Fixes: ovn-org#4733

Signed-off-by: Patryk Diak <[email protected]>
(cherry picked from commit d6f145e)

Signed-off-by: Nadia Pinaeva <[email protected]>
(cherry picked from commit ab00a4b)

Signed-off-by: Nadia Pinaeva <[email protected]>
(cherry picked from commit ba8766a)

Update connectivity timeout to 3 seconds and allow 2 retries both for
positive and negative cases

Signed-off-by: Nadia Pinaeva <[email protected]>
(cherry picked from commit 09b08ec)

work with ipv6, since github runners don't have any routes for IPv6.
Split current test that checks allow IP and allow CIDR+port into 2
tests to limit the amount of required external containers.
Bonus: the only test that used external containers doesn't need to
create them anymore, as they are created in beforeEach

Signed-off-by: Nadia Pinaeva <[email protected]>
(cherry picked from commit 2372a08)

avoid unneeded container creation. No extra changes

Signed-off-by: Nadia Pinaeva <[email protected]>
(cherry picked from commit 82b2bf1)

affected by deny all.

Signed-off-by: Nadia Pinaeva <[email protected]>
(cherry picked from commit ded63dd)

To verify no deadlock, we need an intensive follow up workload.
Node-selector testing work the best, as node events handling includes
iterating over all egress firewalls internally.

Signed-off-by: Nadia Pinaeva <[email protected]>
(cherry picked from commit e2f4c74)

that needs it. Use defer to cleanup instead of afterEach, as afterEach
should cleanup resources created by beforeEach.

Signed-off-by: Nadia Pinaeva <[email protected]>
(cherry picked from commit 217ec65)

Remove unneeded external IPs from the deadlock test, as multiple
unresolvable ds names is the main ingredient.
Fix ip:port formatting for ipv6.

Signed-off-by: Nadia Pinaeva <[email protected]>
(cherry picked from commit 3fac0f3)

Signed-off-by: Nadia Pinaeva <[email protected]>
(cherry picked from commit 243c48d)

Signed-off-by: Nadia Pinaeva <[email protected]>
(cherry picked from commit 8c1e9ed)

Test opens a TCP connection that simulates a GCP LB environment where
the packet is redirected via iptables to a local server on a node. Note,
in GCP the LB does not DNAT the VIP, so the packet arrives to the node
with the GCP VIP on it. In OCP, we then redirect that packet to the
local kapi server running on the node.

Once the test opens the TCP connection, it leaves it open for 2 minutes
while ovnkube-node is then deleted. Post ovn-controller starting it
should not flush the conntrack in zone 0, and the test ensures that the
conntrack entry still exists.

Recent OVN regression that prompted this E2E: https://issues.redhat.com/browse/FDP-773

NOTE: The release-1.0 backport generated conflicts because on that
branch the test didn't check IPv6.

Signed-off-by: Tim Rozet <[email protected]>
(cherry picked from commit 45abadb)
Signed-off-by: Dumitru Ceara <[email protected]>

The previous mask was invalid and docker was failing with:
invalid subnet 2001:db8:abcd:1234:c000::/64: it should be 2001:db8:abcd:1234::/64

Signed-off-by: Patryk Diak <[email protected]>
(cherry picked from commit 511e9c6)