kubeovn / kube-ovn

21%

master: 21%

LAST BUILD ON BRANCH fix-netpol

branch: fix-netpol

CHANGE BRANCH

x

Reset

• fix-netpol
• Namespace-SNAT-Annotation
• add-missing-capabilities
• add_anp_domain_e2e_case
• add_imple_egress_wall
• add_log_file_permission
• add_return_for_updateIP_error
• aes
• alee/fix-namespace-issue
• allow-different-provider-use-same-vlan
• andrewlee1089/5114/deleting-fip-sets-eip-to-ready
• andrewlee1089/5115/add-finaliser-to-fip-before-programming
• andrewlee1089/5220/race-on-subnet-deletion
• anp_test
• base-rm-login
• base-traceroute
• base/curl
• bugfix
• bugfix/deletesnat
• bump-cilium
• bump-cni
• bump-cni-plugins
• bump-docker
• bump-go-mod
• bump-godeps
• bump-golangci-lint
• bump-k8s-1.32.8
• bump-libovsdb
• bump-multus
• bump-net
• bump-x-tools
• bump-yamux
• cert-refresh
• certmanager-ipsec
• change_chart_name
• change_chart_name_1.14
• chart/fix-cm-namespace
• charts/check
• check-gw
• check_ovn0_mac_should_be_set_expected_1.14
• check_underlay_nic_exist_before_add_bridge
• chore/del-gen-nic
• chore/ko-ns
• chore/modernize
• chore/ping
• ci-arm
• ci-talos-underlay
• cni-plugins
• codex/investigate-panic-cause-in-kube-ovn
• codex/resolve-issue-5641-on-kube-ovn
• codex/review-issue-5642-solution
• controller-gen
• create-eip-after-pod-exist
• dad_check_merge_To_1.12
• dbs
• dep/release-cve
• dep/track-kind-node
• dependabot/github_actions/aquasecurity/trivy-action-0.30.0
• dependabot/github_actions/aquasecurity/trivy-action-0.31.0
• dependabot/github_actions/azure/setup-helm-4.3.0
• dependabot/github_actions/helm/chart-releaser-action-1.7.0
• dependabot/github_actions/helm/kind-action-1.11.0
• dependabot/github_actions/helm/kind-action-1.12.0
• dependabot/go_modules/github.com/Microsoft/hcsshim-0.12.9
• dependabot/go_modules/github.com/Microsoft/hcsshim-0.13.0
• dependabot/go_modules/github.com/brianvoe/gofakeit/v7-7.1.2
• dependabot/go_modules/github.com/brianvoe/gofakeit/v7-7.2.1
• dependabot/go_modules/github.com/containerd/containerd-1.7.24
• dependabot/go_modules/github.com/containerd/containerd-1.7.25
• dependabot/go_modules/github.com/containerd/containerd-1.7.26
• dependabot/go_modules/github.com/containerd/containerd-1.7.27
• dependabot/go_modules/github.com/containernetworking/plugins-1.6.1
• dependabot/go_modules/github.com/containernetworking/plugins-1.6.2
• dependabot/go_modules/github.com/containernetworking/plugins-1.7.1
• dependabot/go_modules/github.com/docker/docker-27.4.0incompatible
• dependabot/go_modules/github.com/docker/docker-27.4.1incompatible
• dependabot/go_modules/github.com/docker/docker-27.5.0incompatible
• dependabot/go_modules/github.com/docker/docker-27.5.1incompatible
• dependabot/go_modules/github.com/docker/docker-28.0.1incompatible
• dependabot/go_modules/github.com/docker/docker-28.0.2incompatible
• dependabot/go_modules/github.com/docker/docker-28.0.3incompatible
• dependabot/go_modules/github.com/docker/docker-28.1.0incompatible
• dependabot/go_modules/github.com/docker/docker-28.1.1incompatible
• dependabot/go_modules/github.com/docker/docker-28.2.1incompatible
• dependabot/go_modules/github.com/docker/docker-28.2.2incompatible
• dependabot/go_modules/github.com/docker/docker-28.3.3incompatible
• dependabot/go_modules/github.com/evanphx/json-patch/v5-5.9.10
• dependabot/go_modules/github.com/evanphx/json-patch/v5-5.9.11
• dependabot/go_modules/github.com/getkin/kin-openapi-0.131.0
• dependabot/go_modules/github.com/go-logr/logr-1.4.3
• dependabot/go_modules/github.com/golang/glog-1.2.4
• dependabot/go_modules/github.com/onsi/ginkgo/v2-2.22.1
• dependabot/go_modules/github.com/onsi/ginkgo/v2-2.22.2
• dependabot/go_modules/github.com/onsi/ginkgo/v2-2.23.0
• dependabot/go_modules/github.com/onsi/ginkgo/v2-2.23.1
• dependabot/go_modules/github.com/onsi/ginkgo/v2-2.23.2
• dependabot/go_modules/github.com/onsi/ginkgo/v2-2.23.3
• dependabot/go_modules/github.com/onsi/ginkgo/v2-2.23.4
• dependabot/go_modules/github.com/onsi/gomega-1.36.1
• dependabot/go_modules/github.com/onsi/gomega-1.36.2
• dependabot/go_modules/github.com/onsi/gomega-1.36.3
• dependabot/go_modules/github.com/onsi/gomega-1.37.0
• dependabot/go_modules/github.com/osrg/gobgp/v3-3.33.0
• dependabot/go_modules/github.com/osrg/gobgp/v3-3.34.0
• dependabot/go_modules/github.com/osrg/gobgp/v3-3.35.0
• dependabot/go_modules/github.com/osrg/gobgp/v3-3.36.0
• dependabot/go_modules/github.com/osrg/gobgp/v3-3.37.0
• dependabot/go_modules/github.com/prometheus-community/pro-bing-0.6.0
• dependabot/go_modules/github.com/prometheus-community/pro-bing-0.6.1
• dependabot/go_modules/github.com/prometheus-community/pro-bing-0.7.0
• dependabot/go_modules/github.com/prometheus/client_golang-1.21.0
• dependabot/go_modules/github.com/prometheus/client_golang-1.21.1
• dependabot/go_modules/github.com/prometheus/client_golang-1.22.0
• dependabot/go_modules/github.com/puzpuzpuz/xsync/v3-3.4.1
• dependabot/go_modules/github.com/puzpuzpuz/xsync/v3-3.5.0
• dependabot/go_modules/github.com/puzpuzpuz/xsync/v3-3.5.1
• dependabot/go_modules/github.com/quic-go/quic-go-0.54.1
• dependabot/go_modules/github.com/rs/zerolog-1.34.0
• dependabot/go_modules/github.com/spf13/pflag-1.0.6
• dependabot/go_modules/github.com/vishvananda/netlink-1.3.1
• dependabot/go_modules/go.uber.org/mock-0.5.1
• dependabot/go_modules/go.uber.org/mock-0.5.2
• dependabot/go_modules/go.universe.tf/metallb-0.15.0
• dependabot/go_modules/golang.org/x/mod-0.23.0
• dependabot/go_modules/golang.org/x/mod-0.24.0
• dependabot/go_modules/golang.org/x/sys-0.29.0
• dependabot/go_modules/golang.org/x/sys-0.30.0
• dependabot/go_modules/golang.org/x/sys-0.31.0
• dependabot/go_modules/golang.org/x/sys-0.33.0
• dependabot/go_modules/golang.org/x/time-0.10.0
• dependabot/go_modules/golang.org/x/time-0.11.0
• dependabot/go_modules/golang.org/x/time-0.9.0
• dependabot/go_modules/golang.org/x/tools-0.29.0
• dependabot/go_modules/golang.org/x/tools-0.31.0
• dependabot/go_modules/golang.org/x/tools-0.33.0
• dependabot/go_modules/google.golang.org/grpc-1.69.0
• dependabot/go_modules/google.golang.org/grpc-1.69.4
• dependabot/go_modules/google.golang.org/grpc-1.70.0
• dependabot/go_modules/google.golang.org/grpc-1.71.0
• dependabot/go_modules/google.golang.org/grpc-1.71.1
• dependabot/go_modules/google.golang.org/grpc-1.72.0
• dependabot/go_modules/google.golang.org/grpc-1.72.1
• dependabot/go_modules/google.golang.org/grpc-1.72.2
• dependabot/go_modules/google.golang.org/protobuf-1.36.0
• dependabot/go_modules/google.golang.org/protobuf-1.36.1
• dependabot/go_modules/google.golang.org/protobuf-1.36.2
• dependabot/go_modules/google.golang.org/protobuf-1.36.3
• dependabot/go_modules/google.golang.org/protobuf-1.36.4
• dependabot/go_modules/google.golang.org/protobuf-1.36.5
• dependabot/go_modules/gopkg.in/k8snetworkplumbingwg/multus-cni.v4-4.1.4
• dependabot/go_modules/k8s-io-6b7e1d8842
• dependabot/go_modules/k8s-io-e6bd75ad88
• dependabot/go_modules/k8s-io-f324dd5807
• dependabot/go_modules/k8s.io/kubernetes-1.32.0
• dependabot/go_modules/kernel.org/pub/linux/libs/security/libcap/cap-1.2.74
• dependabot/go_modules/kernel.org/pub/linux/libs/security/libcap/cap-1.2.75
• dependabot/go_modules/kernel.org/pub/linux/libs/security/libcap/cap-1.2.76
• dependabot/go_modules/kubevirt.io/api-1.5.1
• dependabot/go_modules/sigs.k8s.io/controller-runtime-0.19.4
• dependabot/go_modules/sigs.k8s.io/controller-runtime-0.20.0
• dependabot/go_modules/sigs.k8s.io/controller-runtime-0.20.1
• dependabot/go_modules/sigs.k8s.io/controller-runtime-0.20.2
• dependabot/go_modules/sigs.k8s.io/controller-runtime-0.20.3
• dependabot/go_modules/test/anp/golang.org/x/net-0.36.0
• dev-patch-1
• dhcp
• dpdk-23.11.3
• e2e-macvlan-mac
• e2e-nftables
• e2e/images
• e2e/iptables
• e2e/kind
• ep-providers
• equal_chart_version_to_1.0
• equal_chart_version_to_1.0_master
• fast-free-disk
• feat/vpc-gw-unallocated
• feature/add-pod-labels-to-interface-metrics
• feature/x-requirements
• feature/x-requirements_log_permission
• fips
• fix
• fix-5078
• fix-and-debug-pod-lock
• fix-base
• fix-bfd
• fix-bgp-natgw
• fix-bind-local-ip
• fix-build-variable
• fix-chart
• fix-chart-ipsec
• fix-ci
• fix-ci-cache
• fix-ci-gobgp
• fix-cilium-ci
• fix-cilium-e2e
• fix-concurrent-map-race
• fix-crd-format
• fix-dadfailed-e2e
• fix-default-subnet-vpc
• fix-dpdk
• fix-dry-run-rending-of-charts
• fix-duplicate-cidr
• fix-e2e
• fix-egress
• fix-egress-gw
• fix-ep
• fix-ep-mapping
• fix-err-log1
• fix-golangci-lint
• fix-hc
• fix-helm
• fix-http-writeheader
• fix-ic
• fix-init-node-router_policy-slow
• fix-ip
• fix-ip-cr-not-delete
• fix-ip-not-count
• fix-ipam
• fix-ipam-ippool
• fix-ipampools-ns
• fix-ippool-e2e
• fix-ipsec
• fix-ipsec-e2e
• fix-iptables
• fix-iptables-rule
• fix-ipv6
• fix-ipv6-dhcp
• fix-key
• fix-ko-ct
• fix-ko-ep
• fix-lax
• fix-legacy
• fix-lint
• fix-lo
• fix-log
• fix-logging
• fix-lr-init
• fix-lsp-gc
• fix-mac-aging
• fix-metric
• fix-metrics
• fix-metrics-rules
• fix-multiple-subnets
• fix-multus-e2e
• fix-multus-oom
• fix-nad
• fix-nat-finalizer
• fix-netpol-block
• fix-netpol-logging
• fix-nil-pointer
• fix-node-selector
• fix-np-lax
• fix-overworked-queue
• fix-patch
• fix-pg
• fix-ping
• fix-pod-elapsed-time
• fix-port-name
• fix-release-the-nic
• fix-resolv-conf
• fix-sa
• fix-slr-services
• fix-static-ip-webhook
• fix-sts-ordinals
• fix-subnet-route
• fix-talos-check
• fix-talos-dev
• fix-talos-nm
• fix-tier
• fix-ut
• fix-veg
• fix-veg-route
• fix-veg-selectors
• fix-vm-sg
• fix-vpc-egress-gateway
• fix-vpc-route
• fix-windows-build
• fix/anp
• fix/charts-delete
• fix/cleanup
• fix/cni-conf
• fix/concurrent
• fix/db-hang
• fix/duplicate
• fix/ex-gw
• fix/gc
• fix/gc-ip
• fix/multus
• fix/namespace
• fix/reallocate-ip
• fix/sg-duplicate
• fix/subnet-acl
• fix/update-synced-vpc
• fix/vmip
• fix/vpc-del
• fix24.12.16
• fix24.12.23
• fix25.01.03
• fix_alloc_ip_failed
• fix_alloc_ip_failed_1.14
• fix_arping
• fix_dad
• fix_dpdk_base_image
• fix_duplicate_acl
• fix_e2e
• fix_e2e_access_url
• fix_e2e_version
• fix_egress_network_policy_master
• fix_fips_not_really_replace
• fix_fisp_arm
• fix_gc_u2o_open_flow
• fix_ipsec_failed_when_restart
• fix_mac_conflict
• fix_metallb_e2e
• fix_migrate_down_time
• fix_multi_vlan_keep_u2o_mac
• fix_netpol_underlay
• fix_node_local_dns_hit_ct_when_acl_is_set_master
• fix_rerun_migration
• fix_route_policy_nil_pointer
• fix_sts_pod_alloc_static_ip_conflict
• fix_timer_delay_incorrect
• fix_underlay_metallb
• fix_underlay_metallb_e2e_sometimes_err
• fix_version
• fix_vpc_dns
• fix_vpcnatgw
• gc-disable
• gc-interface
• go-.1.24.1
• go-1.23.5
• go-1.23.6
• go-1.24
• go-1.24.2
• go-1.24.3
• golangci-lint-v2
• healthchecks-ep
• helm
• improve-ep
• ipsec-cert-validation-error
• ipv6-dad
• k8s-1.31.4
• k8s-1.32.1
• k8s-1.32.2
• k8s-1.32.4
• k8s-1.32.5
• k8s-1.32.6
• k8s-1.32.7
• k8s-1.33
• keep-eip-as-ip
• keep_label_compatible_old_version
• kind-containerd-1.7.22
• ko-log-ipsec
• kubectl-ko-nodes
• kubevirt-v1.5.0
• lb_service_select_local_backend
• loop-check-bond-conflicts
• mac_and_ip_should_be_provided_by_multus
• makefile
• map/concurrent
• maps-equal
• master
• master-nat-gw-restart
• metrics
• mock-gen
• netAttachInformer
• netpol-restartable-init-container
• no_patch_upgrade_ovs_ovn_draft
• node-condition
• node-ready
• nologin
• np-enforcement-install
• omit-gc-options
• ovn-ct-dst
• ovn-fip-spec-distributed
• ovs-func
• patch-2
• patch-3
• perf/iptables
• perf/route-policy
• providernetwork/include-nodes
• recover-vlan-conflict
• refactor-natgw
• refactor/endpointslice
• refactor/remove-kubevirt-dependency
• release-1.14
• release-sh
• remove-dep
• remove-dup
• remove-func
• remove-internal-port
• remove-kubevirt-ctrl-dependency
• remove-unused
• remove_termin_gracefule_timer
• rename
• rename-mk
• renovate
• renovate/configure
• renovate/github.com-cenkalti-backoff-v4-5.x
• renovate/github.com-containerd-containerd-2.x
• renovate/github.com-docker-docker-28.x
• renovate/github.com-puzpuzpuz-xsync-v3-4.x
• renovate/go.universe.tf-metallb-0.x
• renovate/helm-3.x
• renovate/kind-0.x
• renovate/kwork-0.x
• renovate/master-actions-checkout-5.x
• renovate/master-actions-setup-go-6.x
• renovate/master-actions-stale-10.x
• renovate/master-aquasecurity-trivy-action-0.x
• renovate/master-azure-setup-helm-4.x
• renovate/master-cert-manager-1.x
• renovate/master-cilium-1.x
• renovate/master-cni-plugin-1.x
• renovate/master-docker.io-kubeovn-kube-ovn-1.x
• renovate/master-github-codeql-action-4.x
• renovate/master-github.com-brianvoe-gofakeit-v7-7.x
• renovate/master-github.com-cenkalti-backoff-v5-5.x
• renovate/master-github.com-cert-manager-cert-manager-1.x
• renovate/master-github.com-containerd-containerd-v2-2.x
