cilium / cilium / 12562

39%

push

travis-ci-com

policy: Do not merge rules for reserved:none

toFQDN currently translates to "reserved:none" as an endpoint
selector. Apparently this is needed due to logic requiring that the
list of endpoint selectors be not empty. This has the side-effect that
we currently create also populate and merge rules for the cached
selector for "reserved:none". This merging currently fails if any of
the TLS details for the to-be-merged rules are different, as in the
case of terminating TLS for two different domain names.

As the first level fix, skip merging rules for a cached selector
represtation of "reserved:none". Longer term we should seek solutions
where "reserved:none" would not be used in the first place.

Change the TLS CI test to use two different domain names.

Signed-off-by: Jarno Rajahalme <jarno@covalent.io>

12 of 12 new or added lines in 2 files covered. (100.0%)

26638 of 58028 relevant lines covered (45.91%)

2124.19 hits per line