - ::/0 - dst_ns: - - default - dst_pods: - - '*' - connection: - - All but: - - Protocol: TCP - Ports: - - 8080 - src_ip_block: - 0.0.0.0/0 dst_ns: @@ -286,14 +275,6 @@ - app!=frontend connection: - All connections - - src_ip_block: - - ::/0 - dst_ns: - - default - dst_pods: - - app!=frontend - connection: - - All connections - src_ns: - default src_pods: @@ -301,12 +282,4 @@ dst_ip_block: - 0.0.0.0/0 connection: - - All connections - - src_ns: - - default - src_pods: - - '*' - dst_ip_block: - - ::/0 - connection: - - All connections + - All connections \ No newline at end of file diff --git a/tests/fw_rules_tests/policies/expected_output/subset_deployment_connection_in_subset_dot.dot b/tests/fw_rules_tests/policies/expected_output/subset_deployment_connection_in_subset_dot.dot deleted file mode 100644 index d1ea801b..00000000 --- a/tests/fw_rules_tests/policies/expected_output/subset_deployment_connection_in_subset_dot.dot +++ /dev/null @@ -1,14 +0,0 @@ -// The Connectivity Graph of np25 -digraph { - HEADER [shape="box" label=< subset_deployment_connection_in_subset_dot/np25 > fontsize=30 color=webmaroon fontcolor=webmaroon]; - "default/my-test-deployment-B-1" [label="default/my-test-deployment-B-1" color="blue" fontcolor="blue"] - "default/my-test-deployment-B-2" [label="default/my-test-deployment-B-2" color="blue" fontcolor="blue"] - "default/my-test-deployment-C-1" [label="default/my-test-deployment-C-1" color="blue" fontcolor="blue"] - "default/my-test-deployment-C-2" [label="default/my-test-deployment-C-2" color="blue" fontcolor="blue"] - "default/my-test-deployment-C-1" -> "default/my-test-deployment-B-1" [label="All connections" color="gold2" fontcolor="darkgreen"] - "default/my-test-deployment-C-1" -> "default/my-test-deployment-B-2" [label="All connections" color="gold2" fontcolor="darkgreen"] - "default/my-test-deployment-C-2" -> "default/my-test-deployment-B-1" [label="All connections" color="gold2" fontcolor="darkgreen"] - "default/my-test-deployment-C-2" -> "default/my-test-deployment-B-2" [label="All connections" color="gold2" fontcolor="darkgreen"] -} - - diff --git a/tests/fw_rules_tests/policies/expected_output/subset_deployment_connection_in_subset_endpoints_deployments_dot.dot b/tests/fw_rules_tests/policies/expected_output/subset_deployment_connection_in_subset_endpoints_deployments_dot.dot deleted file mode 100644 index f0a95071..00000000 --- a/tests/fw_rules_tests/policies/expected_output/subset_deployment_connection_in_subset_endpoints_deployments_dot.dot +++ /dev/null @@ -1,9 +0,0 @@ -// The Connectivity Graph of np25 -digraph { - HEADER [shape="box" label=< subset_deployment_connection_in_subset_endpoints_deployments_dot/np25 > fontsize=30 color=webmaroon fontcolor=webmaroon]; - "default/my-test-deployment-B(Deployment)" [label="default/my-test-deployment-B(Deployment)" color="blue" fontcolor="blue"] - "default/my-test-deployment-C(Deployment)" [label="default/my-test-deployment-C(Deployment)" color="blue" fontcolor="blue"] - "default/my-test-deployment-C(Deployment)" -> "default/my-test-deployment-B(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] -} - - diff --git a/tests/fw_rules_tests/policies/expected_output/subset_deployment_connection_in_subset_endpoints_deployments_txt.txt b/tests/fw_rules_tests/policies/expected_output/subset_deployment_connection_in_subset_endpoints_deployments_txt.txt deleted file mode 100644 index 10b47771..00000000 --- a/tests/fw_rules_tests/policies/expected_output/subset_deployment_connection_in_subset_endpoints_deployments_txt.txt +++ /dev/null @@ -1,3 +0,0 @@ -final fw rules for query: subset_deployment_connection_in_subset_endpoints_deployments_txt, config: np25: -src_ns: [default] src_pods: [my-test-deployment-C] dst_ns: [default] dst_pods: [app=B] conn: All connections - diff --git a/tests/fw_rules_tests/policies/expected_output/subset_deployment_connection_in_subset_txt.txt b/tests/fw_rules_tests/policies/expected_output/subset_deployment_connection_in_subset_txt.txt deleted file mode 100644 index d82b998b..00000000 --- a/tests/fw_rules_tests/policies/expected_output/subset_deployment_connection_in_subset_txt.txt +++ /dev/null @@ -1,4 +0,0 @@ -final fw rules for query: subset_deployment_connection_in_subset_txt, config: np25: -src_ns: [default] src_pods: [my-test-deployment-C-1] dst_ns: [default] dst_pods: [app=B] conn: All connections -src_ns: [default] src_pods: [my-test-deployment-C-2] dst_ns: [default] dst_pods: [app=B] conn: All connections - diff --git a/tests/fw_rules_tests/policies/expected_output/subset_deployment_connection_not_in_subset_dot.dot b/tests/fw_rules_tests/policies/expected_output/subset_deployment_connection_not_in_subset_dot.dot deleted file mode 100644 index 1c831558..00000000 --- a/tests/fw_rules_tests/policies/expected_output/subset_deployment_connection_not_in_subset_dot.dot +++ /dev/null @@ -1,8 +0,0 @@ -// The Connectivity Graph of np25 -digraph { - HEADER [shape="box" label=< subset_deployment_connection_not_in_subset_dot/np25 > fontsize=30 color=webmaroon fontcolor=webmaroon]; - "default/my-test-deployment-A-1" [label="default/my-test-deployment-A-1" color="blue" fontcolor="blue"] - "default/my-test-deployment-A-2" [label="default/my-test-deployment-A-2" color="blue" fontcolor="blue"] -} - - diff --git a/tests/fw_rules_tests/policies/expected_output/subset_deployment_connection_not_in_subset_endpoints_deployments_dot.dot b/tests/fw_rules_tests/policies/expected_output/subset_deployment_connection_not_in_subset_endpoints_deployments_dot.dot deleted file mode 100644 index 6f019e7d..00000000 --- a/tests/fw_rules_tests/policies/expected_output/subset_deployment_connection_not_in_subset_endpoints_deployments_dot.dot +++ /dev/null @@ -1,7 +0,0 @@ -// The Connectivity Graph of np25 -digraph { - HEADER [shape="box" label=< subset_deployment_connection_not_in_subset_endpoints_deployments_dot/np25 > fontsize=30 color=webmaroon fontcolor=webmaroon]; - "default/my-test-deployment-A(Deployment)" [label="default/my-test-deployment-A(Deployment)" color="blue" fontcolor="blue"] -} - - diff --git a/tests/fw_rules_tests/policies/expected_output/subset_deployment_connection_not_in_subset_endpoints_deployments_txt.txt b/tests/fw_rules_tests/policies/expected_output/subset_deployment_connection_not_in_subset_endpoints_deployments_txt.txt deleted file mode 100644 index 2264562c..00000000 --- a/tests/fw_rules_tests/policies/expected_output/subset_deployment_connection_not_in_subset_endpoints_deployments_txt.txt +++ /dev/null @@ -1,2 +0,0 @@ -final fw rules for query: subset_deployment_connection_not_in_subset_endpoints_deployments_txt, config: np25: - diff --git a/tests/fw_rules_tests/policies/expected_output/subset_deployment_connection_not_in_subset_txt.txt b/tests/fw_rules_tests/policies/expected_output/subset_deployment_connection_not_in_subset_txt.txt deleted file mode 100644 index 299f1c2b..00000000 --- a/tests/fw_rules_tests/policies/expected_output/subset_deployment_connection_not_in_subset_txt.txt +++ /dev/null @@ -1,2 +0,0 @@ -final fw rules for query: subset_deployment_connection_not_in_subset_txt, config: np25: - diff --git a/tests/fw_rules_tests/policies/expected_output/subset_deployment_multi_deployment_connection_in_subset_dot.dot b/tests/fw_rules_tests/policies/expected_output/subset_deployment_multi_deployment_connection_in_subset_dot.dot deleted file mode 100644 index 99302356..00000000 --- a/tests/fw_rules_tests/policies/expected_output/subset_deployment_multi_deployment_connection_in_subset_dot.dot +++ /dev/null @@ -1,16 +0,0 @@ -// The Connectivity Graph of np25 -digraph { - HEADER [shape="box" label=< subset_deployment_multi_deployment_connection_in_subset_dot/np25 > fontsize=30 color=webmaroon fontcolor=webmaroon]; - "default/my-test-deployment-A-1" [label="default/my-test-deployment-A-1" color="blue" fontcolor="blue"] - "default/my-test-deployment-A-2" [label="default/my-test-deployment-A-2" color="blue" fontcolor="blue"] - "default/my-test-deployment-B-1" [label="default/my-test-deployment-B-1" color="blue" fontcolor="blue"] - "default/my-test-deployment-B-2" [label="default/my-test-deployment-B-2" color="blue" fontcolor="blue"] - "default/my-test-deployment-C-1" [label="default/my-test-deployment-C-1" color="blue" fontcolor="blue"] - "default/my-test-deployment-C-2" [label="default/my-test-deployment-C-2" color="blue" fontcolor="blue"] - "default/my-test-deployment-C-1" -> "default/my-test-deployment-B-1" [label="All connections" color="gold2" fontcolor="darkgreen"] - "default/my-test-deployment-C-1" -> "default/my-test-deployment-B-2" [label="All connections" color="gold2" fontcolor="darkgreen"] - "default/my-test-deployment-C-2" -> "default/my-test-deployment-B-1" [label="All connections" color="gold2" fontcolor="darkgreen"] - "default/my-test-deployment-C-2" -> "default/my-test-deployment-B-2" [label="All connections" color="gold2" fontcolor="darkgreen"] -} - - diff --git a/tests/fw_rules_tests/policies/expected_output/subset_deployment_multi_deployment_connection_in_subset_endpoints_deployments_dot.dot b/tests/fw_rules_tests/policies/expected_output/subset_deployment_multi_deployment_connection_in_subset_endpoints_deployments_dot.dot deleted file mode 100644 index 48734cfc..00000000 --- a/tests/fw_rules_tests/policies/expected_output/subset_deployment_multi_deployment_connection_in_subset_endpoints_deployments_dot.dot +++ /dev/null @@ -1,10 +0,0 @@ -// The Connectivity Graph of np25 -digraph { - HEADER [shape="box" label=< subset_deployment_multi_deployment_connection_in_subset_endpoints_deployments_dot/np25 > fontsize=30 color=webmaroon fontcolor=webmaroon]; - "default/my-test-deployment-A(Deployment)" [label="default/my-test-deployment-A(Deployment)" color="blue" fontcolor="blue"] - "default/my-test-deployment-B(Deployment)" [label="default/my-test-deployment-B(Deployment)" color="blue" fontcolor="blue"] - "default/my-test-deployment-C(Deployment)" [label="default/my-test-deployment-C(Deployment)" color="blue" fontcolor="blue"] - "default/my-test-deployment-C(Deployment)" -> "default/my-test-deployment-B(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] -} - - diff --git a/tests/fw_rules_tests/policies/expected_output/subset_deployment_multi_deployment_connection_in_subset_endpoints_deployments_txt.txt b/tests/fw_rules_tests/policies/expected_output/subset_deployment_multi_deployment_connection_in_subset_endpoints_deployments_txt.txt deleted file mode 100644 index e9eecc15..00000000 --- a/tests/fw_rules_tests/policies/expected_output/subset_deployment_multi_deployment_connection_in_subset_endpoints_deployments_txt.txt +++ /dev/null @@ -1,3 +0,0 @@ -final fw rules for query: subset_deployment_multi_deployment_connection_in_subset_endpoints_deployments_txt, config: np25: -src_ns: [default] src_pods: [my-test-deployment-C] dst_ns: [default] dst_pods: [app=B] conn: All connections - diff --git a/tests/fw_rules_tests/policies/expected_output/subset_deployment_multi_deployment_connection_in_subset_txt.txt b/tests/fw_rules_tests/policies/expected_output/subset_deployment_multi_deployment_connection_in_subset_txt.txt deleted file mode 100644 index 4a1f50c2..00000000 --- a/tests/fw_rules_tests/policies/expected_output/subset_deployment_multi_deployment_connection_in_subset_txt.txt +++ /dev/null @@ -1,4 +0,0 @@ -final fw rules for query: subset_deployment_multi_deployment_connection_in_subset_txt, config: np25: -src_ns: [default] src_pods: [my-test-deployment-C-1] dst_ns: [default] dst_pods: [app=B] conn: All connections -src_ns: [default] src_pods: [my-test-deployment-C-2] dst_ns: [default] dst_pods: [app=B] conn: All connections - diff --git a/tests/fw_rules_tests/policies/expected_output/subset_deployment_multi_deployment_connection_not_in_subset_dot.dot b/tests/fw_rules_tests/policies/expected_output/subset_deployment_multi_deployment_connection_not_in_subset_dot.dot deleted file mode 100644 index b1206ea8..00000000 --- a/tests/fw_rules_tests/policies/expected_output/subset_deployment_multi_deployment_connection_not_in_subset_dot.dot +++ /dev/null @@ -1,8 +0,0 @@ -// The Connectivity Graph of np25 -digraph { - HEADER [shape="box" label=< subset_deployment_multi_deployment_connection_not_in_subset_dot/np25 > fontsize=30 color=webmaroon fontcolor=webmaroon]; - "default/my-test-deployment-A-1" [label="default/my-test-deployment-A-1" color="blue" fontcolor="blue"] - "default/my-test-deployment-A-2" [label="default/my-test-deployment-A-2" color="blue" fontcolor="blue"] -} - - diff --git a/tests/fw_rules_tests/policies/expected_output/subset_deployment_multi_deployment_connection_not_in_subset_endpoints_deployments_dot.dot b/tests/fw_rules_tests/policies/expected_output/subset_deployment_multi_deployment_connection_not_in_subset_endpoints_deployments_dot.dot deleted file mode 100644 index b40bb391..00000000 --- a/tests/fw_rules_tests/policies/expected_output/subset_deployment_multi_deployment_connection_not_in_subset_endpoints_deployments_dot.dot +++ /dev/null @@ -1,7 +0,0 @@ -// The Connectivity Graph of np25 -digraph { - HEADER [shape="box" label=< subset_deployment_multi_deployment_connection_not_in_subset_endpoints_deployments_dot/np25 > fontsize=30 color=webmaroon fontcolor=webmaroon]; - "default/my-test-deployment-A(Deployment)" [label="default/my-test-deployment-A(Deployment)" color="blue" fontcolor="blue"] -} - - diff --git a/tests/fw_rules_tests/policies/expected_output/subset_deployment_multi_deployment_connection_not_in_subset_endpoints_deployments_txt.txt b/tests/fw_rules_tests/policies/expected_output/subset_deployment_multi_deployment_connection_not_in_subset_endpoints_deployments_txt.txt deleted file mode 100644 index cc16f444..00000000 --- a/tests/fw_rules_tests/policies/expected_output/subset_deployment_multi_deployment_connection_not_in_subset_endpoints_deployments_txt.txt +++ /dev/null @@ -1,2 +0,0 @@ -final fw rules for query: subset_deployment_multi_deployment_connection_not_in_subset_endpoints_deployments_txt, config: np25: - diff --git a/tests/fw_rules_tests/policies/expected_output/subset_deployment_multi_deployment_connection_not_in_subset_txt.txt b/tests/fw_rules_tests/policies/expected_output/subset_deployment_multi_deployment_connection_not_in_subset_txt.txt deleted file mode 100644 index 1eb3763d..00000000 --- a/tests/fw_rules_tests/policies/expected_output/subset_deployment_multi_deployment_connection_not_in_subset_txt.txt +++ /dev/null @@ -1,2 +0,0 @@ -final fw rules for query: subset_deployment_multi_deployment_connection_not_in_subset_txt, config: np25: - diff --git a/tests/fw_rules_tests/policies/expected_output/subset_deployment_no_subset_dot.dot b/tests/fw_rules_tests/policies/expected_output/subset_deployment_no_subset_dot.dot deleted file mode 100644 index fa8f183f..00000000 --- a/tests/fw_rules_tests/policies/expected_output/subset_deployment_no_subset_dot.dot +++ /dev/null @@ -1,20 +0,0 @@ -// The Connectivity Graph of np25 -digraph { - HEADER [shape="box" label=< subset_deployment_no_subset_dot/np25 > fontsize=30 color=webmaroon fontcolor=webmaroon]; - "0.0.0.0/0" [label="0.0.0.0/0" color="red2" fontcolor="red2"] - "::/0" [label="::/0" color="red2" fontcolor="red2"] - "default/my-test-deployment-A-1" [label="default/my-test-deployment-A-1" color="blue" fontcolor="blue"] - "default/my-test-deployment-A-2" [label="default/my-test-deployment-A-2" color="blue" fontcolor="blue"] - "default/my-test-deployment-B-1" [label="default/my-test-deployment-B-1" color="blue" fontcolor="blue"] - "default/my-test-deployment-B-2" [label="default/my-test-deployment-B-2" color="blue" fontcolor="blue"] - "default/my-test-deployment-C-1" [label="default/my-test-deployment-C-1" color="blue" fontcolor="blue"] - "default/my-test-deployment-C-2" [label="default/my-test-deployment-C-2" color="blue" fontcolor="blue"] - "default/my-test-deployment-D-1" [label="default/my-test-deployment-D-1" color="blue" fontcolor="blue"] - "default/my-test-deployment-D-2" [label="default/my-test-deployment-D-2" color="blue" fontcolor="blue"] - "default/my-test-deployment-C-1" -> "default/my-test-deployment-B-1" [label="All connections" color="gold2" fontcolor="darkgreen"] - "default/my-test-deployment-C-1" -> "default/my-test-deployment-B-2" [label="All connections" color="gold2" fontcolor="darkgreen"] - "default/my-test-deployment-C-2" -> "default/my-test-deployment-B-1" [label="All connections" color="gold2" fontcolor="darkgreen"] - "default/my-test-deployment-C-2" -> "default/my-test-deployment-B-2" [label="All connections" color="gold2" fontcolor="darkgreen"] -} - - diff --git a/tests/fw_rules_tests/policies/expected_output/subset_deployment_no_subset_endpoints_deployments_dot.dot b/tests/fw_rules_tests/policies/expected_output/subset_deployment_no_subset_endpoints_deployments_dot.dot deleted file mode 100644 index e29452f1..00000000 --- a/tests/fw_rules_tests/policies/expected_output/subset_deployment_no_subset_endpoints_deployments_dot.dot +++ /dev/null @@ -1,13 +0,0 @@ -// The Connectivity Graph of np25 -digraph { - HEADER [shape="box" label=< subset_deployment_no_subset_endpoints_deployments_dot/np25 > fontsize=30 color=webmaroon fontcolor=webmaroon]; - "0.0.0.0/0" [label="0.0.0.0/0" color="red2" fontcolor="red2"] - "::/0" [label="::/0" color="red2" fontcolor="red2"] - "default/my-test-deployment-A(Deployment)" [label="default/my-test-deployment-A(Deployment)" color="blue" fontcolor="blue"] - "default/my-test-deployment-B(Deployment)" [label="default/my-test-deployment-B(Deployment)" color="blue" fontcolor="blue"] - "default/my-test-deployment-C(Deployment)" [label="default/my-test-deployment-C(Deployment)" color="blue" fontcolor="blue"] - "default/my-test-deployment-D(Deployment)" [label="default/my-test-deployment-D(Deployment)" color="blue" fontcolor="blue"] - "default/my-test-deployment-C(Deployment)" -> "default/my-test-deployment-B(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] -} - - diff --git a/tests/fw_rules_tests/policies/expected_output/subset_deployment_no_subset_endpoints_deployments_txt.txt b/tests/fw_rules_tests/policies/expected_output/subset_deployment_no_subset_endpoints_deployments_txt.txt deleted file mode 100644 index 0ad5302f..00000000 --- a/tests/fw_rules_tests/policies/expected_output/subset_deployment_no_subset_endpoints_deployments_txt.txt +++ /dev/null @@ -1,3 +0,0 @@ -final fw rules for query: subset_deployment_no_subset_endpoints_deployments_txt, config: np25: -src_ns: [default] src_pods: [my-test-deployment-C] dst_ns: [default] dst_pods: [app=B] conn: All connections - diff --git a/tests/fw_rules_tests/policies/expected_output/subset_labels5_dot.dot b/tests/fw_rules_tests/policies/expected_output/subset_labels5_dot.dot deleted file mode 100644 index bde461fd..00000000 --- a/tests/fw_rules_tests/policies/expected_output/subset_labels5_dot.dot +++ /dev/null @@ -1,25 +0,0 @@ -// The Connectivity Graph of np25 -digraph { - HEADER [shape="box" label=< subset_labels5_dot/np25 > fontsize=30 color=webmaroon fontcolor=webmaroon]; - "default/Pod1" [label="default/Pod1" color="blue" fontcolor="blue"] - "default/Pod4" [label="default/Pod4" color="blue" fontcolor="blue"] - "default/deployment-E-1" [label="default/deployment-E-1" color="blue" fontcolor="blue"] - "default/deployment-E-2" [label="default/deployment-E-2" color="blue" fontcolor="blue"] - "ns1/deployment-A-1" [label="ns1/deployment-A-1" color="blue" fontcolor="blue"] - "ns1/deployment-A-2" [label="ns1/deployment-A-2" color="blue" fontcolor="blue"] - "ns1/deployment-B-1" [label="ns1/deployment-B-1" color="blue" fontcolor="blue"] - "ns1/deployment-B-2" [label="ns1/deployment-B-2" color="blue" fontcolor="blue"] - "ns3/Pod8" [label="ns3/Pod8" color="blue" fontcolor="blue"] - "default/Pod1" -> "ns3/Pod8" [label="All connections" color="gold2" fontcolor="darkgreen"] - "ns1/deployment-A-1" -> "default/deployment-E-1" [label="All connections" color="gold2" fontcolor="darkgreen"] - "ns1/deployment-A-1" -> "default/deployment-E-2" [label="All connections" color="gold2" fontcolor="darkgreen"] - "ns1/deployment-A-2" -> "default/deployment-E-1" [label="All connections" color="gold2" fontcolor="darkgreen"] - "ns1/deployment-A-2" -> "default/deployment-E-2" [label="All connections" color="gold2" fontcolor="darkgreen"] - "ns1/deployment-B-1" -> "ns1/deployment-A-1" [label="All connections" color="gold2" fontcolor="darkgreen"] - "ns1/deployment-B-1" -> "ns1/deployment-A-2" [label="All connections" color="gold2" fontcolor="darkgreen"] - "ns1/deployment-B-2" -> "ns1/deployment-A-1" [label="All connections" color="gold2" fontcolor="darkgreen"] - "ns1/deployment-B-2" -> "ns1/deployment-A-2" [label="All connections" color="gold2" fontcolor="darkgreen"] - "ns3/Pod8" -> "default/Pod4" [label="All connections" color="gold2" fontcolor="darkgreen"] -} - - diff --git a/tests/fw_rules_tests/policies/expected_output/subset_labels5_endpoints_deployments_dot.dot b/tests/fw_rules_tests/policies/expected_output/subset_labels5_endpoints_deployments_dot.dot deleted file mode 100644 index 8e91b855..00000000 --- a/tests/fw_rules_tests/policies/expected_output/subset_labels5_endpoints_deployments_dot.dot +++ /dev/null @@ -1,16 +0,0 @@ -// The Connectivity Graph of np25 -digraph { - HEADER [shape="box" label=< subset_labels5_endpoints_deployments_dot/np25 > fontsize=30 color=webmaroon fontcolor=webmaroon]; - "default/Pod1(Pod)" [label="default/Pod1(Pod)" color="blue" fontcolor="blue"] - "default/Pod4(Pod)" [label="default/Pod4(Pod)" color="blue" fontcolor="blue"] - "default/deployment-E(Deployment)" [label="default/deployment-E(Deployment)" color="blue" fontcolor="blue"] - "ns1/deployment-A(Deployment)" [label="ns1/deployment-A(Deployment)" color="blue" fontcolor="blue"] - "ns1/deployment-B(Deployment)" [label="ns1/deployment-B(Deployment)" color="blue" fontcolor="blue"] - "ns3/Pod8(Pod)" [label="ns3/Pod8(Pod)" color="blue" fontcolor="blue"] - "default/Pod1(Pod)" -> "ns3/Pod8(Pod)" [label="All connections" color="gold2" fontcolor="darkgreen"] - "ns1/deployment-A(Deployment)" -> "default/deployment-E(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] - "ns1/deployment-B(Deployment)" -> "ns1/deployment-A(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] - "ns3/Pod8(Pod)" -> "default/Pod4(Pod)" [label="All connections" color="gold2" fontcolor="darkgreen"] -} - - diff --git a/tests/fw_rules_tests/policies/expected_output/subset_labels5_endpoints_deployments_txt.txt b/tests/fw_rules_tests/policies/expected_output/subset_labels5_endpoints_deployments_txt.txt deleted file mode 100644 index 9d6d1e2d..00000000 --- a/tests/fw_rules_tests/policies/expected_output/subset_labels5_endpoints_deployments_txt.txt +++ /dev/null @@ -1,6 +0,0 @@ -final fw rules for query: subset_labels5_endpoints_deployments_txt, config: np25: -src_ns: [default] src_pods: [Pod1] dst_ns: [ns3] dst_pods: [Pod8] conn: All connections -src_ns: [ns1] src_pods: [dep=A] dst_ns: [default] dst_pods: [dep=E] conn: All connections -src_ns: [ns1] src_pods: [dep=B] dst_ns: [ns1] dst_pods: [dep=A] conn: All connections -src_ns: [ns3] src_pods: [Pod8] dst_ns: [default] dst_pods: [Pod4] conn: All connections - diff --git a/tests/fw_rules_tests/policies/expected_output/subset_labels5_txt.txt b/tests/fw_rules_tests/policies/expected_output/subset_labels5_txt.txt deleted file mode 100644 index c4a32236..00000000 --- a/tests/fw_rules_tests/policies/expected_output/subset_labels5_txt.txt +++ /dev/null @@ -1,6 +0,0 @@ -final fw rules for query: subset_labels5_txt, config: np25: -src_ns: [default] src_pods: [Pod1] dst_ns: [ns3] dst_pods: [Pod8] conn: All connections -src_ns: [ns1] src_pods: [dep=A] dst_ns: [default] dst_pods: [dep=E] conn: All connections -src_ns: [ns1] src_pods: [dep=B] dst_ns: [ns1] dst_pods: [dep=A] conn: All connections -src_ns: [ns3] src_pods: [Pod8] dst_ns: [default] dst_pods: [Pod4] conn: All connections - diff --git a/tests/fw_rules_tests/policies/expected_output/subset_no_subset_dot.dot b/tests/fw_rules_tests/policies/expected_output/subset_no_subset_dot.dot index 14aa82e9..7023ea35 100644 --- a/tests/fw_rules_tests/policies/expected_output/subset_no_subset_dot.dot +++ b/tests/fw_rules_tests/policies/expected_output/subset_no_subset_dot.dot @@ -2,7 +2,6 @@ digraph { HEADER [shape="box" label=< subset_no_subset_dot/np25 > fontsize=30 color=webmaroon fontcolor=webmaroon]; "0.0.0.0/0" [label="0.0.0.0/0" color="red2" fontcolor="red2"] - "::/0" [label="::/0" color="red2" fontcolor="red2"] "default/Pod1" [label="default/Pod1" color="blue" fontcolor="blue"] "default/Pod4" [label="default/Pod4" color="blue" fontcolor="blue"] "default/Pod5" [label="default/Pod5" color="blue" fontcolor="blue"] diff --git a/tests/fw_rules_tests/policies/expected_output/subset_no_subset_endpoints_deployments_dot.dot b/tests/fw_rules_tests/policies/expected_output/subset_no_subset_endpoints_deployments_dot.dot index f9cc2019..02aaebe2 100644 --- a/tests/fw_rules_tests/policies/expected_output/subset_no_subset_endpoints_deployments_dot.dot +++ b/tests/fw_rules_tests/policies/expected_output/subset_no_subset_endpoints_deployments_dot.dot @@ -2,7 +2,6 @@ digraph { HEADER [shape="box" label=< subset_no_subset_endpoints_deployments_dot/np25 > fontsize=30 color=webmaroon fontcolor=webmaroon]; "0.0.0.0/0" [label="0.0.0.0/0" color="red2" fontcolor="red2"] - "::/0" [label="::/0" color="red2" fontcolor="red2"] "default/Pod1(Pod)" [label="default/Pod1(Pod)" color="blue" fontcolor="blue"] "default/Pod4(Pod)" [label="default/Pod4(Pod)" color="blue" fontcolor="blue"] "default/Pod5(Pod)" [label="default/Pod5(Pod)" color="blue" fontcolor="blue"] diff --git a/tests/fw_rules_tests/policies/expected_output/test1-scheme_output.txt b/tests/fw_rules_tests/policies/expected_output/test1-scheme_output.txt index 686d556c..47ab7b0a 100644 --- a/tests/fw_rules_tests/policies/expected_output/test1-scheme_output.txt +++ b/tests/fw_rules_tests/policies/expected_output/test1-scheme_output.txt @@ -1,7 +1,5 @@ final fw rules for query: connectivity_map, config: np1: src: 0.0.0.0/0 dst_ns: [default,ibm-system-new,kube-system-new-dummy-to-ignore] dst_pods: [*] conn: All connections -src: ::/0 dst_ns: [default,ibm-system-new,kube-system-new-dummy-to-ignore] dst_pods: [*] conn: All connections src_ns: [default,ibm-system-new,kube-system-new,kube-system-new-dummy-to-ignore] src_pods: [*] dst: 0.0.0.0/0 conn: All connections -src_ns: [default,ibm-system-new,kube-system-new,kube-system-new-dummy-to-ignore] src_pods: [*] dst: ::/0 conn: All connections src_ns: [default,ibm-system-new,kube-system-new,kube-system-new-dummy-to-ignore] src_pods: [*] dst_ns: [default,ibm-system-new,kube-system-new-dummy-to-ignore] dst_pods: [*] conn: All connections src_ns: [default] src_pods: [*] dst_ns: [kube-system-new] dst_pods: [*] conn: All connections diff --git a/tests/fw_rules_tests/policies/expected_output/test1-scheme_output.yaml b/tests/fw_rules_tests/policies/expected_output/test1-scheme_output.yaml index 95de255a..c53adf7e 100644 --- a/tests/fw_rules_tests/policies/expected_output/test1-scheme_output.yaml +++ b/tests/fw_rules_tests/policies/expected_output/test1-scheme_output.yaml @@ -14,16 +14,6 @@ - '*' connection: - All connections - - src_ip_block: - - ::/0 - dst_ns: - - default - - ibm-system-new - - kube-system-new-dummy-to-ignore - dst_pods: - - '*' - connection: - - All connections - src_ns: - default - ibm-system-new @@ -35,17 +25,6 @@ - 0.0.0.0/0 connection: - All connections - - src_ns: - - default - - ibm-system-new - - kube-system-new - - kube-system-new-dummy-to-ignore - src_pods: - - '*' - dst_ip_block: - - ::/0 - connection: - - All connections - src_ns: - default - ibm-system-new diff --git a/tests/fw_rules_tests/policies/expected_output/test10-scheme_output.txt b/tests/fw_rules_tests/policies/expected_output/test10-scheme_output.txt index cc58833e..9a46fc72 100644 --- a/tests/fw_rules_tests/policies/expected_output/test10-scheme_output.txt +++ b/tests/fw_rules_tests/policies/expected_output/test10-scheme_output.txt @@ -1,12 +1,8 @@ final fw rules for query: connectivity_map, config: np10: src: 0.0.0.0/0 dst_ns: [default] dst_pods: [app=skydive and tier=agent] conn: All connections src: 0.0.0.0/0 dst_ns: [ibm-system-new,kube-system-new,kube-system-new-dummy-to-ignore] dst_pods: [*] conn: All connections -src: ::/0 dst_ns: [default] dst_pods: [app=skydive and tier=agent] conn: All connections -src: ::/0 dst_ns: [ibm-system-new,kube-system-new,kube-system-new-dummy-to-ignore] dst_pods: [*] conn: All connections src_ns: [default,ibm-system-new,kube-system-new,kube-system-new-dummy-to-ignore] src_pods: [*] dst_ns: [default] dst_pods: [app=skydive and tier=agent] conn: All connections src_ns: [default] src_pods: [app=skydive and tier=agent] dst: 0.0.0.0/0 conn: All connections -src_ns: [default] src_pods: [app=skydive and tier=agent] dst: ::/0 conn: All connections src_ns: [default] src_pods: [app=skydive and tier=agent] dst_ns: [ibm-system-new,kube-system-new,kube-system-new-dummy-to-ignore] dst_pods: [*] conn: All connections src_ns: [ibm-system-new,kube-system-new,kube-system-new-dummy-to-ignore] src_pods: [*] dst: 0.0.0.0/0 conn: All connections -src_ns: [ibm-system-new,kube-system-new,kube-system-new-dummy-to-ignore] src_pods: [*] dst: ::/0 conn: All connections -src_ns: [ibm-system-new,kube-system-new,kube-system-new-dummy-to-ignore] src_pods: [*] dst_ns: [ibm-system-new,kube-system-new,kube-system-new-dummy-to-ignore] dst_pods: [*] conn: All connections +src_ns: [ibm-system-new,kube-system-new,kube-system-new-dummy-to-ignore] src_pods: [*] dst_ns: [ibm-system-new,kube-system-new,kube-system-new-dummy-to-ignore] dst_pods: [*] conn: All connections \ No newline at end of file diff --git a/tests/fw_rules_tests/policies/expected_output/test10-scheme_output.yaml b/tests/fw_rules_tests/policies/expected_output/test10-scheme_output.yaml index a2737407..69c14301 100644 --- a/tests/fw_rules_tests/policies/expected_output/test10-scheme_output.yaml +++ b/tests/fw_rules_tests/policies/expected_output/test10-scheme_output.yaml @@ -22,24 +22,6 @@ - '*' connection: - All connections - - src_ip_block: - - ::/0 - dst_ns: - - default - dst_pods: - - app=skydive and tier=agent - connection: - - All connections - - src_ip_block: - - ::/0 - dst_ns: - - ibm-system-new - - kube-system-new - - kube-system-new-dummy-to-ignore - dst_pods: - - '*' - connection: - - All connections - src_ns: - default - ibm-system-new @@ -61,14 +43,6 @@ - 0.0.0.0/0 connection: - All connections - - src_ns: - - default - src_pods: - - app=skydive and tier=agent - dst_ip_block: - - ::/0 - connection: - - All connections - src_ns: - default src_pods: @@ -91,16 +65,6 @@ - 0.0.0.0/0 connection: - All connections - - src_ns: - - ibm-system-new - - kube-system-new - - kube-system-new-dummy-to-ignore - src_pods: - - '*' - dst_ip_block: - - ::/0 - connection: - - All connections - src_ns: - ibm-system-new - kube-system-new diff --git a/tests/fw_rules_tests/policies/expected_output/test11-scheme_output.txt b/tests/fw_rules_tests/policies/expected_output/test11-scheme_output.txt index 3b783dc1..c90440da 100644 --- a/tests/fw_rules_tests/policies/expected_output/test11-scheme_output.txt +++ b/tests/fw_rules_tests/policies/expected_output/test11-scheme_output.txt @@ -1,7 +1,5 @@ final fw rules for query: connectivity_map, config: np11: src: 0.0.0.0/0 dst_ns: [ibm-system-new,kube-system-new,kube-system-new-dummy-to-ignore] dst_pods: [*] conn: All connections -src: ::/0 dst_ns: [ibm-system-new,kube-system-new,kube-system-new-dummy-to-ignore] dst_pods: [*] conn: All connections src_ns: [default] src_pods: [app=skydive and tier=analyzer] dst_ns: [default] dst_pods: [app=skydive and tier=agent] conn: All connections src_ns: [ibm-system-new,kube-system-new,kube-system-new-dummy-to-ignore] src_pods: [*] dst: 0.0.0.0/0 conn: All connections -src_ns: [ibm-system-new,kube-system-new,kube-system-new-dummy-to-ignore] src_pods: [*] dst: ::/0 conn: All connections src_ns: [ibm-system-new,kube-system-new,kube-system-new-dummy-to-ignore] src_pods: [*] dst_ns: [ibm-system-new,kube-system-new,kube-system-new-dummy-to-ignore] dst_pods: [*] conn: All connections diff --git a/tests/fw_rules_tests/policies/expected_output/test11-scheme_output.yaml b/tests/fw_rules_tests/policies/expected_output/test11-scheme_output.yaml index 46743ddf..70dd5343 100644 --- a/tests/fw_rules_tests/policies/expected_output/test11-scheme_output.yaml +++ b/tests/fw_rules_tests/policies/expected_output/test11-scheme_output.yaml @@ -14,16 +14,6 @@ - '*' connection: - All connections - - src_ip_block: - - ::/0 - dst_ns: - - ibm-system-new - - kube-system-new - - kube-system-new-dummy-to-ignore - dst_pods: - - '*' - connection: - - All connections - src_ns: - default src_pods: @@ -44,16 +34,6 @@ - 0.0.0.0/0 connection: - All connections - - src_ns: - - ibm-system-new - - kube-system-new - - kube-system-new-dummy-to-ignore - src_pods: - - '*' - dst_ip_block: - - ::/0 - connection: - - All connections - src_ns: - ibm-system-new - kube-system-new diff --git a/tests/fw_rules_tests/policies/expected_output/test12-scheme_output.txt b/tests/fw_rules_tests/policies/expected_output/test12-scheme_output.txt index 3c4ca1db..f6f280de 100644 --- a/tests/fw_rules_tests/policies/expected_output/test12-scheme_output.txt +++ b/tests/fw_rules_tests/policies/expected_output/test12-scheme_output.txt @@ -1,7 +1,5 @@ final fw rules for query: connectivity_map, config: np12: src: 0.0.0.0/0 dst_ns: [default,ibm-system-new,kube-system-new-dummy-to-ignore] dst_pods: [*] conn: All connections -src: ::/0 dst_ns: [default,ibm-system-new,kube-system-new-dummy-to-ignore] dst_pods: [*] conn: All connections src_ns: [default,ibm-system-new,kube-system-new,kube-system-new-dummy-to-ignore] src_pods: [*] dst: 0.0.0.0/0 conn: All connections -src_ns: [default,ibm-system-new,kube-system-new,kube-system-new-dummy-to-ignore] src_pods: [*] dst: ::/0 conn: All connections src_ns: [default,ibm-system-new,kube-system-new,kube-system-new-dummy-to-ignore] src_pods: [*] dst_ns: [default,ibm-system-new,kube-system-new-dummy-to-ignore] dst_pods: [*] conn: All connections src_ns: [default] src_pods: [*] dst_ns: [kube-system-new] dst_pods: [*] conn: TCP+UDP 53 diff --git a/tests/fw_rules_tests/policies/expected_output/test12-scheme_output.yaml b/tests/fw_rules_tests/policies/expected_output/test12-scheme_output.yaml index 191dca3a..b3e3e355 100644 --- a/tests/fw_rules_tests/policies/expected_output/test12-scheme_output.yaml +++ b/tests/fw_rules_tests/policies/expected_output/test12-scheme_output.yaml @@ -29,16 +29,6 @@ - '*' connection: - All connections - - src_ip_block: - - ::/0 - dst_ns: - - default - - ibm-system-new - - kube-system-new-dummy-to-ignore - dst_pods: - - '*' - connection: - - All connections - src_ns: - default - ibm-system-new @@ -50,17 +40,6 @@ - 0.0.0.0/0 connection: - All connections - - src_ns: - - default - - ibm-system-new - - kube-system-new - - kube-system-new-dummy-to-ignore - src_pods: - - '*' - dst_ip_block: - - ::/0 - connection: - - All connections - src_ns: - default - ibm-system-new diff --git a/tests/fw_rules_tests/policies/expected_output/test13-scheme_output.txt b/tests/fw_rules_tests/policies/expected_output/test13-scheme_output.txt index c84ae398..449596ad 100644 --- a/tests/fw_rules_tests/policies/expected_output/test13-scheme_output.txt +++ b/tests/fw_rules_tests/policies/expected_output/test13-scheme_output.txt @@ -1,7 +1,5 @@ final fw rules for query: connectivity_map, config: np13: src: 0.0.0.0/0 dst_ns: [ibm-system-new,kube-system-new,kube-system-new-dummy-to-ignore] dst_pods: [*] conn: All connections -src: ::/0 dst_ns: [ibm-system-new,kube-system-new,kube-system-new-dummy-to-ignore] dst_pods: [*] conn: All connections src_ns: [default,ibm-system-new,kube-system-new,kube-system-new-dummy-to-ignore] src_pods: [*] dst: 0.0.0.0/0 conn: All connections -src_ns: [default,ibm-system-new,kube-system-new,kube-system-new-dummy-to-ignore] src_pods: [*] dst: ::/0 conn: All connections src_ns: [default,ibm-system-new,kube-system-new,kube-system-new-dummy-to-ignore] src_pods: [*] dst_ns: [ibm-system-new,kube-system-new,kube-system-new-dummy-to-ignore] dst_pods: [*] conn: All connections src_ns: [ibm-system-new] src_pods: [*] dst_ns: [default] dst_pods: [*] conn: All connections diff --git a/tests/fw_rules_tests/policies/expected_output/test13-scheme_output.yaml b/tests/fw_rules_tests/policies/expected_output/test13-scheme_output.yaml index 3aa109f4..146b9258 100644 --- a/tests/fw_rules_tests/policies/expected_output/test13-scheme_output.yaml +++ b/tests/fw_rules_tests/policies/expected_output/test13-scheme_output.yaml @@ -14,16 +14,6 @@ - '*' connection: - All connections - - src_ip_block: - - ::/0 - dst_ns: - - ibm-system-new - - kube-system-new - - kube-system-new-dummy-to-ignore - dst_pods: - - '*' - connection: - - All connections - src_ns: - default - ibm-system-new @@ -35,17 +25,6 @@ - 0.0.0.0/0 connection: - All connections - - src_ns: - - default - - ibm-system-new - - kube-system-new - - kube-system-new-dummy-to-ignore - src_pods: - - '*' - dst_ip_block: - - ::/0 - connection: - - All connections - src_ns: - default - ibm-system-new diff --git a/tests/fw_rules_tests/policies/expected_output/test14-scheme_output.txt b/tests/fw_rules_tests/policies/expected_output/test14-scheme_output.txt index e1cf6433..63447713 100644 --- a/tests/fw_rules_tests/policies/expected_output/test14-scheme_output.txt +++ b/tests/fw_rules_tests/policies/expected_output/test14-scheme_output.txt @@ -1,7 +1,5 @@ final fw rules for query: connectivity_map, config: np14: src: 0.0.0.0/0 dst_ns: [ibm-system-new,kube-system-new,kube-system-new-dummy-to-ignore] dst_pods: [*] conn: All connections -src: ::/0 dst_ns: [ibm-system-new,kube-system-new,kube-system-new-dummy-to-ignore] dst_pods: [*] conn: All connections src_ns: [default,ibm-system-new,kube-system-new,kube-system-new-dummy-to-ignore] src_pods: [*] dst: 0.0.0.0/0 conn: All connections -src_ns: [default,ibm-system-new,kube-system-new,kube-system-new-dummy-to-ignore] src_pods: [*] dst: ::/0 conn: All connections src_ns: [default,ibm-system-new,kube-system-new,kube-system-new-dummy-to-ignore] src_pods: [*] dst_ns: [ibm-system-new,kube-system-new,kube-system-new-dummy-to-ignore] dst_pods: [*] conn: All connections src_ns: [ibm-system-new] src_pods: [*] dst_ns: [default] dst_pods: [*] conn: All connections diff --git a/tests/fw_rules_tests/policies/expected_output/test14-scheme_output.yaml b/tests/fw_rules_tests/policies/expected_output/test14-scheme_output.yaml index 720792ed..39832782 100644 --- a/tests/fw_rules_tests/policies/expected_output/test14-scheme_output.yaml +++ b/tests/fw_rules_tests/policies/expected_output/test14-scheme_output.yaml @@ -14,16 +14,6 @@ - '*' connection: - All connections - - src_ip_block: - - ::/0 - dst_ns: - - ibm-system-new - - kube-system-new - - kube-system-new-dummy-to-ignore - dst_pods: - - '*' - connection: - - All connections - src_ns: - default - ibm-system-new @@ -35,17 +25,6 @@ - 0.0.0.0/0 connection: - All connections - - src_ns: - - default - - ibm-system-new - - kube-system-new - - kube-system-new-dummy-to-ignore - src_pods: - - '*' - dst_ip_block: - - ::/0 - connection: - - All connections - src_ns: - default - ibm-system-new diff --git a/tests/fw_rules_tests/policies/expected_output/test15-scheme_output.txt b/tests/fw_rules_tests/policies/expected_output/test15-scheme_output.txt index 6179364c..cf3bf502 100644 --- a/tests/fw_rules_tests/policies/expected_output/test15-scheme_output.txt +++ b/tests/fw_rules_tests/policies/expected_output/test15-scheme_output.txt @@ -1,7 +1,5 @@ final fw rules for query: connectivity_map, config: np15: src: 0.0.0.0/0 dst_ns: [ibm-system-new,kube-system-new,kube-system-new-dummy-to-ignore] dst_pods: [*] conn: All connections -src: ::/0 dst_ns: [ibm-system-new,kube-system-new,kube-system-new-dummy-to-ignore] dst_pods: [*] conn: All connections src_ns: [default,ibm-system-new,kube-system-new,kube-system-new-dummy-to-ignore] src_pods: [*] dst: 0.0.0.0/0 conn: All connections -src_ns: [default,ibm-system-new,kube-system-new,kube-system-new-dummy-to-ignore] src_pods: [*] dst: ::/0 conn: All connections src_ns: [default,ibm-system-new,kube-system-new,kube-system-new-dummy-to-ignore] src_pods: [*] dst_ns: [ibm-system-new,kube-system-new,kube-system-new-dummy-to-ignore] dst_pods: [*] conn: All connections src_ns: [ibm-system-new] src_pods: [ibm-cloud-provider-lb-app=keepalived] dst_ns: [default] dst_pods: [*] conn: All connections diff --git a/tests/fw_rules_tests/policies/expected_output/test15-scheme_output.yaml b/tests/fw_rules_tests/policies/expected_output/test15-scheme_output.yaml index a3ddcf86..bdae1fb5 100644 --- a/tests/fw_rules_tests/policies/expected_output/test15-scheme_output.yaml +++ b/tests/fw_rules_tests/policies/expected_output/test15-scheme_output.yaml @@ -14,16 +14,6 @@ - '*' connection: - All connections - - src_ip_block: - - ::/0 - dst_ns: - - ibm-system-new - - kube-system-new - - kube-system-new-dummy-to-ignore - dst_pods: - - '*' - connection: - - All connections - src_ns: - default - ibm-system-new @@ -35,17 +25,6 @@ - 0.0.0.0/0 connection: - All connections - - src_ns: - - default - - ibm-system-new - - kube-system-new - - kube-system-new-dummy-to-ignore - src_pods: - - '*' - dst_ip_block: - - ::/0 - connection: - - All connections - src_ns: - default - ibm-system-new diff --git a/tests/fw_rules_tests/policies/expected_output/test16-scheme_output.txt b/tests/fw_rules_tests/policies/expected_output/test16-scheme_output.txt index b4b8ef18..e03e6962 100644 --- a/tests/fw_rules_tests/policies/expected_output/test16-scheme_output.txt +++ b/tests/fw_rules_tests/policies/expected_output/test16-scheme_output.txt @@ -5,9 +5,6 @@ src: 0.0.0.0/0 dst_ns: [kube-system-new] dst_pods: [!has(tier) or tier=not_front src: 11.0.0.0-172.20.255.255 dst_ns: [kube-system-new] dst_pods: [tier=frontend] conn: UDP 53 src: 172.22.0.0-172.29.255.255 dst_ns: [kube-system-new] dst_pods: [tier=frontend] conn: UDP 53 src: 172.31.0.0-255.255.255.255 dst_ns: [kube-system-new] dst_pods: [tier=frontend] conn: UDP 53 -src: ::/0 dst_ns: [default,ibm-system-new,kube-system-new-dummy-to-ignore] dst_pods: [*] conn: All connections -src: ::/0 dst_ns: [kube-system-new] dst_pods: [!has(tier) or tier=not_frontend_for_demo] conn: All connections src_ns: [default,ibm-system-new,kube-system-new,kube-system-new-dummy-to-ignore] src_pods: [*] dst: 0.0.0.0/0 conn: All connections -src_ns: [default,ibm-system-new,kube-system-new,kube-system-new-dummy-to-ignore] src_pods: [*] dst: ::/0 conn: All connections src_ns: [default,ibm-system-new,kube-system-new,kube-system-new-dummy-to-ignore] src_pods: [*] dst_ns: [default,ibm-system-new,kube-system-new-dummy-to-ignore] dst_pods: [*] conn: All connections src_ns: [default,ibm-system-new,kube-system-new,kube-system-new-dummy-to-ignore] src_pods: [*] dst_ns: [kube-system-new] dst_pods: [!has(tier) or tier=not_frontend_for_demo] conn: All connections diff --git a/tests/fw_rules_tests/policies/expected_output/test16-scheme_output.yaml b/tests/fw_rules_tests/policies/expected_output/test16-scheme_output.yaml index 368394a9..e9da05bb 100644 --- a/tests/fw_rules_tests/policies/expected_output/test16-scheme_output.yaml +++ b/tests/fw_rules_tests/policies/expected_output/test16-scheme_output.yaml @@ -82,24 +82,6 @@ - '!has(tier) or tier=not_frontend_for_demo' connection: - All connections - - src_ip_block: - - ::/0 - dst_ns: - - default - - ibm-system-new - - kube-system-new-dummy-to-ignore - dst_pods: - - '*' - connection: - - All connections - - src_ip_block: - - ::/0 - dst_ns: - - kube-system-new - dst_pods: - - '!has(tier) or tier=not_frontend_for_demo' - connection: - - All connections - src_ns: - default - ibm-system-new @@ -111,17 +93,6 @@ - 0.0.0.0/0 connection: - All connections - - src_ns: - - default - - ibm-system-new - - kube-system-new - - kube-system-new-dummy-to-ignore - src_pods: - - '*' - dst_ip_block: - - ::/0 - connection: - - All connections - src_ns: - default - ibm-system-new diff --git a/tests/fw_rules_tests/policies/expected_output/test18-scheme_output.txt b/tests/fw_rules_tests/policies/expected_output/test18-scheme_output.txt index cc5cae99..1d2359fd 100644 --- a/tests/fw_rules_tests/policies/expected_output/test18-scheme_output.txt +++ b/tests/fw_rules_tests/policies/expected_output/test18-scheme_output.txt @@ -1,8 +1,6 @@ final fw rules for query: connectivity_map, config: np18: src: 0.0.0.0/0 dst_ns: [kube-system-new] dst_pods: [*] conn: All connections -src: ::/0 dst_ns: [kube-system-new] dst_pods: [*] conn: All connections src_ns: [kube-system-new] src_pods: [!has(tier) or tier=not_frontend_for_demo] dst: 0.0.0.0/0 conn: All connections -src_ns: [kube-system-new] src_pods: [!has(tier) or tier=not_frontend_for_demo] dst: ::/0 conn: All connections src_ns: [kube-system-new] src_pods: [!has(tier) or tier=not_frontend_for_demo] dst_ns: [kube-system-new] dst_pods: [*] conn: All connections src_ns: [kube-system-new] src_pods: [tier=frontend] dst: 49.50.0.0/32 conn: All connections src_ns: [kube-system-new] src_pods: [tier=frontend] dst: 49.50.0.2/32 conn: All connections diff --git a/tests/fw_rules_tests/policies/expected_output/test18-scheme_output.yaml b/tests/fw_rules_tests/policies/expected_output/test18-scheme_output.yaml index e829421e..793fadf2 100644 --- a/tests/fw_rules_tests/policies/expected_output/test18-scheme_output.yaml +++ b/tests/fw_rules_tests/policies/expected_output/test18-scheme_output.yaml @@ -12,14 +12,6 @@ - '*' connection: - All connections - - src_ip_block: - - ::/0 - dst_ns: - - kube-system-new - dst_pods: - - '*' - connection: - - All connections - src_ns: - kube-system-new src_pods: @@ -28,14 +20,6 @@ - 0.0.0.0/0 connection: - All connections - - src_ns: - - kube-system-new - src_pods: - - '!has(tier) or tier=not_frontend_for_demo' - dst_ip_block: - - ::/0 - connection: - - All connections - src_ns: - kube-system-new src_pods: diff --git a/tests/fw_rules_tests/policies/expected_output/test2-scheme_output.txt b/tests/fw_rules_tests/policies/expected_output/test2-scheme_output.txt index 60e447f5..f1a8460b 100644 --- a/tests/fw_rules_tests/policies/expected_output/test2-scheme_output.txt +++ b/tests/fw_rules_tests/policies/expected_output/test2-scheme_output.txt @@ -1,10 +1,7 @@ final fw rules for query: connectivity_map, config: np2: src: 0.0.0.0/0 dst_ns: [default,ibm-system-new,kube-system-new-dummy-to-ignore] dst_pods: [*] conn: All connections src: 0.0.0.0/0 dst_ns: [kube-system-new] dst_pods: [*] conn: TCP+UDP 53 -src: ::/0 dst_ns: [default,ibm-system-new,kube-system-new-dummy-to-ignore] dst_pods: [*] conn: All connections -src: ::/0 dst_ns: [kube-system-new] dst_pods: [*] conn: TCP+UDP 53 src_ns: [default,ibm-system-new,kube-system-new,kube-system-new-dummy-to-ignore] src_pods: [*] dst: 0.0.0.0/0 conn: All connections -src_ns: [default,ibm-system-new,kube-system-new,kube-system-new-dummy-to-ignore] src_pods: [*] dst: ::/0 conn: All connections src_ns: [default,ibm-system-new,kube-system-new,kube-system-new-dummy-to-ignore] src_pods: [*] dst_ns: [default,ibm-system-new,kube-system-new-dummy-to-ignore] dst_pods: [*] conn: All connections src_ns: [default,kube-system-new,kube-system-new-dummy-to-ignore] src_pods: [*] dst_ns: [kube-system-new] dst_pods: [*] conn: TCP+UDP 53 src_ns: [ibm-system-new] src_pods: [*] dst_ns: [kube-system-new] dst_pods: [*] conn: All connections diff --git a/tests/fw_rules_tests/policies/expected_output/test2-scheme_output.yaml b/tests/fw_rules_tests/policies/expected_output/test2-scheme_output.yaml index 8632c99c..d3583d09 100644 --- a/tests/fw_rules_tests/policies/expected_output/test2-scheme_output.yaml +++ b/tests/fw_rules_tests/policies/expected_output/test2-scheme_output.yaml @@ -17,19 +17,6 @@ - Protocol: UDP Ports: - 53 - - src_ip_block: - - ::/0 - dst_ns: - - kube-system-new - dst_pods: - - '*' - connection: - - Protocol: TCP - Ports: - - 53 - - Protocol: UDP - Ports: - - 53 - src_ns: - default - kube-system-new @@ -57,16 +44,6 @@ - '*' connection: - All connections - - src_ip_block: - - ::/0 - dst_ns: - - default - - ibm-system-new - - kube-system-new-dummy-to-ignore - dst_pods: - - '*' - connection: - - All connections - src_ns: - default - ibm-system-new @@ -78,17 +55,6 @@ - 0.0.0.0/0 connection: - All connections - - src_ns: - - default - - ibm-system-new - - kube-system-new - - kube-system-new-dummy-to-ignore - src_pods: - - '*' - dst_ip_block: - - ::/0 - connection: - - All connections - src_ns: - default - ibm-system-new diff --git a/tests/fw_rules_tests/policies/expected_output/test25-scheme_connectivity_map_by_deployments_dot.dot b/tests/fw_rules_tests/policies/expected_output/test25-scheme_connectivity_map_by_deployments_dot.dot index f3b41868..82b8fc35 100644 --- a/tests/fw_rules_tests/policies/expected_output/test25-scheme_connectivity_map_by_deployments_dot.dot +++ b/tests/fw_rules_tests/policies/expected_output/test25-scheme_connectivity_map_by_deployments_dot.dot @@ -2,7 +2,6 @@ digraph { HEADER [shape="box" label=< connectivity_map_by_deployments_dot/np25 > fontsize=30 color=webmaroon fontcolor=webmaroon]; "0.0.0.0/0" [label="0.0.0.0/0" color="red2" fontcolor="red2"] - "::/0" [label="::/0" color="red2" fontcolor="red2"] "default/my-test-deployment-A(Deployment)" [label="default/my-test-deployment-A(Deployment)" color="blue" fontcolor="blue"] "default/my-test-deployment-B(Deployment)" [label="default/my-test-deployment-B(Deployment)" color="blue" fontcolor="blue"] "default/my-test-deployment-C(Deployment)" [label="default/my-test-deployment-C(Deployment)" color="blue" fontcolor="blue"] diff --git a/tests/fw_rules_tests/policies/expected_output/test25-scheme_connectivity_map_by_pods_dot.dot b/tests/fw_rules_tests/policies/expected_output/test25-scheme_connectivity_map_by_pods_dot.dot index ae158d83..0b82b060 100644 --- a/tests/fw_rules_tests/policies/expected_output/test25-scheme_connectivity_map_by_pods_dot.dot +++ b/tests/fw_rules_tests/policies/expected_output/test25-scheme_connectivity_map_by_pods_dot.dot @@ -2,7 +2,6 @@ digraph { HEADER [shape="box" label=< connectivity_map_by_pods_dot/np25 > fontsize=30 color=webmaroon fontcolor=webmaroon]; "0.0.0.0/0" [label="0.0.0.0/0" color="red2" fontcolor="red2"] - "::/0" [label="::/0" color="red2" fontcolor="red2"] "default/my-test-deployment-A-1" [label="default/my-test-deployment-A-1" color="blue" fontcolor="blue"] "default/my-test-deployment-A-2" [label="default/my-test-deployment-A-2" color="blue" fontcolor="blue"] "default/my-test-deployment-B-1" [label="default/my-test-deployment-B-1" color="blue" fontcolor="blue"] diff --git a/tests/fw_rules_tests/policies/expected_output/test3-scheme_output.txt b/tests/fw_rules_tests/policies/expected_output/test3-scheme_output.txt index 37b20553..f0672194 100644 --- a/tests/fw_rules_tests/policies/expected_output/test3-scheme_output.txt +++ b/tests/fw_rules_tests/policies/expected_output/test3-scheme_output.txt @@ -1,7 +1,5 @@ final fw rules for query: connectivity_map, config: np3: src: 0.0.0.0/0 dst_ns: [default] dst_pods: [*] conn: All connections -src: ::/0 dst_ns: [default] dst_pods: [*] conn: All connections src_ns: [default,kube-system-new] src_pods: [*] dst: 0.0.0.0/0 conn: All connections -src_ns: [default,kube-system-new] src_pods: [*] dst: ::/0 conn: All connections src_ns: [default,kube-system-new] src_pods: [*] dst_ns: [default] dst_pods: [*] conn: All connections src_ns: [default] src_pods: [*] dst_ns: [kube-system-new] dst_pods: [*] conn: TCP 85-90 diff --git a/tests/fw_rules_tests/policies/expected_output/test3-scheme_output.yaml b/tests/fw_rules_tests/policies/expected_output/test3-scheme_output.yaml index e02ad0a6..8852bea2 100644 --- a/tests/fw_rules_tests/policies/expected_output/test3-scheme_output.yaml +++ b/tests/fw_rules_tests/policies/expected_output/test3-scheme_output.yaml @@ -24,14 +24,6 @@ - '*' connection: - All connections - - src_ip_block: - - ::/0 - dst_ns: - - default - dst_pods: - - '*' - connection: - - All connections - src_ns: - default - kube-system-new @@ -41,15 +33,6 @@ - 0.0.0.0/0 connection: - All connections - - src_ns: - - default - - kube-system-new - src_pods: - - '*' - dst_ip_block: - - ::/0 - connection: - - All connections - src_ns: - default - kube-system-new diff --git a/tests/fw_rules_tests/policies/expected_output/test4-scheme_query_connectivity_map_3_output.csv b/tests/fw_rules_tests/policies/expected_output/test4-scheme_query_connectivity_map_3_output.csv index df2f23e9..2d219706 100644 --- a/tests/fw_rules_tests/policies/expected_output/test4-scheme_query_connectivity_map_3_output.csv +++ b/tests/fw_rules_tests/policies/expected_output/test4-scheme_query_connectivity_map_3_output.csv @@ -2,7 +2,5 @@ "connectivity_map_3, config: np3","","","","","", "","[default]","[*]","[kube-system-new]","[*]","TCP 85-90", "","","0.0.0.0/0","[default,ibm-system-new,kube-system-new-dummy-to-ignore]","[*]","All connections", -"","","::/0","[default,ibm-system-new,kube-system-new-dummy-to-ignore]","[*]","All connections", "","[default,ibm-system-new,kube-system-new,kube-system-new-dummy-to-ignore]","[*]","","0.0.0.0/0","All connections", -"","[default,ibm-system-new,kube-system-new,kube-system-new-dummy-to-ignore]","[*]","","::/0","All connections", "","[default,ibm-system-new,kube-system-new,kube-system-new-dummy-to-ignore]","[*]","[default,ibm-system-new,kube-system-new-dummy-to-ignore]","[*]","All connections", diff --git a/tests/fw_rules_tests/policies/expected_output/test4-scheme_query_connectivity_map_3_output.dot b/tests/fw_rules_tests/policies/expected_output/test4-scheme_query_connectivity_map_3_output.dot index c6f17b88..8ffbc8dc 100644 --- a/tests/fw_rules_tests/policies/expected_output/test4-scheme_query_connectivity_map_3_output.dot +++ b/tests/fw_rules_tests/policies/expected_output/test4-scheme_query_connectivity_map_3_output.dot @@ -2,7 +2,6 @@ digraph { HEADER [shape="box" label=< connectivity_map_3/np3 > fontsize=30 color=webmaroon fontcolor=webmaroon]; "0.0.0.0/0" [label="0.0.0.0/0" color="red2" fontcolor="red2"] - "::/0" [label="::/0" color="red2" fontcolor="red2"] "default/cognetive-agents(DaemonSet)" [label="default/cognetive-agents(DaemonSet)" color="blue" fontcolor="blue"] "ibm-system-new/ibm-cloud-provider-ip-169-60-164-10(Deployment-StatefulSet)" [label="ibm-system-new/ibm-cloud-provider-ip-169-60-164-10(Deployment-StatefulSet)" color="blue" fontcolor="blue"] "ibm-system-new/ibm-cloud-provider-ip-169-60-164-14(Deployment-StatefulSet)" [label="ibm-system-new/ibm-cloud-provider-ip-169-60-164-14(Deployment-StatefulSet)" color="blue" fontcolor="blue"] @@ -13,12 +12,7 @@ digraph { "0.0.0.0/0" -> "ibm-system-new/ibm-cloud-provider-ip-169-60-164-10(Deployment-StatefulSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] "0.0.0.0/0" -> "ibm-system-new/ibm-cloud-provider-ip-169-60-164-14(Deployment-StatefulSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] "0.0.0.0/0" -> "kube-system-new-dummy-to-ignore/calico-kube-controllers(Deployment-StatefulSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] - "::/0" -> "default/cognetive-agents(DaemonSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] - "::/0" -> "ibm-system-new/ibm-cloud-provider-ip-169-60-164-10(Deployment-StatefulSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] - "::/0" -> "ibm-system-new/ibm-cloud-provider-ip-169-60-164-14(Deployment-StatefulSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] - "::/0" -> "kube-system-new-dummy-to-ignore/calico-kube-controllers(Deployment-StatefulSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] "default/cognetive-agents(DaemonSet)" -> "0.0.0.0/0" [label="All connections" color="gold2" fontcolor="darkgreen"] - "default/cognetive-agents(DaemonSet)" -> "::/0" [label="All connections" color="gold2" fontcolor="darkgreen"] "default/cognetive-agents(DaemonSet)" -> "default/cognetive-agents(DaemonSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] "default/cognetive-agents(DaemonSet)" -> "ibm-system-new/ibm-cloud-provider-ip-169-60-164-10(Deployment-StatefulSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] "default/cognetive-agents(DaemonSet)" -> "ibm-system-new/ibm-cloud-provider-ip-169-60-164-14(Deployment-StatefulSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] @@ -26,28 +20,23 @@ digraph { "default/cognetive-agents(DaemonSet)" -> "kube-system-new/calico-node(DaemonSet)" [label="TCP 85-90" color="gold2" fontcolor="darkgreen"] "default/cognetive-agents(DaemonSet)" -> "kube-system-new/heapster(Deployment-StatefulSet)" [label="TCP 85-90" color="gold2" fontcolor="darkgreen"] "ibm-system-new/ibm-cloud-provider-ip-169-60-164-10(Deployment-StatefulSet)" -> "0.0.0.0/0" [label="All connections" color="gold2" fontcolor="darkgreen"] - "ibm-system-new/ibm-cloud-provider-ip-169-60-164-10(Deployment-StatefulSet)" -> "::/0" [label="All connections" color="gold2" fontcolor="darkgreen"] "ibm-system-new/ibm-cloud-provider-ip-169-60-164-10(Deployment-StatefulSet)" -> "default/cognetive-agents(DaemonSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] "ibm-system-new/ibm-cloud-provider-ip-169-60-164-10(Deployment-StatefulSet)" -> "ibm-system-new/ibm-cloud-provider-ip-169-60-164-14(Deployment-StatefulSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] "ibm-system-new/ibm-cloud-provider-ip-169-60-164-10(Deployment-StatefulSet)" -> "kube-system-new-dummy-to-ignore/calico-kube-controllers(Deployment-StatefulSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] "ibm-system-new/ibm-cloud-provider-ip-169-60-164-14(Deployment-StatefulSet)" -> "0.0.0.0/0" [label="All connections" color="gold2" fontcolor="darkgreen"] - "ibm-system-new/ibm-cloud-provider-ip-169-60-164-14(Deployment-StatefulSet)" -> "::/0" [label="All connections" color="gold2" fontcolor="darkgreen"] "ibm-system-new/ibm-cloud-provider-ip-169-60-164-14(Deployment-StatefulSet)" -> "default/cognetive-agents(DaemonSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] "ibm-system-new/ibm-cloud-provider-ip-169-60-164-14(Deployment-StatefulSet)" -> "ibm-system-new/ibm-cloud-provider-ip-169-60-164-10(Deployment-StatefulSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] "ibm-system-new/ibm-cloud-provider-ip-169-60-164-14(Deployment-StatefulSet)" -> "kube-system-new-dummy-to-ignore/calico-kube-controllers(Deployment-StatefulSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] "kube-system-new-dummy-to-ignore/calico-kube-controllers(Deployment-StatefulSet)" -> "0.0.0.0/0" [label="All connections" color="gold2" fontcolor="darkgreen"] - "kube-system-new-dummy-to-ignore/calico-kube-controllers(Deployment-StatefulSet)" -> "::/0" [label="All connections" color="gold2" fontcolor="darkgreen"] "kube-system-new-dummy-to-ignore/calico-kube-controllers(Deployment-StatefulSet)" -> "default/cognetive-agents(DaemonSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] "kube-system-new-dummy-to-ignore/calico-kube-controllers(Deployment-StatefulSet)" -> "ibm-system-new/ibm-cloud-provider-ip-169-60-164-10(Deployment-StatefulSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] "kube-system-new-dummy-to-ignore/calico-kube-controllers(Deployment-StatefulSet)" -> "ibm-system-new/ibm-cloud-provider-ip-169-60-164-14(Deployment-StatefulSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] "kube-system-new/calico-node(DaemonSet)" -> "0.0.0.0/0" [label="All connections" color="gold2" fontcolor="darkgreen"] - "kube-system-new/calico-node(DaemonSet)" -> "::/0" [label="All connections" color="gold2" fontcolor="darkgreen"] "kube-system-new/calico-node(DaemonSet)" -> "default/cognetive-agents(DaemonSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] "kube-system-new/calico-node(DaemonSet)" -> "ibm-system-new/ibm-cloud-provider-ip-169-60-164-10(Deployment-StatefulSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] "kube-system-new/calico-node(DaemonSet)" -> "ibm-system-new/ibm-cloud-provider-ip-169-60-164-14(Deployment-StatefulSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] "kube-system-new/calico-node(DaemonSet)" -> "kube-system-new-dummy-to-ignore/calico-kube-controllers(Deployment-StatefulSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] "kube-system-new/heapster(Deployment-StatefulSet)" -> "0.0.0.0/0" [label="All connections" color="gold2" fontcolor="darkgreen"] - "kube-system-new/heapster(Deployment-StatefulSet)" -> "::/0" [label="All connections" color="gold2" fontcolor="darkgreen"] "kube-system-new/heapster(Deployment-StatefulSet)" -> "default/cognetive-agents(DaemonSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] "kube-system-new/heapster(Deployment-StatefulSet)" -> "ibm-system-new/ibm-cloud-provider-ip-169-60-164-10(Deployment-StatefulSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] "kube-system-new/heapster(Deployment-StatefulSet)" -> "ibm-system-new/ibm-cloud-provider-ip-169-60-164-14(Deployment-StatefulSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] diff --git a/tests/fw_rules_tests/policies/expected_output/test4-scheme_query_connectivity_map_3_output.md b/tests/fw_rules_tests/policies/expected_output/test4-scheme_query_connectivity_map_3_output.md index 4899f428..55c60031 100644 --- a/tests/fw_rules_tests/policies/expected_output/test4-scheme_query_connectivity_map_3_output.md +++ b/tests/fw_rules_tests/policies/expected_output/test4-scheme_query_connectivity_map_3_output.md @@ -3,7 +3,5 @@ |connectivity_map_3, config: np3|||||| ||[default]|[*]|[kube-system-new]|[*]|TCP 85-90| |||0.0.0.0/0|[default,ibm-system-new,kube-system-new-dummy-to-ignore]|[*]|All connections| -|||::/0|[default,ibm-system-new,kube-system-new-dummy-to-ignore]|[*]|All connections| ||[default,ibm-system-new,kube-system-new,kube-system-new-dummy-to-ignore]|[*]||0.0.0.0/0|All connections| -||[default,ibm-system-new,kube-system-new,kube-system-new-dummy-to-ignore]|[*]||::/0|All connections| ||[default,ibm-system-new,kube-system-new,kube-system-new-dummy-to-ignore]|[*]|[default,ibm-system-new,kube-system-new-dummy-to-ignore]|[*]|All connections| diff --git a/tests/fw_rules_tests/policies/expected_output/test4-scheme_query_connectivity_map_3_output.txt b/tests/fw_rules_tests/policies/expected_output/test4-scheme_query_connectivity_map_3_output.txt index 9ec12c09..20091311 100644 --- a/tests/fw_rules_tests/policies/expected_output/test4-scheme_query_connectivity_map_3_output.txt +++ b/tests/fw_rules_tests/policies/expected_output/test4-scheme_query_connectivity_map_3_output.txt @@ -1,7 +1,5 @@ final fw rules for query: connectivity_map_3, config: np3: src: 0.0.0.0/0 dst_ns: [default,ibm-system-new,kube-system-new-dummy-to-ignore] dst_pods: [*] conn: All connections -src: ::/0 dst_ns: [default,ibm-system-new,kube-system-new-dummy-to-ignore] dst_pods: [*] conn: All connections src_ns: [default,ibm-system-new,kube-system-new,kube-system-new-dummy-to-ignore] src_pods: [*] dst: 0.0.0.0/0 conn: All connections -src_ns: [default,ibm-system-new,kube-system-new,kube-system-new-dummy-to-ignore] src_pods: [*] dst: ::/0 conn: All connections src_ns: [default,ibm-system-new,kube-system-new,kube-system-new-dummy-to-ignore] src_pods: [*] dst_ns: [default,ibm-system-new,kube-system-new-dummy-to-ignore] dst_pods: [*] conn: All connections src_ns: [default] src_pods: [*] dst_ns: [kube-system-new] dst_pods: [*] conn: TCP 85-90 diff --git a/tests/fw_rules_tests/policies/expected_output/test4-scheme_query_connectivity_map_3_output.yaml b/tests/fw_rules_tests/policies/expected_output/test4-scheme_query_connectivity_map_3_output.yaml index 95ed0021..0fe62f0d 100644 --- a/tests/fw_rules_tests/policies/expected_output/test4-scheme_query_connectivity_map_3_output.yaml +++ b/tests/fw_rules_tests/policies/expected_output/test4-scheme_query_connectivity_map_3_output.yaml @@ -26,16 +26,6 @@ - '*' connection: - All connections - - src_ip_block: - - ::/0 - dst_ns: - - default - - ibm-system-new - - kube-system-new-dummy-to-ignore - dst_pods: - - '*' - connection: - - All connections - src_ns: - default - ibm-system-new @@ -47,17 +37,6 @@ - 0.0.0.0/0 connection: - All connections - - src_ns: - - default - - ibm-system-new - - kube-system-new - - kube-system-new-dummy-to-ignore - src_pods: - - '*' - dst_ip_block: - - ::/0 - connection: - - All connections - src_ns: - default - ibm-system-new diff --git a/tests/fw_rules_tests/policies/expected_output/test4-scheme_query_connectivity_map_4_output.csv b/tests/fw_rules_tests/policies/expected_output/test4-scheme_query_connectivity_map_4_output.csv index 4bfa0962..690e0e13 100644 --- a/tests/fw_rules_tests/policies/expected_output/test4-scheme_query_connectivity_map_4_output.csv +++ b/tests/fw_rules_tests/policies/expected_output/test4-scheme_query_connectivity_map_4_output.csv @@ -4,16 +4,12 @@ "","[ibm-system-new]","[*]","[kube-system-new]","[*]","TCP 80-90", "","[default]","[*]","[kube-system-new]","[*]","TCP 85-90", "","","0.0.0.0/0","[default,ibm-system-new,kube-system-new-dummy-to-ignore]","[*]","All connections", -"","","::/0","[default,ibm-system-new,kube-system-new-dummy-to-ignore]","[*]","All connections", "","[default,ibm-system-new,kube-system-new,kube-system-new-dummy-to-ignore]","[*]","","0.0.0.0/0","All connections", -"","[default,ibm-system-new,kube-system-new,kube-system-new-dummy-to-ignore]","[*]","","::/0","All connections", "","[default,ibm-system-new,kube-system-new,kube-system-new-dummy-to-ignore]","[*]","[default,ibm-system-new,kube-system-new-dummy-to-ignore]","[*]","All connections", "query","src_ns","src_pods","dst_ns","dst_pods","connection", "connectivity_map_4, config: np3","","","","","", "","[default]","[*]","[kube-system-new]","[*]","TCP 85-90", "","","0.0.0.0/0","[default,ibm-system-new,kube-system-new-dummy-to-ignore]","[*]","All connections", -"","","::/0","[default,ibm-system-new,kube-system-new-dummy-to-ignore]","[*]","All connections", "","[default,ibm-system-new,kube-system-new,kube-system-new-dummy-to-ignore]","[*]","","0.0.0.0/0","All connections", -"","[default,ibm-system-new,kube-system-new,kube-system-new-dummy-to-ignore]","[*]","","::/0","All connections", "","[default,ibm-system-new,kube-system-new,kube-system-new-dummy-to-ignore]","[*]","[default,ibm-system-new,kube-system-new-dummy-to-ignore]","[*]","All connections", diff --git a/tests/fw_rules_tests/policies/expected_output/test4-scheme_query_connectivity_map_4_output.dot b/tests/fw_rules_tests/policies/expected_output/test4-scheme_query_connectivity_map_4_output.dot index d04f0cde..017bcc8b 100644 --- a/tests/fw_rules_tests/policies/expected_output/test4-scheme_query_connectivity_map_4_output.dot +++ b/tests/fw_rules_tests/policies/expected_output/test4-scheme_query_connectivity_map_4_output.dot @@ -2,7 +2,6 @@ digraph { HEADER [shape="box" label=< connectivity_map_4/np4 > fontsize=30 color=webmaroon fontcolor=webmaroon]; "0.0.0.0/0" [label="0.0.0.0/0" color="red2" fontcolor="red2"] - "::/0" [label="::/0" color="red2" fontcolor="red2"] "default/cognetive-agents(DaemonSet)" [label="default/cognetive-agents(DaemonSet)" color="blue" fontcolor="blue"] "ibm-system-new/ibm-cloud-provider-ip-169-60-164-10(Deployment-StatefulSet)" [label="ibm-system-new/ibm-cloud-provider-ip-169-60-164-10(Deployment-StatefulSet)" color="blue" fontcolor="blue"] "ibm-system-new/ibm-cloud-provider-ip-169-60-164-14(Deployment-StatefulSet)" [label="ibm-system-new/ibm-cloud-provider-ip-169-60-164-14(Deployment-StatefulSet)" color="blue" fontcolor="blue"] @@ -13,12 +12,7 @@ digraph { "0.0.0.0/0" -> "ibm-system-new/ibm-cloud-provider-ip-169-60-164-10(Deployment-StatefulSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] "0.0.0.0/0" -> "ibm-system-new/ibm-cloud-provider-ip-169-60-164-14(Deployment-StatefulSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] "0.0.0.0/0" -> "kube-system-new-dummy-to-ignore/calico-kube-controllers(Deployment-StatefulSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] - "::/0" -> "default/cognetive-agents(DaemonSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] - "::/0" -> "ibm-system-new/ibm-cloud-provider-ip-169-60-164-10(Deployment-StatefulSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] - "::/0" -> "ibm-system-new/ibm-cloud-provider-ip-169-60-164-14(Deployment-StatefulSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] - "::/0" -> "kube-system-new-dummy-to-ignore/calico-kube-controllers(Deployment-StatefulSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] "default/cognetive-agents(DaemonSet)" -> "0.0.0.0/0" [label="All connections" color="gold2" fontcolor="darkgreen"] - "default/cognetive-agents(DaemonSet)" -> "::/0" [label="All connections" color="gold2" fontcolor="darkgreen"] "default/cognetive-agents(DaemonSet)" -> "default/cognetive-agents(DaemonSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] "default/cognetive-agents(DaemonSet)" -> "ibm-system-new/ibm-cloud-provider-ip-169-60-164-10(Deployment-StatefulSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] "default/cognetive-agents(DaemonSet)" -> "ibm-system-new/ibm-cloud-provider-ip-169-60-164-14(Deployment-StatefulSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] @@ -26,34 +20,29 @@ digraph { "default/cognetive-agents(DaemonSet)" -> "kube-system-new/calico-node(DaemonSet)" [label="TCP 85-90" color="gold2" fontcolor="darkgreen"] "default/cognetive-agents(DaemonSet)" -> "kube-system-new/heapster(Deployment-StatefulSet)" [label="TCP 85-90" color="gold2" fontcolor="darkgreen"] "ibm-system-new/ibm-cloud-provider-ip-169-60-164-10(Deployment-StatefulSet)" -> "0.0.0.0/0" [label="All connections" color="gold2" fontcolor="darkgreen"] - "ibm-system-new/ibm-cloud-provider-ip-169-60-164-10(Deployment-StatefulSet)" -> "::/0" [label="All connections" color="gold2" fontcolor="darkgreen"] "ibm-system-new/ibm-cloud-provider-ip-169-60-164-10(Deployment-StatefulSet)" -> "default/cognetive-agents(DaemonSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] "ibm-system-new/ibm-cloud-provider-ip-169-60-164-10(Deployment-StatefulSet)" -> "ibm-system-new/ibm-cloud-provider-ip-169-60-164-14(Deployment-StatefulSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] "ibm-system-new/ibm-cloud-provider-ip-169-60-164-10(Deployment-StatefulSet)" -> "kube-system-new-dummy-to-ignore/calico-kube-controllers(Deployment-StatefulSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] "ibm-system-new/ibm-cloud-provider-ip-169-60-164-10(Deployment-StatefulSet)" -> "kube-system-new/calico-node(DaemonSet)" [label="TCP 80-90" color="gold2" fontcolor="darkgreen"] "ibm-system-new/ibm-cloud-provider-ip-169-60-164-10(Deployment-StatefulSet)" -> "kube-system-new/heapster(Deployment-StatefulSet)" [label="TCP 80-90" color="gold2" fontcolor="darkgreen"] "ibm-system-new/ibm-cloud-provider-ip-169-60-164-14(Deployment-StatefulSet)" -> "0.0.0.0/0" [label="All connections" color="gold2" fontcolor="darkgreen"] - "ibm-system-new/ibm-cloud-provider-ip-169-60-164-14(Deployment-StatefulSet)" -> "::/0" [label="All