From 518b497be90d2f3c0bd0e226ff5d238e7da818c0 Mon Sep 17 00:00:00 2001 From: Kristoffer Dalby Date: Fri, 26 Jun 2026 13:17:16 +0000 Subject: [PATCH] ci: run TestK8sOperator in the shared sqlite matrix It needs no special runner (every integration container already runs privileged), so it joins the generated matrix; load br_netfilter only for that test. Updates #1202 --- .github/workflows/integration-test-template.yml | 7 +++++++ .github/workflows/test-integration.yaml | 1 + 2 files changed, 8 insertions(+) diff --git a/.github/workflows/integration-test-template.yml b/.github/workflows/integration-test-template.yml index 68dbfd36..590185c9 100644 --- a/.github/workflows/integration-test-template.yml +++ b/.github/workflows/integration-test-template.yml @@ -78,6 +78,13 @@ jobs: echo '{"storage-driver":"overlay2"}' | sudo tee /etc/docker/daemon.json sudo systemctl restart docker docker version + - name: Load br_netfilter for in-cluster service routing + if: inputs.test == 'TestK8sOperator' + # TestK8sOperator runs k3s in a container; without br_netfilter on the + # host, bridged pod-to-pod traffic skips kube-proxy's ClusterIP DNAT and + # in-cluster DNS (kube-dns) is unreachable. The module cannot be loaded + # from inside the unprivileged-module rancher/k3s image, so load it here. + run: sudo modprobe br_netfilter - name: Login to Docker Hub env: DOCKERHUB_USERNAME: ${{ secrets.DOCKERHUB_CI_USERNAME }} diff --git a/.github/workflows/test-integration.yaml b/.github/workflows/test-integration.yaml index 4326d03d..974e5523 100644 --- a/.github/workflows/test-integration.yaml +++ b/.github/workflows/test-integration.yaml @@ -311,6 +311,7 @@ jobs: - Test2118DeletingOnlineNodePanics - TestGrantCapRelay - TestGrantCapDrive + - TestK8sOperator - TestEnablingRoutes - TestHASubnetRouterFailover - TestSubnetRouteACL