test : netpol with empty port range

np-guard · Dec 2, 2024 · a86298f · a86298f
1 parent 606c64f
commit a86298f
Show file tree

Hide file tree

Showing 4 changed files with 93 additions and 0 deletions.
diff --git a/pkg/netpol/connlist/connlist_test.go b/pkg/netpol/connlist/connlist_test.go
@@ -1583,6 +1583,10 @@ var goodPathTests = []struct {
 		testDirName:   "anp_test_with_empty_port_range",
 		outputFormats: []string{output.DefaultFormat},
 	},
+	{
+		testDirName:   "np_test_with_empty_port_range",
+		outputFormats: []string{output.DefaultFormat},
+	},
 }
 
 func runParsedResourcesConnlistTests(t *testing.T, testList []examples.ParsedResourcesTest) {

diff --git a/test_outputs/connlist/np_test_with_empty_port_range_connlist_output.txt b/test_outputs/connlist/np_test_with_empty_port_range_connlist_output.txt
@@ -0,0 +1,6 @@
+0.0.0.0-255.255.255.255 => ns1/pod1[Deployment] : All Connections
+0.0.0.0-255.255.255.255 => ns2/pod1[Deployment] : All Connections
+ns1/pod1[Deployment] => 0.0.0.0-255.255.255.255 : UDP 3535
+ns1/pod1[Deployment] => ns2/pod1[Deployment] : UDP 3535
+ns2/pod1[Deployment] => 0.0.0.0-255.255.255.255 : All Connections
+ns2/pod1[Deployment] => ns1/pod1[Deployment] : All Connections
diff --git a/tests/np_test_with_empty_port_range/netpol.yaml b/tests/np_test_with_empty_port_range/netpol.yaml
@@ -0,0 +1,16 @@
+apiVersion: networking.k8s.io/v1
+kind: NetworkPolicy
+metadata:
+  name: egress-empty-port-range
+  namespace: ns1
+spec:
+  podSelector: {}
+  policyTypes:
+  - Egress
+  egress:
+    - ports:
+        - port: 3535
+          protocol: UDP
+        - port: 10
+          endPort: 1
+          protocol: TCP
diff --git a/tests/np_test_with_empty_port_range/pods.yaml b/tests/np_test_with_empty_port_range/pods.yaml
@@ -0,0 +1,67 @@
+---
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: ns1
+spec: {}
+---
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: ns2
+spec: {}
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: pod1
+  namespace: ns1
+  labels:
+    app: a-app
+spec:
+  selector:
+    matchLabels:
+      app: a-app
+  template:
+    metadata:
+      labels:
+        app: a-app
+    spec:
+      containers:
+      - name: ns1
+        image: quay.io/shfa/ns1:latest
+        ports:
+        - containerPort: 80
+        - containerPort: 81  
+        - containerPort: 80
+          protocol: UDP
+        - containerPort: 81
+          protocol: UDP
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: pod1
+  namespace: ns2
+  labels:
+    app: a-app
+spec:
+  selector:
+    matchLabels:
+      app: a-app
+  template:
+    metadata:
+      labels:
+        app: a-app
+    spec:
+      containers:
+      - name: ns2
+        image: quay.io/shfa/ns2:latest
+        ports:
+        - containerPort: 80
+        - containerPort: 81  
+        - containerPort: 80
+          protocol: UDP
+        - containerPort: 81
+          protocol: UDP  
+---