-
Notifications
You must be signed in to change notification settings - Fork 373
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Remove EnableTLSConfig from antrea agent #2193
Conversation
Codecov Report
@@ Coverage Diff @@
## main #2193 +/- ##
==========================================
+ Coverage 60.92% 61.62% +0.69%
==========================================
Files 273 273
Lines 20662 20663 +1
==========================================
+ Hits 12589 12734 +145
+ Misses 6752 6593 -159
- Partials 1321 1336 +15
Flags with carried forward coverage won't be shown. Click here to find out more.
|
test/e2e/fixtures.go
Outdated
@@ -189,6 +189,7 @@ func setupTestWithIPFIXCollector(tb testing.TB) (*TestData, bool, bool, error) { | |||
} | |||
if testOptions.providerName == "kind" { | |||
// In Kind cluster, there are issues with DNS name resolution on worker nodes. | |||
// We will skip TLS testing for Kind cluster because the server certificate is generated with Flow aggregator's DNS name |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
As part of Flow Aggregator windows support #2138, we are supporting cluster IP in the certificate. Can we enable the kind test with TLS?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Sure. updated
# If no PROTO is given, we consider "tcp" as default. We support "tcp" and "udp" | ||
# L4 transport protocols. | ||
#flowCollectorAddr: "flow-aggregator.flow-aggregator.svc:4739:tcp" | ||
# If no PROTO is given, we consider "tls" as default. We support "tls", "tcp" and |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
We should change for windows yaml too.
15d2585
to
39aa316
Compare
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Because this is still an Alpha feature, I am ok with just removing a config parameter like this.
/test-all |
/test-e2e |
/test-e2e |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM
As discussed,
EnableTLSToFlowAggregator
config is unnecessary for Flow Exporter. We can usetls
in protocol ofFlowCollectorAddr
instead to enable encryption for communication between flow exporter to flow aggregator.