wip

Signed-off-by: Tom Hadlaw <[email protected]>

.github/workflows/conformance.yml

@@ -45,12 +45,29 @@ jobs:
           export $(make print-kubeconfig)
           cilium-cli install --version="v1.15.0-rc.0" \
             --values=repro.yaml \
-            --set bpf.masquerade=true \
-            --set ipv4.enabled=true \
-            --set ipv6.enabled=true \
-            --set hostFirewall.enabled=true \
             --set image.override=quay.io/thad9/cilium:complexity
+            #--set bpf.masquerade=true \
+            #--set ipv4.enabled=true \
+            #--set ipv6.enabled=true \
+            #--set hostFirewall.enabled=true \
           cilium-cli status --wait
+
+      - name: Fetch artifacts
+        if: ${{ !success() && steps.run-tests.outcome != 'skipped' }}
+        shell: bash
+        run: |
+          kubectl get pods --all-namespaces -o wide
+          ./cilium-cli status
+          mkdir -p cilium-sysdumps
+          ./cilium-cli sysdump --output-filename cilium-sysdump-${{ matrix.name }}-final
+
+      - name: Upload artifacts
+        if: ${{ !success() }}
+        uses: actions/upload-artifact@26f96dfa697d77e81fd5907df203aa23a56210a8 # v4.3.0
+        with:
+          name: cilium-sysdumps-${{ matrix.name }}
+          path: cilium-sysdump-*.zip
+
       - name: Cleanup
         if: always()
         run: |

test/conformance/repro.yaml

@@ -17,6 +17,9 @@ k8s:
   requireIPv4PodCIDR: true
   requireIPv6PodCIDR: false
 
+bpf:
+  masquerade: true
+
 enableIPv4BIGTCP: false
 enableIPv4Masquerade: true
 
@@ -39,6 +42,8 @@ nodePort:
 devices:
   - eth0
 
+hostFirewall:
+  enabled: true # enable host policies
 extraConfig:
   allow-localhost: policy # enable policies for local host