spinifex

mirror of https://github.com/mulgadc/spinifex.git synced 2026-10-15 09:01:31 +00:00

Files

T

joshsiv-mulga b2390fb398 test(e2e): multinode IPsec wiring + xfrm SAs + ESP capture

TestMultinodeIPSec asserts:
- OVS DB on every node carries certificate/private_key/ca_cert pointers
  and other_config:ipsec_encapsulation=true (what daemon.enableOVNIPSec
  writes).
- ip xfrm state on every node has at least one AEAD SA in AES-GCM mode
  (rfc4106(gcm(aes)) or gcm(aes)) within 90s.
- tcpdump catches ESP (ip proto 50) on the underlay (best-effort —
  logged only; geneve may be idle during the 5s capture window).

Skips cleanly when the cluster was bootstrapped with --ipsec=false
(no ipsec_encapsulation key on first node).

Read-only over SSH; runs in the parallel bucket alongside the other
non-mutating multinode tests.

2026-05-24 21:10:11 +10:00

e2e

test(e2e): multinode IPsec wiring + xfrm SAs + ESP capture

2026-05-24 21:10:11 +10:00

ebs-fail.json

Alpha for ebs events to viperblock for mounting nbd volumes

2025-07-29 17:21:07 +10:00

ebs.json

Alpha for ebs events to viperblock for mounting nbd volumes

2025-07-29 17:21:07 +10:00

ec2-cli.json

Basic unit tests, go.mod cleanup for dev, EC2 query parser