Skip to content

Add ClusterIP service routing health check - #1302

Open
xinWeiWei24 wants to merge 3 commits into
v2from
xinwei/validate_kube_proxy
Open

Add ClusterIP service routing health check#1302
xinWeiWei24 wants to merge 3 commits into
v2from
xinwei/validate_kube_proxy

Conversation

@xinWeiWei24

@xinWeiWei24 xinWeiWei24 commented Aug 25, 2026

Copy link
Copy Markdown
Collaborator

Adds ValidateClusterIPService: deploys a backend behind a ClusterIP and verifies it's reachable from a disposable client pod. Works with any service proxy (kube-proxy, Cilium eBPF); auto-cleans up all resources.

Validates ClusterIP service routing by deploying a backend and reaching
it from a disposable client pod.
@github-actions

Copy link
Copy Markdown

For reviewers only: reply /run-tf-integration to trigger the terraform integration pipeline before approving the PR.

# kube-proxy: a ClusterIP service is reachable from within the cluster,
# exercising service routing. For daemonset/pod health, pair with
# ValidateWorkloadHealth(kind="daemonset", name="kube-proxy", namespace="kube-system")
# only on clusters that run kube-proxy; skip it when a replacement (e.g. Cilium

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

does it rely on the caller to decide whether the cluster is using kube-proxy?

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

looks like the logic does not bind to kube proxy, anything that backs a cluster ip can be validated by this, right?

Copy link
Copy Markdown
Collaborator Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Good catch. The check isn't kube-proxy specific — it validates ClusterIP service routing, which works regardless of the proxy implementation (kube-proxy, Cilium eBPF, etc.). Renamed it to ValidateClusterIPService and updated the comment

@xinWeiWei24 xinWeiWei24 changed the title Add kube-proxy health validation step Add ClusterIP service routing health check Aug 26, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants