Verify that a UDN pod can reach the kapi service in the default network

Ported from: https://github.com/ovn-org/ovn-kubernetes/blob/a68ef49d9441ed0f938f99ff2d605506572b7b78/test/e2e/network_segmentation.go#L343-L358 Signed-off-by: Patryk Diak <pdiak@redhat.com>
openshift · Oct 31, 2024 · a2c6fce · a2c6fce
1 parent 1299398
commit a2c6fce
Showing 1 changed file with 16 additions and 0 deletions.
diff --git a/test/extended/networking/network_segmentation.go b/test/extended/networking/network_segmentation.go
@@ -314,6 +314,22 @@ var _ = Describe("[sig-network][OCPFeatureGate:NetworkSegmentation][Feature:User
 							}, 4*time.Second).Should(BeFalse())
 						}
 
+						By("asserting UDN pod can reach the kapi service in the default network")
+						// Use the service name to get test the DNS access
+						Consistently(func() bool {
+							_, err := e2ekubectl.RunKubectl(
+								udnPodConfig.namespace,
+								"exec",
+								udnPodConfig.name,
+								"--",
+								"curl",
+								"--connect-timeout",
+								"2",
+								"--insecure",
+								"https://kubernetes.default/healthz")
+							return err == nil
+						}, 5*time.Second).Should(BeTrue())
+
 						By("asserting UDN pod can't reach default services via default network interface")
 						// route setup is already done, get kapi IPs
 						kapi, err := cs.CoreV1().Services("default").Get(context.Background(), "kubernetes", metav1.GetOptions{})