Skip to content

Comments

e2e: add multi-tenant access control negative tests#3081

Open
vihu wants to merge 2 commits intomainfrom
rg/e2e-multi-tenancy-negative-tests
Open

e2e: add multi-tenant access control negative tests#3081
vihu wants to merge 2 commits intomainfrom
rg/e2e-multi-tenancy-negative-tests

Conversation

@vihu
Copy link
Contributor

@vihu vihu commented Feb 23, 2026

Summary

Fix #3079

  • Tests control plane rejection of unauthorized tenant connections, complementing the existing data-plane isolation tests in TestE2E_MultiTenantVRF.
  • Three negative subtests verify that connections are denied when a client targets a tenant not in its access pass allowlist (onchain Custom 79), a nonexistent tenant (client-side preflight), or any tenant when the allowlist is empty. A positive control subtest confirms the same infrastructure accepts an authorized tenant connection.

TODO

  • Maybe add more tests, need to double check if we're missing some negative workflow
  • Wait for CI

@vihu vihu marked this pull request as ready for review February 24, 2026 18:01
vihu added 2 commits February 24, 2026 11:01
- Tests control plane rejection of unauthorized tenant connections,
  complementing the existing data-plane isolation tests in
  TestE2E_MultiTenantVRF.
- Three negative subtests verify that connections are denied when a
  client targets a tenant not in its access pass allowlist (onchain
  Custom 79), a nonexistent tenant (client-side preflight), or any
  tenant when the allowlist is empty. A positive control subtest
  confirms the same infrastructure accepts an authorized tenant
  connection.
@vihu vihu force-pushed the rg/e2e-multi-tenancy-negative-tests branch from c3fbbac to d237208 Compare February 24, 2026 18:02
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

e2e(multi-tenancy): add negative E2E test cases for multi-tenancy feature

1 participant