General connectivity tests (run with DefaultAllow and DefaultDeny)
Pod to self
Pod to Pod, same namespace, same node
Pod to Pod, same namespace, different node
Pod to Pod, different namespace, same node
Pod to Pod, different namespace, different node
Pod to Service implemented by self
Pod to Service, same namespace, same node
Pod to Service, same namespace, different node
Pod to Service, different namespace, same node
Pod to Service, different namespace, different node
Pod to NodePort implemented by self
Pod to NodePort, same namespace, same node
Pod to NodePort, same namespace, different node
Pod to NodePort, different namespace, same node
Pod to NodePort, different namespace, different node
Node to Pod on same node
Node to Pod on different node
Node to Service on same node
Node to Service on different node
Node to NodePort on same node
Node to NodePort on different node
Pod to internet
Pod to same node
Pod to different node
Node to node via overlay
Internet to nodeport
Functional tests
Changing pod labels moves pod in/out of pod selector
Changing namespace labels moves namespace in/out of namespace selector
Pod selectors only match pods in the same namespace
Change of network policy terminates established connections
Copied from original issue: weaveworks/weave-npc#4
From @awh on September 20, 2016 13:3
General connectivity tests (run with DefaultAllow and DefaultDeny)
Pod to self Pod to Pod, same namespace, same node Pod to Pod, same namespace, different node Pod to Pod, different namespace, same node Pod to Pod, different namespace, different node
Pod to Service implemented by self Pod to Service, same namespace, same node Pod to Service, same namespace, different node Pod to Service, different namespace, same node Pod to Service, different namespace, different node
Pod to NodePort implemented by self Pod to NodePort, same namespace, same node Pod to NodePort, same namespace, different node Pod to NodePort, different namespace, same node Pod to NodePort, different namespace, different node
Node to Pod on same node Node to Pod on different node Node to Service on same node Node to Service on different node Node to NodePort on same node Node to NodePort on different node
Pod to internet Pod to same node Pod to different node Node to node via overlay Internet to nodeport
Functional tests
Changing pod labels moves pod in/out of pod selector Changing namespace labels moves namespace in/out of namespace selector Pod selectors only match pods in the same namespace Change of network policy terminates established connections
Copied from original issue: weaveworks/weave-npc#4