connectivity: don't run encryption tests on single node

Disable the encryption tests when running the connectivity tests on a single node cluster, as they require that source and destination are hosted on different nodes. Signed-off-by: Marco Iorio <[email protected]>
cilium · Oct 19, 2023 · 75c850c · 75c850c
1 parent 2dc2172
commit 75c850c
Showing 1 changed file with 15 additions and 13 deletions.
diff --git a/connectivity/suite.go b/connectivity/suite.go
@@ -745,19 +745,21 @@ func Run(ctx context.Context, ct *check.ConnectivityTest, addExtraTests func(*ch
 			tests.OutsideToNodePort(),
 		)
 
-	// Encryption checks are always executed as a sanity check, asserting whether
-	// unencrypted packets shall, or shall not, be observed based on the feature set.
-	ct.NewTest("pod-to-pod-encryption").
-		WithScenarios(
-			tests.PodToPodEncryption(features.RequireEnabled(features.EncryptionPod)),
-		)
-	ct.NewTest("node-to-node-encryption").
-		WithScenarios(
-			tests.NodeToNodeEncryption(
-				features.RequireEnabled(features.EncryptionPod),
-				features.RequireEnabled(features.EncryptionNode),
-			),
-		)
+	if !ct.Params().SingleNode {
+		// Encryption checks are always executed as a sanity check, asserting whether
+		// unencrypted packets shall, or shall not, be observed based on the feature set.
+		ct.NewTest("pod-to-pod-encryption").
+			WithScenarios(
+				tests.PodToPodEncryption(features.RequireEnabled(features.EncryptionPod)),
+			)
+		ct.NewTest("node-to-node-encryption").
+			WithScenarios(
+				tests.NodeToNodeEncryption(
+					features.RequireEnabled(features.EncryptionPod),
+					features.RequireEnabled(features.EncryptionNode),
+				),
+			)
+	}
 
 	if ct.Params().IncludeUnsafeTests {
 		ct.NewTest("egress-gateway").