openconfig / featureprofiles / 29818850138

9%

main: 9%

Pull #5507

github

CNTR-2: fix Arista container connectivity deviations

The CNTR-2 container connectivity flow fails on Arista EOS for several
independent reasons: containerz needs explicit EOS management API
configuration, the management namespace blocks the test container port,
the containerz endpoint uses a self-signed TLS certificate, gNOI/gNMI
connections can become stale after config-induced service restarts, and
the test expects FIB installation for a gRIBI decap entry that is only
needed for query coverage.

CNTR-2, containerz service configuration: configure the Arista gNMI and
gNOI/containerz management API using CLI-origin gNMI instead of the config
Append path. Save the config with retry, wait for the gNOI endpoint to
become reachable after the management service restart, and re-dial gNOI
before constructing the containerz client so the test does not reuse a
stale cached Ondatra connection.

CNTR-2, container port reachability: open TCP port 60061 directly in the
EOS management namespace. The namespace default policy drops the mapped
container port, and a direct ip6tables rule avoids relying on a per-VRF
control-plane ACL path that can be lost during the service restart window.

CNTR-2, containerz TLS: add a containerz_tls_insecure_skip_verify
deviation and use TLS with InsecureSkipVerify when dialing the test
container service on platforms that present a self-signed certificate.
Enable the deviation for Arista in the test metadata.

CNTR-2, DialGRPCWithPort binding: strip DUT per-RPC credentials for
arbitrary container service dials and default to insecure transport when
the device binding has no transport credentials configured. This avoids
gRPC credential conflicts while still allowing callers to pass explicit
transport credentials for TLS-backed container services.

CNTR-2, gRIBI setup: set Arista's default network instance to "default",
disable FIBACK, and expect the sample decap next-hop and next-hop-group
to be installed in RIB. The entries are only ... (continued)

0 of 31 new or added lines in 3 files covered. (0.0%)

2305 of 27029 relevant lines covered (8.53%)

0.1 hits per line