k8snetworkplumbingwg / multi-networkpolicy-iptables

58%

master: 58%

LAST BUILD ON BRANCH us/OCPBUGS-45980

branch: us/OCPBUGS-45980

CHANGE BRANCH

x

Reset

Sync Branches

• us/OCPBUGS-45980
• bond-cni
• bump-cobra
• bump-vendor
• codeql
• cve
• default-protocol
• dependabot/go_modules/github.com/containernetworking/cni-0.8.1
• dependabot/go_modules/github.com/containernetworking/plugins-0.8.6
• dependabot/go_modules/golang.org/x/oauth2-0.27.0
• dependabot/go_modules/google.golang.org/grpc-1.53.0
• dependabot/go_modules/google.golang.org/grpc-1.56.3
• dependabot/go_modules/google.golang.org/protobuf-1.33.0
• dependabot/go_modules/gopkg.in/yaml.v3-3.0.0
• dev/add-ipblock-e2e
• dev/add-notice
• dev/ipv6
• dev/refine-policy
• dev/update-ci
• dev/update-golang
• e2e
• e2e-debug
• e2e-testing
• e2e-update-image
• enable-e2e
• fix-cve
• fix-revive
• fix-typo-in-container-registry-domain
• fix/14
• fix/cap
• fix/dependabot
• fix/dependabot-alerts
• fix/list-rule-return
• fix/remove-docker
• fix/update-mem-limit
• fix/warning
• fix/wrong-iptables
• improve-logging
• ipv6
• ipv6-bug-fix
• log-filter-rules
• master
• namespaces
• ocpbugs-974
• patch-1
• remove-field
• remove-v1alpha2
• stop-signals
• update-action
• update-e2e
• update-k8s
• update-prom-vendor
• us-OCPBUGS-36468
• us/CVE-2024-45338
• us/OCPBUGS-44354
• us/e2e-fix-flakes
• us/end-port
• us/end-port-e2e
• v1beta2

Build # 15607622077

Build Type

Pull #77

github

Committed by zeeke

Commit Message

Give precendence to IPBlock field over PodSelector

As per API description [1]:
> IPBlock defines policy on a particular IPBlock. If this field is set then neither of the other fields can be."

if a policy rule has a from/to rule with an IPBlock field,
then the PodSelector and NamespaceSelector fields must be ignored.

[1] https://github.com/k8snetworkplumbingwg/multi-networkpolicy/blob/master/scheme.yml#L88

Signed-off-by: Andrea Panattoni <apanatto@redhat.com>

Pull Request Pull Request #77: Give precendence to IPBlock field over PodSelector

Run Details

129 of 161 new or added lines in 1 file covered. (80.12%)

2 existing lines in 1 file now uncovered.

1132 of 1941 relevant lines covered (58.32%)

0.67 hits per line