Skip to content

Conversation

@jdewinne
Copy link
Member

@jdewinne jdewinne commented Nov 10, 2025

What this PR does / why we need it:

Enables the test TestSingleNodeNetworkReport and adds * as an allowed request, since there's a preflight request that sends a dns request for *.

Which issue(s) this PR fixes:

https://app.shortcut.com/replicated/story/130271/ec-network-report-test-verifies-domains-in-docs

Does this PR require a test?

NONE

Does this PR require a release note?

NONE

Does this PR require documentation?

NONE

@github-actions
Copy link

github-actions bot commented Nov 10, 2025

This PR has been released (on staging) and is available for download with a embedded-cluster-smoke-test-staging-app license ID.

Online Installer:

curl "https://staging.replicated.app/embedded/embedded-cluster-smoke-test-staging-app/ci/appver-dev-fa6fdcc" -H "Authorization: $EC_SMOKE_TEST_LICENSE_ID" -o embedded-cluster-smoke-test-staging-app-ci.tgz

Airgap Installer (may take a few minutes before the airgap bundle is built):

curl "https://staging.replicated.app/embedded/embedded-cluster-smoke-test-staging-app/ci-airgap/appver-dev-fa6fdcc?airgap=true" -H "Authorization: $EC_SMOKE_TEST_LICENSE_ID" -o embedded-cluster-smoke-test-staging-app-ci.tgz

Happy debugging!

allowedDomains := map[string]struct{}{
"ec-e2e-proxy.testcluster.net": {},
"ec-e2e-replicated-app.testcluster.net": {},
"*": {},
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Bug: Wildcard Asterisk Fails Broad Domain Matching

Adding "*" to allowedDomains only matches domains literally named "*", not all domains. The map lookup at line 766 performs exact string matching, so this doesn't implement wildcard behavior. Any domain not exactly matching the three keys will still cause test failure.

Fix in Cursor Fix in Web


//Temporarily disable network test until the reporting is enriched to the point where we can properly filter out domains as part of a CNAME chain
/*func TestSingleNodeNetworkReport(t *testing.T) {
// Temporarily disable network test until the reporting is enriched to the point where we can properly filter out domains as part of a CNAME chain
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This comment is no longer true

allowedDomains := map[string]struct{}{
"ec-e2e-proxy.testcluster.net": {},
"ec-e2e-replicated-app.testcluster.net": {},
"*": {},
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Can you add a comment in the code explaining that this is due to the preflight for wildcard dns entries

@emosbaugh emosbaugh merged commit d8081c2 into main Nov 12, 2025
96 of 98 checks passed
@emosbaugh emosbaugh deleted the joshd/sc-130271/ec-network-report-test-verifies-domains-in branch November 12, 2025 20:15
JGAntunes pushed a commit that referenced this pull request Nov 13, 2025
* Enable TestSingleNodeNetworkReport

* Adding *

* w
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants