Add Gateway API e2e test using envoy-gateway by mcharriere · Pull Request #955 · giantswarm/cluster-test-suites

mcharriere · 2026-03-13T08:29:12Z

Summary

Adds a new hello world via gateway api test alongside the existing ingress-nginx test.
Deploys aws-load-balancer-controller-bundle (CAPA only, optional — skipped if values file absent), gateway-api-bundle, and hello-world configured with an HTTPRoute via envoy-gateway
Validates certificate readiness in envoy-gateway-system before deploying hello-world
GatewayAPISupported defaults to true; explicitly set to false for capz, capv, capvcd, and eks providers

Towards https://github.com/giantswarm/giantswarm/issues/35836

njuettner · 2026-03-13T08:31:07Z

Out of curiosity:

Do we need both hello world via gateway api test alongside the existing ingress-nginx test ? Or could we actually drop ingress-nginx?

mcharriere · 2026-03-13T08:32:54Z

hey @njuettner

No, we don't need the old hello test, I still need to cleanup and fix a few things.
Please consider this WIP, I just switched it to draft.

mcharriere · 2026-03-13T09:01:27Z

/run cluster-test-suites TARGET_SUITES=./providers/capa/standard

tinkerers-ci · 2026-03-13T11:11:23Z

Important

Some test suites failed. See the Checks tab for detailed results per suite.

Re-run only the failed tests:

/run cluster-test-suites TARGET_SUITES=./providers/capa/standard

mcharriere · 2026-03-13T11:34:17Z

/run cluster-test-suites TARGET_SUITES=./providers/capa/standard

tinkerers-ci · 2026-03-13T12:48:04Z

Important

Some test suites failed. See the Checks tab for detailed results per suite.

Re-run only the failed tests:

/run cluster-test-suites TARGET_SUITES=./providers/capa/standard

mcharriere · 2026-03-27T12:59:25Z

/run cluster-test-suites TARGET_SUITES=./providers/capa/standard

mcharriere · 2026-04-13T14:31:40Z

/run cluster-test-suites TARGET_SUITES=./providers/capa/standard

tinkerers-ci · 2026-04-13T15:17:04Z

Important

Some test suites failed. See the Checks tab for detailed results per suite.

Re-run only the failed tests:

/run cluster-test-suites TARGET_SUITES=./providers/capa/standard

mcharriere · 2026-04-14T09:39:22Z

/run cluster-test-suites TARGET_SUITES=./providers/capa/standard

tinkerers-ci · 2026-04-14T10:40:11Z

Important

Some test suites failed. See the Checks tab for detailed results per suite.

Re-run only the failed tests:

/run cluster-test-suites TARGET_SUITES=./providers/capa/standard

mcharriere · 2026-04-14T11:17:57Z

/run cluster-test-suites TARGET_SUITES=./providers/capa/standard

mcharriere · 2026-04-14T12:14:48Z

/run cluster-test-suites TARGET_SUITES=./providers/capa/standard

tinkerers-ci · 2026-04-14T12:30:16Z

Important

Some test suites failed. See the Checks tab for detailed results per suite.

Re-run only the failed tests:

/run cluster-test-suites TARGET_SUITES=./providers/capa/standard

mcharriere · 2026-04-16T12:51:36Z

/run cluster-test-suites TARGET_SUITES=./providers/capa/standard

mcharriere · 2026-04-20T11:38:26Z

/run cluster-test-suites

QuantumEnigmaa

LGTM

ubergesundheit

In case the tests are failing because hello-world-app in latest version is failing to be installed because of values schema mismatch, explicitly use its latest 2.x.x version 2.11.0 which does not have the strict schema..

an update to ensureTestOCIRepository may be required to explicitly set the version

tinkerers-ci · 2026-04-20T12:53:27Z

Important

Some test suites failed. See the Checks tab for detailed results per suite.

Re-run only the failed tests:

/run cluster-test-suites TARGET_SUITES=./providers/capa/china,./providers/capa/private,./providers/capv/on-capz,./providers/capz/private

Adds a new 'hello world via gateway api' test alongside the existing ingress-nginx test. The new test deploys aws-load-balancer-controller-bundle (CAPA only, optional), gateway-api-bundle, and hello-world configured with an HTTPRoute instead of an Ingress. Includes certificate readiness validation in envoy-gateway-system before deploying hello-world. GatewayAPISupported defaults to true; set to false for capz, capv, capvcd, and eks providers where it is not yet supported.

Signed-off-by: Matias Charriere <matias@giantswarm.io>

Replaces the App-based deployment with the same HelmRelease+OCIRepository approach used in the ingress hello-world test.

Adds the managementCluster.name field to all capa aws-lb-controller-bundle values files, sourced from the MC cluster name via ExtraValues.Installation.

Signed-off-by: Matias Charriere <matias@giantswarm.io>

The clustertest WC client doesn't register Gateway API types, causing "no kind is registered" errors. Switching to unstructured.Unstructured with an explicit GVK bypasses the scheme requirement entirely.

Signed-off-by: Matias Charriere <matias@giantswarm.io>

…e+OCI Replace App CR deployments (DeployApp + child app waiting) with the same HelmRelease+OCIRepository pattern already used for the hello-world workload.

Signed-off-by: Matias Charriere <matias@giantswarm.io>

mcharriere · 2026-04-20T13:48:43Z

IIRC using hello-world v3 with HR+OCIRepo is fine. The schema conflict comes when installed via App CR, because of the catalog values.

I just pushed a few changes, moving the gateway-api-bundle and the aws-lb-controller to OCIRepo+HR

mcharriere · 2026-04-20T13:48:54Z

/run cluster-test-suites

tinkerers-ci · 2026-04-20T15:32:39Z

Important

Some test suites failed. See the Checks tab for detailed results per suite.

Re-run only the failed tests:

/run cluster-test-suites TARGET_SUITES=./providers/capa/china,./providers/capa/cilium-eni-mode,./providers/capa/private,./providers/capa/standard,./providers/capv/on-capz,./providers/eks/standard

mcharriere requested review from a team as code owners March 13, 2026 08:29

mcharriere marked this pull request as draft March 13, 2026 08:30

mcharriere force-pushed the migrate-envoy branch from b89edca to 2c37014 Compare March 13, 2026 09:00

mcharriere force-pushed the migrate-envoy branch from f44eaa5 to 16c8c1e Compare March 27, 2026 12:59

mcharriere force-pushed the migrate-envoy branch from b2776c9 to 914e57b Compare April 13, 2026 13:57

mcharriere force-pushed the migrate-envoy branch from 3f27297 to 594a1a2 Compare April 16, 2026 12:49

mcharriere marked this pull request as ready for review April 20, 2026 11:42

mcharriere requested a review from a team April 20, 2026 11:42

QuantumEnigmaa approved these changes Apr 20, 2026

View reviewed changes

ubergesundheit approved these changes Apr 20, 2026

View reviewed changes

mcharriere added 11 commits April 20, 2026 15:46

rename aws-lb-controller-bundle

4682792

Signed-off-by: Matias Charriere <matias@giantswarm.io>

bump deps

5d9266a

Signed-off-by: Matias Charriere <matias@giantswarm.io>

Use HelmRelease+OCIRepo to deploy hello-world in gateway test

bb5f8bd

Replaces the App-based deployment with the same HelmRelease+OCIRepository approach used in the ingress hello-world test.

Pass management cluster name to aws-lb-controller-bundle values

805775f

Adds the managementCluster.name field to all capa aws-lb-controller-bundle values files, sourced from the MC cluster name via ExtraValues.Installation.

aws-lb incluster

6ad8843

Signed-off-by: Matias Charriere <matias@giantswarm.io>

ga bundle incluster

3a66347

Signed-off-by: Matias Charriere <matias@giantswarm.io>

Use unstructured to query HTTPRoute, avoiding scheme registration

2f73c1f

The clustertest WC client doesn't register Gateway API types, causing "no kind is registered" errors. Switching to unstructured.Unstructured with an explicit GVK bypasses the scheme requirement entirely.

check ingress-nginx

86615de

Signed-off-by: Matias Charriere <matias@giantswarm.io>

go mod tidy

51f5b14

Signed-off-by: Matias Charriere <matias@giantswarm.io>

Migrate gateway-api-bundle and aws-lb-controller-bundle to HelmReleas…

9d6c9fa

…e+OCI Replace App CR deployments (DeployApp + child app waiting) with the same HelmRelease+OCIRepository pattern already used for the hello-world workload.

Enable aws-lb-controller on china

270af6e

Signed-off-by: Matias Charriere <matias@giantswarm.io>

mcharriere force-pushed the migrate-envoy branch from db0da35 to 270af6e Compare April 20, 2026 13:47

Conversation

mcharriere commented Mar 13, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Summary

Uh oh!

njuettner commented Mar 13, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

mcharriere commented Mar 13, 2026

Uh oh!

mcharriere commented Mar 13, 2026

Uh oh!

tinkerers-ci bot commented Mar 13, 2026

Uh oh!

mcharriere commented Mar 13, 2026

Uh oh!

tinkerers-ci bot commented Mar 13, 2026

Uh oh!

mcharriere commented Mar 27, 2026

Uh oh!

mcharriere commented Apr 13, 2026

Uh oh!

tinkerers-ci bot commented Apr 13, 2026

Uh oh!

mcharriere commented Apr 14, 2026

Uh oh!

tinkerers-ci bot commented Apr 14, 2026

Uh oh!

mcharriere commented Apr 14, 2026

Uh oh!

mcharriere commented Apr 14, 2026

Uh oh!

tinkerers-ci bot commented Apr 14, 2026

Uh oh!

mcharriere commented Apr 16, 2026

Uh oh!

mcharriere commented Apr 20, 2026

Uh oh!

QuantumEnigmaa left a comment

Choose a reason for hiding this comment

Uh oh!

ubergesundheit left a comment

Choose a reason for hiding this comment

Uh oh!

tinkerers-ci bot commented Apr 20, 2026

Uh oh!

mcharriere commented Apr 20, 2026

Uh oh!

mcharriere commented Apr 20, 2026

Uh oh!

tinkerers-ci bot commented Apr 20, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

4 participants

mcharriere commented Mar 13, 2026 •

edited

Loading

njuettner commented Mar 13, 2026 •

edited

Loading