• renovate/master-github.com-containernetworking-plugins-1.x
• renovate/master-github.com-docker-docker-28.x
• renovate/master-github.com-emicklei-go-restful-v3-3.x
• renovate/master-github.com-httprunner-httprunner-v5-5.x
• renovate/master-github.com-k8snetworkplumbingwg-network-attachment-definition-client-1.x
• renovate/master-github.com-onsi-ginkgo-v2-2.x
• renovate/master-github.com-onsi-gomega-1.x
• renovate/master-github.com-prometheus-client_golang-1.x
• renovate/master-github.com-spf13-pflag-1.x
• renovate/master-github.com-stretchr-testify-1.x
• renovate/master-go-1.x
• renovate/master-go-github.com-docker-docker-vulnerability
• renovate/master-go.universe.tf-metallb-0.x
• renovate/master-golang
• renovate/master-golang.org-x-mod-0.x
• renovate/master-golang.org-x-sys-0.x
• renovate/master-golangci-lint-2.x
• renovate/master-gomock-monorepo
• renovate/master-google.golang.org-grpc-1.x
• renovate/master-google.golang.org-protobuf-1.x
• renovate/master-gopkg.in-k8snetworkplumbingwg-multus-cni.v4-4.x
• renovate/master-gosec-2.x
• renovate/master-helm-3.x
• renovate/master-kind-0.x
• renovate/master-kindest-node-1.x
• renovate/master-kubernetes
• renovate/master-kubernetes-go
• renovate/master-kubevirt-1.x
• renovate/master-kubevirt.io-api-1.x
• renovate/master-kubevirt.io-client-go-1.x
• renovate/master-major-github-artifact-actions
• renovate/master-metallb-0.x
• renovate/master-multus-4.x
• renovate/master-submariner-0.x
• renovate/master-ubuntu-24.x
• renovate/master-windows-2025.x
• renovate/migrate-config
• renovate/release-1.14-go-1.x
• renovate/release-1.14-golang
• renovate/release-1.14-golang.org-x-mod-0.x
• renovate/release-1.14-golang.org-x-sync-0.x
• renovate/release-1.14-golang.org-x-sys-0.x
• renovate/release-1.14-golang.org-x-term-0.x
• renovate/release-1.14-golang.org-x-text-0.x
• renovate/ubuntu-24.x
• renovate/windows-2025.x
• resource-limit
• revert-4860-perf/iptables
• revert-5239-fix_fisp_arm
• route-priority
• secondary-cni-vpc-nat-gw
• selector
• simple
• simple-vip
• simple-vip-label-update
• simplify-ovn-upgrade
• skip_u2o_src_mac_modify
• slr-ipmapping
• slr-ipv6
• slr-provider
• static-route-nat-gw
• subnet-routes
• svc-traffic-policy
• sync_chart_version
• talos
• tls
• tls-file-mode
• tunnel-interface
• u2o_keep_mac
• underlay-netpol
• update-multus-e2e
• update-ovn-patch
• update-patches
• upgrade_ovs_ovn
• use_3.5.0_ssl
• user/vimo/sec_cni_tests_master
• ut
• veg-fix-route
• veg-replicas
• veg-scale
• veg-selector
• veg-traffic-policy
• vlan-cr-conflicts
• vlan-subnet-vpc-is-optional
• vm-vip
• vpc-any-external
• vpc-nat-gw
• vpc-use-any-external
• wait-crd
• without_ssl
• xfeature
• xfeature_fix

Build # 18551492763

Build Type

Pull #5745

github

Committed by SkalaNetworks

Commit Message

feat(netpol): only block tcp/udp/sctp in lax enforcement

Signed-off-by: SkalaNetworks <contact@skala.network>

Pull Request Pull Request #5745: feat(netpol): authorize l3 protocols

Run Details

57 of 94 new or added lines in 3 files covered. (60.64%)

2 existing lines in 1 file now uncovered.

10731 of 50740 relevant lines covered (21.15%)

0.25 hits per line