connections" color="gold2" fontcolor="darkgreen"] "ibm-system-new/ibm-cloud-provider-ip-169-60-164-14(Deployment-StatefulSet)" -> "default/cognetive-agents(DaemonSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] "ibm-system-new/ibm-cloud-provider-ip-169-60-164-14(Deployment-StatefulSet)" -> "ibm-system-new/ibm-cloud-provider-ip-169-60-164-10(Deployment-StatefulSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] "ibm-system-new/ibm-cloud-provider-ip-169-60-164-14(Deployment-StatefulSet)" -> "kube-system-new-dummy-to-ignore/calico-kube-controllers(Deployment-StatefulSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] "ibm-system-new/ibm-cloud-provider-ip-169-60-164-14(Deployment-StatefulSet)" -> "kube-system-new/calico-node(DaemonSet)" [label="TCP 80-90" color="gold2" fontcolor="darkgreen"] "ibm-system-new/ibm-cloud-provider-ip-169-60-164-14(Deployment-StatefulSet)" -> "kube-system-new/heapster(Deployment-StatefulSet)" [label="TCP 80-90" color="gold2" fontcolor="darkgreen"] "kube-system-new-dummy-to-ignore/calico-kube-controllers(Deployment-StatefulSet)" -> "0.0.0.0/0" [label="All connections" color="gold2" fontcolor="darkgreen"] - "kube-system-new-dummy-to-ignore/calico-kube-controllers(Deployment-StatefulSet)" -> "::/0" [label="All connections" color="gold2" fontcolor="darkgreen"] "kube-system-new-dummy-to-ignore/calico-kube-controllers(Deployment-StatefulSet)" -> "default/cognetive-agents(DaemonSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] "kube-system-new-dummy-to-ignore/calico-kube-controllers(Deployment-StatefulSet)" -> "ibm-system-new/ibm-cloud-provider-ip-169-60-164-10(Deployment-StatefulSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] "kube-system-new-dummy-to-ignore/calico-kube-controllers(Deployment-StatefulSet)" -> "ibm-system-new/ibm-cloud-provider-ip-169-60-164-14(Deployment-StatefulSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] "kube-system-new-dummy-to-ignore/calico-kube-controllers(Deployment-StatefulSet)" -> "kube-system-new/calico-node(DaemonSet)" [label="TCP 80-88" color="gold2" fontcolor="darkgreen"] "kube-system-new-dummy-to-ignore/calico-kube-controllers(Deployment-StatefulSet)" -> "kube-system-new/heapster(Deployment-StatefulSet)" [label="TCP 80-88" color="gold2" fontcolor="darkgreen"] "kube-system-new/calico-node(DaemonSet)" -> "0.0.0.0/0" [label="All connections" color="gold2" fontcolor="darkgreen"] - "kube-system-new/calico-node(DaemonSet)" -> "::/0" [label="All connections" color="gold2" fontcolor="darkgreen"] "kube-system-new/calico-node(DaemonSet)" -> "default/cognetive-agents(DaemonSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] "kube-system-new/calico-node(DaemonSet)" -> "ibm-system-new/ibm-cloud-provider-ip-169-60-164-10(Deployment-StatefulSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] "kube-system-new/calico-node(DaemonSet)" -> "ibm-system-new/ibm-cloud-provider-ip-169-60-164-14(Deployment-StatefulSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] "kube-system-new/calico-node(DaemonSet)" -> "kube-system-new-dummy-to-ignore/calico-kube-controllers(Deployment-StatefulSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] "kube-system-new/heapster(Deployment-StatefulSet)" -> "0.0.0.0/0" [label="All connections" color="gold2" fontcolor="darkgreen"] - "kube-system-new/heapster(Deployment-StatefulSet)" -> "::/0" [label="All connections" color="gold2" fontcolor="darkgreen"] "kube-system-new/heapster(Deployment-StatefulSet)" -> "default/cognetive-agents(DaemonSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] "kube-system-new/heapster(Deployment-StatefulSet)" -> "ibm-system-new/ibm-cloud-provider-ip-169-60-164-10(Deployment-StatefulSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] "kube-system-new/heapster(Deployment-StatefulSet)" -> "ibm-system-new/ibm-cloud-provider-ip-169-60-164-14(Deployment-StatefulSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] @@ -65,7 +54,6 @@ digraph { digraph { HEADER [shape="box" label=< connectivity_map_4/np3 > fontsize=30 color=webmaroon fontcolor=webmaroon]; "0.0.0.0/0" [label="0.0.0.0/0" color="red2" fontcolor="red2"] - "::/0" [label="::/0" color="red2" fontcolor="red2"] "default/cognetive-agents(DaemonSet)" [label="default/cognetive-agents(DaemonSet)" color="blue" fontcolor="blue"] "ibm-system-new/ibm-cloud-provider-ip-169-60-164-10(Deployment-StatefulSet)" [label="ibm-system-new/ibm-cloud-provider-ip-169-60-164-10(Deployment-StatefulSet)" color="blue" fontcolor="blue"] "ibm-system-new/ibm-cloud-provider-ip-169-60-164-14(Deployment-StatefulSet)" [label="ibm-system-new/ibm-cloud-provider-ip-169-60-164-14(Deployment-StatefulSet)" color="blue" fontcolor="blue"] @@ -76,12 +64,7 @@ digraph { "0.0.0.0/0" -> "ibm-system-new/ibm-cloud-provider-ip-169-60-164-10(Deployment-StatefulSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] "0.0.0.0/0" -> "ibm-system-new/ibm-cloud-provider-ip-169-60-164-14(Deployment-StatefulSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] "0.0.0.0/0" -> "kube-system-new-dummy-to-ignore/calico-kube-controllers(Deployment-StatefulSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] - "::/0" -> "default/cognetive-agents(DaemonSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] - "::/0" -> "ibm-system-new/ibm-cloud-provider-ip-169-60-164-10(Deployment-StatefulSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] - "::/0" -> "ibm-system-new/ibm-cloud-provider-ip-169-60-164-14(Deployment-StatefulSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] - "::/0" -> "kube-system-new-dummy-to-ignore/calico-kube-controllers(Deployment-StatefulSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] "default/cognetive-agents(DaemonSet)" -> "0.0.0.0/0" [label="All connections" color="gold2" fontcolor="darkgreen"] - "default/cognetive-agents(DaemonSet)" -> "::/0" [label="All connections" color="gold2" fontcolor="darkgreen"] "default/cognetive-agents(DaemonSet)" -> "default/cognetive-agents(DaemonSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] "default/cognetive-agents(DaemonSet)" -> "ibm-system-new/ibm-cloud-provider-ip-169-60-164-10(Deployment-StatefulSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] "default/cognetive-agents(DaemonSet)" -> "ibm-system-new/ibm-cloud-provider-ip-169-60-164-14(Deployment-StatefulSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] @@ -89,28 +72,23 @@ digraph { "default/cognetive-agents(DaemonSet)" -> "kube-system-new/calico-node(DaemonSet)" [label="TCP 85-90" color="gold2" fontcolor="darkgreen"] "default/cognetive-agents(DaemonSet)" -> "kube-system-new/heapster(Deployment-StatefulSet)" [label="TCP 85-90" color="gold2" fontcolor="darkgreen"] "ibm-system-new/ibm-cloud-provider-ip-169-60-164-10(Deployment-StatefulSet)" -> "0.0.0.0/0" [label="All connections" color="gold2" fontcolor="darkgreen"] - "ibm-system-new/ibm-cloud-provider-ip-169-60-164-10(Deployment-StatefulSet)" -> "::/0" [label="All connections" color="gold2" fontcolor="darkgreen"] "ibm-system-new/ibm-cloud-provider-ip-169-60-164-10(Deployment-StatefulSet)" -> "default/cognetive-agents(DaemonSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] "ibm-system-new/ibm-cloud-provider-ip-169-60-164-10(Deployment-StatefulSet)" -> "ibm-system-new/ibm-cloud-provider-ip-169-60-164-14(Deployment-StatefulSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] "ibm-system-new/ibm-cloud-provider-ip-169-60-164-10(Deployment-StatefulSet)" -> "kube-system-new-dummy-to-ignore/calico-kube-controllers(Deployment-StatefulSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] "ibm-system-new/ibm-cloud-provider-ip-169-60-164-14(Deployment-StatefulSet)" -> "0.0.0.0/0" [label="All connections" color="gold2" fontcolor="darkgreen"] - "ibm-system-new/ibm-cloud-provider-ip-169-60-164-14(Deployment-StatefulSet)" -> "::/0" [label="All connections" color="gold2" fontcolor="darkgreen"] "ibm-system-new/ibm-cloud-provider-ip-169-60-164-14(Deployment-StatefulSet)" -> "default/cognetive-agents(DaemonSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] "ibm-system-new/ibm-cloud-provider-ip-169-60-164-14(Deployment-StatefulSet)" -> "ibm-system-new/ibm-cloud-provider-ip-169-60-164-10(Deployment-StatefulSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] "ibm-system-new/ibm-cloud-provider-ip-169-60-164-14(Deployment-StatefulSet)" -> "kube-system-new-dummy-to-ignore/calico-kube-controllers(Deployment-StatefulSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] "kube-system-new-dummy-to-ignore/calico-kube-controllers(Deployment-StatefulSet)" -> "0.0.0.0/0" [label="All connections" color="gold2" fontcolor="darkgreen"] - "kube-system-new-dummy-to-ignore/calico-kube-controllers(Deployment-StatefulSet)" -> "::/0" [label="All connections" color="gold2" fontcolor="darkgreen"] "kube-system-new-dummy-to-ignore/calico-kube-controllers(Deployment-StatefulSet)" -> "default/cognetive-agents(DaemonSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] "kube-system-new-dummy-to-ignore/calico-kube-controllers(Deployment-StatefulSet)" -> "ibm-system-new/ibm-cloud-provider-ip-169-60-164-10(Deployment-StatefulSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] "kube-system-new-dummy-to-ignore/calico-kube-controllers(Deployment-StatefulSet)" -> "ibm-system-new/ibm-cloud-provider-ip-169-60-164-14(Deployment-StatefulSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] "kube-system-new/calico-node(DaemonSet)" -> "0.0.0.0/0" [label="All connections" color="gold2" fontcolor="darkgreen"] - "kube-system-new/calico-node(DaemonSet)" -> "::/0" [label="All connections" color="gold2" fontcolor="darkgreen"] "kube-system-new/calico-node(DaemonSet)" -> "default/cognetive-agents(DaemonSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] "kube-system-new/calico-node(DaemonSet)" -> "ibm-system-new/ibm-cloud-provider-ip-169-60-164-10(Deployment-StatefulSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] "kube-system-new/calico-node(DaemonSet)" -> "ibm-system-new/ibm-cloud-provider-ip-169-60-164-14(Deployment-StatefulSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] "kube-system-new/calico-node(DaemonSet)" -> "kube-system-new-dummy-to-ignore/calico-kube-controllers(Deployment-StatefulSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] "kube-system-new/heapster(Deployment-StatefulSet)" -> "0.0.0.0/0" [label="All connections" color="gold2" fontcolor="darkgreen"] - "kube-system-new/heapster(Deployment-StatefulSet)" -> "::/0" [label="All connections" color="gold2" fontcolor="darkgreen"] "kube-system-new/heapster(Deployment-StatefulSet)" -> "default/cognetive-agents(DaemonSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] "kube-system-new/heapster(Deployment-StatefulSet)" -> "ibm-system-new/ibm-cloud-provider-ip-169-60-164-10(Deployment-StatefulSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] "kube-system-new/heapster(Deployment-StatefulSet)" -> "ibm-system-new/ibm-cloud-provider-ip-169-60-164-14(Deployment-StatefulSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] diff --git a/tests/fw_rules_tests/policies/expected_output/test4-scheme_query_connectivity_map_4_output.md b/tests/fw_rules_tests/policies/expected_output/test4-scheme_query_connectivity_map_4_output.md index affed558..04e17967 100644 --- a/tests/fw_rules_tests/policies/expected_output/test4-scheme_query_connectivity_map_4_output.md +++ b/tests/fw_rules_tests/policies/expected_output/test4-scheme_query_connectivity_map_4_output.md @@ -5,9 +5,7 @@ ||[ibm-system-new]|[*]|[kube-system-new]|[*]|TCP 80-90| ||[default]|[*]|[kube-system-new]|[*]|TCP 85-90| |||0.0.0.0/0|[default,ibm-system-new,kube-system-new-dummy-to-ignore]|[*]|All connections| -|||::/0|[default,ibm-system-new,kube-system-new-dummy-to-ignore]|[*]|All connections| ||[default,ibm-system-new,kube-system-new,kube-system-new-dummy-to-ignore]|[*]||0.0.0.0/0|All connections| -||[default,ibm-system-new,kube-system-new,kube-system-new-dummy-to-ignore]|[*]||::/0|All connections| ||[default,ibm-system-new,kube-system-new,kube-system-new-dummy-to-ignore]|[*]|[default,ibm-system-new,kube-system-new-dummy-to-ignore]|[*]|All connections| |query|src_ns|src_pods|dst_ns|dst_pods|connection| @@ -15,7 +13,5 @@ |connectivity_map_4, config: np3|||||| ||[default]|[*]|[kube-system-new]|[*]|TCP 85-90| |||0.0.0.0/0|[default,ibm-system-new,kube-system-new-dummy-to-ignore]|[*]|All connections| -|||::/0|[default,ibm-system-new,kube-system-new-dummy-to-ignore]|[*]|All connections| ||[default,ibm-system-new,kube-system-new,kube-system-new-dummy-to-ignore]|[*]||0.0.0.0/0|All connections| -||[default,ibm-system-new,kube-system-new,kube-system-new-dummy-to-ignore]|[*]||::/0|All connections| ||[default,ibm-system-new,kube-system-new,kube-system-new-dummy-to-ignore]|[*]|[default,ibm-system-new,kube-system-new-dummy-to-ignore]|[*]|All connections| diff --git a/tests/fw_rules_tests/policies/expected_output/test4-scheme_query_connectivity_map_4_output.txt b/tests/fw_rules_tests/policies/expected_output/test4-scheme_query_connectivity_map_4_output.txt index 56b06d91..b5dc6238 100644 --- a/tests/fw_rules_tests/policies/expected_output/test4-scheme_query_connectivity_map_4_output.txt +++ b/tests/fw_rules_tests/policies/expected_output/test4-scheme_query_connectivity_map_4_output.txt @@ -1,8 +1,6 @@ final fw rules for query: connectivity_map_4, config: np4: src: 0.0.0.0/0 dst_ns: [default,ibm-system-new,kube-system-new-dummy-to-ignore] dst_pods: [*] conn: All connections -src: ::/0 dst_ns: [default,ibm-system-new,kube-system-new-dummy-to-ignore] dst_pods: [*] conn: All connections src_ns: [default,ibm-system-new,kube-system-new,kube-system-new-dummy-to-ignore] src_pods: [*] dst: 0.0.0.0/0 conn: All connections -src_ns: [default,ibm-system-new,kube-system-new,kube-system-new-dummy-to-ignore] src_pods: [*] dst: ::/0 conn: All connections src_ns: [default,ibm-system-new,kube-system-new,kube-system-new-dummy-to-ignore] src_pods: [*] dst_ns: [default,ibm-system-new,kube-system-new-dummy-to-ignore] dst_pods: [*] conn: All connections src_ns: [default] src_pods: [*] dst_ns: [kube-system-new] dst_pods: [*] conn: TCP 85-90 src_ns: [ibm-system-new] src_pods: [*] dst_ns: [kube-system-new] dst_pods: [*] conn: TCP 80-90 @@ -10,8 +8,6 @@ src_ns: [kube-system-new-dummy-to-ignore] src_pods: [*] dst_ns: [kube-system-new final fw rules for query: connectivity_map_4, config: np3: src: 0.0.0.0/0 dst_ns: [default,ibm-system-new,kube-system-new-dummy-to-ignore] dst_pods: [*] conn: All connections -src: ::/0 dst_ns: [default,ibm-system-new,kube-system-new-dummy-to-ignore] dst_pods: [*] conn: All connections src_ns: [default,ibm-system-new,kube-system-new,kube-system-new-dummy-to-ignore] src_pods: [*] dst: 0.0.0.0/0 conn: All connections -src_ns: [default,ibm-system-new,kube-system-new,kube-system-new-dummy-to-ignore] src_pods: [*] dst: ::/0 conn: All connections src_ns: [default,ibm-system-new,kube-system-new,kube-system-new-dummy-to-ignore] src_pods: [*] dst_ns: [default,ibm-system-new,kube-system-new-dummy-to-ignore] dst_pods: [*] conn: All connections src_ns: [default] src_pods: [*] dst_ns: [kube-system-new] dst_pods: [*] conn: TCP 85-90 diff --git a/tests/fw_rules_tests/policies/expected_output/test4-scheme_query_connectivity_map_4_output.yaml b/tests/fw_rules_tests/policies/expected_output/test4-scheme_query_connectivity_map_4_output.yaml index d43c7e49..e2c8f52b 100644 --- a/tests/fw_rules_tests/policies/expected_output/test4-scheme_query_connectivity_map_4_output.yaml +++ b/tests/fw_rules_tests/policies/expected_output/test4-scheme_query_connectivity_map_4_output.yaml @@ -50,16 +50,6 @@ - '*' connection: - All connections - - src_ip_block: - - ::/0 - dst_ns: - - default - - ibm-system-new - - kube-system-new-dummy-to-ignore - dst_pods: - - '*' - connection: - - All connections - src_ns: - default - ibm-system-new @@ -71,17 +61,6 @@ - 0.0.0.0/0 connection: - All connections - - src_ns: - - default - - ibm-system-new - - kube-system-new - - kube-system-new-dummy-to-ignore - src_pods: - - '*' - dst_ip_block: - - ::/0 - connection: - - All connections - src_ns: - default - ibm-system-new @@ -125,16 +104,6 @@ - '*' connection: - All connections - - src_ip_block: - - ::/0 - dst_ns: - - default - - ibm-system-new - - kube-system-new-dummy-to-ignore - dst_pods: - - '*' - connection: - - All connections - src_ns: - default - ibm-system-new @@ -146,17 +115,6 @@ - 0.0.0.0/0 connection: - All connections - - src_ns: - - default - - ibm-system-new - - kube-system-new - - kube-system-new-dummy-to-ignore - src_pods: - - '*' - dst_ip_block: - - ::/0 - connection: - - All connections - src_ns: - default - ibm-system-new diff --git a/tests/fw_rules_tests/policies/expected_output/test6-scheme_output.txt b/tests/fw_rules_tests/policies/expected_output/test6-scheme_output.txt index d55b19ea..74eb626f 100644 --- a/tests/fw_rules_tests/policies/expected_output/test6-scheme_output.txt +++ b/tests/fw_rules_tests/policies/expected_output/test6-scheme_output.txt @@ -1,7 +1,5 @@ final fw rules for query: connectivity_map, config: np6: src: 0.0.0.0/0 dst_ns: [default,ibm-system-new,kube-system-new-dummy-to-ignore] dst_pods: [*] conn: All connections -src: ::/0 dst_ns: [default,ibm-system-new,kube-system-new-dummy-to-ignore] dst_pods: [*] conn: All connections src_ns: [default,ibm-system-new,kube-system-new,kube-system-new-dummy-to-ignore] src_pods: [*] dst: 0.0.0.0/0 conn: All connections -src_ns: [default,ibm-system-new,kube-system-new,kube-system-new-dummy-to-ignore] src_pods: [*] dst: ::/0 conn: All connections src_ns: [default,ibm-system-new,kube-system-new,kube-system-new-dummy-to-ignore] src_pods: [*] dst_ns: [default,ibm-system-new,kube-system-new-dummy-to-ignore] dst_pods: [*] conn: All connections src_ns: [kube-system-new] src_pods: [(has(app) and app not in (ibm-file-plugin,ibm-keepalived-watcher))] dst_ns: [kube-system-new] dst_pods: [*] conn: All connections diff --git a/tests/fw_rules_tests/policies/expected_output/test6-scheme_output.yaml b/tests/fw_rules_tests/policies/expected_output/test6-scheme_output.yaml index 17a2488c..4d7ef13a 100644 --- a/tests/fw_rules_tests/policies/expected_output/test6-scheme_output.yaml +++ b/tests/fw_rules_tests/policies/expected_output/test6-scheme_output.yaml @@ -14,16 +14,6 @@ - '*' connection: - All connections - - src_ip_block: - - ::/0 - dst_ns: - - default - - ibm-system-new - - kube-system-new-dummy-to-ignore - dst_pods: - - '*' - connection: - - All connections - src_ns: - default - ibm-system-new @@ -35,17 +25,6 @@ - 0.0.0.0/0 connection: - All connections - - src_ns: - - default - - ibm-system-new - - kube-system-new - - kube-system-new-dummy-to-ignore - src_pods: - - '*' - dst_ip_block: - - ::/0 - connection: - - All connections - src_ns: - default - ibm-system-new diff --git a/tests/fw_rules_tests/policies/expected_output/test7-scheme_output.json b/tests/fw_rules_tests/policies/expected_output/test7-scheme_output.json index 8db30910..acfb42f1 100644 --- a/tests/fw_rules_tests/policies/expected_output/test7-scheme_output.json +++ b/tests/fw_rules_tests/policies/expected_output/test7-scheme_output.json @@ -24,22 +24,6 @@ "All connections" ] }, - { - "src_ip_block": [ - "::/0" - ], - "dst_ns": [ - "default", - "ibm-system-new", - "kube-system-new-dummy-to-ignore" - ], - "dst_pods": [ - "*" - ], - "connection": [ - "All connections" - ] - }, { "src_ns": [ "default", @@ -57,23 +41,6 @@ "All connections" ] }, - { - "src_ns": [ - "default", - "ibm-system-new", - "kube-system-new", - "kube-system-new-dummy-to-ignore" - ], - "src_pods": [ - "*" - ], - "dst_ip_block": [ - "::/0" - ], - "connection": [ - "All connections" - ] - }, { "src_ns": [ "default", diff --git a/tests/fw_rules_tests/policies/expected_output/test7-scheme_output.txt b/tests/fw_rules_tests/policies/expected_output/test7-scheme_output.txt index e385e37d..c2847aa9 100644 --- a/tests/fw_rules_tests/policies/expected_output/test7-scheme_output.txt +++ b/tests/fw_rules_tests/policies/expected_output/test7-scheme_output.txt @@ -1,7 +1,5 @@ final fw rules for query: connectivity_map, config: np7: src: 0.0.0.0/0 dst_ns: [default,ibm-system-new,kube-system-new-dummy-to-ignore] dst_pods: [*] conn: All connections -src: ::/0 dst_ns: [default,ibm-system-new,kube-system-new-dummy-to-ignore] dst_pods: [*] conn: All connections src_ns: [default,ibm-system-new,kube-system-new,kube-system-new-dummy-to-ignore] src_pods: [*] dst: 0.0.0.0/0 conn: All connections -src_ns: [default,ibm-system-new,kube-system-new,kube-system-new-dummy-to-ignore] src_pods: [*] dst: ::/0 conn: All connections src_ns: [default,ibm-system-new,kube-system-new,kube-system-new-dummy-to-ignore] src_pods: [*] dst_ns: [default,ibm-system-new,kube-system-new-dummy-to-ignore] dst_pods: [*] conn: All connections src_ns: [kube-system-new] src_pods: [!has(app) or (has(app) and app not in (ibm-file-plugin,ibm-keepalived-watcher))] dst_ns: [kube-system-new] dst_pods: [*] conn: All connections diff --git a/tests/fw_rules_tests/policies/expected_output/test7-scheme_output.yaml b/tests/fw_rules_tests/policies/expected_output/test7-scheme_output.yaml index ab1cf1e4..3708617a 100644 --- a/tests/fw_rules_tests/policies/expected_output/test7-scheme_output.yaml +++ b/tests/fw_rules_tests/policies/expected_output/test7-scheme_output.yaml @@ -14,16 +14,6 @@ - '*' connection: - All connections - - src_ip_block: - - ::/0 - dst_ns: - - default - - ibm-system-new - - kube-system-new-dummy-to-ignore - dst_pods: - - '*' - connection: - - All connections - src_ns: - default - ibm-system-new @@ -35,17 +25,6 @@ - 0.0.0.0/0 connection: - All connections - - src_ns: - - default - - ibm-system-new - - kube-system-new - - kube-system-new-dummy-to-ignore - src_pods: - - '*' - dst_ip_block: - - ::/0 - connection: - - All connections - src_ns: - default - ibm-system-new diff --git a/tests/fw_rules_tests/policies/expected_output/test8-scheme_output.txt b/tests/fw_rules_tests/policies/expected_output/test8-scheme_output.txt index 1db2a880..31cd2cd7 100644 --- a/tests/fw_rules_tests/policies/expected_output/test8-scheme_output.txt +++ b/tests/fw_rules_tests/policies/expected_output/test8-scheme_output.txt @@ -1,7 +1,5 @@ final fw rules for query: connectivity_map, config: np8: src: 0.0.0.0/0 dst_ns: [default,ibm-system-new,kube-system-new-dummy-to-ignore] dst_pods: [*] conn: All connections -src: ::/0 dst_ns: [default,ibm-system-new,kube-system-new-dummy-to-ignore] dst_pods: [*] conn: All connections src_ns: [default,ibm-system-new,kube-system-new,kube-system-new-dummy-to-ignore] src_pods: [*] dst: 0.0.0.0/0 conn: All connections -src_ns: [default,ibm-system-new,kube-system-new,kube-system-new-dummy-to-ignore] src_pods: [*] dst: ::/0 conn: All connections src_ns: [default,ibm-system-new,kube-system-new,kube-system-new-dummy-to-ignore] src_pods: [*] dst_ns: [default,ibm-system-new,kube-system-new-dummy-to-ignore] dst_pods: [*] conn: All connections src_ns: [kube-system-new] src_pods: [(has(app) and app not in (ibm-file-plugin,ibm-keepalived-watcher))] dst_ns: [kube-system-new] dst_pods: [*] conn: All connections diff --git a/tests/fw_rules_tests/policies/expected_output/test8-scheme_output.yaml b/tests/fw_rules_tests/policies/expected_output/test8-scheme_output.yaml index ff4c76d6..8a16afc4 100644 --- a/tests/fw_rules_tests/policies/expected_output/test8-scheme_output.yaml +++ b/tests/fw_rules_tests/policies/expected_output/test8-scheme_output.yaml @@ -14,16 +14,6 @@ - '*' connection: - All connections - - src_ip_block: - - ::/0 - dst_ns: - - default - - ibm-system-new - - kube-system-new-dummy-to-ignore - dst_pods: - - '*' - connection: - - All connections - src_ns: - default - ibm-system-new @@ -35,17 +25,6 @@ - 0.0.0.0/0 connection: - All connections - - src_ns: - - default - - ibm-system-new - - kube-system-new - - kube-system-new-dummy-to-ignore - src_pods: - - '*' - dst_ip_block: - - ::/0 - connection: - - All connections - src_ns: - default - ibm-system-new diff --git a/tests/fw_rules_tests/policies/expected_output/test9-scheme_output.txt b/tests/fw_rules_tests/policies/expected_output/test9-scheme_output.txt index 8b33962e..f58ae4ac 100644 --- a/tests/fw_rules_tests/policies/expected_output/test9-scheme_output.txt +++ b/tests/fw_rules_tests/policies/expected_output/test9-scheme_output.txt @@ -1,12 +1,8 @@ final fw rules for query: connectivity_map, config: np9: src: 0.0.0.0/0 dst_ns: [default] dst_pods: [app=skydive and tier=analyzer] conn: All connections src: 0.0.0.0/0 dst_ns: [ibm-system-new,kube-system-new,kube-system-new-dummy-to-ignore] dst_pods: [*] conn: All connections -src: ::/0 dst_ns: [default] dst_pods: [app=skydive and tier=analyzer] conn: All connections -src: ::/0 dst_ns: [ibm-system-new,kube-system-new,kube-system-new-dummy-to-ignore] dst_pods: [*] conn: All connections src_ns: [default] src_pods: [app=skydive and tier=analyzer] dst: 0.0.0.0/0 conn: All connections -src_ns: [default] src_pods: [app=skydive and tier=analyzer] dst: ::/0 conn: All connections src_ns: [default] src_pods: [app=skydive and tier=analyzer] dst_ns: [default,ibm-system-new,kube-system-new,kube-system-new-dummy-to-ignore] dst_pods: [*] conn: All connections src_ns: [ibm-system-new,kube-system-new,kube-system-new-dummy-to-ignore] src_pods: [*] dst: 0.0.0.0/0 conn: All connections -src_ns: [ibm-system-new,kube-system-new,kube-system-new-dummy-to-ignore] src_pods: [*] dst: ::/0 conn: All connections src_ns: [ibm-system-new,kube-system-new,kube-system-new-dummy-to-ignore] src_pods: [*] dst_ns: [default] dst_pods: [app=skydive and tier=analyzer] conn: All connections src_ns: [ibm-system-new,kube-system-new,kube-system-new-dummy-to-ignore] src_pods: [*] dst_ns: [ibm-system-new,kube-system-new,kube-system-new-dummy-to-ignore] dst_pods: [*] conn: All connections diff --git a/tests/fw_rules_tests/policies/expected_output/test9-scheme_output.yaml b/tests/fw_rules_tests/policies/expected_output/test9-scheme_output.yaml index 118a06d4..1d3c2596 100644 --- a/tests/fw_rules_tests/policies/expected_output/test9-scheme_output.yaml +++ b/tests/fw_rules_tests/policies/expected_output/test9-scheme_output.yaml @@ -22,24 +22,6 @@ - '*' connection: - All connections - - src_ip_block: - - ::/0 - dst_ns: - - default - dst_pods: - - app=skydive and tier=analyzer - connection: - - All connections - - src_ip_block: - - ::/0 - dst_ns: - - ibm-system-new - - kube-system-new - - kube-system-new-dummy-to-ignore - dst_pods: - - '*' - connection: - - All connections - src_ns: - default src_pods: @@ -48,14 +30,6 @@ - 0.0.0.0/0 connection: - All connections - - src_ns: - - default - src_pods: - - app=skydive and tier=analyzer - dst_ip_block: - - ::/0 - connection: - - All connections - src_ns: - default src_pods: @@ -79,16 +53,6 @@ - 0.0.0.0/0 connection: - All connections - - src_ns: - - ibm-system-new - - kube-system-new - - kube-system-new-dummy-to-ignore - src_pods: - - '*' - dst_ip_block: - - ::/0 - connection: - - All connections - src_ns: - ibm-system-new - kube-system-new diff --git a/tests/istio_testcases/example_policies/fly-istio-ingress-test/fly-istio-ingress-test-scheme.yaml b/tests/istio_testcases/example_policies/fly-istio-ingress-test/fly-istio-ingress-test-scheme.yaml index b2925a36..a7f4c352 100644 --- a/tests/istio_testcases/example_policies/fly-istio-ingress-test/fly-istio-ingress-test-scheme.yaml +++ b/tests/istio_testcases/example_policies/fly-istio-ingress-test/fly-istio-ingress-test-scheme.yaml @@ -15,4 +15,4 @@ queries: outputConfiguration: outputFormat: txt fwRulesRunInTestMode: false - expectedOutput: ./fly_istio_ingress_test_connectivity_map.txt \ No newline at end of file + expectedOutput: ../../expected_output/fly_istio_ingress_test_connectivity_map.txt \ No newline at end of file diff --git a/tests/istio_testcases/expected_output/complex-istio-and-k8s-ingress-test-connectivity-map-missing-resources.dot b/tests/istio_testcases/expected_output/complex-istio-and-k8s-ingress-test-connectivity-map-missing-resources.dot index 2c29d742..fb7bfce3 100644 --- a/tests/istio_testcases/expected_output/complex-istio-and-k8s-ingress-test-connectivity-map-missing-resources.dot +++ b/tests/istio_testcases/expected_output/complex-istio-and-k8s-ingress-test-connectivity-map-missing-resources.dot @@ -2,7 +2,6 @@ digraph { HEADER [shape="box" label=< connectivity-2/complex-istio-and-k8s-ingress-test-missing-resources > fontsize=30 color=webmaroon fontcolor=webmaroon]; "0.0.0.0/0" [label="0.0.0.0/0" color="red2" fontcolor="red2"] - "::/0" [label="::/0" color="red2" fontcolor="red2"] "custom-gateways/custom-ingressgateway-livesim(Pod)" [label="custom-gateways/custom-ingressgateway-livesim(Pod)" color="coral4" fontcolor="coral4"] "example/deploy-aaaa(Deployment)" [label="example/deploy-aaaa(Deployment)" color="blue" fontcolor="blue"] "example/deploy-bbbb(Deployment)" [label="example/deploy-bbbb(Deployment)" color="blue" fontcolor="blue"] @@ -27,18 +26,6 @@ digraph { "0.0.0.0/0" -> "example/deploy-iiii(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "0.0.0.0/0" -> "example/deploy-jjjj(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "0.0.0.0/0" -> "ingress-controller-ns/ingress-controller-livesim(Pod)" [label="All connections" color="gold2" fontcolor="darkgreen"] - "::/0" -> "custom-gateways/custom-ingressgateway-livesim(Pod)" [label="All connections" color="gold2" fontcolor="darkgreen"] - "::/0" -> "example/deploy-aaaa(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] - "::/0" -> "example/deploy-bbbb(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] - "::/0" -> "example/deploy-cccc(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] - "::/0" -> "example/deploy-dddd(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] - "::/0" -> "example/deploy-eeee(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] - "::/0" -> "example/deploy-ffff(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] - "::/0" -> "example/deploy-gggg(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] - "::/0" -> "example/deploy-hhhh(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] - "::/0" -> "example/deploy-iiii(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] - "::/0" -> "example/deploy-jjjj(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] - "::/0" -> "ingress-controller-ns/ingress-controller-livesim(Pod)" [label="All connections" color="gold2" fontcolor="darkgreen"] "custom-gateways/custom-ingressgateway-livesim(Pod)" -> "example/deploy-aaaa(Deployment)" [label="TCP {'dst_ports': '3000', 'paths': '/a{4}/[\\--9A-Z_a-z]*', 'hosts': 'ooo.y.z, aaaa.y.z'},{'dst_ports': '3000', 'paths': '/(([\\--9A-Z_b-z]|a([\\--9A-Z_b-z]|a([\\--9A-Z_b-z]|a([\\--9A-Z_b-z]|a[\\-.0-9A-Z_a-z]))))[\\--9A-Z_a-z]*|a{0,4})', 'hosts': 'aaaa.y.z'}" color="gold2" fontcolor="darkgreen"] "custom-gateways/custom-ingressgateway-livesim(Pod)" -> "example/deploy-bbbb(Deployment)" [label="TCP {'dst_ports': '3456', 'paths': '/b{4}/[\\--9A-Z_a-z]*', 'hosts': 'ooo.y.z, bbbb.y.z'},{'dst_ports': '3456', 'paths': '/(([\\--9A-Z_ac-z]|b([\\--9A-Z_ac-z]|b([\\--9A-Z_ac-z]|b([\\--9A-Z_ac-z]|b[\\-.0-9A-Z_a-z]))))[\\--9A-Z_a-z]*|b{0,4})', 'hosts': 'bbbb.y.z'}" color="gold2" fontcolor="darkgreen"] "custom-gateways/custom-ingressgateway-livesim(Pod)" -> "example/deploy-cccc(Deployment)" [label="TCP {'dst_ports': '9950', 'paths': '/c{4}/[\\--9A-Z_a-z]*', 'hosts': 'ooo.y.z, cccc.y.z'},{'dst_ports': '9950', 'paths': '/(([\\--9A-Z_abd-z]|c([\\--9A-Z_abd-z]|c([\\--9A-Z_abd-z]|c([\\--9A-Z_abd-z]|c[\\-.0-9A-Z_a-z]))))[\\--9A-Z_a-z]*|c{0,4})', 'hosts': 'cccc.y.z'}" color="gold2" fontcolor="darkgreen"] @@ -49,7 +36,6 @@ digraph { "custom-gateways/custom-ingressgateway-livesim(Pod)" -> "example/deploy-iiii(Deployment)" [label="TCP {'dst_ports': '3000', 'paths': '/i{4}/[\\--9A-Z_a-z]*', 'hosts': 'ooo.y.z, iiii.y.z'},{'dst_ports': '3000', 'paths': '/(([\\--9A-Z_a-hj-z]|i([\\--9A-Z_a-hj-z]|i([\\--9A-Z_a-hj-z]|i([\\--9A-Z_a-hj-z]|i[\\-.0-9A-Z_a-z]))))[\\--9A-Z_a-z]*|i{0,4})', 'hosts': 'iiii.y.z'}" color="gold2" fontcolor="darkgreen"] "custom-gateways/custom-ingressgateway-livesim(Pod)" -> "example/deploy-jjjj(Deployment)" [label="TCP {'dst_ports': '9950', 'paths': '/j{4}/[\\--9A-Z_a-z]*', 'hosts': 'ooo.y.z, jjjj.y.z'},{'dst_ports': '9950', 'paths': '/(([\\--9A-Z_a-ik-z]|j([\\--9A-Z_a-ik-z]|j([\\--9A-Z_a-ik-z]|j([\\--9A-Z_a-ik-z]|j[\\-.0-9A-Z_a-z]))))[\\--9A-Z_a-z]*|j{0,4})', 'hosts': 'jjjj.y.z'}" color="gold2" fontcolor="darkgreen"] "example/deploy-aaaa(Deployment)" -> "0.0.0.0/0" [label="All connections" color="gold2" fontcolor="darkgreen"] - "example/deploy-aaaa(Deployment)" -> "::/0" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-aaaa(Deployment)" -> "custom-gateways/custom-ingressgateway-livesim(Pod)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-aaaa(Deployment)" -> "example/deploy-aaaa(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-aaaa(Deployment)" -> "example/deploy-bbbb(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] @@ -63,7 +49,6 @@ digraph { "example/deploy-aaaa(Deployment)" -> "example/deploy-jjjj(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-aaaa(Deployment)" -> "ingress-controller-ns/ingress-controller-livesim(Pod)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-bbbb(Deployment)" -> "0.0.0.0/0" [label="All connections" color="gold2" fontcolor="darkgreen"] - "example/deploy-bbbb(Deployment)" -> "::/0" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-bbbb(Deployment)" -> "custom-gateways/custom-ingressgateway-livesim(Pod)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-bbbb(Deployment)" -> "example/deploy-aaaa(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-bbbb(Deployment)" -> "example/deploy-bbbb(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] @@ -77,7 +62,6 @@ digraph { "example/deploy-bbbb(Deployment)" -> "example/deploy-jjjj(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-bbbb(Deployment)" -> "ingress-controller-ns/ingress-controller-livesim(Pod)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-cccc(Deployment)" -> "0.0.0.0/0" [label="All connections" color="gold2" fontcolor="darkgreen"] - "example/deploy-cccc(Deployment)" -> "::/0" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-cccc(Deployment)" -> "custom-gateways/custom-ingressgateway-livesim(Pod)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-cccc(Deployment)" -> "example/deploy-aaaa(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-cccc(Deployment)" -> "example/deploy-bbbb(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] @@ -91,7 +75,6 @@ digraph { "example/deploy-cccc(Deployment)" -> "example/deploy-jjjj(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-cccc(Deployment)" -> "ingress-controller-ns/ingress-controller-livesim(Pod)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-dddd(Deployment)" -> "0.0.0.0/0" [label="All connections" color="gold2" fontcolor="darkgreen"] - "example/deploy-dddd(Deployment)" -> "::/0" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-dddd(Deployment)" -> "custom-gateways/custom-ingressgateway-livesim(Pod)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-dddd(Deployment)" -> "example/deploy-aaaa(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-dddd(Deployment)" -> "example/deploy-bbbb(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] @@ -105,7 +88,6 @@ digraph { "example/deploy-dddd(Deployment)" -> "example/deploy-jjjj(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-dddd(Deployment)" -> "ingress-controller-ns/ingress-controller-livesim(Pod)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-eeee(Deployment)" -> "0.0.0.0/0" [label="All