cilium-cli
cilium-cli copied to clipboard
Revisit policy enforcement check
We want to run tests in parallel in different namespaces.
Review and improve policy enforcement check if needed, so a test runs only after policy is applied.
Looks like we can try the following algorithm:
1. Read policy UID via `cilium policy get`
2. Apply policy
3. Read policy UID and revision number until:
3.1. policy appears in the output (create case)
3.2. new policy UID appears in the output compared to the step 1 output (update case)
4. Run cilium policy wait <revision> --max-wait-time ... to make sure that policy has been applied
More context: https://github.com/cilium/cilium/issues/4248