noironetworks / aci-containers / 11627

63%

master: 63%

Build Type

Pull #1667

travis-pro

Committed by allenantony-oc

Commit Message

Fix NetworkPolicy named port resolution in HPP modes

When multiple NetworkPolicies share the same HPP and use named ports
that resolve to different port numbers, only one policy's rules were
generated in hpp-optimization and hpp-direct modes.

Root cause: HPP hash is based on ingress/egress rules and policy
types. NetworkPolicies with identical rules but different named port
mappings share the same HPP. The last NP's rules replace the previous
NPs' rules causing unintended traffic disruption for previous NPs.

Changes:
- Iterate through all NetworkPolicies sharing an HPP when building
  ingress/egress rules in both hpp-optimization and hpp-direct modes
- Add NetworkPolicy name suffix to rules in buildLocalNetPolSubjRules
  to ensure unique rule names and match buildNetPolSubjRules behavior

This ensures all named port mappings are included when multiple NPs
share an HPP, preventing traffic disruption.

Pull Request Pull Request #1667: Fix NetworkPolicy named port resolution in HPP modes

Run Details

81 of 108 new or added lines in 1 file covered. (75.0%)

3 existing lines in 2 files now uncovered.

13480 of 21456 relevant lines covered (62.83%)

0.72 hits per line