joshsiv-mulga afd63ed967 ci(e2e): Phase 1 diag — tcpdump br-wan + bridge fdb + hairpin modes (siv-167) ...

Mulga-siv-167 Phase 1. Adds evidence-capture for the LB
single-host return-path drop class:

e2e_single only:
- New step 'Start Packet Capture' between Bootstrap and Run E2E
  Tests. SSHes to test VM and starts background tcpdump on br-wan
  capturing TCP/22/80/443/9999 + ARP into /tmp/spinifex-diag/br-wan.pcap.
  PID stored at /tmp/spinifex-diag/tcpdump.pid.

All three jobs (single, pseudo-multi, real-multi):
- Collect Diagnostics: kill tcpdump (single only — PID file
  guarded) -INT for graceful flush, falls through to -KILL after 5s.
- Adds journal-spinifex-full.log (no -n truncation) alongside
  the existing -n 10000 capped one.
- Adds bridge fdb show, bridge link, and hairpin_mode/learning/flood
  for every br-wan brif — needed to confirm/disconfirm the
  hairpin-loss hypothesis in the plan doc.
- Adds 'chmod -R a+r /tmp/spinifex-diag' before tar to ensure pcap
  (created by sudo tcpdump as root) is readable by tf-user.

bash -n verified on all four rendered scripts. YAML parses.
Zero new gold-image deps (tcpdump, bridge present in base image).

2026-06-02 19:28:54 +10:00

..

actions

feat(e2e): Go E2E harness + single-node migration to Ensure*/Discover* + reboot suite (#241)

2026-05-20 21:04:13 +10:00

assets

Feat/mig capable (#260)

2026-05-28 11:38:40 +10:00

scripts

fix(network): IGW route-table AWS parity + per-subnet egress gating (#270)

2026-06-01 09:54:29 +10:00

workflows

ci(e2e): Phase 1 diag — tcpdump br-wan + bridge fdb + hairpin modes (siv-167)

2026-06-02 19:28:54 +10:00

CODEOWNERS

feat(network): ADR-0006 layer redesign + IPsec/OVN hardening (#255)

2026-05-27 21:05:01 +10:00

dependabot.yml

fix: min package age 3 days

2026-05-12 11:23:58 +10:00