connections" color="gold2" fontcolor="darkgreen"] - "example/deploy-eeee(Deployment)" -> "::/0" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-eeee(Deployment)" -> "custom-gateways/custom-ingressgateway-livesim(Pod)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-eeee(Deployment)" -> "example/deploy-aaaa(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-eeee(Deployment)" -> "example/deploy-bbbb(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] @@ -119,7 +101,6 @@ digraph { "example/deploy-eeee(Deployment)" -> "example/deploy-jjjj(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-eeee(Deployment)" -> "ingress-controller-ns/ingress-controller-livesim(Pod)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-ffff(Deployment)" -> "0.0.0.0/0" [label="All connections" color="gold2" fontcolor="darkgreen"] - "example/deploy-ffff(Deployment)" -> "::/0" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-ffff(Deployment)" -> "custom-gateways/custom-ingressgateway-livesim(Pod)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-ffff(Deployment)" -> "example/deploy-aaaa(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-ffff(Deployment)" -> "example/deploy-bbbb(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] @@ -133,7 +114,6 @@ digraph { "example/deploy-ffff(Deployment)" -> "example/deploy-jjjj(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-ffff(Deployment)" -> "ingress-controller-ns/ingress-controller-livesim(Pod)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-gggg(Deployment)" -> "0.0.0.0/0" [label="All connections" color="gold2" fontcolor="darkgreen"] - "example/deploy-gggg(Deployment)" -> "::/0" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-gggg(Deployment)" -> "custom-gateways/custom-ingressgateway-livesim(Pod)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-gggg(Deployment)" -> "example/deploy-aaaa(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-gggg(Deployment)" -> "example/deploy-bbbb(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] @@ -147,7 +127,6 @@ digraph { "example/deploy-gggg(Deployment)" -> "example/deploy-jjjj(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-gggg(Deployment)" -> "ingress-controller-ns/ingress-controller-livesim(Pod)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-hhhh(Deployment)" -> "0.0.0.0/0" [label="All connections" color="gold2" fontcolor="darkgreen"] - "example/deploy-hhhh(Deployment)" -> "::/0" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-hhhh(Deployment)" -> "custom-gateways/custom-ingressgateway-livesim(Pod)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-hhhh(Deployment)" -> "example/deploy-aaaa(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-hhhh(Deployment)" -> "example/deploy-bbbb(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] @@ -161,7 +140,6 @@ digraph { "example/deploy-hhhh(Deployment)" -> "example/deploy-jjjj(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-hhhh(Deployment)" -> "ingress-controller-ns/ingress-controller-livesim(Pod)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-iiii(Deployment)" -> "0.0.0.0/0" [label="All connections" color="gold2" fontcolor="darkgreen"] - "example/deploy-iiii(Deployment)" -> "::/0" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-iiii(Deployment)" -> "custom-gateways/custom-ingressgateway-livesim(Pod)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-iiii(Deployment)" -> "example/deploy-aaaa(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-iiii(Deployment)" -> "example/deploy-bbbb(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] @@ -175,7 +153,6 @@ digraph { "example/deploy-iiii(Deployment)" -> "example/deploy-jjjj(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-iiii(Deployment)" -> "ingress-controller-ns/ingress-controller-livesim(Pod)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-jjjj(Deployment)" -> "0.0.0.0/0" [label="All connections" color="gold2" fontcolor="darkgreen"] - "example/deploy-jjjj(Deployment)" -> "::/0" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-jjjj(Deployment)" -> "custom-gateways/custom-ingressgateway-livesim(Pod)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-jjjj(Deployment)" -> "example/deploy-aaaa(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-jjjj(Deployment)" -> "example/deploy-bbbb(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] diff --git a/tests/istio_testcases/expected_output/complex-istio-and-k8s-ingress-test-connectivity-map.dot b/tests/istio_testcases/expected_output/complex-istio-and-k8s-ingress-test-connectivity-map.dot index c3e80128..e1eba3f3 100644 --- a/tests/istio_testcases/expected_output/complex-istio-and-k8s-ingress-test-connectivity-map.dot +++ b/tests/istio_testcases/expected_output/complex-istio-and-k8s-ingress-test-connectivity-map.dot @@ -2,7 +2,6 @@ digraph { HEADER [shape="box" label=< connectivity/complex-istio-and-k8s-ingress-test > fontsize=30 color=webmaroon fontcolor=webmaroon]; "0.0.0.0/0" [label="0.0.0.0/0" color="red2" fontcolor="red2"] - "::/0" [label="::/0" color="red2" fontcolor="red2"] "example/deploy-aaaa(Deployment)" [label="example/deploy-aaaa(Deployment)" color="blue" fontcolor="blue"] "example/deploy-bbbb(Deployment)" [label="example/deploy-bbbb(Deployment)" color="blue" fontcolor="blue"] "example/deploy-cccc(Deployment)" [label="example/deploy-cccc(Deployment)" color="blue" fontcolor="blue"] @@ -27,20 +26,7 @@ digraph { "0.0.0.0/0" -> "example/deploy-ingress-nginx(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "0.0.0.0/0" -> "example/deploy-jjjj(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "0.0.0.0/0" -> "example/istio-ingressgateway(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] - "::/0" -> "example/deploy-aaaa(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] - "::/0" -> "example/deploy-bbbb(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] - "::/0" -> "example/deploy-cccc(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] - "::/0" -> "example/deploy-dddd(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] - "::/0" -> "example/deploy-eeee(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] - "::/0" -> "example/deploy-ffff(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] - "::/0" -> "example/deploy-gggg(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] - "::/0" -> "example/deploy-hhhh(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] - "::/0" -> "example/deploy-iiii(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] - "::/0" -> "example/deploy-ingress-nginx(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] - "::/0" -> "example/deploy-jjjj(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] - "::/0" -> "example/istio-ingressgateway(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-aaaa(Deployment)" -> "0.0.0.0/0" [label="All connections" color="gold2" fontcolor="darkgreen"] - "example/deploy-aaaa(Deployment)" -> "::/0" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-aaaa(Deployment)" -> "example/deploy-aaaa(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-aaaa(Deployment)" -> "example/deploy-bbbb(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-aaaa(Deployment)" -> "example/deploy-cccc(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] @@ -54,7 +40,6 @@ digraph { "example/deploy-aaaa(Deployment)" -> "example/deploy-jjjj(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-aaaa(Deployment)" -> "example/istio-ingressgateway(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-bbbb(Deployment)" -> "0.0.0.0/0" [label="All connections" color="gold2" fontcolor="darkgreen"] - "example/deploy-bbbb(Deployment)" -> "::/0" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-bbbb(Deployment)" -> "example/deploy-aaaa(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-bbbb(Deployment)" -> "example/deploy-bbbb(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-bbbb(Deployment)" -> "example/deploy-cccc(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] @@ -68,7 +53,6 @@ digraph { "example/deploy-bbbb(Deployment)" -> "example/deploy-jjjj(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-bbbb(Deployment)" -> "example/istio-ingressgateway(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-cccc(Deployment)" -> "0.0.0.0/0" [label="All connections" color="gold2" fontcolor="darkgreen"] - "example/deploy-cccc(Deployment)" -> "::/0" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-cccc(Deployment)" -> "example/deploy-aaaa(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-cccc(Deployment)" -> "example/deploy-bbbb(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-cccc(Deployment)" -> "example/deploy-cccc(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] @@ -82,7 +66,6 @@ digraph { "example/deploy-cccc(Deployment)" -> "example/deploy-jjjj(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-cccc(Deployment)" -> "example/istio-ingressgateway(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-dddd(Deployment)" -> "0.0.0.0/0" [label="All connections" color="gold2" fontcolor="darkgreen"] - "example/deploy-dddd(Deployment)" -> "::/0" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-dddd(Deployment)" -> "example/deploy-aaaa(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-dddd(Deployment)" -> "example/deploy-bbbb(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-dddd(Deployment)" -> "example/deploy-cccc(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] @@ -96,7 +79,6 @@ digraph { "example/deploy-dddd(Deployment)" -> "example/deploy-jjjj(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-dddd(Deployment)" -> "example/istio-ingressgateway(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-eeee(Deployment)" -> "0.0.0.0/0" [label="All connections" color="gold2" fontcolor="darkgreen"] - "example/deploy-eeee(Deployment)" -> "::/0" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-eeee(Deployment)" -> "example/deploy-aaaa(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-eeee(Deployment)" -> "example/deploy-bbbb(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-eeee(Deployment)" -> "example/deploy-cccc(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] @@ -110,7 +92,6 @@ digraph { "example/deploy-eeee(Deployment)" -> "example/deploy-jjjj(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-eeee(Deployment)" -> "example/istio-ingressgateway(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-ffff(Deployment)" -> "0.0.0.0/0" [label="All connections" color="gold2" fontcolor="darkgreen"] - "example/deploy-ffff(Deployment)" -> "::/0" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-ffff(Deployment)" -> "example/deploy-aaaa(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-ffff(Deployment)" -> "example/deploy-bbbb(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-ffff(Deployment)" -> "example/deploy-cccc(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] @@ -124,7 +105,6 @@ digraph { "example/deploy-ffff(Deployment)" -> "example/deploy-jjjj(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-ffff(Deployment)" -> "example/istio-ingressgateway(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-gggg(Deployment)" -> "0.0.0.0/0" [label="All connections" color="gold2" fontcolor="darkgreen"] - "example/deploy-gggg(Deployment)" -> "::/0" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-gggg(Deployment)" -> "example/deploy-aaaa(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-gggg(Deployment)" -> "example/deploy-bbbb(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-gggg(Deployment)" -> "example/deploy-cccc(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] @@ -138,7 +118,6 @@ digraph { "example/deploy-gggg(Deployment)" -> "example/deploy-jjjj(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-gggg(Deployment)" -> "example/istio-ingressgateway(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-hhhh(Deployment)" -> "0.0.0.0/0" [label="All connections" color="gold2" fontcolor="darkgreen"] - "example/deploy-hhhh(Deployment)" -> "::/0" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-hhhh(Deployment)" -> "example/deploy-aaaa(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-hhhh(Deployment)" -> "example/deploy-bbbb(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-hhhh(Deployment)" -> "example/deploy-cccc(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] @@ -152,7 +131,6 @@ digraph { "example/deploy-hhhh(Deployment)" -> "example/deploy-jjjj(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-hhhh(Deployment)" -> "example/istio-ingressgateway(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-iiii(Deployment)" -> "0.0.0.0/0" [label="All connections" color="gold2" fontcolor="darkgreen"] - "example/deploy-iiii(Deployment)" -> "::/0" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-iiii(Deployment)" -> "example/deploy-aaaa(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-iiii(Deployment)" -> "example/deploy-bbbb(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-iiii(Deployment)" -> "example/deploy-cccc(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] @@ -174,7 +152,6 @@ digraph { "example/deploy-ingress-nginx(Deployment)" -> "example/deploy-iiii(Deployment)" [label="TCP {'dst_ports': '3000', 'paths': '/i{4}(/[\\--9A-Z_a-z]*)?', 'hosts': 'ooo.y.z, iiii.y.z'},{'dst_ports': '3000', 'paths': '/(([\\--9A-Z_a-hj-z]|i([\\--9A-Z_a-hj-z]|i([\\--9A-Z_a-hj-z]|i([\\--9A-Z_a-hj-z]|i[\\-.0-9A-Z_a-z]))))[\\--9A-Z_a-z]*|i{0,3})', 'hosts': 'iiii.y.z'}" color="gold2" fontcolor="darkgreen"] "example/deploy-ingress-nginx(Deployment)" -> "example/deploy-jjjj(Deployment)" [label="TCP {'dst_ports': '9950', 'paths': '/j{4}(/[\\--9A-Z_a-z]*)?', 'hosts': 'ooo.y.z, jjjj.y.z'},{'dst_ports': '9950', 'paths': '/(([\\--9A-Z_a-ik-z]|j([\\--9A-Z_a-ik-z]|j([\\--9A-Z_a-ik-z]|j([\\--9A-Z_a-ik-z]|j[\\-.0-9A-Z_a-z]))))[\\--9A-Z_a-z]*|j{0,3})', 'hosts': 'jjjj.y.z'}" color="gold2" fontcolor="darkgreen"] "example/deploy-jjjj(Deployment)" -> "0.0.0.0/0" [label="All connections" color="gold2" fontcolor="darkgreen"] - "example/deploy-jjjj(Deployment)" -> "::/0" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-jjjj(Deployment)" -> "example/deploy-aaaa(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-jjjj(Deployment)" -> "example/deploy-bbbb(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-jjjj(Deployment)" -> "example/deploy-cccc(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] diff --git a/tests/istio_testcases/expected_output/complex-istio-ingress-test-connectivity-map-missing-resources.dot b/tests/istio_testcases/expected_output/complex-istio-ingress-test-connectivity-map-missing-resources.dot index d054079c..6353694f 100644 --- a/tests/istio_testcases/expected_output/complex-istio-ingress-test-connectivity-map-missing-resources.dot +++ b/tests/istio_testcases/expected_output/complex-istio-ingress-test-connectivity-map-missing-resources.dot @@ -2,7 +2,6 @@ digraph { HEADER [shape="box" label=< connectivity-2/complex-istio-ingress-test-missing-resources > fontsize=30 color=webmaroon fontcolor=webmaroon]; "0.0.0.0/0" [label="0.0.0.0/0" color="red2" fontcolor="red2"] - "::/0" [label="::/0" color="red2" fontcolor="red2"] "custom-gateways/custom-ingressgateway-livesim(Pod)" [label="custom-gateways/custom-ingressgateway-livesim(Pod)" color="coral4" fontcolor="coral4"] "example/deploy-aaaa(Deployment)" [label="example/deploy-aaaa(Deployment)" color="blue" fontcolor="blue"] "example/deploy-bbbb(Deployment)" [label="example/deploy-bbbb(Deployment)" color="blue" fontcolor="blue"] @@ -25,17 +24,6 @@ digraph { "0.0.0.0/0" -> "example/deploy-hhhh(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "0.0.0.0/0" -> "example/deploy-iiii(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "0.0.0.0/0" -> "example/deploy-jjjj(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] - "::/0" -> "custom-gateways/custom-ingressgateway-livesim(Pod)" [label="All connections" color="gold2" fontcolor="darkgreen"] - "::/0" -> "example/deploy-aaaa(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] - "::/0" -> "example/deploy-bbbb(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] - "::/0" -> "example/deploy-cccc(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] - "::/0" -> "example/deploy-dddd(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] - "::/0" -> "example/deploy-eeee(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] - "::/0" -> "example/deploy-ffff(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] - "::/0" -> "example/deploy-gggg(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] - "::/0" -> "example/deploy-hhhh(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] - "::/0" -> "example/deploy-iiii(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] - "::/0" -> "example/deploy-jjjj(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "custom-gateways/custom-ingressgateway-livesim(Pod)" -> "example/deploy-aaaa(Deployment)" [label="TCP {'dst_ports': '3000', 'paths': '/a{4}/[\\--9A-Z_a-z]*', 'hosts': 'ooo.y.z, aaaa.y.z'},{'dst_ports': '3000', 'paths': '/(([\\--9A-Z_b-z]|a([\\--9A-Z_b-z]|a([\\--9A-Z_b-z]|a([\\--9A-Z_b-z]|a[\\-.0-9A-Z_a-z]))))[\\--9A-Z_a-z]*|a{0,4})', 'hosts': 'aaaa.y.z'}" color="gold2" fontcolor="darkgreen"] "custom-gateways/custom-ingressgateway-livesim(Pod)" -> "example/deploy-bbbb(Deployment)" [label="TCP {'dst_ports': '3456', 'paths': '/b{4}/[\\--9A-Z_a-z]*', 'hosts': 'ooo.y.z, bbbb.y.z'},{'dst_ports': '3456', 'paths': '/(([\\--9A-Z_ac-z]|b([\\--9A-Z_ac-z]|b([\\--9A-Z_ac-z]|b([\\--9A-Z_ac-z]|b[\\-.0-9A-Z_a-z]))))[\\--9A-Z_a-z]*|b{0,4})', 'hosts': 'bbbb.y.z'}" color="gold2" fontcolor="darkgreen"] "custom-gateways/custom-ingressgateway-livesim(Pod)" -> "example/deploy-cccc(Deployment)" [label="TCP {'dst_ports': '9950', 'paths': '/c{4}/[\\--9A-Z_a-z]*', 'hosts': 'ooo.y.z, cccc.y.z'},{'dst_ports': '9950', 'paths': '/(([\\--9A-Z_abd-z]|c([\\--9A-Z_abd-z]|c([\\--9A-Z_abd-z]|c([\\--9A-Z_abd-z]|c[\\-.0-9A-Z_a-z]))))[\\--9A-Z_a-z]*|c{0,4})', 'hosts': 'cccc.y.z'}" color="gold2" fontcolor="darkgreen"] @@ -46,7 +34,6 @@ digraph { "custom-gateways/custom-ingressgateway-livesim(Pod)" -> "example/deploy-iiii(Deployment)" [label="TCP {'dst_ports': '3000', 'paths': '/i{4}/[\\--9A-Z_a-z]*', 'hosts': 'ooo.y.z, iiii.y.z'},{'dst_ports': '3000', 'paths': '/(([\\--9A-Z_a-hj-z]|i([\\--9A-Z_a-hj-z]|i([\\--9A-Z_a-hj-z]|i([\\--9A-Z_a-hj-z]|i[\\-.0-9A-Z_a-z]))))[\\--9A-Z_a-z]*|i{0,4})', 'hosts': 'iiii.y.z'}" color="gold2" fontcolor="darkgreen"] "custom-gateways/custom-ingressgateway-livesim(Pod)" -> "example/deploy-jjjj(Deployment)" [label="TCP {'dst_ports': '9950', 'paths': '/j{4}/[\\--9A-Z_a-z]*', 'hosts': 'ooo.y.z, jjjj.y.z'},{'dst_ports': '9950', 'paths': '/(([\\--9A-Z_a-ik-z]|j([\\--9A-Z_a-ik-z]|j([\\--9A-Z_a-ik-z]|j([\\--9A-Z_a-ik-z]|j[\\-.0-9A-Z_a-z]))))[\\--9A-Z_a-z]*|j{0,4})', 'hosts': 'jjjj.y.z'}" color="gold2" fontcolor="darkgreen"] "example/deploy-aaaa(Deployment)" -> "0.0.0.0/0" [label="All connections" color="gold2" fontcolor="darkgreen"] - "example/deploy-aaaa(Deployment)" -> "::/0" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-aaaa(Deployment)" -> "custom-gateways/custom-ingressgateway-livesim(Pod)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-aaaa(Deployment)" -> "example/deploy-aaaa(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-aaaa(Deployment)" -> "example/deploy-bbbb(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] @@ -59,7 +46,6 @@ digraph { "example/deploy-aaaa(Deployment)" -> "example/deploy-iiii(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-aaaa(Deployment)" -> "example/deploy-jjjj(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-bbbb(Deployment)" -> "0.0.0.0/0" [label="All connections" color="gold2" fontcolor="darkgreen"] - "example/deploy-bbbb(Deployment)" -> "::/0" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-bbbb(Deployment)" -> "custom-gateways/custom-ingressgateway-livesim(Pod)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-bbbb(Deployment)" -> "example/deploy-aaaa(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-bbbb(Deployment)" -> "example/deploy-bbbb(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] @@ -72,7 +58,6 @@ digraph { "example/deploy-bbbb(Deployment)" -> "example/deploy-iiii(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-bbbb(Deployment)" -> "example/deploy-jjjj(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-cccc(Deployment)" -> "0.0.0.0/0" [label="All connections" color="gold2" fontcolor="darkgreen"] - "example/deploy-cccc(Deployment)" -> "::/0" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-cccc(Deployment)" -> "custom-gateways/custom-ingressgateway-livesim(Pod)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-cccc(Deployment)" -> "example/deploy-aaaa(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-cccc(Deployment)" -> "example/deploy-bbbb(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] @@ -85,7 +70,6 @@ digraph { "example/deploy-cccc(Deployment)" -> "example/deploy-iiii(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-cccc(Deployment)" -> "example/deploy-jjjj(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-dddd(Deployment)" -> "0.0.0.0/0" [label="All connections" color="gold2" fontcolor="darkgreen"] - "example/deploy-dddd(Deployment)" -> "::/0" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-dddd(Deployment)" -> "custom-gateways/custom-ingressgateway-livesim(Pod)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-dddd(Deployment)" -> "example/deploy-aaaa(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-dddd(Deployment)" -> "example/deploy-bbbb(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] @@ -98,7 +82,6 @@ digraph { "example/deploy-dddd(Deployment)" -> "example/deploy-iiii(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-dddd(Deployment)" -> "example/deploy-jjjj(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-eeee(Deployment)" -> "0.0.0.0/0" [label="All connections" color="gold2" fontcolor="darkgreen"] - "example/deploy-eeee(Deployment)" -> "::/0" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-eeee(Deployment)" -> "custom-gateways/custom-ingressgateway-livesim(Pod)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-eeee(Deployment)" -> "example/deploy-aaaa(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-eeee(Deployment)" -> "example/deploy-bbbb(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] @@ -111,7 +94,6 @@ digraph { "example/deploy-eeee(Deployment)" -> "example/deploy-iiii(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-eeee(Deployment)" -> "example/deploy-jjjj(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-ffff(Deployment)" -> "0.0.0.0/0" [label="All connections" color="gold2" fontcolor="darkgreen"] - "example/deploy-ffff(Deployment)" -> "::/0" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-ffff(Deployment)" -> "custom-gateways/custom-ingressgateway-livesim(Pod)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-ffff(Deployment)" -> "example/deploy-aaaa(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-ffff(Deployment)" -> "example/deploy-bbbb(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] @@ -124,7 +106,6 @@ digraph { "example/deploy-ffff(Deployment)" -> "example/deploy-iiii(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-ffff(Deployment)" -> "example/deploy-jjjj(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-gggg(Deployment)" -> "0.0.0.0/0" [label="All connections" color="gold2" fontcolor="darkgreen"] - "example/deploy-gggg(Deployment)" -> "::/0" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-gggg(Deployment)" -> "custom-gateways/custom-ingressgateway-livesim(Pod)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-gggg(Deployment)" -> "example/deploy-aaaa(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-gggg(Deployment)" -> "example/deploy-bbbb(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] @@ -137,7 +118,6 @@ digraph { "example/deploy-gggg(Deployment)" -> "example/deploy-iiii(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-gggg(Deployment)" -> "example/deploy-jjjj(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-hhhh(Deployment)" -> "0.0.0.0/0" [label="All connections" color="gold2" fontcolor="darkgreen"] - "example/deploy-hhhh(Deployment)" -> "::/0" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-hhhh(Deployment)" -> "custom-gateways/custom-ingressgateway-livesim(Pod)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-hhhh(Deployment)" -> "example/deploy-aaaa(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-hhhh(Deployment)" -> "example/deploy-bbbb(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] @@ -150,7 +130,6 @@ digraph { "example/deploy-hhhh(Deployment)" -> "example/deploy-iiii(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-hhhh(Deployment)" -> "example/deploy-jjjj(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-iiii(Deployment)" -> "0.0.0.0/0" [label="All connections" color="gold2" fontcolor="darkgreen"] - "example/deploy-iiii(Deployment)" -> "::/0" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-iiii(Deployment)" -> "custom-gateways/custom-ingressgateway-livesim(Pod)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-iiii(Deployment)" -> "example/deploy-aaaa(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-iiii(Deployment)" -> "example/deploy-bbbb(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] @@ -163,7 +142,6 @@ digraph { "example/deploy-iiii(Deployment)" -> "example/deploy-iiii(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-iiii(Deployment)" -> "example/deploy-jjjj(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-jjjj(Deployment)" -> "0.0.0.0/0" [label="All connections" color="gold2" fontcolor="darkgreen"] - "example/deploy-jjjj(Deployment)" -> "::/0" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-jjjj(Deployment)" -> "custom-gateways/custom-ingressgateway-livesim(Pod)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-jjjj(Deployment)" -> "example/deploy-aaaa(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-jjjj(Deployment)" -> "example/deploy-bbbb(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] diff --git a/tests/istio_testcases/expected_output/complex-istio-ingress-test-connectivity-map.dot b/tests/istio_testcases/expected_output/complex-istio-ingress-test-connectivity-map.dot index e20223cf..1400f00e 100644 --- a/tests/istio_testcases/expected_output/complex-istio-ingress-test-connectivity-map.dot +++ b/tests/istio_testcases/expected_output/complex-istio-ingress-test-connectivity-map.dot @@ -2,7 +2,6 @@ digraph { HEADER [shape="box" label=< connectivity/complex-istio-ingress-test > fontsize=30 color=webmaroon fontcolor=webmaroon]; "0.0.0.0/0" [label="0.0.0.0/0" color="red2" fontcolor="red2"] - "::/0" [label="::/0" color="red2" fontcolor="red2"] "example/deploy-aaaa(Deployment)" [label="example/deploy-aaaa(Deployment)" color="blue" fontcolor="blue"] "example/deploy-bbbb(Deployment)" [label="example/deploy-bbbb(Deployment)" color="blue" fontcolor="blue"] "example/deploy-cccc(Deployment)" [label="example/deploy-cccc(Deployment)" color="blue" fontcolor="blue"] @@ -27,20 +26,7 @@ digraph { "0.0.0.0/0" -> "example/deploy-ingress-nginx(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "0.0.0.0/0" -> "example/deploy-jjjj(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "0.0.0.0/0" -> "example/istio-ingressgateway(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] - "::/0" -> "example/deploy-aaaa(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] - "::/0" -> "example/deploy-bbbb(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] - "::/0" -> "example/deploy-cccc(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] - "::/0" -> "example/deploy-dddd(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] - "::/0" -> "example/deploy-eeee(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] - "::/0" -> "example/deploy-ffff(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] - "::/0" -> "example/deploy-gggg(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] - "::/0" -> "example/deploy-hhhh(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] - "::/0" -> "example/deploy-iiii(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] - "::/0" -> "example/deploy-ingress-nginx(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] - "::/0" -> "example/deploy-jjjj(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] - "::/0" -> "example/istio-ingressgateway(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-aaaa(Deployment)" -> "0.0.0.0/0" [label="All connections" color="gold2" fontcolor="darkgreen"] - "example/deploy-aaaa(Deployment)" -> "::/0" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-aaaa(Deployment)" -> "example/deploy-aaaa(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-aaaa(Deployment)" -> "example/deploy-bbbb(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-aaaa(Deployment)" -> "example/deploy-cccc(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] @@ -54,7 +40,6 @@ digraph { "example/deploy-aaaa(Deployment)" -> "example/deploy-jjjj(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-aaaa(Deployment)" -> "example/istio-ingressgateway(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-bbbb(Deployment)" -> "0.0.0.0/0" [label="All connections" color="gold2" fontcolor="darkgreen"] - "example/deploy-bbbb(Deployment)" -> "::/0" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-bbbb(Deployment)" -> "example/deploy-aaaa(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-bbbb(Deployment)" -> "example/deploy-bbbb(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-bbbb(Deployment)" -> "example/deploy-cccc(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] @@ -68,7 +53,6 @@ digraph { "example/deploy-bbbb(Deployment)" -> "example/deploy-jjjj(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-bbbb(Deployment)" -> "example/istio-ingressgateway(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-cccc(Deployment)" -> "0.0.0.0/0" [label="All connections" color="gold2" fontcolor="darkgreen"] - "example/deploy-cccc(Deployment)" -> "::/0" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-cccc(Deployment)" -> "example/deploy-aaaa(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-cccc(Deployment)" -> "example/deploy-bbbb(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-cccc(Deployment)" -> "example/deploy-cccc(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] @@ -82,7 +66,6 @@ digraph { "example/deploy-cccc(Deployment)" -> "example/deploy-jjjj(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-cccc(Deployment)" -> "example/istio-ingressgateway(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-dddd(Deployment)" -> "0.0.0.0/0" [label="All connections" color="gold2" fontcolor="darkgreen"] - "example/deploy-dddd(Deployment)" -> "::/0" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-dddd(Deployment)" -> "example/deploy-aaaa(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-dddd(Deployment)" -> "example/deploy-bbbb(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-dddd(Deployment)" -> "example/deploy-cccc(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] @@ -96,7 +79,6 @@ digraph { "example/deploy-dddd(Deployment)" -> "example/deploy-jjjj(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-dddd(Deployment)" -> "example/istio-ingressgateway(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-eeee(Deployment)" -> "0.0.0.0/0" [label="All connections" color="gold2" fontcolor="darkgreen"] - "example/deploy-eeee(Deployment)" -> "::/0" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-eeee(Deployment)" -> "example/deploy-aaaa(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-eeee(Deployment)" -> "example/deploy-bbbb(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-eeee(Deployment)" -> "example/deploy-cccc(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] @@ -110,7 +92,6 @@ digraph { "example/deploy-eeee(Deployment)" -> "example/deploy-jjjj(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-eeee(Deployment)" -> "example/istio-ingressgateway(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-ffff(Deployment)" -> "0.0.0.0/0" [label="All connections" color="gold2" fontcolor="darkgreen"] - "example/deploy-ffff(Deployment)" -> "::/0" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-ffff(Deployment)" -> "example/deploy-aaaa(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-ffff(Deployment)" -> "example/deploy-bbbb(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-ffff(Deployment)" -> "example/deploy-cccc(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] @@ -124,7 +105,6 @@ digraph { "example/deploy-ffff(Deployment)" -> "example/deploy-jjjj(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-ffff(Deployment)" -> "example/istio-ingressgateway(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-gggg(Deployment)" -> "0.0.0.0/0" [label="All connections" color="gold2" fontcolor="darkgreen"] - "example/deploy-gggg(Deployment)" -> "::/0" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-gggg(Deployment)" -> "example/deploy-aaaa(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-gggg(Deployment)" -> "example/deploy-bbbb(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-gggg(Deployment)" -> "example/deploy-cccc(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] @@ -138,7 +118,6 @@ digraph { "example/deploy-gggg(Deployment)" -> "example/deploy-jjjj(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-gggg(Deployment)" -> "example/istio-ingressgateway(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-hhhh(Deployment)" -> "0.0.0.0/0" [label="All connections" color="gold2" fontcolor="darkgreen"] - "example/deploy-hhhh(Deployment)" -> "::/0" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-hhhh(Deployment)" -> "example/deploy-aaaa(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-hhhh(Deployment)" -> "example/deploy-bbbb(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-hhhh(Deployment)" -> "example/deploy-cccc(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] @@ -152,7 +131,6 @@ digraph { "example/deploy-hhhh(Deployment)" -> "example/deploy-jjjj(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-hhhh(Deployment)" -> "example/istio-ingressgateway(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-iiii(Deployment)" -> "0.0.0.0/0" [label="All connections" color="gold2" fontcolor="darkgreen"] - "example/deploy-iiii(Deployment)" -> "::/0" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-iiii(Deployment)" -> "example/deploy-aaaa(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-iiii(Deployment)" -> "example/deploy-bbbb(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-iiii(Deployment)" -> "example/deploy-cccc(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] @@ -166,7 +144,6 @@ digraph { "example/deploy-iiii(Deployment)" -> "example/deploy-jjjj(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-iiii(Deployment)" -> "example/istio-ingressgateway(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-ingress-nginx(Deployment)" -> "0.0.0.0/0" [label="All connections" color="gold2" fontcolor="darkgreen"] - "example/deploy-ingress-nginx(Deployment)" -> "::/0" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-ingress-nginx(Deployment)" -> "example/deploy-aaaa(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-ingress-nginx(Deployment)" -> "example/deploy-bbbb(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-ingress-nginx(Deployment)" -> "example/deploy-cccc(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] @@ -180,7 +157,6 @@ digraph { "example/deploy-ingress-nginx(Deployment)" -> "example/deploy-jjjj(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-ingress-nginx(Deployment)" -> "example/istio-ingressgateway(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-jjjj(Deployment)" -> "0.0.0.0/0" [label="All connections" color="gold2" fontcolor="darkgreen"] - "example/deploy-jjjj(Deployment)" -> "::/0" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-jjjj(Deployment)" -> "example/deploy-aaaa(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-jjjj(Deployment)" -> "example/deploy-bbbb(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-jjjj(Deployment)" -> "example/deploy-cccc(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] diff --git a/tests/istio_testcases/expected_output/complex-k8s-ingress-all-test-connectivity-map-missing-resources.dot b/tests/istio_testcases/expected_output/complex-k8s-ingress-all-test-connectivity-map-missing-resources.dot index 769c5d55..6b16d332 100644 --- a/tests/istio_testcases/expected_output/complex-k8s-ingress-all-test-connectivity-map-missing-resources.dot +++ b/tests/istio_testcases/expected_output/complex-k8s-ingress-all-test-connectivity-map-missing-resources.dot @@ -2,7 +2,6 @@ digraph { HEADER [shape="box" label=< connectivity-2/complex-k8s-ingress-all-test-missing-resources > fontsize=30 color=webmaroon fontcolor=webmaroon]; "0.0.0.0/0" [label="0.0.0.0/0" color="red2" fontcolor="red2"] - "::/0" [label="::/0" color="red2" fontcolor="red2"] "example/deploy-aaaa(Deployment)" [label="example/deploy-aaaa(Deployment)" color="blue" fontcolor="blue"] "example/deploy-bbbb(Deployment)" [label="example/deploy-bbbb(Deployment)" color="blue" fontcolor="blue"] "example/deploy-cccc(Deployment)" [label="example/deploy-cccc(Deployment)" color="blue" fontcolor="blue"] @@ -25,19 +24,7 @@ digraph { "0.0.0.0/0" -> "example/deploy-iiii(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "0.0.0.0/0" -> "example/deploy-jjjj(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "0.0.0.0/0" -> "ingress-controller-ns/ingress-controller-livesim(Pod)" [label="All connections" color="gold2" fontcolor="darkgreen"] - "::/0" -> "example/deploy-aaaa(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] - "::/0" -> "example/deploy-bbbb(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] - "::/0" -> "example/deploy-cccc(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] - "::/0" -> "example/deploy-dddd(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] - "::/0" -> "example/deploy-eeee(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] - "::/0" -> "example/deploy-ffff(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] - "::/0" -> "example/deploy-gggg(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] - "::/0" -> "example/deploy-hhhh(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] - "::/0" -> "example/deploy-iiii(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] - "::/0" -> "example/deploy-jjjj(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] - "::/0" -> "ingress-controller-ns/ingress-controller-livesim(Pod)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-aaaa(Deployment)" -> "0.0.0.0/0" [label="All connections" color="gold2" fontcolor="darkgreen"] - "example/deploy-aaaa(Deployment)" -> "::/0" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-aaaa(Deployment)" -> "example/deploy-aaaa(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-aaaa(Deployment)" -> "example/deploy-bbbb(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-aaaa(Deployment)" -> "example/deploy-cccc(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] @@ -50,7 +37,6 @@ digraph { "example/deploy-aaaa(Deployment)" -> "example/deploy-jjjj(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-aaaa(Deployment)" -> "ingress-controller-ns/ingress-controller-livesim(Pod)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-bbbb(Deployment)" -> "0.0.0.0/0" [label="All connections" color="gold2" fontcolor="darkgreen"] - "example/deploy-bbbb(Deployment)" -> "::/0" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-bbbb(Deployment)" -> "example/deploy-aaaa(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-bbbb(Deployment)" -> "example/deploy-bbbb(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-bbbb(Deployment)" -> "example/deploy-cccc(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] @@ -63,7 +49,6 @@ digraph { "example/deploy-bbbb(Deployment)" -> "example/deploy-jjjj(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-bbbb(Deployment)" -> "ingress-controller-ns/ingress-controller-livesim(Pod)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-cccc(Deployment)" -> "0.0.0.0/0" [label="All connections" color="gold2" fontcolor="darkgreen"] - "example/deploy-cccc(Deployment)" -> "::/0" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-cccc(Deployment)" -> "example/deploy-aaaa(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-cccc(Deployment)" -> "example/deploy-bbbb(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-cccc(Deployment)" -> "example/deploy-cccc(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] @@ -76,7 +61,6 @@ digraph { "example/deploy-cccc(Deployment)" -> "example/deploy-jjjj(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-cccc(Deployment)" -> "ingress-controller-ns/ingress-controller-livesim(Pod)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-dddd(Deployment)" -> "0.0.0.0/0" [label="All connections" color="gold2" fontcolor="darkgreen"] - "example/deploy-dddd(Deployment)" -> "::/0" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-dddd(Deployment)" -> "example/deploy-aaaa(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-dddd(Deployment)" -> "example/deploy-bbbb(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-dddd(Deployment)" -> "example/deploy-cccc(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] @@ -89,7 +73,6 @@ digraph { "example/deploy-dddd(Deployment)" -> "example/deploy-jjjj(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-dddd(Deployment)" -> "ingress-controller-ns/ingress-controller-livesim(Pod)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-eeee(Deployment)" -> "0.0.0.0/0" [label="All connections" color="gold2" fontcolor="darkgreen"] - "example/deploy-eeee(Deployment)" -> "::/0" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-eeee(Deployment)" -> "example/deploy-aaaa(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-eeee(Deployment)" -> "example/deploy-bbbb(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-eeee(Deployment)" -> "example/deploy-cccc(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] @@ -102,7 +85,6 @@ digraph { "example/deploy-eeee(Deployment)" -> "example/deploy-jjjj(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-eeee(Deployment)" -> "ingress-controller-ns/ingress-controller-livesim(Pod)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-ffff(Deployment)" -> "0.0.0.0/0" [label="All connections" color="gold2" fontcolor="darkgreen"] - "example/deploy-ffff(Deployment)" -> "::/0" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-ffff(Deployment)" -> "example/deploy-aaaa(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-ffff(Deployment)" -> "example/deploy-bbbb(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-ffff(Deployment)" -> "example/deploy-cccc(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] @@ -115,7 +97,6 @@ digraph { "example/deploy-ffff(Deployment)" -> "example/deploy-jjjj(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-ffff(Deployment)" -> "ingress-controller-ns/ingress-controller-livesim(Pod)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-gggg(Deployment)" -> "0.0.0.0/0" [label="All connections" color="gold2" fontcolor="darkgreen"] - "example/deploy-gggg(Deployment)" -> "::/0" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-gggg(Deployment)" -> "example/deploy-aaaa(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-gggg(Deployment)" -> "example/deploy-bbbb(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-gggg(Deployment)" -> "example/deploy-cccc(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] @@ -128,7 +109,6 @@ digraph { "example/deploy-gggg(Deployment)" -> "example/deploy-jjjj(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-gggg(Deployment)" -> "ingress-controller-ns/ingress-controller-livesim(Pod)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-hhhh(Deployment)" -> "0.0.0.0/0" [label="All connections" color="gold2" fontcolor="darkgreen"] - "example/deploy-hhhh(Deployment)" -> "::/0" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-hhhh(Deployment)" -> "example/deploy-aaaa(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-hhhh(Deployment)" -> "example/deploy-bbbb(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-hhhh(Deployment)" -> "example/deploy-cccc(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] @@ -141,7 +121,6 @@ digraph { "example/deploy-hhhh(Deployment)" -> "example/deploy-jjjj(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-hhhh(Deployment)" -> "ingress-controller-ns/ingress-controller-livesim(Pod)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-iiii(Deployment)" -> "0.0.0.0/0" [label="All connections" color="gold2" fontcolor="darkgreen"] - "example/deploy-iiii(Deployment)" -> "::/0" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-iiii(Deployment)" -> "example/deploy-aaaa(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-iiii(Deployment)" -> "example/deploy-bbbb(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-iiii(Deployment)" -> "example/deploy-cccc(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] @@ -154,7 +133,6 @@ digraph { "example/deploy-iiii(Deployment)" -> "example/deploy-jjjj(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-iiii(Deployment)" -> "ingress-controller-ns/ingress-controller-livesim(Pod)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-jjjj(Deployment)" -> "0.0.0.0/0" [label="All connections" color="gold2" fontcolor="darkgreen"] - "example/deploy-jjjj(Deployment)" -> "::/0" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-jjjj(Deployment)" -> "example/deploy-aaaa(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-jjjj(Deployment)" -> "example/deploy-bbbb(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-jjjj(Deployment)" -> "example/deploy-cccc(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] diff --git a/tests/istio_testcases/expected_output/complex-k8s-ingress-all-test-connectivity-map.dot b/tests/istio_testcases/expected_output/complex-k8s-ingress-all-test-connectivity-map.dot index a089c9a5..a7ccb724 100644 --- a/tests/istio_testcases/expected_output/complex-k8s-ingress-all-test-connectivity-map.dot +++ b/tests/istio_testcases/expected_output/complex-k8s-ingress-all-test-connectivity-map.dot @@ -2,7 +2,6 @@ digraph { HEADER [shape="box" label=< connectivity/complex-k8s-ingress-all-test > fontsize=30 color=webmaroon fontcolor=webmaroon]; "0.0.0.0/0" [label="0.0.0.0/0" color="red2" fontcolor="red2"] - "::/0" [label="::/0" color="red2" fontcolor="red2"] "example/deploy-aaaa(Deployment)" [label="example/deploy-aaaa(Deployment)" color="blue" fontcolor="blue"] "example/deploy-bbbb(Deployment)" [label="example/deploy-bbbb(Deployment)" color="blue" fontcolor="blue"] "example/deploy-cccc(Deployment)" [label="example/deploy-cccc(Deployment)" color="blue" fontcolor="blue"] @@ -27,20 +26,7 @@ digraph { "0.0.0.0/0" -> "example/deploy-ingress-nginx(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "0.0.0.0/0" -> "example/deploy-jjjj(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "0.0.0.0/0" -> "example/istio-ingressgateway(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] - "::/0" -> "example/deploy-aaaa(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] - "::/0" -> "example/deploy-bbbb(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] - "::/0" -> "example/deploy-cccc(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] - "::/0" -> "example/deploy-dddd(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] - "::/0" -> "example/deploy-eeee(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] - "::/0" -> "example/deploy-ffff(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] - "::/0" -> "example/deploy-gggg(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] - "::/0" -> "example/deploy-hhhh(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] - "::/0" -> "example/deploy-iiii(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] - "::/0" -> "example/deploy-ingress-nginx(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] - "::/0" -> "example/deploy-jjjj(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] - "::/0" -> "example/istio-ingressgateway(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-aaaa(Deployment)" -> "0.0.0.0/0" [label="All connections" color="gold2" fontcolor="darkgreen"] - "example/deploy-aaaa(Deployment)" -> "::/0" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-aaaa(Deployment)" -> "example/deploy-aaaa(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-aaaa(Deployment)" -> "example/deploy-bbbb(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-aaaa(Deployment)" -> "example/deploy-cccc(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] @@ -54,7 +40,6 @@ digraph { "example/deploy-aaaa(Deployment)" -> "example/deploy-jjjj(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-aaaa(Deployment)" -> "example/istio-ingressgateway(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-bbbb(Deployment)" -> "0.0.0.0/0" [label="All connections" color="gold2" fontcolor="darkgreen"] - "example/deploy-bbbb(Deployment)" -> "::/0" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-bbbb(Deployment)" -> "example/deploy-aaaa(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-bbbb(Deployment)" -> "example/deploy-bbbb(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-bbbb(Deployment)" -> "example/deploy-cccc(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] @@ -68,7 +53,6 @@ digraph { "example/deploy-bbbb(Deployment)" -> "example/deploy-jjjj(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-bbbb(Deployment)" -> "example/istio-ingressgateway(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-cccc(Deployment)" -> "0.0.0.0/0" [label="All connections" color="gold2" fontcolor="darkgreen"] - "example/deploy-cccc(Deployment)" -> "::/0" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-cccc(Deployment)" -> "example/deploy-aaaa(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-cccc(Deployment)" -> "example/deploy-bbbb(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-cccc(Deployment)" -> "example/deploy-cccc(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] @@ -82,7 +66,6 @@ digraph { "example/deploy-cccc(Deployment)" -> "example/deploy-jjjj(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-cccc(Deployment)" -> "example/istio-ingressgateway(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-dddd(Deployment)" -> "0.0.0.0/0" [label="All connections" color="gold2" fontcolor="darkgreen"] - "example/deploy-dddd(Deployment)" -> "::/0" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-dddd(Deployment)" -> "example/deploy-aaaa(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-dddd(Deployment)" -> "example/deploy-bbbb(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-dddd(Deployment)" -> "example/deploy-cccc(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] @@ -96,7 +79,6 @@ digraph { "example/deploy-dddd(Deployment)" -> "example/deploy-jjjj(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-dddd(Deployment)" -> "example/istio-ingressgateway(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-eeee(Deployment)" -> "0.0.0.0/0" [label="All connections" color="gold2" fontcolor="darkgreen"] - "example/deploy-eeee(Deployment)" -> "::/0" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-eeee(Deployment)" -> "example/deploy-aaaa(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-eeee(Deployment)" -> "example/deploy-bbbb(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-eeee(Deployment)" -> "example/deploy-cccc(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] @@ -110,7 +92,6 @@ digraph { "example/deploy-eeee(Deployment)" -> "example/deploy-jjjj(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-eeee(Deployment)" -> "example/istio-ingressgateway(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-ffff(Deployment)" -> "0.0.0.0/0" [label="All connections" color="gold2" fontcolor="darkgreen"] - "example/deploy-ffff(Deployment)" -> "::/0" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-ffff(Deployment)" -> "example/deploy-aaaa(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-ffff(Deployment)" -> "example/deploy-bbbb(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-ffff(Deployment)" -> "example/deploy-cccc(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] @@ -124,7 +105,6 @@ digraph { "example/deploy-ffff(Deployment)" -> "example/deploy-jjjj(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-ffff(Deployment)" -> "example/istio-ingressgateway(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-gggg(Deployment)" -> "0.0.0.0/0" [label="All connections" color="gold2" fontcolor="darkgreen"] - "example/deploy-gggg(Deployment)" -> "::/0" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-gggg(Deployment)" -> "example/deploy-aaaa(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-gggg(Deployment)" -> "example/deploy-bbbb(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-gggg(Deployment)" -> "example/deploy-cccc(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] @@ -138,7 +118,6 @@ digraph { "example/deploy-gggg(Deployment)" -> "example/deploy-jjjj(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-gggg(Deployment)" -> "example/istio-ingressgateway(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-hhhh(Deployment)" -> "0.0.0.0/0" [label="All connections" color="gold2" fontcolor="darkgreen"] - "example/deploy-hhhh(Deployment)" -> "::/0" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-hhhh(Deployment)" -> "example/deploy-aaaa(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-hhhh(Deployment)" -> "example/deploy-bbbb(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-hhhh(Deployment)" -> "example/deploy-cccc(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] @@ -152,7 +131,6 @@ digraph { "example/deploy-hhhh(Deployment)" -> "example/deploy-jjjj(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-hhhh(Deployment)" -> "example/istio-ingressgateway(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-iiii(Deployment)" -> "0.0.0.0/0" [label="All connections" color="gold2" fontcolor="darkgreen"] - "example/deploy-iiii(Deployment)" -> "::/0" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-iiii(Deployment)" -> "example/deploy-aaaa(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-iiii(Deployment)" -> "example/deploy-bbbb(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-iiii(Deployment)" -> "example/deploy-cccc(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] @@ -174,7 +152,6 @@ digraph { "example/deploy-ingress-nginx(Deployment)" -> "example/deploy-iiii(Deployment)" [label="TCP {'dst_ports': '3000', 'paths': '/i{4}(/[\\--9A-Z_a-z]*)?', 'hosts': 'ooo.y.z, iiii.y.z'},{'dst_ports': '3000', 'paths': '/(([\\--9A-Z_a-hj-z]|i([\\--9A-Z_a-hj-z]|i([\\--9A-Z_a-hj-z]|i([\\--9A-Z_a-hj-z]|i[\\-.0-9A-Z_a-z]))))[\\--9A-Z_a-z]*|i{0,3})', 'hosts': 'iiii.y.z'}" color="gold2" fontcolor="darkgreen"] "example/deploy-ingress-nginx(Deployment)" -> "example/deploy-jjjj(Deployment)" [label="TCP {'dst_ports': '9950', 'paths': '/j{4}(/[\\--9A-Z_a-z]*)?', 'hosts': 'ooo.y.z, jjjj.y.z'},{'dst_ports': '9950', 'paths': '/(([\\--9A-Z_a-ik-z]|j([\\--9A-Z_a-ik-z]|j([\\--9A-Z_a-ik-z]|j([\\--9A-Z_a-ik-z]|j[\\-.0-9A-Z_a-z]))))[\\--9A-Z_a-z]*|j{0,3})', 'hosts': 'jjjj.y.z'}" color="gold2" fontcolor="darkgreen"] "example/deploy-jjjj(Deployment)" -> "0.0.0.0/0" [label="All connections" color="gold2" fontcolor="darkgreen"] - "example/deploy-jjjj(Deployment)" -> "::/0" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-jjjj(Deployment)" -> "example/deploy-aaaa(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-jjjj(Deployment)" -> "example/deploy-bbbb(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-jjjj(Deployment)" -> "example/deploy-cccc(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] @@ -188,7 +165,6 @@ digraph { "example/deploy-jjjj(Deployment)" -> "example/deploy-jjjj(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-jjjj(Deployment)" -> "example/istio-ingressgateway(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/istio-ingressgateway(Deployment)" -> "0.0.0.0/0" [label="All connections" color="gold2" fontcolor="darkgreen"] - "example/istio-ingressgateway(Deployment)" -> "::/0" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/istio-ingressgateway(Deployment)" -> "example/deploy-aaaa(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/istio-ingressgateway(Deployment)" -> "example/deploy-bbbb(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/istio-ingressgateway(Deployment)" -> "example/deploy-cccc(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] diff --git a/tests/istio_testcases/expected_output/complex-k8s-ingress-cluster-test-connectivity-map-missing-resources.dot b/tests/istio_testcases/expected_output/complex-k8s-ingress-cluster-test-connectivity-map-missing-resources.dot index bb7fead8..4d4fc903 100644 --- a/tests/istio_testcases/expected_output/complex-k8s-ingress-cluster-test-connectivity-map-missing-resources.dot +++ b/tests/istio_testcases/expected_output/complex-k8s-ingress-cluster-test-connectivity-map-missing-resources.dot @@ -2,7 +2,6 @@ digraph { HEADER [shape="box" label=< connectivity-2/complex-k8s-ingress-test-missing-resources > fontsize=30 color=webmaroon fontcolor=webmaroon]; "0.0.0.0/0" [label="0.0.0.0/0" color="red2" fontcolor="red2"] - "::/0" [label="::/0" color="red2" fontcolor="red2"] "example/deploy-aaaa(Deployment)" [label="example/deploy-aaaa(Deployment)" color="blue" fontcolor="blue"] "example/deploy-bbbb(Deployment)" [label="example/deploy-bbbb(Deployment)" color="blue" fontcolor="blue"] "example/deploy-cccc(Deployment)" [label="example/deploy-cccc(Deployment)" color="blue" fontcolor="blue"] @@ -25,19 +24,7 @@ digraph { "0.0.0.0/0" -> "example/deploy-iiii(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "0.0.0.0/0" -> "example/deploy-jjjj(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "0.0.0.0/0" -> "ingress-controller-ns/ingress-controller-livesim(Pod)" [label="All connections" color="gold2" fontcolor="darkgreen"] - "::/0" -> "example/deploy-aaaa(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] - "::/0" -> "example/deploy-bbbb(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] - "::/0" -> "example/deploy-cccc(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] - "::/0" -> "example/deploy-dddd(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] - "::/0" -> "example/deploy-eeee(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] - "::/0" -> "example/deploy-ffff(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] - "::/0" -> "example/deploy-gggg(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] - "::/0" -> "example/deploy-hhhh(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] - "::/0" -> "example/deploy-iiii(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] - "::/0" -> "example/deploy-jjjj(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] - "::/0" -> "ingress-controller-ns/ingress-controller-livesim(Pod)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-aaaa(Deployment)" -> "0.0.0.0/0" [label="All connections" color="gold2" fontcolor="darkgreen"] - "example/deploy-aaaa(Deployment)" -> "::/0" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-aaaa(Deployment)" -> "example/deploy-aaaa(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-aaaa(Deployment)" -> "example/deploy-bbbb(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-aaaa(Deployment)" -> "example/deploy-cccc(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] @@ -50,7 +37,6 @@ digraph { "example/deploy-aaaa(Deployment)" -> "example/deploy-jjjj(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-aaaa(Deployment)" -> "ingress-controller-ns/ingress-controller-livesim(Pod)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-bbbb(Deployment)" -> "0.0.0.0/0" [label="All connections" color="gold2" fontcolor="darkgreen"] - "example/deploy-bbbb(Deployment)" -> "::/0" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-bbbb(Deployment)" -> "example/deploy-aaaa(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-bbbb(Deployment)" -> "example/deploy-bbbb(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-bbbb(Deployment)" -> "example/deploy-cccc(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] @@ -63,7 +49,6 @@ digraph { "example/deploy-bbbb(Deployment)" -> "example/deploy-jjjj(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-bbbb(Deployment)" -> "ingress-controller-ns/ingress-controller-livesim(Pod)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-cccc(Deployment)" -> "0.0.0.0/0" [label="All connections" color="gold2" fontcolor="darkgreen"] - "example/deploy-cccc(Deployment)" -> "::/0" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-cccc(Deployment)" -> "example/deploy-aaaa(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-cccc(Deployment)" -> "example/deploy-bbbb(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-cccc(Deployment)" -> "example/deploy-cccc(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] @@ -76,7 +61,6 @@ digraph { "example/deploy-cccc(Deployment)" -> "example/deploy-jjjj(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-cccc(Deployment)" -> "ingress-controller-ns/ingress-controller-livesim(Pod)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-dddd(Deployment)" -> "0.0.0.0/0" [label="All connections" color="gold2" fontcolor="darkgreen"] - "example/deploy-dddd(Deployment)" -> "::/0" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-dddd(Deployment)" -> "example/deploy-aaaa(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-dddd(Deployment)" -> "example/deploy-bbbb(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-dddd(Deployment)" -> "example/deploy-cccc(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] @@ -89,7 +73,6 @@ digraph { "example/deploy-dddd(Deployment)" -> "example/deploy-jjjj(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-dddd(Deployment)" -> "ingress-controller-ns/ingress-controller-livesim(Pod)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-eeee(Deployment)" -> "0.0.0.0/0" [label="All connections" color="gold2" fontcolor="darkgreen"] - "example/deploy-eeee(Deployment)" -> "::/0" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-eeee(Deployment)" -> "example/deploy-aaaa(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-eeee(Deployment)" -> "example/deploy-bbbb(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-eeee(Deployment)" -> "example/deploy-cccc(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] @@ -102,7 +85,6 @@ digraph { "example/deploy-eeee(Deployment)" -> "example/deploy-jjjj(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-eeee(Deployment)" -> "ingress-controller-ns/ingress-controller-livesim(Pod)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-ffff(Deployment)" -> "0.0.0.0/0" [label="All connections" color="gold2" fontcolor="darkgreen"] - "example/deploy-ffff(Deployment)" -> "::/0" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-ffff(Deployment)" -> "example/deploy-aaaa(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-ffff(Deployment)" -> "example/deploy-bbbb(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-ffff(Deployment)" -> "example/deploy-cccc(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] @@ -115,7 +97,6 @@ digraph { "example/deploy-ffff(Deployment)" -> "example/deploy-jjjj(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-ffff(Deployment)" -> "ingress-controller-ns/ingress-controller-livesim(Pod)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-gggg(Deployment)" -> "0.0.0.0/0" [label="All connections" color="gold2" fontcolor="darkgreen"] - "example/deploy-gggg(Deployment)" -> "::/0" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-gggg(Deployment)" -> "example/deploy-aaaa(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-gggg(Deployment)" -> "example/deploy-bbbb(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-gggg(Deployment)" -> "example/deploy-cccc(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] @@ -128,7 +109,6 @@ digraph { "example/deploy-gggg(Deployment)" -> "example/deploy-jjjj(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-gggg(Deployment)" -> "ingress-controller-ns/ingress-controller-livesim(Pod)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-hhhh(Deployment)" -> "0.0.0.0/0" [label="All connections" color="gold2" fontcolor="darkgreen"] - "example/deploy-hhhh(Deployment)" -> "::/0" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-hhhh(Deployment)" -> "example/deploy-aaaa(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-hhhh(Deployment)" -> "example/deploy-bbbb(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-hhhh(Deployment)" -> "example/deploy-cccc(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] @@ -141,7 +121,6 @@ digraph { "example/deploy-hhhh(Deployment)" -> "example/deploy-jjjj(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-hhhh(Deployment)" -> "ingress-controller-ns/ingress-controller-livesim(Pod)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-iiii(Deployment)" -> "0.0.0.0/0" [label="All connections" color="gold2" fontcolor="darkgreen"] - "example/deploy-iiii(Deployment)" -> "::/0" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-iiii(Deployment)" -> "example/deploy-aaaa(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-iiii(Deployment)" -> "example/deploy-bbbb(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-iiii(Deployment)" -> "example/deploy-cccc(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] @@ -154,7 +133,6 @@ digraph { "example/deploy-iiii(Deployment)" -> "example/deploy-jjjj(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-iiii(Deployment)" -> "ingress-controller-ns/ingress-controller-livesim(Pod)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-jjjj(Deployment)" -> "0.0.0.0/0" [label="All connections" color="gold2" fontcolor="darkgreen"] - "example/deploy-jjjj(Deployment)" -> "::/0" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-jjjj(Deployment)" -> "example/deploy-aaaa(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-jjjj(Deployment)" -> "example/deploy-bbbb(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-jjjj(Deployment)" -> "example/deploy-cccc(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] diff --git a/tests/istio_testcases/expected_output/complex-k8s-ingress-cluster-test-connectivity-map.dot b/tests/istio_testcases/expected_output/complex-k8s-ingress-cluster-test-connectivity-map.dot index 394c7e6c..7f7582be 100644 --- a/tests/istio_testcases/expected_output/complex-k8s-ingress-cluster-test-connectivity-map.dot +++ b/tests/istio_testcases/expected_output/complex-k8s-ingress-cluster-test-connectivity-map.dot @@ -2,7 +2,6 @@ digraph { HEADER [shape="box" label=< connectivity/complex-k8s-ingress-test > fontsize=30 color=webmaroon fontcolor=webmaroon]; "0.0.0.0/0" [label="0.0.0.0/0" color="red2" fontcolor="red2"] - "::/0" [label="::/0" color="red2" fontcolor="red2"] "example/deploy-aaaa(Deployment)" [label="example/deploy-aaaa(Deployment)" color="blue" fontcolor="blue"] "example/deploy-bbbb(Deployment)" [label="example/deploy-bbbb(Deployment)" color="blue" fontcolor="blue"] "example/deploy-cccc(Deployment)" [label="example/deploy-cccc(Deployment)" color="blue" fontcolor="blue"] @@ -27,20 +26,7 @@ digraph { "0.0.0.0/0" -> "example/deploy-ingress-nginx(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "0.0.0.0/0" -> "example/deploy-jjjj(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "0.0.0.0/0" -> "example/istio-ingressgateway(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] - "::/0" -> "example/deploy-aaaa(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] - "::/0" -> "example/deploy-bbbb(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] - "::/0" -> "example/deploy-cccc(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] - "::/0" -> "example/deploy-dddd(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] - "::/0" -> "example/deploy-eeee(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] - "::/0" -> "example/deploy-ffff(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] - "::/0" -> "example/deploy-gggg(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] - "::/0" -> "example/deploy-hhhh(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] - "::/0" -> "example/deploy-iiii(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] - "::/0" -> "example/deploy-ingress-nginx(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] - "::/0" -> "example/deploy-jjjj(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] - "::/0" -> "example/istio-ingressgateway(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-aaaa(Deployment)" -> "0.0.0.0/0" [label="All connections" color="gold2" fontcolor="darkgreen"] - "example/deploy-aaaa(Deployment)" -> "::/0" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-aaaa(Deployment)" -> "example/deploy-aaaa(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-aaaa(Deployment)" -> "example/deploy-bbbb(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-aaaa(Deployment)" -> "example/deploy-cccc(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] @@ -54,7 +40,6 @@ digraph { "example/deploy-aaaa(Deployment)" -> "example/deploy-jjjj(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-aaaa(Deployment)" -> "example/istio-ingressgateway(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-bbbb(Deployment)" -> "0.0.0.0/0" [label="All connections" color="gold2" fontcolor="darkgreen"] - "example/deploy-bbbb(Deployment)" -> "::/0" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-bbbb(Deployment)" -> "example/deploy-aaaa(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-bbbb(Deployment)" -> "example/deploy-bbbb(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-bbbb(Deployment)" -> "example/deploy-cccc(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] @@ -68,7 +53,6 @@ digraph { "example/deploy-bbbb(Deployment)" -> "example/deploy-jjjj(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-bbbb(Deployment)" -> "example/istio-ingressgateway(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-cccc(Deployment)" -> "0.0.0.0/0" [label="All connections" color="gold2" fontcolor="darkgreen"] - "example/deploy-cccc(Deployment)" -> "::/0" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-cccc(Deployment)" -> "example/deploy-aaaa(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-cccc(Deployment)" -> "example/deploy-bbbb(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-cccc(Deployment)" -> "example/deploy-cccc(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] @@ -82,7 +66,6 @@ digraph { "example/deploy-cccc(Deployment)" -> "example/deploy-jjjj(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-cccc(Deployment)" -> "example/istio-ingressgateway(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-dddd(Deployment)" -> "0.0.0.0/0" [label="All connections" color="gold2" fontcolor="darkgreen"] - "example/deploy-dddd(Deployment)" -> "::/0" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-dddd(Deployment)" -> "example/deploy-aaaa(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-dddd(Deployment)" -> "example/deploy-bbbb(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-dddd(Deployment)" -> "example/deploy-cccc(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] @@ -96,7 +79,6 @@ digraph { "example/deploy-dddd(Deployment)" -> "example/deploy-jjjj(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-dddd(Deployment)" -> "example/istio-ingressgateway(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-eeee(Deployment)" -> "0.0.0.0/0" [label="All connections" color="gold2" fontcolor="darkgreen"] - "example/deploy-eeee(Deployment)" -> "::/0" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-eeee(Deployment)" -> "example/deploy-aaaa(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-eeee(Deployment)" -> "example/deploy-bbbb(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-eeee(Deployment)" -> "example/deploy-cccc(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] @@ -110,7 +92,6 @@ digraph { "example/deploy-eeee(Deployment)" -> "example/deploy-jjjj(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-eeee(Deployment)" -> "example/istio-ingressgateway(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-ffff(Deployment)" -> "0.0.0.0/0" [label="All connections" color="gold2" fontcolor="darkgreen"] - "example/deploy-ffff(Deployment)" -> "::/0" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-ffff(Deployment)" -> "example/deploy-aaaa(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-ffff(Deployment)" -> "example/deploy-bbbb(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-ffff(Deployment)" -> "example/deploy-cccc(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] @@ -124,7 +105,6 @@ digraph { "example/deploy-ffff(Deployment)" -> "example/deploy-jjjj(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-ffff(Deployment)" -> "example/istio-ingressgateway(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-gggg(Deployment)" -> "0.0.0.0/0" [label="All connections" color="gold2" fontcolor="darkgreen"] - "example/deploy-gggg(Deployment)" -> "::/0" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-gggg(Deployment)" -> "example/deploy-aaaa(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-gggg(Deployment)" -> "example/deploy-bbbb(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-gggg(Deployment)" -> "example/deploy-cccc(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] @@ -138,7 +118,6 @@ digraph { "example/deploy-gggg(Deployment)" -> "example/deploy-jjjj(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-gggg(Deployment)" -> "example/istio-ingressgateway(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-hhhh(Deployment)" -> "0.0.0.0/0" [label="All connections" color="gold2" fontcolor="darkgreen"] - "example/deploy-hhhh(Deployment)" -> "::/0" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-hhhh(Deployment)" -> "example/deploy-aaaa(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-hhhh(Deployment)" -> "example/deploy-bbbb(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-hhhh(Deployment)" -> "example/deploy-cccc(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] @@ -152,7 +131,6 @@ digraph { "example/deploy-hhhh(Deployment)" -> "example/deploy-jjjj(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-hhhh(Deployment)" -> "example/istio-ingressgateway(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-iiii(Deployment)" -> "0.0.0.0/0" [label="All connections" color="gold2" fontcolor="darkgreen"] - "example/deploy-iiii(Deployment)" -> "::/0" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-iiii(Deployment)" -> "example/deploy-aaaa(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-iiii(Deployment)" -> "example/deploy-bbbb(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-iiii(Deployment)" -> "example/deploy-cccc(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] @@ -174,7 +152,6 @@ digraph { "example/deploy-ingress-nginx(Deployment)" -> "example/deploy-iiii(Deployment)" [label="TCP {'dst_ports': '3000', 'paths': '/i{4}(/[\\--9A-Z_a-z]*)?', 'hosts': 'ooo.y.z'}" color="gold2" fontcolor="darkgreen"] "example/deploy-ingress-nginx(Deployment)" -> "example/deploy-jjjj(Deployment)" [label="TCP {'dst_ports': '9950', 'paths': '/j{4}(/[\\--9A-Z_a-z]*)?', 'hosts': 'ooo.y.z'}" color="gold2" fontcolor="darkgreen"] "example/deploy-jjjj(Deployment)" -> "0.0.0.0/0" [label="All connections" color="gold2" fontcolor="darkgreen"] - "example/deploy-jjjj(Deployment)" -> "::/0" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-jjjj(Deployment)" -> "example/deploy-aaaa(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-jjjj(Deployment)" -> "example/deploy-bbbb(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-jjjj(Deployment)" -> "example/deploy-cccc(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] @@ -188,7 +165,6 @@ digraph { "example/deploy-jjjj(Deployment)" -> "example/deploy-jjjj(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-jjjj(Deployment)" -> "example/istio-ingressgateway(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/istio-ingressgateway(Deployment)" -> "0.0.0.0/0" [label="All connections" color="gold2" fontcolor="darkgreen"] - "example/istio-ingressgateway(Deployment)" -> "::/0" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/istio-ingressgateway(Deployment)" -> "example/deploy-aaaa(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/istio-ingressgateway(Deployment)" -> "example/deploy-bbbb(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/istio-ingressgateway(Deployment)" -> "example/deploy-cccc(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] diff --git a/tests/istio_testcases/expected_output/complex-k8s-ingress-test-connectivity-map-with-missing-resources.dot b/tests/istio_testcases/expected_output/complex-k8s-ingress-test-connectivity-map-with-missing-resources.dot index b3c3071e..c204b74c 100644 --- a/tests/istio_testcases/expected_output/complex-k8s-ingress-test-connectivity-map-with-missing-resources.dot +++ b/tests/istio_testcases/expected_output/complex-k8s-ingress-test-connectivity-map-with-missing-resources.dot @@ -2,7 +2,6 @@ digraph { HEADER [shape="box" label=< connectivity-2/complex-k8s-ingress-test-missing-resources > fontsize=30 color=webmaroon fontcolor=webmaroon]; "0.0.0.0/0" [label="0.0.0.0/0" color="red2" fontcolor="red2"] - "::/0" [label="::/0" color="red2" fontcolor="red2"] "example/deploy-aaaa(Deployment)" [label="example/deploy-aaaa(Deployment)" color="blue" fontcolor="blue"] "example/deploy-bbbb(Deployment)" [label="example/deploy-bbbb(Deployment)" color="blue" fontcolor="blue"] "example/deploy-cccc(Deployment)" [label="example/deploy-cccc(Deployment)" color="blue" fontcolor="blue"] @@ -25,19 +24,7 @@ digraph { "0.0.0.0/0" -> "example/deploy-iiii(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "0.0.0.0/0" -> "example/deploy-jjjj(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "0.0.0.0/0" -> "ingress-controller-ns/ingress-controller-livesim(Pod)" [label="All connections" color="gold2" fontcolor="darkgreen"] - "::/0" -> "example/deploy-aaaa(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] - "::/0" -> "example/deploy-bbbb(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] - "::/0" -> "example/deploy-cccc(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] - "::/0" -> "example/deploy-dddd(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] - "::/0" -> "example/deploy-eeee(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] - "::/0" -> "example/deploy-ffff(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] - "::/0" -> "example/deploy-gggg(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] - "::/0" -> "example/deploy-hhhh(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] - "::/0" -> "example/deploy-iiii(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] - "::/0" -> "example/deploy-jjjj(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] - "::/0" -> "ingress-controller-ns/ingress-controller-livesim(Pod)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-aaaa(Deployment)" -> "0.0.0.0/0" [label="All connections" color="gold2" fontcolor="darkgreen"] - "example/deploy-aaaa(Deployment)" -> "::/0" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-aaaa(Deployment)" -> "example/deploy-aaaa(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-aaaa(Deployment)" -> "example/deploy-bbbb(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-aaaa(Deployment)" -> "example/deploy-cccc(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] @@ -50,7 +37,6 @@ digraph { "example/deploy-aaaa(Deployment)" -> "example/deploy-jjjj(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-aaaa(Deployment)" -> "ingress-controller-ns/ingress-controller-livesim(Pod)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-bbbb(Deployment)" -> "0.0.0.0/0" [label="All connections" color="gold2" fontcolor="darkgreen"] - "example/deploy-bbbb(Deployment)" -> "::/0" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-bbbb(Deployment)" -> "example/deploy-aaaa(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-bbbb(Deployment)" -> "example/deploy-bbbb(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-bbbb(Deployment)" -> "example/deploy-cccc(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] @@ -63,7 +49,6 @@ digraph { "example/deploy-bbbb(Deployment)" -> "example/deploy-jjjj(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-bbbb(Deployment)" -> "ingress-controller-ns/ingress-controller-livesim(Pod)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-cccc(Deployment)" -> "0.0.0.0/0" [label="All connections" color="gold2" fontcolor="darkgreen"] - "example/deploy-cccc(Deployment)" -> "::/0" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-cccc(Deployment)" -> "example/deploy-aaaa(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-cccc(Deployment)" -> "example/deploy-bbbb(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-cccc(Deployment)" -> "example/deploy-cccc(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] @@ -76,7 +61,6 @@ digraph { "example/deploy-cccc(Deployment)" -> "example/deploy-jjjj(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-cccc(Deployment)" -> "ingress-controller-ns/ingress-controller-livesim(Pod)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-dddd(Deployment)" -> "0.0.0.0/0" [label="All connections" color="gold2" fontcolor="darkgreen"] - "example/deploy-dddd(Deployment)" -> "::/0" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-dddd(Deployment)" -> "example/deploy-aaaa(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-dddd(Deployment)" -> "example/deploy-bbbb(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-dddd(Deployment)" -> "example/deploy-cccc(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] @@ -89,7 +73,6 @@ digraph { "example/deploy-dddd(Deployment)" -> "example/deploy-jjjj(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-dddd(Deployment)" -> "ingress-controller-ns/ingress-controller-livesim(Pod)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-eeee(Deployment)" -> "0.0.0.0/0" [label="All connections" color="gold2" fontcolor="darkgreen"] - "example/deploy-eeee(Deployment)" -> "::/0" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-eeee(Deployment)" -> "example/deploy-aaaa(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-eeee(Deployment)" -> "example/deploy-bbbb(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-eeee(Deployment)" -> "example/deploy-cccc(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] @@ -102,7 +85,6 @@ digraph { "example/deploy-eeee(Deployment)" -> "example/deploy-jjjj(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-eeee(Deployment)" -> "ingress-controller-ns/ingress-controller-livesim(Pod)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-ffff(Deployment)" -> "0.0.0.0/0" [label="All connections" color="gold2" fontcolor="darkgreen"] - "example/deploy-ffff(Deployment)" -> "::/0" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-ffff(Deployment)" -> "example/deploy-aaaa(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-ffff(Deployment)" -> "example/deploy-bbbb(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-ffff(Deployment)" -> "example/deploy-cccc(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] @@ -115,7 +97,6 @@ digraph { "example/deploy-ffff(Deployment)" -> "example/deploy-jjjj(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-ffff(Deployment)" -> "ingress-controller-ns/ingress-controller-livesim(Pod)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-gggg(Deployment)" -> "0.0.0.0/0" [label="All connections" color="gold2" fontcolor="darkgreen"] - "example/deploy-gggg(Deployment)" -> "::/0" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-gggg(Deployment)" -> "example/deploy-aaaa(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-gggg(Deployment)" -> "example/deploy-bbbb(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-gggg(Deployment)" -> "example/deploy-cccc(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] @@ -128,7 +109,6 @@ digraph { "example/deploy-gggg(Deployment)" -> "example/deploy-jjjj(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-gggg(Deployment)" -> "ingress-controller-ns/ingress-controller-livesim(Pod)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-hhhh(Deployment)" -> "0.0.0.0/0" [label="All connections" color="gold2" fontcolor="darkgreen"] - "example/deploy-hhhh(Deployment)" -> "::/0" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-hhhh(Deployment)" -> "example/deploy-aaaa(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-hhhh(Deployment)" -> "example/deploy-bbbb(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-hhhh(Deployment)" -> "example/deploy-cccc(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] @@ -141,7 +121,6 @@ digraph { "example/deploy-hhhh(Deployment)" -> "example/deploy-jjjj(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-hhhh(Deployment)" -> "ingress-controller-ns/ingress-controller-livesim(Pod)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-iiii(Deployment)" -> "0.0.0.0/0" [label="All connections" color="gold2" fontcolor="darkgreen"] - "example/deploy-iiii(Deployment)" -> "::/0" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-iiii(Deployment)" -> "example/deploy-aaaa(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-iiii(Deployment)" -> "example/deploy-bbbb(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-iiii(Deployment)" -> "example/deploy-cccc(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] @@ -154,7 +133,6 @@ digraph { "example/deploy-iiii(Deployment)" -> "example/deploy-jjjj(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-iiii(Deployment)" -> "ingress-controller-ns/ingress-controller-livesim(Pod)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-jjjj(Deployment)" -> "0.0.0.0/0" [label="All connections" color="gold2" fontcolor="darkgreen"] - "example/deploy-jjjj(Deployment)" -> "::/0" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-jjjj(Deployment)" -> "example/deploy-aaaa(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-jjjj(Deployment)" -> "example/deploy-bbbb(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-jjjj(Deployment)" -> "example/deploy-cccc(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] diff --git a/tests/istio_testcases/expected_output/complex-k8s-ingress-test-connectivity-map.dot b/tests/istio_testcases/expected_output/complex-k8s-ingress-test-connectivity-map.dot index 35fbfc14..86fe8fcf 100644 --- a/tests/istio_testcases/expected_output/complex-k8s-ingress-test-connectivity-map.dot +++ b/tests/istio_testcases/expected_output/complex-k8s-ingress-test-connectivity-map.dot @@ -2,7 +2,6 @@ digraph { HEADER [shape="box" label=< connectivity/complex-k8s-ingress-test > fontsize=30 color=webmaroon fontcolor=webmaroon]; "0.0.0.0/0" [label="0.0.0.0/0" color="red2" fontcolor="red2"] - "::/0" [label="::/0" color="red2" fontcolor="red2"] "example/deploy-aaaa(Deployment)" [label="example/deploy-aaaa(Deployment)" color="blue" fontcolor="blue"] "example/deploy-bbbb(Deployment)" [label="example/deploy-bbbb(Deployment)" color="blue" fontcolor="blue"] "example/deploy-cccc(Deployment)" [label="example/deploy-cccc(Deployment)" color="blue" fontcolor="blue"] @@ -27,20 +26,7 @@ digraph { "0.0.0.0/0" -> "example/deploy-ingress-nginx(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "0.0.0.0/0" -> "example/deploy-jjjj(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "0.0.0.0/0" -> "example/istio-ingressgateway(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] - "::/0" -> "example/deploy-aaaa(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] - "::/0" -> "example/deploy-bbbb(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] - "::/0" -> "example/deploy-cccc(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] - "::/0" -> "example/deploy-dddd(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] - "::/0" -> "example/deploy-eeee(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] - "::/0" -> "example/deploy-ffff(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] - "::/0" -> "example/deploy-gggg(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] - "::/0" -> "example/deploy-hhhh(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] - "::/0" -> "example/deploy-iiii(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] - "::/0" -> "example/deploy-ingress-nginx(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] - "::/0" -> "example/deploy-jjjj(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] - "::/0" -> "example/istio-ingressgateway(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-aaaa(Deployment)" -> "0.0.0.0/0" [label="All connections" color="gold2" fontcolor="darkgreen"] - "example/deploy-aaaa(Deployment)" -> "::/0" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-aaaa(Deployment)" -> "example/deploy-aaaa(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-aaaa(Deployment)" -> "example/deploy-bbbb(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-aaaa(Deployment)" -> "example/deploy-cccc(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] @@ -54,7 +40,6 @@ digraph { "example/deploy-aaaa(Deployment)" -> "example/deploy-jjjj(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-aaaa(Deployment)" -> "example/istio-ingressgateway(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-bbbb(Deployment)" -> "0.0.0.0/0" [label="All connections" color="gold2" fontcolor="darkgreen"] - "example/deploy-bbbb(Deployment)" -> "::/0" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-bbbb(Deployment)" -> "example/deploy-aaaa(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-bbbb(Deployment)" -> "example/deploy-bbbb(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-bbbb(Deployment)" -> "example/deploy-cccc(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] @@ -68,7 +53,6 @@ digraph { "example/deploy-bbbb(Deployment)" -> "example/deploy-jjjj(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-bbbb(Deployment)" -> "example/istio-ingressgateway(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-cccc(Deployment)" -> "0.0.0.0/0" [label="All connections" color="gold2" fontcolor="darkgreen"] - "example/deploy-cccc(Deployment)" -> "::/0" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-cccc(Deployment)" -> "example/deploy-aaaa(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-cccc(Deployment)" -> "example/deploy-bbbb(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-cccc(Deployment)" -> "example/deploy-cccc(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] @@ -82,7 +66,6 @@ digraph { "example/deploy-cccc(Deployment)" -> "example/deploy-jjjj(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-cccc(Deployment)" -> "example/istio-ingressgateway(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-dddd(Deployment)" -> "0.0.0.0/0" [label="All connections" color="gold2" fontcolor="darkgreen"] - "example/deploy-dddd(Deployment)" -> "::/0" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-dddd(Deployment)" -> "example/deploy-aaaa(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-dddd(Deployment)" -> "example/deploy-bbbb(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-dddd(Deployment)" -> "example/deploy-cccc(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] @@ -96,7 +79,6 @@ digraph { "example/deploy-dddd(Deployment)" -> "example/deploy-jjjj(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-dddd(Deployment)" -> "example/istio-ingressgateway(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-eeee(Deployment)" -> "0.0.0.0/0" [label="All connections" color="gold2" fontcolor="darkgreen"] - "example/deploy-eeee(Deployment)" -> "::/0" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-eeee(Deployment)" -> "example/deploy-aaaa(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-eeee(Deployment)" -> "example/deploy-bbbb(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-eeee(Deployment)" -> "example/deploy-cccc(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] @@ -110,7 +92,6 @@ digraph { "example/deploy-eeee(Deployment)" -> "example/deploy-jjjj(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-eeee(Deployment)" -> "example/istio-ingressgateway(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-ffff(Deployment)" -> "0.0.0.0/0" [label="All connections" color="gold2" fontcolor="darkgreen"] - "example/deploy-ffff(Deployment)" -> "::/0" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-ffff(Deployment)" -> "example/deploy-aaaa(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-ffff(Deployment)" -> "example/deploy-bbbb(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-ffff(Deployment)" -> "example/deploy-cccc(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] @@ -124,7 +105,6 @@ digraph { "example/deploy-ffff(Deployment)" -> "example/deploy-jjjj(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-ffff(Deployment)" -> "example/istio-ingressgateway(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-gggg(Deployment)" -> "0.0.0.0/0" [label="All connections" color="gold2" fontcolor="darkgreen"] - "example/deploy-gggg(Deployment)" -> "::/0" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-gggg(Deployment)" -> "example/deploy-aaaa(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-gggg(Deployment)" -> "example/deploy-bbbb(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-gggg(Deployment)" -> "example/deploy-cccc(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] @@ -138,7 +118,6 @@ digraph { "example/deploy-gggg(Deployment)" -> "example/deploy-jjjj(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-gggg(Deployment)" -> "example/istio-ingressgateway(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-hhhh(Deployment)" -> "0.0.0.0/0" [label="All connections" color="gold2" fontcolor="darkgreen"] - "example/deploy-hhhh(Deployment)" -> "::/0" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-hhhh(Deployment)" -> "example/deploy-aaaa(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-hhhh(Deployment)" -> "example/deploy-bbbb(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-hhhh(Deployment)" -> "example/deploy-cccc(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] @@ -152,7 +131,6 @@ digraph { "example/deploy-hhhh(Deployment)" -> "example/deploy-jjjj(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-hhhh(Deployment)" -> "example/istio-ingressgateway(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-iiii(Deployment)" -> "0.0.0.0/0" [label="All connections" color="gold2" fontcolor="darkgreen"] - "example/deploy-iiii(Deployment)" -> "::/0" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-iiii(Deployment)" -> "example/deploy-aaaa(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-iiii(Deployment)" -> "example/deploy-bbbb(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-iiii(Deployment)" -> "example/deploy-cccc(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] @@ -174,7 +152,6 @@ digraph { "example/deploy-ingress-nginx(Deployment)" -> "example/deploy-iiii(Deployment)" [label="TCP {'dst_ports': '3000', 'paths': '/[\\--9A-Z_a-z]*', 'hosts': 'iiii.y.z'}" color="gold2" fontcolor="darkgreen"] "example/deploy-ingress-nginx(Deployment)" -> "example/deploy-jjjj(Deployment)" [label="TCP {'dst_ports': '9950', 'paths': '/[\\--9A-Z_a-z]*', 'hosts': 'jjjj.y.z'}" color="gold2" fontcolor="darkgreen"] "example/deploy-jjjj(Deployment)" -> "0.0.0.0/0" [label="All connections" color="gold2" fontcolor="darkgreen"] - "example/deploy-jjjj(Deployment)" -> "::/0" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-jjjj(Deployment)" -> "example/deploy-aaaa(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-jjjj(Deployment)" -> "example/deploy-bbbb(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-jjjj(Deployment)" -> "example/deploy-cccc(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] @@ -188,7 +165,6 @@ digraph { "example/deploy-jjjj(Deployment)" -> "example/deploy-jjjj(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/deploy-jjjj(Deployment)" -> "example/istio-ingressgateway(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/istio-ingressgateway(Deployment)" -> "0.0.0.0/0" [label="All connections" color="gold2" fontcolor="darkgreen"] - "example/istio-ingressgateway(Deployment)" -> "::/0" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/istio-ingressgateway(Deployment)" -> "example/deploy-aaaa(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/istio-ingressgateway(Deployment)" -> "example/deploy-bbbb(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] "example/istio-ingressgateway(Deployment)" -> "example/deploy-cccc(Deployment)" [label="All connections" color="gold2" fontcolor="darkgreen"] diff --git a/tests/istio_testcases/expected_output/connectivity-bookinfo-demo-by-deployments.dot b/tests/istio_testcases/expected_output/connectivity-bookinfo-demo-by-deployments.dot index 930f4a4b..08603130 100644 --- a/tests/istio_testcases/expected_output/connectivity-bookinfo-demo-by-deployments.dot +++ b/tests/istio_testcases/expected_output/connectivity-bookinfo-demo-by-deployments.dot @@ -2,7 +2,6 @@ digraph { HEADER [shape="box" label=< connectivity-bookinfo-demo-by-deployments/bookinfo-demo, for TCP connections > fontsize=30 color=webmaroon fontcolor=webmaroon]; "0.0.0.0/0" [label="0.0.0.0/0" color="red2" fontcolor="red2"] - "::/0" [label="::/0" color="red2" fontcolor="red2"] "default/details-v1(Deployment-StatefulSet)" [label="default/details-v1(Deployment-StatefulSet)" color="blue" fontcolor="blue"] "default/productpage-v1(Deployment-StatefulSet)" [label="default/productpage-v1(Deployment-StatefulSet)" color="blue" fontcolor="blue"] "default/ratings-v1(Deployment-StatefulSet)" [label="default/ratings-v1(Deployment-StatefulSet)" color="blue" fontcolor="blue"] @@ -11,34 +10,26 @@ digraph { "default/reviews-v3(Deployment-StatefulSet)" [label="default/reviews-v3(Deployment-StatefulSet)" color="blue" fontcolor="blue"] "istio-system/istio-ingressgateway(Deployment-StatefulSet)" [label="istio-system/istio-ingressgateway(Deployment-StatefulSet)" color="blue" fontcolor="blue"] "0.0.0.0/0" -> "istio-system/istio-ingressgateway(Deployment-StatefulSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] - "::/0" -> "istio-system/istio-ingressgateway(Deployment-StatefulSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] "default/details-v1(Deployment-StatefulSet)" -> "0.0.0.0/0" [label="All connections" color="gold2" fontcolor="darkgreen"] - "default/details-v1(Deployment-StatefulSet)" -> "::/0" [label="All connections" color="gold2" fontcolor="darkgreen"] "default/details-v1(Deployment-StatefulSet)" -> "istio-system/istio-ingressgateway(Deployment-StatefulSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] "default/productpage-v1(Deployment-StatefulSet)" -> "0.0.0.0/0" [label="All connections" color="gold2" fontcolor="darkgreen"] - "default/productpage-v1(Deployment-StatefulSet)" -> "::/0" [label="All connections" color="gold2" fontcolor="darkgreen"] "default/productpage-v1(Deployment-StatefulSet)" -> "default/details-v1(Deployment-StatefulSet)" [label="TCP {'methods': 'GET'}" color="gold2" fontcolor="darkgreen"] "default/productpage-v1(Deployment-StatefulSet)" -> "default/reviews-v1(Deployment-StatefulSet)" [label="TCP {'methods': 'GET'}" color="gold2" fontcolor="darkgreen"] "default/productpage-v1(Deployment-StatefulSet)" -> "default/reviews-v2(Deployment-StatefulSet)" [label="TCP {'methods': 'GET'}" color="gold2" fontcolor="darkgreen"] "default/productpage-v1(Deployment-StatefulSet)" -> "default/reviews-v3(Deployment-StatefulSet)" [label="TCP {'methods': 'GET'}" color="gold2" fontcolor="darkgreen"] "default/productpage-v1(Deployment-StatefulSet)" -> "istio-system/istio-ingressgateway(Deployment-StatefulSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] "default/ratings-v1(Deployment-StatefulSet)" -> "0.0.0.0/0" [label="All connections" color="gold2" fontcolor="darkgreen"] - "default/ratings-v1(Deployment-StatefulSet)" -> "::/0" [label="All connections" color="gold2" fontcolor="darkgreen"] "default/ratings-v1(Deployment-StatefulSet)" -> "istio-system/istio-ingressgateway(Deployment-StatefulSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] "default/reviews-v1(Deployment-StatefulSet)" -> "0.0.0.0/0" [label="All connections" color="gold2" fontcolor="darkgreen"] - "default/reviews-v1(Deployment-StatefulSet)" -> "::/0" [label="All connections" color="gold2" fontcolor="darkgreen"] "default/reviews-v1(Deployment-StatefulSet)" -> "default/ratings-v1(Deployment-StatefulSet)" [label="TCP {'methods': 'GET'}" color="gold2" fontcolor="darkgreen"] "default/reviews-v1(Deployment-StatefulSet)" -> "istio-system/istio-ingressgateway(Deployment-StatefulSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] "default/reviews-v2(Deployment-StatefulSet)" -> "0.0.0.0/0" [label="All connections" color="gold2" fontcolor="darkgreen"] - "default/reviews-v2(Deployment-StatefulSet)" -> "::/0" [label="All connections" color="gold2" fontcolor="darkgreen"] "default/reviews-v2(Deployment-StatefulSet)" -> "default/ratings-v1(Deployment-StatefulSet)" [label="TCP {'methods': 'GET'}" color="gold2" fontcolor="darkgreen"] "default/reviews-v2(Deployment-StatefulSet)" -> "istio-system/istio-ingressgateway(Deployment-StatefulSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] "default/reviews-v3(Deployment-StatefulSet)" -> "0.0.0.0/0" [label="All connections" color="gold2" fontcolor="darkgreen"] - "default/reviews-v3(Deployment-StatefulSet)" -> "::/0" [label="All connections" color="gold2" fontcolor="darkgreen"] "default/reviews-v3(Deployment-StatefulSet)" -> "default/ratings-v1(Deployment-StatefulSet)" [label="TCP {'methods': 'GET'}" color="gold2" fontcolor="darkgreen"] "default/reviews-v3(Deployment-StatefulSet)" -> "istio-system/istio-ingressgateway(Deployment-StatefulSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] "istio-system/istio-ingressgateway(Deployment-StatefulSet)" -> "0.0.0.0/0" [label="All connections" color="gold2" fontcolor="darkgreen"] - "istio-system/istio-ingressgateway(Deployment-StatefulSet)" -> "::/0" [label="All connections" color="gold2" fontcolor="darkgreen"] "istio-system/istio-ingressgateway(Deployment-StatefulSet)" -> "default/productpage-v1(Deployment-StatefulSet)" [label="TCP {'methods': 'GET'}" color="gold2" fontcolor="darkgreen"] } @@ -46,7 +37,6 @@ digraph { digraph { HEADER [shape="box" label=< connectivity-bookinfo-demo-by-deployments/bookinfo-demo, for non-TCP connections > fontsize=30 color=webmaroon fontcolor=webmaroon]; "0.0.0.0/0" [label="0.0.0.0/0" color="red2" fontcolor="red2"] - "::/0" [label="::/0" color="red2" fontcolor="red2"] "default/details-v1(Deployment-StatefulSet)" [label="default/details-v1(Deployment-StatefulSet)" color="blue" fontcolor="blue"] "default/productpage-v1(Deployment-StatefulSet)" [label="default/productpage-v1(Deployment-StatefulSet)" color="blue" fontcolor="blue"] "default/ratings-v1(Deployment-StatefulSet)" [label="default/ratings-v1(Deployment-StatefulSet)" color="blue" fontcolor="blue"] @@ -61,15 +51,7 @@ digraph { "0.0.0.0/0" -> "default/reviews-v2(Deployment-StatefulSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] "0.0.0.0/0" -> "default/reviews-v3(Deployment-StatefulSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] "0.0.0.0/0" -> "istio-system/istio-ingressgateway(Deployment-StatefulSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] - "::/0" -> "default/details-v1(Deployment-StatefulSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] - "::/0" -> "default/productpage-v1(Deployment-StatefulSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] - "::/0" -> "default/ratings-v1(Deployment-StatefulSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] - "::/0" -> "default/reviews-v1(Deployment-StatefulSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] - "::/0" -> "default/reviews-v2(Deployment-StatefulSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] - "::/0" -> "default/reviews-v3(Deployment-StatefulSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] - "::/0" -> "istio-system/istio-ingressgateway(Deployment-StatefulSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] "default/details-v1(Deployment-StatefulSet)" -> "0.0.0.0/0" [label="All connections" color="gold2" fontcolor="darkgreen"] - "default/details-v1(Deployment-StatefulSet)" -> "::/0" [label="All connections" color="gold2" fontcolor="darkgreen"] "default/details-v1(Deployment-StatefulSet)" -> "default/productpage-v1(Deployment-StatefulSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] "default/details-v1(Deployment-StatefulSet)" -> "default/ratings-v1(Deployment-StatefulSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] "default/details-v1(Deployment-StatefulSet)" -> "default/reviews-v1(Deployment-StatefulSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] @@ -77,7 +59,6 @@ digraph { "default/details-v1(Deployment-StatefulSet)" -> "default/reviews-v3(Deployment-StatefulSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] "default/details-v1(Deployment-StatefulSet)" -> "istio-system/istio-ingressgateway(Deployment-StatefulSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] "default/productpage-v1(Deployment-StatefulSet)" -> "0.0.0.0/0" [label="All connections" color="gold2" fontcolor="darkgreen"] - "default/productpage-v1(Deployment-StatefulSet)" -> "::/0" [label="All connections" color="gold2" fontcolor="darkgreen"] "default/productpage-v1(Deployment-StatefulSet)" -> "default/details-v1(Deployment-StatefulSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] "default/productpage-v1(Deployment-StatefulSet)" -> "default/ratings-v1(Deployment-StatefulSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] "default/productpage-v1(Deployment-StatefulSet)" -> "default/reviews-v1(Deployment-StatefulSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] @@ -85,7 +66,6 @@ digraph { "default/productpage-v1(Deployment-StatefulSet)" -> "default/reviews-v3(Deployment-StatefulSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] "default/productpage-v1(Deployment-StatefulSet)" -> "istio-system/istio-ingressgateway(Deployment-StatefulSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] "default/ratings-v1(Deployment-StatefulSet)" -> "0.0.0.0/0" [label="All connections" color="gold2" fontcolor="darkgreen"] - "default/ratings-v1(Deployment-StatefulSet)" -> "::/0" [label="All connections" color="gold2" fontcolor="darkgreen"] "default/ratings-v1(Deployment-StatefulSet)" -> "default/details-v1(Deployment-StatefulSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] "default/ratings-v1(Deployment-StatefulSet)" -> "default/productpage-v1(Deployment-StatefulSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] "default/ratings-v1(Deployment-StatefulSet)" -> "default/reviews-v1(Deployment-StatefulSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] @@ -93,7 +73,6 @@ digraph { "default/ratings-v1(Deployment-StatefulSet)" -> "default/reviews-v3(Deployment-StatefulSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] "default/ratings-v1(Deployment-StatefulSet)" -> "istio-system/istio-ingressgateway(Deployment-StatefulSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] "default/reviews-v1(Deployment-StatefulSet)" -> "0.0.0.0/0" [label="All connections" color="gold2" fontcolor="darkgreen"] - "default/reviews-v1(Deployment-StatefulSet)" -> "::/0" [label="All connections" color="gold2" fontcolor="darkgreen"] "default/reviews-v1(Deployment-StatefulSet)" -> "default/details-v1(Deployment-StatefulSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] "default/reviews-v1(Deployment-StatefulSet)" -> "default/productpage-v1(Deployment-StatefulSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] "default/reviews-v1(Deployment-StatefulSet)" -> "default/ratings-v1(Deployment-StatefulSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] @@ -101,7 +80,6 @@ digraph { "default/reviews-v1(Deployment-StatefulSet)" -> "default/reviews-v3(Deployment-StatefulSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] "default/reviews-v1(Deployment-StatefulSet)" -> "istio-system/istio-ingressgateway(Deployment-StatefulSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] "default/reviews-v2(Deployment-StatefulSet)" -> "0.0.0.0/0" [label="All connections" color="gold2" fontcolor="darkgreen"] - "default/reviews-v2(Deployment-StatefulSet)" -> "::/0" [label="All connections" color="gold2" fontcolor="darkgreen"] "default/reviews-v2(Deployment-StatefulSet)" -> "default/details-v1(Deployment-StatefulSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] "default/reviews-v2(Deployment-StatefulSet)" -> "default/productpage-v1(Deployment-StatefulSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] "default/reviews-v2(Deployment-StatefulSet)" -> "default/ratings-v1(Deployment-StatefulSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] @@ -109,7 +87,6 @@ digraph { "default/reviews-v2(Deployment-StatefulSet)" -> "default/reviews-v3(Deployment-StatefulSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] "default/reviews-v2(Deployment-StatefulSet)" -> "istio-system/istio-ingressgateway(Deployment-StatefulSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] "default/reviews-v3(Deployment-StatefulSet)" -> "0.0.0.0/0" [label="All connections" color="gold2" fontcolor="darkgreen"] - "default/reviews-v3(Deployment-StatefulSet)" -> "::/0" [label="All connections" color="gold2" fontcolor="darkgreen"] "default/reviews-v3(Deployment-StatefulSet)" -> "default/details-v1(Deployment-StatefulSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] "default/reviews-v3(Deployment-StatefulSet)" -> "default/productpage-v1(Deployment-StatefulSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] "default/reviews-v3(Deployment-StatefulSet)" -> "default/ratings-v1(Deployment-StatefulSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] @@ -117,12 +94,10 @@ digraph { "default/reviews-v3(Deployment-StatefulSet)" -> "default/reviews-v2(Deployment-StatefulSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] "default/reviews-v3(Deployment-StatefulSet)" -> "istio-system/istio-ingressgateway(Deployment-StatefulSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] "istio-system/istio-ingressgateway(Deployment-StatefulSet)" -> "0.0.0.0/0" [label="All connections" color="gold2" fontcolor="darkgreen"] - "istio-system/istio-ingressgateway(Deployment-StatefulSet)" -> "::/0" [label="All connections" color="gold2" fontcolor="darkgreen"] "istio-system/istio-ingressgateway(Deployment-StatefulSet)" -> "default/details-v1(Deployment-StatefulSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] "istio-system/istio-ingressgateway(Deployment-StatefulSet)" -> "default/productpage-v1(Deployment-StatefulSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] "istio-system/istio-ingressgateway(Deployment-StatefulSet)" -> "default/ratings-v1(Deployment-StatefulSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] "istio-system/istio-ingressgateway(Deployment-StatefulSet)" -> "default/reviews-v1(Deployment-StatefulSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] "istio-system/istio-ingressgateway(Deployment-StatefulSet)" -> "default/reviews-v2(Deployment-StatefulSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] "istio-system/istio-ingressgateway(Deployment-StatefulSet)" -> "default/reviews-v3(Deployment-StatefulSet)" [label="All connections" color="gold2" fontcolor="darkgreen"] -} - +} \ No newline at end of file diff --git a/tests/istio_testcases/expected_output/connectivity-bookinfo-demo-by-pods.dot b/tests/istio_testcases/expected_output/connectivity-bookinfo-demo-by-pods.dot index fb1eb5bd..6b1f1a03 100644 --- a/tests/istio_testcases/expected_output/connectivity-bookinfo-demo-by-pods.dot +++ b/tests/istio_testcases/expected_output/connectivity-bookinfo-demo-by-pods.dot @@ -2,7 +2,6 @@ digraph { HEADER [shape="box" label=< connectivity-bookinfo-demo-by-pods/bookinfo-demo, for TCP connections > fontsize=30 color=webmaroon fontcolor=webmaroon]; "0.0.0.0/0" [label="0.0.0.0/0" color="red2" fontcolor="red2"] - "::/0" [label="::/0" color="red2" fontcolor="red2"] "default/details-v1-79f774bdb9-tw7sj" [label="default/details-v1-79f774bdb9-tw7sj" color="blue" fontcolor="blue"] "default/productpage-v1-6b746f74dc-kkzzk" [label="default/productpage-v1-6b746f74dc-kkzzk" color="blue" fontcolor="blue"] "default/ratings-v1-b6994bb9-gl27w" [label="default/ratings-v1-b6994bb9-gl27w" color="blue" fontcolor="blue"] @@ -11,34 +10,26 @@ digraph { "default/reviews-v3-84779c7bbc-lfjvk" [label="default/reviews-v3-84779c7bbc-lfjvk" color="blue" fontcolor="blue"] "istio-system/istio-ingressgateway-55d9fb9f-f4mzz" [label="istio-system/istio-ingressgateway-55d9fb9f-f4mzz" color="blue" fontcolor="blue"] "0.0.0.0/0" -> "istio-system/istio-ingressgateway-55d9fb9f-f4mzz" [label="All connections" color="gold2" fontcolor="darkgreen"] - "::/0" -> "istio-system/istio-ingressgateway-55d9fb9f-f4mzz" [label="All connections" color="gold2" fontcolor="darkgreen"] "default/details-v1-79f774bdb9-tw7sj" -> "0.0.0.0/0" [label="All connections" color="gold2" fontcolor="darkgreen"] - "default/details-v1-79f774bdb9-tw7sj" -> "::/0" [label="All connections" color="gold2" fontcolor="darkgreen"] "default/details-v1-79f774bdb9-tw7sj" -> "istio-system/istio-ingressgateway-55d9fb9f-f4mzz" [label="All connections" color="gold2" fontcolor="darkgreen"] "default/productpage-v1-6b746f74dc-kkzzk" -> "0.0.0.0/0" [label="All connections" color="gold2" fontcolor="darkgreen"] - "default/productpage-v1-6b746f74dc-kkzzk" -> "::/0" [label="All connections" color="gold2" fontcolor="darkgreen"] "default/productpage-v1-6b746f74dc-kkzzk" -> "default/details-v1-79f774bdb9-tw7sj" [label="TCP {'methods': 'GET'}" color="gold2" fontcolor="darkgreen"] "default/productpage-v1-6b746f74dc-kkzzk" -> "default/reviews-v1-545db77b95-2ps7q" [label="TCP {'methods': 'GET'}" color="gold2" fontcolor="darkgreen"] "default/productpage-v1-6b746f74dc-kkzzk" -> "default/reviews-v2-7bf8c9648f-7v7ps" [label="TCP {'methods': 'GET'}" color="gold2" fontcolor="darkgreen"] "default/productpage-v1-6b746f74dc-kkzzk" -> "default/reviews-v3-84779c7bbc-lfjvk" [label="TCP {'methods': 'GET'}" color="gold2" fontcolor="darkgreen"] "default/productpage-v1-6b746f74dc-kkzzk" -> "istio-system/istio-ingressgateway-55d9fb9f-f4mzz" [label="All connections" color="gold2" fontcolor="darkgreen"] "default/ratings-v1-b6994bb9-gl27w" -> "0.0.0.0/0" [label="All connections" color="gold2" fontcolor="darkgreen"] - "default/ratings-v1-b6994bb9-gl27w" -> "::/0" [label="All connections" color="gold2" fontcolor="darkgreen"] "default/ratings-v1-b6994bb9-gl27w" -> "istio-system/istio-ingressgateway-55d9fb9f-f4mzz" [label="All connections" color="gold2" fontcolor="darkgreen"] "default/reviews-v1-545db77b95-2ps7q" -> "0.0.0.0/0" [label="All connections" color="gold2" fontcolor="darkgreen"] - "default/reviews-v1-545db77b95-2ps7q" -> "::/0" [label="All connections" color="gold2" fontcolor="darkgreen"] "default/reviews-v1-545db77b95-2ps7q" -> "default/ratings-v1-b6994bb9-gl27w" [label="TCP {'methods': 'GET'}" color="gold2" fontcolor="darkgreen"] "default/reviews-v1-545db77b95-2ps7q" -> "istio-system/istio-ingressgateway-55d9fb9f-f4mzz" [label="All connections" color="gold2" fontcolor="darkgreen"] "default/reviews-v2-7bf8c9648f-7v7ps" -> "0.0.0.0/0" [label="All connections" color="gold2" fontcolor="darkgreen"] - "default/reviews-v2-7bf8c9648f-7v7ps" -> "::/0" [label="All connections" color="gold2" fontcolor="darkgreen"] "default/reviews-v2-7bf8c9648f-7v7ps" -> "default/ratings-v1-b6994bb9-gl27w" [label="TCP {'methods': 'GET'}" color="gold2" fontcolor="darkgreen"] "default/reviews-v2-7bf8c9648f-7v7ps" -> "istio-system/istio-ingressgateway-55d9fb9f-f4mzz" [label="All connections" color="gold2" fontcolor="darkgreen"] "default/reviews-v3-84779c7bbc-lfjvk" -> "0.0.0.0/0" [label="All connections" color="gold2" fontcolor="darkgreen"] - "default/reviews-v3-84779c7bbc-lfjvk" -> "::/0" [label="All connections" color="gold2" fontcolor="darkgreen"] "default/reviews-v3-84779c7bbc-lfjvk" -> "default/ratings-v1-b6994bb9-gl27w" [label="TCP {'methods': 'GET'}" color="gold2" fontcolor="darkgreen"] "default/reviews-v3-84779c7bbc-lfjvk" -> "istio-system/istio-ingressgateway-55d9fb9f-f4mzz" [label="All connections" color="gold2" fontcolor="darkgreen"] "istio-system/istio-ingressgateway-55d9fb9f-f4mzz" -> "0.0.0.0/0" [label="All connections" color="gold2" fontcolor="darkgreen"] - "istio-system/istio-ingressgateway-55d9fb9f-f4mzz" -> "::/0" [label="All connections" color="gold2" fontcolor="darkgreen"] "istio-system/istio-ingressgateway-55d9fb9f-f4mzz" -> "default/productpage-v1-6b746f74dc-kkzzk" [label="TCP {'methods': 'GET'}" color="gold2" fontcolor="darkgreen"] } @@ -46,7 +37,6 @@ digraph { digraph { HEADER [shape="box" label=< connectivity-bookinfo-demo-by-pods/bookinfo-demo, for non-TCP connections > fontsize=30 color=webmaroon fontcolor=webmaroon]; "0.0.0.0/0" [label="0.0.0.0/0" color="red2" fontcolor="red2"] - "::/0" [label="::/0" color="red2" fontcolor="red2"] "default/details-v1-79f774bdb9-tw7sj" [label="default/details-v1-79f774bdb9-tw7sj" color="blue" fontcolor="blue"] "default/productpage-v1-6b746f74dc-kkzzk" [label="default/productpage-v1-6b746f74dc-kkzzk" color="blue" fontcolor="blue"] "default/ratings-v1-b6994bb9-gl27w" [label="default/ratings-v1-b6994bb9-gl27w" color="blue" fontcolor="blue"] @@ -61,15 +51,7 @@ digraph { "0.0.0.0/0" -> "default/reviews-v2-7bf8c9648f-7v7ps" [label="All connections" color="gold2" fontcolor="darkgreen"] "0.0.0.0/0" -> "default/reviews-v3-84779c7bbc-lfjvk" [label="All connections" color="gold2" fontcolor="darkgreen"] "0.0.0.0/0" -> "istio-system/istio-ingressgateway-55d9fb9f-f4mzz" [label="All connections" color="gold2" fontcolor="darkgreen"] - "::/0" -> "default/details-v1-79f774bdb9-tw7sj" [label="All connections" color="gold2" fontcolor="darkgreen"] - "::/0" -> "default/productpage-v1-6b746f74dc-kkzzk" [label="All connections" color="gold2" fontcolor="darkgreen"] - "::/0" -> "default/ratings-v1-b6994bb9-gl27w" [label="All connections" color="gold2" fontcolor="darkgreen"] - "::/0" -> "default/reviews-v1-545db77b95-2ps7q" [label="All connections" color="gold2" fontcolor="darkgreen"] - "::/0" -> "default/reviews-v2-7bf8c9648f-7v7ps" [label="All connections" color="gold2" fontcolor="darkgreen"] - "::/0" -> "default/reviews-v3-84779c7bbc-lfjvk" [label="All connections" color="gold2" fontcolor="darkgreen"] - "::/0" -> "istio-system/istio-ingressgateway-55d9fb9f-f4mzz" [label="All connections" color="gold2" fontcolor="darkgreen"] "default/details-v1-79f774bdb9-tw7sj" -> "0.0.0.0/0" [label="All connections" color="gold2" fontcolor="darkgreen"] - "default/details-v1-79f774bdb9-tw7sj" -> "::/0" [label="All connections" color="gold2" fontcolor="darkgreen"] "default/details-v1-79f774bdb9-tw7sj" -> "default/productpage-v1-6b746f74dc-kkzzk" [label="All connections" color="gold2" fontcolor="darkgreen"] "default/details-v1-79f774bdb9-tw7sj" -> "default/ratings-v1-b6994bb9-gl27w" [label="All connections" color="gold2" fontcolor="darkgreen"] "default/details-v1-79f774bdb9-tw7sj" -> "default/reviews-v1-545db77b95-2ps7q" [label="All connections" color="gold2" fontcolor="darkgreen"] @@ -77,7 +59,6 @@ digraph { "default/details-v1-79f774bdb9-tw7sj" -> "default/reviews-v3-84779c7bbc-lfjvk" [label="All connections" color="gold2" fontcolor="darkgreen"] "default/details-v1-79f774bdb9-tw7sj" -> "istio-system/istio-ingressgateway-55d9fb9f-f4mzz" [label="All connections" color="gold2" fontcolor="darkgreen"] "default/productpage-v1-6b746f74dc-kkzzk" -> "0.0.0.0/0" [label="All connections" color="gold2" fontcolor="darkgreen"] - "default/productpage-v1-6b746f74dc-kkzzk" -> "::/0" [label="All connections" color="gold2" fontcolor="darkgreen"] "default/productpage-v1-6b746f74dc-kkzzk" -> "default/details-v1-79f774bdb9-tw7sj" [label="All connections" color="gold2" fontcolor="darkgreen"] "default/productpage-v1-6b746f74dc-kkzzk" -> "default/ratings-v1-b6994bb9-gl27w" [label="All connections" color="gold2" fontcolor="darkgreen"] "default/productpage-v1-6b746f74dc-kkzzk" -> "default/reviews-v1-545db77b95-2ps7q" [label="All connections" color="gold2" fontcolor="darkgreen"] @@ -85,7 +66,6 @@ digraph { "default/productpage-v1-6b746f74dc-kkzzk" -> "default/reviews-v3-84779c7bbc-lfjvk" [label="All connections" color="gold2" fontcolor="darkgreen"] "default/productpage-v1-6b746f74dc-kkzzk" -> "istio-system/istio-ingressgateway-55d9fb9f-f4mzz" [label="All connections" color="gold2" fontcolor="darkgreen"] "default/ratings-v1-b6994bb9-gl27w" -> "0.0.0.0/0" [label="All connections" color="gold2" fontcolor="darkgreen"] - "default/ratings-v1-b6994bb9-gl27w" -> "::/0" [label="All connections" color="gold2" fontcolor="darkgreen"] "default/ratings-v1-b6994bb9-gl27w" -> "default/details-v1-79f774bdb9-tw7sj" [label="All connections" color="gold2" fontcolor="darkgreen"] "default/ratings-v1-b6994bb9-gl27w" -> "default/productpage-v1-6b746f74dc-kkzzk" [label="All connections" color="gold2" fontcolor="darkgreen"] "default/ratings-v1-b6994bb9-gl27w" -> "default/reviews-v1-545db77b95-2ps7q" [label="All connections" color="gold2" fontcolor="darkgreen"] @@ -93,7 +73,6 @@ digraph { "default/ratings-v1-b6994bb9-gl27w" -> "default/reviews-v3-84779c7bbc-lfjvk" [label="All connections" color="gold2" fontcolor="darkgreen"] "default/ratings-v1-b6994bb9-gl27w" -> "istio-system/istio-ingressgateway-55d9fb9f-f4mzz" [label="All connections" color="gold2" fontcolor="darkgreen"] "default/reviews-v1-545db77b95-2ps7q" -> "0.0.0.0/0" [label="All connections" color="gold2" fontcolor="darkgreen"] - "default/reviews-v1-545db77b95-2ps7q" -> "::/0" [label="All connections" color="gold2" fontcolor="darkgreen"] "default/reviews-v1-545db77b95-2ps7q" -> "default/details-v1-79f774bdb9-tw7sj" [label="All connections" color="gold2" fontcolor="darkgreen"] "default/reviews-v1-545db77b95-2ps7q" -> "default/productpage-v1-6b746f74dc-kkzzk" [label="All connections" color="gold2" fontcolor="darkgreen"] "default/reviews-v1-545db77b95-2ps7q" -> "default/ratings-v1-b6994bb9-gl27w" [label="All connections" color="gold2" fontcolor="darkgreen"] @@ -101,7 +80,6 @@ digraph { "default/reviews-v1-545db77b95-2ps7q" -> "default/reviews-v3-84779c7bbc-lfjvk" [label="All connections" color="gold2" fontcolor="darkgreen"] "default/reviews-v1-545db77b95-2ps7q" -> "istio-system/istio-ingressgateway-55d9fb9f-f4mzz" [label="All connections" color="gold2" fontcolor="darkgreen"] "default/reviews-v2-7bf8c9648f-7v7ps" -> "0.0.0.0/0" [label="All connections" color="gold2" fontcolor="darkgreen"] - "default/reviews-v2-7bf8c9648f-7v7ps" -> "::/0" [label="All connections" color="gold2" fontcolor="darkgreen"] "default/reviews-v2-7bf8c9648f-7v7ps" -> "default/details-v1-79f774bdb9-tw7sj" [label="All connections" color="gold2" fontcolor="darkgreen"] "default/reviews-v2-7bf8c9648f-7v7ps" -> "default/productpage-v1-6b746f74dc-kkzzk" [label="All connections" color="gold2" fontcolor="darkgreen"] "default/reviews-v2-7bf8c9648f-7v7ps" -> "default/ratings-v1-b6994bb9-gl27w" [label="All connections" color="gold2" fontcolor="darkgreen"] @@ -109,7 +87,6 @@ digraph { "default/reviews-v2-7bf8c9648f-7v7ps" -> "default/reviews-v3-84779c7bbc-lfjvk" [label="All connections" color="gold2" fontcolor="darkgreen"] "default/reviews-v2-7bf8c9648f-7v7ps" -> "istio-system/istio-ingressgateway-55d9fb9f-f4mzz" [label="All connections" color="gold2" fontcolor="darkgreen"] "default/reviews-v3-84779c7bbc-lfjvk" -> "0.0.0.0/0" [label="All connections" color="gold2" fontcolor="darkgreen"] - "default/reviews-v3-84779c7bbc-lfjvk" -> "::/0" [label="All connections" color="gold2" fontcolor="darkgreen"] "default/reviews-v3-84779c7bbc-lfjvk" -> "default/details-v1-79f774bdb9-tw7sj" [label="All connections" color="gold2" fontcolor="darkgreen"] "default/reviews-v3-84779c7bbc-lfjvk" -> "default/productpage-v1-6b746f74dc-kkzzk" [label="All connections" color="gold2" fontcolor="darkgreen"] "default/reviews-v3-84779c7bbc-lfjvk" -> "default/ratings-v1-b6994bb9-gl27w" [label="All connections" color="gold2" fontcolor="darkgreen"] @@ -117,12 +94,10 @@ digraph { "default/reviews-v3-84779c7bbc-lfjvk" -> "default/reviews-v2-7bf8c9648f-7v7ps" [label="All connections" color="gold2" fontcolor="darkgreen"] "default/reviews-v3-84779c7bbc-lfjvk" -> "istio-system/istio-ingressgateway-55d9fb9f-f4mzz" [label="All connections" color="gold2" fontcolor="darkgreen"] "istio-system/istio-ingressgateway-55d9fb9f-f4mzz" -> "0.0.0.0/0" [label="All connections" color="gold2" fontcolor="darkgreen"] - "istio-system/istio-ingressgateway-55d9fb9f-f4mzz" -> "::/0" [label="All connections" color="gold2" fontcolor="darkgreen"] "istio-system/istio-ingressgateway-55d9fb9f-f4mzz" -> "default/details-v1-79f774bdb9-tw7sj" [label="All connections" color="gold2" fontcolor="darkgreen"] "istio-system/istio-ingressgateway-55d9fb9f-f4mzz" -> "default/productpage-v1-6b746f74dc-kkzzk" [label="All connections" color="gold2" fontcolor="darkgreen"] "istio-system/istio-ingressgateway-55d9fb9f-f4mzz" -> "default/ratings-v1-b6994bb9-gl27w" [label="All connections" color="gold2" fontcolor="darkgreen"] "istio-system/istio-ingressgateway-55d9fb9f-f4mzz" -> "default/reviews-v1-545db77b95-2ps7q" [label="All connections" color="gold2" fontcolor="darkgreen"] "istio-system/istio-ingressgateway-55d9fb9f-f4mzz" -> "default/reviews-v2-7bf8c9648f-7v7ps" [label="All connections" color="gold2" fontcolor="darkgreen"] "istio-system/istio-ingressgateway-55d9fb9f-f4mzz" -> "default/reviews-v3-84779c7bbc-lfjvk" [label="All connections" color="gold2" fontcolor="darkgreen"] -} - +} \ No newline at end of file diff --git a/tests/istio_testcases/expected_output/connectivity_map_bookinfo_adding_default_sidecar_after_specific.txt b/tests/istio_testcases/expected_output/connectivity_map_bookinfo_adding_default_sidecar_after_specific.txt index edba19e6..9742fde2 100644 --- a/tests/istio_testcases/expected_output/connectivity_map_bookinfo_adding_default_sidecar_after_specific.txt +++ b/tests/istio_testcases/expected_output/connectivity_map_bookinfo_adding_default_sidecar_after_specific.txt @@ -1,12 +1,9 @@ For connections of type TCP, final fw rules for query: connectivity-map-bookinfo-adding-default-sidecar-after-specific, config: adding-default-sidecar-after-specific: src: 0.0.0.0/0 dst_ns: [default] dst_pods: [*] conn: All connections -src: ::/0 dst_ns: [default] dst_pods: [*] conn: All connections src_ns: [default] src_pods: [app in (productpage,ratings)] dst_ns: [default] dst_pods: [details-v1] conn: All connections src_ns: [default] src_pods: [app=reviews] dst_ns: [default] dst_pods: [ratings-v1] conn: All connections For connections of type non-TCP, final fw rules for query: connectivity-map-bookinfo-adding-default-sidecar-after-specific, config: adding-default-sidecar-after-specific: src: 0.0.0.0/0 dst_ns: [default] dst_pods: [*] conn: All connections -src: ::/0 dst_ns: [default] dst_pods: [*] conn: All connections src_ns: [default] src_pods: [*] dst: 0.0.0.0/0 conn: All connections -src_ns: [default] src_pods: [*] dst: ::/0 conn: All connections -src_ns: [default] src_pods: [*] dst_ns: [default] dst_pods: [*] conn: All connections +src_ns: [default] src_pods: [*] dst_ns: [default] dst_pods: [*] conn: All connections \ No newline at end of file diff --git a/tests/istio_testcases/expected_output/connectivity_map_bookinfo_default_sidecar.txt b/tests/istio_testcases/expected_output/connectivity_map_bookinfo_default_sidecar.txt index 7a8a954e..ec726d37 100644 --- a/tests/istio_testcases/expected_output/connectivity_map_bookinfo_default_sidecar.txt +++ b/tests/istio_testcases/expected_output/connectivity_map_bookinfo_default_sidecar.txt @@ -1,6 +1,5 @@ For connections of type TCP, final fw rules for query: connectivity-map-default-sidecar-1, config: bookinfo-default-sidecar-1: src: 0.0.0.0/0 dst_ns: [default] dst_pods: [*] conn: All connections -src: ::/0 dst_ns: [default] dst_pods: [*] conn: All connections src_ns: [default] src_pods: [*] dst_ns: [default] dst_pods: [details-v1] conn: All connections src_ns: [default] src_pods: [*] dst_ns: [default] dst_pods: [ratings-v1] conn: All connections src_ns: [default] src_pods: [*] dst_ns: [default] dst_pods: [reviews-v1] conn: All connections @@ -10,7 +9,5 @@ src_ns: [default] src_pods: [productpage-v1] dst_ns: [default] dst_pods: [*] con For connections of type non-TCP, final fw rules for query: connectivity-map-default-sidecar-1, config: bookinfo-default-sidecar-1: src: 0.0.0.0/0 dst_ns: [default] dst_pods: [*] conn: All connections -src: ::/0 dst_ns: [default] dst_pods: [*] conn: All connections src_ns: [default] src_pods: [*] dst: 0.0.0.0/0 conn: All connections -src_ns: [default] src_pods: [*] dst: ::/0 conn: All connections -src_ns: [default] src_pods: [*] dst_ns: [default] dst_pods: [*] conn: All connections +src_ns: [default] src_pods: [*] dst_ns: [default] dst_pods: [*] conn: All connections \ No newline at end of file diff --git a/tests/istio_testcases/expected_output/connectivity_map_bookinfo_ignoring_second_default_sidecar.txt b/tests/istio_testcases/expected_output/connectivity_map_bookinfo_ignoring_second_default_sidecar.txt index 3809e393..82559391 100644 --- a/tests/istio_testcases/expected_output/connectivity_map_bookinfo_ignoring_second_default_sidecar.txt +++ b/tests/istio_testcases/expected_output/connectivity_map_bookinfo_ignoring_second_default_sidecar.txt @@ -1,6 +1,5 @@ For connections of type TCP, final fw rules for query: connectivity-map-bookinfo-ignoring-second-default-sidecar-in-same-namespace, config: bookinfo-two-selector-less-sidecars: src: 0.0.0.0/0 dst_ns: [default] dst_pods: [*] conn: All connections -src: ::/0 dst_ns: [default] dst_pods: [*] conn: All connections src_ns: [default] src_pods: [*] dst_ns: [default] dst_pods: [details-v1] conn: All connections src_ns: [default] src_pods: [*] dst_ns: [default] dst_pods: [ratings-v1] conn: All connections src_ns: [default] src_pods: [*] dst_ns: [default] dst_pods: [reviews-v1] conn: All connections @@ -10,7 +9,5 @@ src_ns: [default] src_pods: [productpage-v1] dst_ns: [default] dst_pods: [*] con For connections of type non-TCP, final fw rules for query: connectivity-map-bookinfo-ignoring-second-default-sidecar-in-same-namespace, config: bookinfo-two-selector-less-sidecars: src: 0.0.0.0/0 dst_ns: [default] dst_pods: [*] conn: All connections -src: ::/0 dst_ns: [default] dst_pods: [*] conn: All connections src_ns: [default] src_pods: [*] dst: 0.0.0.0/0 conn: All connections -src_ns: [default] src_pods: [*] dst: ::/0 conn: All connections -src_ns: [default] src_pods: [*] dst_ns: [default] dst_pods: [*] conn: All connections +src_ns: [default] src_pods: [*] dst_ns: [default] dst_pods: [*] conn: All connections \ No newline at end of file diff --git a/tests/istio_testcases/expected_output/connectivity_map_bookinfo_multiple_sidecar_overrides.txt b/tests/istio_testcases/expected_output/connectivity_map_bookinfo_multiple_sidecar_overrides.txt index 8739c03d..0007aba1 100644 --- a/tests/istio_testcases/expected_output/connectivity_map_bookinfo_multiple_sidecar_overrides.txt +++ b/tests/istio_testcases/expected_output/connectivity_map_bookinfo_multiple_sidecar_overrides.txt @@ -1,12 +1,9 @@ For connections of type TCP, final fw rules for query: connectivity-map-bookinfo-multiple-sidecar-overrides, config: multiple-sidecar-overrides: src: 0.0.0.0/0 dst_ns: [default] dst_pods: [*] conn: All connections -src: ::/0 dst_ns: [default] dst_pods: [*] conn: All connections src_ns: [default] src_pods: [app in (ratings,reviews)] dst_ns: [default] dst_pods: [details-v1] conn: All connections src_ns: [default] src_pods: [productpage-v1] dst_ns: [default] dst_pods: [ratings-v1] conn: All connections For connections of type non-TCP, final fw rules for query: connectivity-map-bookinfo-multiple-sidecar-overrides, config: multiple-sidecar-overrides: src: 0.0.0.0/0 dst_ns: [default] dst_pods: [*] conn: All connections -src: ::/0 dst_ns: [default] dst_pods: [*] conn: All connections src_ns: [default] src_pods: [*] dst: 0.0.0.0/0 conn: All connections -src_ns: [default] src_pods: [*] dst: ::/0 conn: All connections -src_ns: [default] src_pods: [*] dst_ns: [default] dst_pods: [*] conn: All connections +src_ns: [default] src_pods: [*] dst_ns: [default] dst_pods: [*] conn: All connections \ No newline at end of file diff --git a/tests/istio_testcases/expected_output/connectivity_map_bookinfo_productpage_sidecar.txt b/tests/istio_testcases/expected_output/connectivity_map_bookinfo_productpage_sidecar.txt index 24e025c8..ea372f32 100644 --- a/tests/istio_testcases/expected_output/connectivity_map_bookinfo_productpage_sidecar.txt +++ b/tests/istio_testcases/expected_output/connectivity_map_bookinfo_productpage_sidecar.txt @@ -1,14 +1,10 @@ For connections of type TCP, final fw rules for query: connectivity-map-bookinfo-productpage, config: bookinfo-productpage-sidecar-1: src: 0.0.0.0/0 dst_ns: [default] dst_pods: [*] conn: All connections -src: ::/0 dst_ns: [default] dst_pods: [*] conn: All connections src_ns: [default] src_pods: [*] dst_ns: [default] dst_pods: [app!=ratings] conn: All connections src_ns: [default] src_pods: [app!=productpage] dst: 0.0.0.0/0 conn: All connections -src_ns: [default] src_pods: [app!=productpage] dst: ::/0 conn: All connections src_ns: [default] src_pods: [app!=productpage] dst_ns: [default] dst_pods: [*] conn: All connections For connections of type non-TCP, final fw rules for query: connectivity-map-bookinfo-productpage, config: bookinfo-productpage-sidecar-1: src: 0.0.0.0/0 dst_ns: [default] dst_pods: [*] conn: All connections -src: ::/0 dst_ns: [default] dst_pods: [*] conn: All connections src_ns: [default] src_pods: [*] dst: 0.0.0.0/0 conn: All connections -src_ns: [default] src_pods: [*] dst: ::/0 conn: All connections -src_ns: [default] src_pods: [*] dst_ns: [default] dst_pods: [*] conn: All connections +src_ns: [default] src_pods: [*] dst_ns: [default] dst_pods: [*] conn: All connections \ No newline at end of file diff --git a/tests/istio_testcases/expected_output/connectivity_map_bookinfo_sidecars_with_different_selectors.txt b/tests/istio_testcases/expected_output/connectivity_map_bookinfo_sidecars_with_different_selectors.txt index 6aca5910..933ec81d 100644 --- a/tests/istio_testcases/expected_output/connectivity_map_bookinfo_sidecars_with_different_selectors.txt +++ b/tests/istio_testcases/expected_output/connectivity_map_bookinfo_sidecars_with_different_selectors.txt @@ -1,15 +1,11 @@ For connections of type TCP, final fw rules for query: connectivity-map-bookinfo-sidecars-with-different-selectors, config: sidecars-with-different-selectors: src: 0.0.0.0/0 dst_ns: [default] dst_pods: [*] conn: All connections -src: ::/0 dst_ns: [default] dst_pods: [*] conn: All connections src_ns: [default] src_pods: [app in (details,ratings)] dst: 0.0.0.0/0 conn: All connections -src_ns: [default] src_pods: [app in (details,ratings)] dst: ::/0 conn: All connections src_ns: [default] src_pods: [app in (details,ratings)] dst_ns: [default] dst_pods: [*] conn: All connections src_ns: [default] src_pods: [app=reviews] dst_ns: [default] dst_pods: [ratings-v1] conn: All connections src_ns: [default] src_pods: [productpage-v1] dst_ns: [default] dst_pods: [app in (details,reviews)] conn: All connections For connections of type non-TCP, final fw rules for query: connectivity-map-bookinfo-sidecars-with-different-selectors, config: sidecars-with-different-selectors: src: 0.0.0.0/0 dst_ns: [default] dst_pods: [*] conn: All connections -src: ::/0 dst_ns: [default] dst_pods: [*] conn: All connections src_ns: [default] src_pods: [*] dst: 0.0.0.0/0 conn: All connections -src_ns: [default] src_pods: [*] dst: ::/0 conn: All connections -src_ns: [default] src_pods: [*] dst_ns: [default] dst_pods: [*] conn: All connections +src_ns: [default] src_pods: [*] dst_ns: [default] dst_pods: [*] conn: All connections \ No newline at end of file diff --git a/tests/istio_testcases/expected_output/connectivity_map_bookinfo_specific_sidecar_overrides_default_sidecar.txt b/tests/istio_testcases/expected_output/connectivity_map_bookinfo_specific_sidecar_overrides_default_sidecar.txt index 972b5f75..be7fd88c 100644 --- a/tests/istio_testcases/expected_output/connectivity_map_bookinfo_specific_sidecar_overrides_default_sidecar.txt +++ b/tests/istio_testcases/expected_output/connectivity_map_bookinfo_specific_sidecar_overrides_default_sidecar.txt @@ -1,6 +1,5 @@ For connections of type TCP, final fw rules for query: connectivity-map-bookinfo-specific-sidecar-overrides-default-sidecar, config: sidecar-with-workload-selector-overrides-default-sidecar: src: 0.0.0.0/0 dst_ns: [default] dst_pods: [*] conn: All connections -src: ::/0 dst_ns: [default] dst_pods: [*] conn: All connections src_ns: [default] src_pods: [*] dst_ns: [default] dst_pods: [ratings-v1] conn: All connections src_ns: [default] src_pods: [app in (details,ratings)] dst_ns: [default] dst_pods: [app=reviews] conn: All connections src_ns: [default] src_pods: [productpage-v1] dst_ns: [default] dst_pods: [*] conn: All connections @@ -8,7 +7,5 @@ src_ns: [default] src_pods: [ratings-v1] dst_ns: [default] dst_pods: [details-v1 For connections of type non-TCP, final fw rules for query: connectivity-map-bookinfo-specific-sidecar-overrides-default-sidecar, config: sidecar-with-workload-selector-overrides-default-sidecar: src: 0.0.0.0/0 dst_ns: [default] dst_pods: [*] conn: All connections -src: ::/0 dst_ns: [default] dst_pods: [*] conn: All connections src_ns: [default] src_pods: [*] dst: 0.0.0.0/0 conn: All connections -src_ns: [default] src_pods: [*] dst: ::/0 conn: All connections -src_ns: [default] src_pods: [*] dst_ns: [default] dst_pods: [*] conn: All connections +src_ns: [default] src_pods: [*] dst_ns: [default] dst_pods: [*] conn: All connections \ No newline at end of file diff --git a/tests/istio_testcases/expected_output/connectivity_map_bookinfo_specific_sidecar_overrides_global_sidecar.txt b/tests/istio_testcases/expected_output/connectivity_map_bookinfo_specific_sidecar_overrides_global_sidecar.txt index 7c98adec..2f355b2c 100644 --- a/tests/istio_testcases/expected_output/connectivity_map_bookinfo_specific_sidecar_overrides_global_sidecar.txt +++ b/tests/istio_testcases/expected_output/connectivity_map_bookinfo_specific_sidecar_overrides_global_sidecar.txt @@ -1,12 +1,9 @@ For connections of type TCP, final fw rules for query: connectivity-map-bookinfo-specific-sidecar-overrides-istio-global-sidecar, config: sidecar-with-workload-selector-overrides-istio-global-sidecar: src: 0.0.0.0/0 dst_ns: [default] dst_pods: [*] conn: All connections -src: ::/0 dst_ns: [default] dst_pods: [*] conn: All connections src_ns: [default] src_pods: [*] dst_ns: [default] dst_pods: [app!=ratings] conn: All connections src_ns: [default] src_pods: [app!=productpage] dst_ns: [default] dst_pods: [*] conn: All connections For connections of type non-TCP, final fw rules for query: connectivity-map-bookinfo-specific-sidecar-overrides-istio-global-sidecar, config: sidecar-with-workload-selector-overrides-istio-global-sidecar: src: 0.0.0.0/0 dst_ns: [default] dst_pods: [*] conn: All connections -src: ::/0 dst_ns: [default] dst_pods: [*] conn: All connections src_ns: [default] src_pods: [*] dst: 0.0.0.0/0 conn: All connections -src_ns: [default] src_pods: [*] dst: ::/0 conn: All connections -src_ns: [default] src_pods: [*] dst_ns: [default] dst_pods: [*] conn: All connections +src_ns: [default] src_pods: [*] dst_ns: [default] dst_pods: [*] conn: All connections \ No newline at end of file diff --git a/tests/istio_testcases/expected_output/connectivity_map_bookinfo_two_different_sidecars_override_default_sidecar.txt b/tests/istio_testcases/expected_output/connectivity_map_bookinfo_two_different_sidecars_override_default_sidecar.txt index cdcb6d4c..7c10fcbc 100644 --- a/tests/istio_testcases/expected_output/connectivity_map_bookinfo_two_different_sidecars_override_default_sidecar.txt +++ b/tests/istio_testcases/expected_output/connectivity_map_bookinfo_two_different_sidecars_override_default_sidecar.txt @@ -1,12 +1,9 @@ For connections of type TCP, final fw rules for query: connectivity-map-bookinfo-two-different-sidecars-override-default-sidecar, config: two-different-sidecars-override-default-sidecar: src: 0.0.0.0/0 dst_ns: [default] dst_pods: [*] conn: All connections -src: ::/0 dst_ns: [default] dst_pods: [*] conn: All connections src_ns: [default] src_pods: [app in (productpage,reviews)] dst_ns: [default] dst_pods: [ratings-v1] conn: All connections src_ns: [default] src_pods: [ratings-v1] dst_ns: [default] dst_pods: [details-v1] conn: All connections For connections of type non-TCP, final fw rules for query: connectivity-map-bookinfo-two-different-sidecars-override-default-sidecar, config: two-different-sidecars-override-default-sidecar: src: 0.0.0.0/0 dst_ns: [default] dst_pods: [*] conn: All connections -src: ::/0 dst_ns: [default] dst_pods: [*] conn: All connections src_ns: [default] src_pods: [*] dst: 0.0.0.0/0 conn: All connections -src_ns: [default] src_pods: [*] dst: ::/0 conn: All connections -src_ns: [default] src_pods: [*] dst_ns: [default] dst_pods: [*] conn: All connections +src_ns: [default] src_pods: [*] dst_ns: [default] dst_pods: [*] conn: All connections \ No newline at end of file diff --git a/tests/istio_testcases/expected_output/connectivity_map_bookinfo_two_sidecars_with_same_workload_selector.txt b/tests/istio_testcases/expected_output/connectivity_map_bookinfo_two_sidecars_with_same_workload_selector.txt index f34b1b7c..628d4868 100644 --- a/tests/istio_testcases/expected_output/connectivity_map_bookinfo_two_sidecars_with_same_workload_selector.txt +++ b/tests/istio_testcases/expected_output/connectivity_map_bookinfo_two_sidecars_with_same_workload_selector.txt @@ -1,14 +1,10 @@ For connections of type TCP, final fw rules for query: connectivity-map-bookinfo-two-sidecars-with-same-workload-selector, config: two-sidecars-with-same-workload-selector: src: 0.0.0.0/0 dst_ns: [default] dst_pods: [*] conn: All connections -src: ::/0 dst_ns: [default] dst_pods: [*] conn: All connections src_ns: [default] src_pods: [*] dst_ns: [default] dst_pods: [app!=ratings] conn: All connections src_ns: [default] src_pods: [app!=productpage] dst: 0.0.0.0/0 conn: All connections -src_ns: [default] src_pods: [app!=productpage] dst: ::/0 conn: All connections src_ns: [default] src_pods: [app!=productpage] dst_ns: [default] dst_pods: [*] conn: All connections For connections of type non-TCP, final fw rules for query: connectivity-map-bookinfo-two-sidecars-with-same-workload-selector, config: two-sidecars-with-same-workload-selector: src: 0.0.0.0/0 dst_ns: [default] dst_pods: [*] conn: All connections -src: ::/0 dst_ns: [default] dst_pods: [*] conn: All connections src_ns: [default] src_pods: [*] dst: 0.0.0.0/0 conn: All connections -src_ns: [default] src_pods: [*] dst: ::/0 conn: All connections -src_ns: [default] src_pods: [*] dst_ns: [default] dst_pods: [*] conn: All connections +src_ns: [default] src_pods: [*] dst_ns: [default] dst_pods: [*] conn: All connections \ No newline at end of file diff --git a/tests/istio_testcases/expected_output/connectivity_map_global_sidecar_from_istio_ref.txt b/tests/istio_testcases/expected_output/connectivity_map_global_sidecar_from_istio_ref.txt index 0e74687d..fdcf82d8 100644 --- a/tests/istio_testcases/expected_output/connectivity_map_global_sidecar_from_istio_ref.txt +++ b/tests/istio_testcases/expected_output/connectivity_map_global_sidecar_from_istio_ref.txt @@ -1,11 +1,8 @@ For connections of type TCP, final fw rules for query: connectivity-map-global-sidecar, config: global-sidecar-from-istio-ref: src: 0.0.0.0/0 dst_ns: [default] dst_pods: [*] conn: All connections -src: ::/0 dst_ns: [default] dst_pods: [*] conn: All connections src_ns: [default] src_pods: [*] dst_ns: [default] dst_pods: [*] conn: All connections For connections of type non-TCP, final fw rules for query: connectivity-map-global-sidecar, config: global-sidecar-from-istio-ref: src: 0.0.0.0/0 dst_ns: [default] dst_pods: [*] conn: All connections -src: ::/0 dst_ns: [default] dst_pods: [*] conn: All connections src_ns: [default] src_pods: [*] dst: 0.0.0.0/0 conn: All connections -src_ns: [default] src_pods: [*] dst: ::/0 conn: All connections -src_ns: [default] src_pods: [*] dst_ns: [default] dst_pods: [*] conn: All connections +src_ns: [default] src_pods: [*] dst_ns: [default] dst_pods: [*] conn: All connections \ No newline at end of file diff --git a/tests/istio_testcases/expected_output/connectivity_map_of_onlineboutique_resources.txt b/tests/istio_testcases/expected_output/connectivity_map_of_onlineboutique_resources.txt index 89017e56..4e84b002 100644 --- a/tests/istio_testcases/expected_output/connectivity_map_of_onlineboutique_resources.txt +++ b/tests/istio_testcases/expected_output/connectivity_map_of_onlineboutique_resources.txt @@ -11,5 +11,4 @@ src_ns: [onlineboutique] src_pods: [frontend] dst_ns: [onlineboutique] dst_pods: src_ns: [onlineboutique] src_pods: [loadgenerator] dst_ns: [onlineboutique] dst_pods: [frontend] conn: TCP {'dst_ports': '8080', 'methods': 'GET, POST'} For connections of type non-TCP, final fw rules for query: connectivity-map-of-onlineboutique, config: onlineboutique-resources: -src_ns: [onlineboutique] src_pods: [*] dst: 0.0.0.0/0 conn: All connections -src_ns: [onlineboutique] src_pods: [*] dst: ::/0 conn: All connections +src_ns: [onlineboutique] src_pods: [*] dst: 0.0.0.0/0 conn: All connections \ No newline at end of file diff --git a/tests/istio_testcases/expected_output/connectivity_map_online_boutique_frontend_sidecar.txt b/tests/istio_testcases/expected_output/connectivity_map_online_boutique_frontend_sidecar.txt index 0b27be76..484ab8b7 100644 --- a/tests/istio_testcases/expected_output/connectivity_map_online_boutique_frontend_sidecar.txt +++ b/tests/istio_testcases/expected_output/connectivity_map_online_boutique_frontend_sidecar.txt @@ -1,17 +1,12 @@ For connections of type TCP, final fw rules for query: frontend_sidecar_connectivity_map, config: frontend_sidecar: src: 0.0.0.0/0 dst_ns: [asm-ingress,default] dst_pods: [*] conn: All connections -src: ::/0 dst_ns: [asm-ingress,default] dst_pods: [*] conn: All connections src_ns: [asm-ingress] src_pods: [*] dst: 0.0.0.0/0 conn: All connections -src_ns: [asm-ingress] src_pods: [*] dst: ::/0 conn: All connections src_ns: [asm-ingress] src_pods: [*] dst_ns: [asm-ingress,default] dst_pods: [*] conn: All connections src_ns: [default] src_pods: [*] dst_ns: [default] dst_pods: [app not in (emailservice,loadgenerator,paymentservice)] conn: All connections src_ns: [default] src_pods: [app!=frontend] dst: 0.0.0.0/0 conn: All connections -src_ns: [default] src_pods: [app!=frontend] dst: ::/0 conn: All connections src_ns: [default] src_pods: [app!=frontend] dst_ns: [asm-ingress,default] dst_pods: [*] conn: All connections For connections of type non-TCP, final fw rules for query: frontend_sidecar_connectivity_map, config: frontend_sidecar: src: 0.0.0.0/0 dst_ns: [asm-ingress,default] dst_pods: [*] conn: All connections -src: ::/0 dst_ns: [asm-ingress,default] dst_pods: [*] conn: All connections src_ns: [asm-ingress,default] src_pods: [*] dst: 0.0.0.0/0 conn: All connections -src_ns: [asm-ingress,default] src_pods: [*] dst: ::/0 conn: All connections -src_ns: [asm-ingress,default] src_pods: [*] dst_ns: [asm-ingress,default] dst_pods: [*] conn: All connections +src_ns: [asm-ingress,default] src_pods: [*] dst_ns: [asm-ingress,default] dst_pods: [*] conn: All connections \ No newline at end of file diff --git a/tests/istio_testcases/expected_output/connectivity_map_online_boutique_frontend_sidecar_disable_egress.txt b/tests/istio_testcases/expected_output/connectivity_map_online_boutique_frontend_sidecar_disable_egress.txt index a0a168bf..fa2d67fb 100644 --- a/tests/istio_testcases/expected_output/connectivity_map_online_boutique_frontend_sidecar_disable_egress.txt +++ b/tests/istio_testcases/expected_output/connectivity_map_online_boutique_frontend_sidecar_disable_egress.txt @@ -1,17 +1,12 @@ For connections of type TCP, final fw rules for query: frontend_w_no_egress_connectivity_map, config: sidecar_disable_egress: src: 0.0.0.0/0 dst_ns: [asm-ingress,default] dst_pods: [*] conn: All connections -src: ::/0 dst_ns: [asm-ingress,default] dst_pods: [*] conn: All connections src_ns: [asm-ingress] src_pods: [*] dst: 0.0.0.0/0 conn: All connections -src_ns: [asm-ingress] src_pods: [*] dst: ::/0 conn: All connections src_ns: [asm-ingress] src_pods: [*] dst_ns: [asm-ingress,default] dst_pods: [*] conn: All connections src_ns: [default] src_pods: [*] dst_ns: [default] dst_pods: [frontend] conn: All connections src_ns: [default] src_pods: [app!=frontend] dst: 0.0.0.0/0 conn: All connections -src_ns: [default] src_pods: [app!=frontend] dst: ::/0 conn: All connections src_ns: [default] src_pods: [app!=frontend] dst_ns: [asm-ingress,default] dst_pods: [*] conn: All connections For connections of type non-TCP, final fw rules for query: frontend_w_no_egress_connectivity_map, config: sidecar_disable_egress: src: 0.0.0.0/0 dst_ns: [asm-ingress,default] dst_pods: [*] conn: All connections -src: ::/0 dst_ns: [asm-ingress,default] dst_pods: [*] conn: All connections src_ns: [asm-ingress,default] src_pods: [*] dst: 0.0.0.0/0 conn: All connections -src_ns: [asm-ingress,default] src_pods: [*] dst: ::/0 conn: All connections -src_ns: [asm-ingress,default] src_pods: [*] dst_ns: [asm-ingress,default] dst_pods: [*] conn: All connections +src_ns: [asm-ingress,default] src_pods: [*] dst_ns: [asm-ingress,default] dst_pods: [*] conn: All connections \ No newline at end of file diff --git a/tests/istio_testcases/example_policies/fly-istio-ingress-test/fly_istio_ingress_test_connectivity_map.txt b/tests/istio_testcases/expected_output/fly_istio_ingress_test_connectivity_map.txt similarity index 81% rename from tests/istio_testcases/example_policies/fly-istio-ingress-test/fly_istio_ingress_test_connectivity_map.txt rename to tests/istio_testcases/expected_output/fly_istio_ingress_test_connectivity_map.txt index facfdc0e..85ceb3e1 100644 --- a/tests/istio_testcases/example_policies/fly-istio-ingress-test/fly_istio_ingress_test_connectivity_map.txt +++ b/tests/istio_testcases/expected_output/fly_istio_ingress_test_connectivity_map.txt @@ -1,12 +1,9 @@ final fw rules for query: connectivity, config: fly-istio-ingress-test: src: 0.0.0.0/0 dst_ns: [default] dst_pods: [*] conn: All connections -src: ::/0 dst_ns: [default] dst_pods: [*] conn: All connections src_ns: [default] src_pods: [*] dst_ns: [default] dst_pods: [fly-api] conn: TCP {'dst_ports': '8761', 'paths': '/flights[\\--9A-Z_a-z]*', 'hosts': '\\w*'} src_ns: [default] src_pods: [*] dst_ns: [default] dst_pods: [hora-api] conn: TCP {'dst_ports': '8762', 'paths': '/horas[\\--9A-Z_a-z]*', 'hosts': '\\w*'} src_ns: [default] src_pods: [*] dst_ns: [default] dst_pods: [istio-ingressgateway] conn: All connections src_ns: [default] src_pods: [fly-api] dst: 0.0.0.0/0 conn: All connections -src_ns: [default] src_pods: [fly-api] dst: ::/0 conn: All connections src_ns: [default] src_pods: [fly-api] dst_ns: [default] dst_pods: [*] conn: All connections src_ns: [default] src_pods: [hora-api] dst: 0.0.0.0/0 conn: All connections -src_ns: [default] src_pods: [hora-api] dst: ::/0 conn: All connections src_ns: [default] src_pods: [hora-api] dst_ns: [default] dst_pods: [*] conn: All connections diff --git a/tests/istio_testcases/expected_output/istio_ingress_test_connectivity_map.txt b/tests/istio_testcases/expected_output/istio_ingress_test_connectivity_map.txt index 35d4c71d..405720dc 100644 --- a/tests/istio_testcases/expected_output/istio_ingress_test_connectivity_map.txt +++ b/tests/istio_testcases/expected_output/istio_ingress_test_connectivity_map.txt @@ -1,15 +1,11 @@ final fw rules for query: connectivity, config: istio-ingress: src: 0.0.0.0/0 dst_ns: [default,prod,qa] dst_pods: [*] conn: All connections -src: ::/0 dst_ns: [default,prod,qa] dst_pods: [*] conn: All connections src_ns: [default] src_pods: [*] dst_ns: [default] dst_pods: [istio-ingressgateway] conn: All connections src_ns: [default] src_pods: [*] dst_ns: [prod] dst_pods: [ratings-v1-857bb87c57] conn: TCP {'dst_ports': '9080', 'paths': '/reviews/[\\--9A-Z_a-z]*', 'hosts': 'eu.bookinfo.com, uk.bookinfo.com'} src_ns: [default] src_pods: [*] dst_ns: [qa] dst_pods: [*] conn: TCP {'dst_ports': '7777', 'hosts': 'eu.bookinfo.com, uk.bookinfo.com'} src_ns: [default] src_pods: [productpage-v1-6f9df695b7] dst: 0.0.0.0/0 conn: All connections -src_ns: [default] src_pods: [productpage-v1-6f9df695b7] dst: ::/0 conn: All connections src_ns: [default] src_pods: [productpage-v1-6f9df695b7] dst_ns: [default,prod,qa] dst_pods: [*] conn: All connections src_ns: [default] src_pods: [reviews-v3-869ff44845] dst: 0.0.0.0/0 conn: All connections -src_ns: [default] src_pods: [reviews-v3-869ff44845] dst: ::/0 conn: All connections src_ns: [default] src_pods: [reviews-v3-869ff44845] dst_ns: [default,prod,qa] dst_pods: [*] conn: All connections src_ns: [prod,qa] src_pods: [*] dst: 0.0.0.0/0 conn: All connections -src_ns: [prod,qa] src_pods: [*] dst: ::/0 conn: All connections src_ns: [prod,qa] src_pods: [*] dst_ns: [default,prod,qa] dst_pods: [*] conn: All connections diff --git a/tests/istio_testcases/expected_output/new_online_boutique_connectivity_map.txt b/tests/istio_testcases/expected_output/new_online_boutique_connectivity_map.txt index 320fc9d0..75a15de2 100644 --- a/tests/istio_testcases/expected_output/new_online_boutique_connectivity_map.txt +++ b/tests/istio_testcases/expected_output/new_online_boutique_connectivity_map.txt @@ -1,10 +1,7 @@ For connections of type TCP, final fw rules for query: new_online_boutique_connectivity_map, config: new_online_boutique: src: 0.0.0.0/0 dst_ns: [asm-ingress] dst_pods: [*] conn: TCP 8080 src: 0.0.0.0/0 dst_ns: [default] dst_pods: [loadgenerator] conn: All connections -src: ::/0 dst_ns: [asm-ingress] dst_pods: [*] conn: TCP 8080 -src: ::/0 dst_ns: [default] dst_pods: [loadgenerator] conn: All connections src_ns: [asm-ingress,default] src_pods: [*] dst: 0.0.0.0/0 conn: All connections -src_ns: [asm-ingress,default] src_pods: [*] dst: ::/0 conn: All connections src_ns: [asm-ingress,default] src_pods: [*] dst_ns: [default] dst_pods: [loadgenerator] conn: All connections src_ns: [asm-ingress] src_pods: [*] dst_ns: [asm-ingress] dst_pods: [*] conn: All connections src_ns: [asm-ingress] src_pods: [*] dst_ns: [default] dst_pods: [frontend] conn: TCP {'dst_ports': '8080', 'methods': 'GET, POST'} @@ -22,7 +19,5 @@ src_ns: [default] src_pods: [loadgenerator] dst_ns: [default] dst_pods: [fronten For connections of type non-TCP, final fw rules for query: new_online_boutique_connectivity_map, config: new_online_boutique: src: 0.0.0.0/0 dst_ns: [asm-ingress,default] dst_pods: [*] conn: All connections -src: ::/0 dst_ns: [asm-ingress,default] dst_pods: [*] conn: All connections src_ns: [asm-ingress,default] src_pods: [*] dst: 0.0.0.0/0 conn: All connections -src_ns: [asm-ingress,default] src_pods: [*] dst: ::/0 conn: All connections -src_ns: [asm-ingress,default] src_pods: [*] dst_ns: [asm-ingress,default] dst_pods: [*] conn: All connections +src_ns: [asm-ingress,default] src_pods: [*] dst_ns: [asm-ingress,default] dst_pods: [*] conn: All connections \ No newline at end of file diff --git a/tests/istio_testcases/expected_output/new_online_boutique_synth_res_connectivity_map.txt b/tests/istio_testcases/expected_output/new_online_boutique_synth_res_connectivity_map.txt index b9429239..0af50f18 100644 --- a/tests/istio_testcases/expected_output/new_online_boutique_synth_res_connectivity_map.txt +++ b/tests/istio_testcases/expected_output/new_online_boutique_synth_res_connectivity_map.txt @@ -1,8 +1,6 @@ For connections of type TCP, final fw rules for query: new_online_boutique_synth_res_connectivity_map, config: new_online_boutique_synthesis_res: src: 0.0.0.0/0 dst_ns: [asm-ingress] dst_pods: [*] conn: All connections -src: ::/0 dst_ns: [asm-ingress] dst_pods: [*] conn: All connections src_ns: [asm-ingress,default] src_pods: [*] dst: 0.0.0.0/0 conn: All connections -src_ns: [asm-ingress,default] src_pods: [*] dst: ::/0 conn: All connections src_ns: [asm-ingress,default] src_pods: [*] dst_ns: [asm-ingress] dst_pods: [*] conn: All connections src_ns: [default] src_pods: [app in (checkoutservice,frontend)] dst_ns: [default] dst_pods: [cartservice] conn: TCP 7070 src_ns: [default] src_pods: [app in (checkoutservice,frontend)] dst_ns: [default] dst_pods: [currencyservice] conn: TCP 7000 @@ -17,7 +15,5 @@ src_ns: [default] src_pods: [loadgenerator] dst_ns: [default] dst_pods: [fronten For connections of type non-TCP, final fw rules for query: new_online_boutique_synth_res_connectivity_map, config: new_online_boutique_synthesis_res: src: 0.0.0.0/0 dst_ns: [asm-ingress,default] dst_pods: [*] conn: All connections -src: ::/0 dst_ns: [asm-ingress,default] dst_pods: [*] conn: All connections src_ns: [asm-ingress,default] src_pods: [*] dst: 0.0.0.0/0 conn: All connections -src_ns: [asm-ingress,default] src_pods: [*] dst: ::/0 conn: All connections -src_ns: [asm-ingress,default] src_pods: [*] dst_ns: [asm-ingress,default] dst_pods: [*] conn: All connections +src_ns: [asm-ingress,default] src_pods: [*] dst_ns: [asm-ingress,default] dst_pods: [*] conn: All connections \ No newline at end of file diff --git a/tests/istio_testcases/expected_output/new_online_boutique_synth_res_connectivity_map_with_baseline_rule.txt b/tests/istio_testcases/expected_output/new_online_boutique_synth_res_connectivity_map_with_baseline_rule.txt index 8ac28ba7..d9eaa18c 100644 --- a/tests/istio_testcases/expected_output/new_online_boutique_synth_res_connectivity_map_with_baseline_rule.txt +++ b/tests/istio_testcases/expected_output/new_online_boutique_synth_res_connectivity_map_with_baseline_rule.txt @@ -1,8 +1,6 @@ For connections of type TCP, final fw rules for query: new_online_boutique_synth_res_connectivity_map_with_baseline_rule, config: new_online_boutique_synthesis_res_with_baseline_restrict_access_to_payment_service: src: 0.0.0.0/0 dst_ns: [asm-ingress] dst_pods: [*] conn: All connections -src: ::/0 dst_ns: [asm-ingress] dst_pods: [*] conn: All connections src_ns: [asm-ingress,default] src_pods: [*] dst: 0.0.0.0/0 conn: All connections -src_ns: [asm-ingress,default] src_pods: [*] dst: ::/0 conn: All connections src_ns: [asm-ingress,default] src_pods: [*] dst_ns: [asm-ingress] dst_pods: [*] conn: All connections src_ns: [default] src_pods: [app in (checkoutservice,frontend)] dst_ns: [default] dst_pods: [cartservice] conn: TCP 7070 src_ns: [default] src_pods: [app in (checkoutservice,frontend)] dst_ns: [default] dst_pods: [currencyservice] conn: TCP 7000 @@ -16,7 +14,5 @@ src_ns: [default] src_pods: [loadgenerator] dst_ns: [default] dst_pods: [fronten For connections of type non-TCP, final fw rules for query: new_online_boutique_synth_res_connectivity_map_with_baseline_rule, config: new_online_boutique_synthesis_res_with_baseline_restrict_access_to_payment_service: src: 0.0.0.0/0 dst_ns: [asm-ingress,default] dst_pods: [*] conn: All connections -src: ::/0 dst_ns: [asm-ingress,default] dst_pods: [*] conn: All connections src_ns: [asm-ingress,default] src_pods: [*] dst: 0.0.0.0/0 conn: All connections -src_ns: [asm-ingress,default] src_pods: [*] dst: ::/0 conn: All connections -src_ns: [asm-ingress,default] src_pods: [*] dst_ns: [asm-ingress,default] dst_pods: [*] conn: All connections +src_ns: [asm-ingress,default] src_pods: [*] dst_ns: [asm-ingress,default] dst_pods: [*] conn: All connections \ No newline at end of file diff --git a/tests/istio_testcases/expected_output/semantic_diff_online_boutique_new_input_vs_synth_res.txt b/tests/istio_testcases/expected_output/semantic_diff_online_boutique_new_input_vs_synth_res.txt index 707cca71..c0e2af85 100644 --- a/tests/istio_testcases/expected_output/semantic_diff_online_boutique_new_input_vs_synth_res.txt +++ b/tests/istio_testcases/expected_output/semantic_diff_online_boutique_new_input_vs_synth_res.txt @@ -20,8 +20,6 @@ src_ns: [default] src_pods: [app in (checkoutservice,frontend)] dst_ns: [default Added connections between persistent peers and ipBlocks (based on topology from config: new_online_boutique_synthesis_res) : src: 0.0.0.0/0 dst_ns: [asm-ingress] dst_pods: [*] conn: TCP 1-8079,8081-65535 -src: ::/0 dst_ns: [asm-ingress] dst_pods: [*] conn: TCP 1-8079,8081-65535 Removed connections between persistent peers and ipBlocks (based on topology from config: new_online_boutique) : -src: 0.0.0.0/0 dst_ns: [default] dst_pods: [loadgenerator] conn: TCP -src: ::/0 dst_ns: [default] dst_pods: [loadgenerator] conn: TCP +src: 0.0.0.0/0 dst_ns: [default] dst_pods: [loadgenerator] conn: TCP \ No newline at end of file diff --git a/tests/k8s_testcases/example_policies/expected_output/services1_connectivity_map.txt b/tests/k8s_testcases/example_policies/expected_output/services1_connectivity_map.txt deleted file mode 100644 index 480a0abf..00000000 --- a/tests/k8s_testcases/example_policies/expected_output/services1_connectivity_map.txt +++ /dev/null @@ -1,40 +0,0 @@ -final fw rules for query: connectivity_map, config: ip: -src: 0.0.0.0/0 dst_ns: [default,ingress-nginx,kube-system] dst_pods: [*] conn: All connections -src: ::/0 dst_ns: [default,ingress-nginx,kube-system] dst_pods: [*] conn: All connections -src_ns: [default,ingress-nginx,kube-system] src_pods: [*] dst: 0.0.0.0/0 conn: All connections -src_ns: [default,ingress-nginx,kube-system] src_pods: [*] dst: ::/0 conn: All connections -src_ns: [default,kube-system] src_pods: [*] dst_ns: [default,ingress-nginx,kube-system] dst_pods: [*] conn: All connections -src_ns: [ingress-nginx] src_pods: [*] dst_ns: [default] dst_pods: [*] conn: TCP {'dst_ports': '80', 'paths': '/[\\--9A-Z_a-z]*', 'hosts': 'demo.localdev.me'} -src_ns: [ingress-nginx] src_pods: [*] dst_ns: [ingress-nginx] dst_pods: [ingress-nginx-controller-6d5f55986b] conn: All connections -src_ns: [ingress-nginx] src_pods: [ingress-nginx-admission-create] dst_ns: [default,ingress-nginx,kube-system] dst_pods: [*] conn: All connections -src_ns: [ingress-nginx] src_pods: [ingress-nginx-admission-patch] dst_ns: [default,ingress-nginx,kube-system] dst_pods: [*] conn: All connections - -final fw rules for query: connectivity_map, config: np0: -src: 0.0.0.0/0 dst_ns: [default,kube-system] dst_pods: [*] conn: All connections -src: ::/0 dst_ns: [default,kube-system] dst_pods: [*] conn: All connections -src_ns: [default,kube-system] src_pods: [*] dst: 0.0.0.0/0 conn: All connections -src_ns: [default,kube-system] src_pods: [*] dst: ::/0 conn: All connections -src_ns: [default,kube-system] src_pods: [*] dst_ns: [default,kube-system] dst_pods: [*] conn: All connections -src_ns: [ingress-nginx] src_pods: [*] dst_ns: [ingress-nginx] dst_pods: [ingress-nginx-controller-6d5f55986b] conn: All connections -src_ns: [ingress-nginx] src_pods: [app.kubernetes.io/component=admission-webhook] dst_ns: [ingress-nginx] dst_pods: [*] conn: All connections -src_ns: [ingress-nginx] src_pods: [ingress-nginx-controller-6d5f55986b] dst: 0.0.0.0/0 conn: All connections -src_ns: [ingress-nginx] src_pods: [ingress-nginx-controller-6d5f55986b] dst: ::/0 conn: All connections -src_ns: [ingress-nginx] src_pods: [ingress-nginx-controller-6d5f55986b] dst_ns: [default] dst_pods: [*] conn: TCP {'dst_ports': '80', 'paths': '/[\\--9A-Z_a-z]*', 'hosts': 'demo.localdev.me'} - -final fw rules for query: connectivity_map, config: np1: -src: 0.0.0.0/0 dst_ns: [default,kube-system] dst_pods: [*] conn: All connections -src: ::/0 dst_ns: [default,kube-system] dst_pods: [*] conn: All connections -src_ns: [default,kube-system] src_pods: [*] dst: 0.0.0.0/0 conn: All connections -src_ns: [default,kube-system] src_pods: [*] dst: ::/0 conn: All connections -src_ns: [default,kube-system] src_pods: [*] dst_ns: [default,kube-system] dst_pods: [*] conn: All connections -src_ns: [ingress-nginx] src_pods: [*] dst_ns: [ingress-nginx] dst_pods: [ingress-nginx-controller-6d5f55986b] conn: All connections -src_ns: [ingress-nginx] src_pods: [app.kubernetes.io/component=admission-webhook] dst_ns: [ingress-nginx] dst_pods: [*] conn: All connections - -final fw rules for query: connectivity_map, config: np2: -src: 0.0.0.0/0 dst_ns: [default,kube-system] dst_pods: [*] conn: All connections -src: ::/0 dst_ns: [default,kube-system] dst_pods: [*] conn: All connections -src_ns: [default,kube-system] src_pods: [*] dst: 0.0.0.0/0 conn: All connections -src_ns: [default,kube-system] src_pods: [*] dst: ::/0 conn: All connections -src_ns: [default,kube-system] src_pods: [*] dst_ns: [default,kube-system] dst_pods: [*] conn: All connections -src_ns: [ingress-nginx] src_pods: [app.kubernetes.io/component=admission-webhook] dst_ns: [ingress-nginx] dst_pods: [app.kubernetes.io/component=admission-webhook] conn: All connections - diff --git a/tests/k8s_testcases/expected_output/k8s_ingress_test_connectivity_map.txt b/tests/k8s_testcases/expected_output/k8s_ingress_test_connectivity_map.txt index 9ae7bf48..2151c811 100644 --- a/tests/k8s_testcases/expected_output/k8s_ingress_test_connectivity_map.txt +++ b/tests/k8s_testcases/expected_output/k8s_ingress_test_connectivity_map.txt @@ -1,8 +1,6 @@ final fw rules for query: connectivity, config: test-ingress: src: 0.0.0.0/0 dst_ns: [default,ingress-nginx,istio-system] dst_pods: [*] conn: All connections -src: ::/0 dst_ns: [default,ingress-nginx,istio-system] dst_pods: [*] conn: All connections src_ns: [default,ingress-nginx,istio-system] src_pods: [*] dst_ns: [ingress-nginx] dst_pods: [*] conn: All connections src_ns: [default,istio-system] src_pods: [*] dst: 0.0.0.0/0 conn: All connections -src_ns: [default,istio-system] src_pods: [*] dst: ::/0 conn: All connections src_ns: [default,istio-system] src_pods: [*] dst_ns: [default,istio-system] dst_pods: [*] conn: All connections src_ns: [ingress-nginx] src_pods: [*] dst_ns: [default] dst_pods: [details-v1-79f774bdb9] conn: TCP {'dst_ports': '9080', 'paths': '/details(/[\\--9A-Z_a-z]*)?', 'hosts': 'demo.localdev.me'} diff --git a/tests/k8s_testcases/expected_output/new_online_boutique_connectivity_map.txt b/tests/k8s_testcases/expected_output/new_online_boutique_connectivity_map.txt index fdc0f2ab..c00a9ce8 100644 --- a/tests/k8s_testcases/expected_output/new_online_boutique_connectivity_map.txt +++ b/tests/k8s_testcases/expected_output/new_online_boutique_connectivity_map.txt @@ -1,8 +1,6 @@ final fw rules for query: new_online_boutique_connectivity_map, config: new_online_boutique: src: 0.0.0.0/0 dst_ns: [default] dst_pods: [loadgenerator] conn: All connections -src: ::/0 dst_ns: [default] dst_pods: [loadgenerator] conn: All connections src_ns: [default] src_pods: [*] dst: 0.0.0.0/0 conn: All connections -src_ns: [default] src_pods: [*] dst: ::/0 conn: All connections src_ns: [default] src_pods: [*] dst_ns: [default] dst_pods: [loadgenerator] conn: All connections src_ns: [default] src_pods: [app in (checkoutservice,frontend)] dst_ns: [default] dst_pods: [cartservice] conn: TCP 7070 src_ns: [default] src_pods: [app in (checkoutservice,frontend)] dst_ns: [default] dst_pods: [currencyservice] conn: TCP 7000 @@ -13,4 +11,4 @@ src_ns: [default] src_pods: [checkoutservice] dst_ns: [default] dst_pods: [payme src_ns: [default] src_pods: [frontend] dst_ns: [default] dst_pods: [adservice] conn: TCP 9555 src_ns: [default] src_pods: [frontend] dst_ns: [default] dst_pods: [checkoutservice] conn: TCP 5050 src_ns: [default] src_pods: [frontend] dst_ns: [default] dst_pods: [recommendationservice] conn: TCP 8080 -src_ns: [default] src_pods: [loadgenerator] dst_ns: [default] dst_pods: [frontend] conn: TCP 8080 +src_ns: [default] src_pods: [loadgenerator] dst_ns: [default] dst_pods: [frontend] conn: TCP 8080 \ No newline at end of file diff --git a/tests/k8s_testcases/expected_output/new_online_boutique_synthesis_res_connectivity_map.txt b/tests/k8s_testcases/expected_output/new_online_boutique_synthesis_res_connectivity_map.txt index c93bee48..085de9d9 100644 --- a/tests/k8s_testcases/expected_output/new_online_boutique_synthesis_res_connectivity_map.txt +++ b/tests/k8s_testcases/expected_output/new_online_boutique_synthesis_res_connectivity_map.txt @@ -1,6 +1,5 @@ final fw rules for query: new_online_boutique_synthesis_res_connectivity_map, config: new_online_synthesis_res: src: 0.0.0.0/0 dst_ns: [kube-system] dst_pods: [*] conn: All connections -src: ::/0 dst_ns: [kube-system] dst_pods: [*] conn: All connections src_ns: [default] src_pods: [app in (checkoutservice,frontend)] dst_ns: [default] dst_pods: [cartservice] conn: TCP 7070 src_ns: [default] src_pods: [app in (checkoutservice,frontend)] dst_ns: [default] dst_pods: [currencyservice] conn: TCP 7000 src_ns: [default] src_pods: [app in (checkoutservice,frontend)] dst_ns: [default] dst_pods: [shippingservice] conn: TCP 50051 @@ -13,5 +12,4 @@ src_ns: [default] src_pods: [frontend] dst_ns: [default] dst_pods: [checkoutserv src_ns: [default] src_pods: [frontend] dst_ns: [default] dst_pods: [recommendationservice] conn: TCP 8080 src_ns: [default] src_pods: [loadgenerator] dst_ns: [default] dst_pods: [frontend] conn: TCP 8080 src_ns: [kube-system] src_pods: [*] dst: 0.0.0.0/0 conn: All connections -src_ns: [kube-system] src_pods: [*] dst: ::/0 conn: All connections src_ns: [kube-system] src_pods: [*] dst_ns: [kube-system] dst_pods: [*] conn: All connections diff --git a/tests/k8s_testcases/expected_output/orig_online_boutique_synthesis_res_connectivity_map.txt b/tests/k8s_testcases/expected_output/orig_online_boutique_synthesis_res_connectivity_map.txt index 2f6412de..0103a0fd 100644 --- a/tests/k8s_testcases/expected_output/orig_online_boutique_synthesis_res_connectivity_map.txt +++ b/tests/k8s_testcases/expected_output/orig_online_boutique_synthesis_res_connectivity_map.txt @@ -1,8 +1,6 @@ final fw rules for query: orig_online_boutique_synthesis_res_connectivity_map, config: orig_online_boutique_synthesis_res: src: 0.0.0.0/0 dst_ns: [default] dst_pods: [frontend] conn: TCP 8080 src: 0.0.0.0/0 dst_ns: [kube-system] dst_pods: [*] conn: All connections -src: ::/0 dst_ns: [default] dst_pods: [frontend] conn: TCP 8080 -src: ::/0 dst_ns: [kube-system] dst_pods: [*] conn: All connections src_ns: [default] src_pods: [app in (cartservice,checkoutservice,frontend,loadgenerator,recommendationservice)] dst_ns: [kube-system] dst_pods: [*] conn: UDP 53 src_ns: [default] src_pods: [app in (checkoutservice,frontend)] dst_ns: [default] dst_pods: [cartservice] conn: TCP 7070 src_ns: [default] src_pods: [app in (checkoutservice,frontend)] dst_ns: [default] dst_pods: [currencyservice] conn: TCP 7000 @@ -16,6 +14,5 @@ src_ns: [default] src_pods: [frontend] dst_ns: [default] dst_pods: [checkoutserv src_ns: [default] src_pods: [frontend] dst_ns: [default] dst_pods: [recommendationservice] conn: TCP 8080 src_ns: [default] src_pods: [loadgenerator] dst_ns: [default] dst_pods: [frontend] conn: TCP 8080 src_ns: [kube-system] src_pods: [*] dst: 0.0.0.0/0 conn: All connections -src_ns: [kube-system] src_pods: [*] dst: ::/0 conn: All connections src_ns: [kube-system] src_pods: [*] dst_ns: [default] dst_pods: [frontend] conn: TCP 8080 -src_ns: [kube-system] src_pods: [*] dst_ns: [kube-system] dst_pods: [*] conn: All connections +src_ns: [kube-system] src_pods: [*] dst_ns: [kube-system] dst_pods: [*] conn: All connections \ No newline at end of file diff --git a/tests/k8s_testcases/expected_output/semantic_diff_online_boutique_new_synthesized_vs_orig_synthesized.txt b/tests/k8s_testcases/expected_output/semantic_diff_online_boutique_new_synthesized_vs_orig_synthesized.txt index 02feb0bb..fbb40838 100644 --- a/tests/k8s_testcases/expected_output/semantic_diff_online_boutique_new_synthesized_vs_orig_synthesized.txt +++ b/tests/k8s_testcases/expected_output/semantic_diff_online_boutique_new_synthesized_vs_orig_synthesized.txt @@ -8,5 +8,4 @@ src_ns: [default] src_pods: [cartservice] dst_ns: [kube-system] dst_pods: [*] co src_ns: [kube-system] src_pods: [*] dst_ns: [default] dst_pods: [frontend] conn: TCP 8080 Removed connections between persistent peers and ipBlocks (based on topology from config: orig_online_boutique_synthesis_res) : -src: 0.0.0.0/0 dst_ns: [default] dst_pods: [frontend] conn: TCP 8080 -src: ::/0 dst_ns: [default] dst_pods: [frontend] conn: TCP 8080 +src: 0.0.0.0/0 dst_ns: [default] dst_pods: [frontend] conn: TCP 8080 \ No newline at end of file diff --git a/tests/k8s_testcases/expected_output/semantic_diff_online_boutique_new_vs_synthesized_new.txt b/tests/k8s_testcases/expected_output/semantic_diff_online_boutique_new_vs_synthesized_new.txt index 2e9371d8..227846fc 100644 --- a/tests/k8s_testcases/expected_output/semantic_diff_online_boutique_new_vs_synthesized_new.txt +++ b/tests/k8s_testcases/expected_output/semantic_diff_online_boutique_new_vs_synthesized_new.txt @@ -5,16 +5,12 @@ src_ns: [default] src_pods: [*] dst_ns: [default] dst_pods: [loadgenerator] conn Removed connections between persistent peers and ipBlocks (based on topology from config: new_online_boutique) : src: 0.0.0.0/0 dst_ns: [default] dst_pods: [loadgenerator] conn: All connections -src: ::/0 dst_ns: [default] dst_pods: [loadgenerator] conn: All connections src_ns: [default] src_pods: [*] dst: 0.0.0.0/0 conn: All connections -src_ns: [default] src_pods: [*] dst: ::/0 conn: All connections New connections between persistent peers and added peers (based on topology from config: new_online_synthesis_res) : src_ns: [default] src_pods: [app in (checkoutservice,frontend,loadgenerator,recommendationservice)] dst_ns: [kube-system] dst_pods: [*] conn: UDP 53 New connections between added peers and ipBlocks (based on topology from config: new_online_synthesis_res) : src: 0.0.0.0/0 dst_ns: [kube-system] dst_pods: [*] conn: All connections -src: ::/0 dst_ns: [kube-system] dst_pods: [*] conn: All connections src_ns: [kube-system] src_pods: [*] dst: 0.0.0.0/0 conn: All connections -src_ns: [kube-system] src_pods: [*] dst: ::/0 conn: All connections src_ns: [kube-system] src_pods: [*] dst_ns: [kube-system] dst_pods: [*] conn: All connections diff --git a/tests/k8s_testcases/expected_output/services1_connectivity_map.txt b/tests/k8s_testcases/expected_output/services1_connectivity_map.txt index ea50edb8..12e45d94 100644 --- a/tests/k8s_testcases/expected_output/services1_connectivity_map.txt +++ b/tests/k8s_testcases/expected_output/services1_connectivity_map.txt @@ -1,29 +1,21 @@ final fw rules for query: connectivity_map, config: ip: src: 0.0.0.0/0 dst_ns: [default,ingress-nginx,kube-system] dst_pods: [*] conn: All connections -src: ::/0 dst_ns: [default,ingress-nginx,kube-system] dst_pods: [*] conn: All connections src_ns: [default,kube-system] src_pods: [*] dst: 0.0.0.0/0 conn: All connections -src_ns: [default,kube-system] src_pods: [*] dst: ::/0 conn: All connections src_ns: [default,kube-system] src_pods: [*] dst_ns: [default,ingress-nginx,kube-system] dst_pods: [*] conn: All connections src_ns: [ingress-nginx] src_pods: [*] dst_ns: [default] dst_pods: [*] conn: TCP {'dst_ports': '80', 'paths': '/[\\--9A-Z_a-z]*', 'hosts': 'demo.localdev.me'} final fw rules for query: connectivity_map, config: np0: src: 0.0.0.0/0 dst_ns: [default,kube-system] dst_pods: [*] conn: All connections -src: ::/0 dst_ns: [default,kube-system] dst_pods: [*] conn: All connections src_ns: [default,kube-system] src_pods: [*] dst: 0.0.0.0/0 conn: All connections -src_ns: [default,kube-system] src_pods: [*] dst: ::/0 conn: All connections src_ns: [default,kube-system] src_pods: [*] dst_ns: [default,kube-system] dst_pods: [*] conn: All connections src_ns: [ingress-nginx] src_pods: [ingress-nginx-controller-6d5f55986b] dst_ns: [default] dst_pods: [*] conn: TCP {'dst_ports': '80', 'paths': '/[\\--9A-Z_a-z]*', 'hosts': 'demo.localdev.me'} final fw rules for query: connectivity_map, config: np1: src: 0.0.0.0/0 dst_ns: [default,kube-system] dst_pods: [*] conn: All connections -src: ::/0 dst_ns: [default,kube-system] dst_pods: [*] conn: All connections src_ns: [default,kube-system] src_pods: [*] dst: 0.0.0.0/0 conn: All connections -src_ns: [default,kube-system] src_pods: [*] dst: ::/0 conn: All connections src_ns: [default,kube-system] src_pods: [*] dst_ns: [default,kube-system] dst_pods: [*] conn: All connections final fw rules for query: connectivity_map, config: np2: src: 0.0.0.0/0 dst_ns: [default,kube-system] dst_pods: [*] conn: All connections -src: ::/0 dst_ns: [default,kube-system] dst_pods: [*] conn: All connections src_ns: [default,kube-system] src_pods: [*] dst: 0.0.0.0/0 conn: All connections -src_ns: [default,kube-system] src_pods: [*] dst: ::/0 conn: All connections src_ns: [default,kube-system] src_pods: [*] dst_ns: [default,kube-system] dst_pods: [*] conn: All connections