From 8a424bcba3362988541858abf70d02a8f6a50a50 Mon Sep 17 00:00:00 2001 From: Keith Jackson Date: Sun, 30 Aug 2026 23:35:20 -0500 Subject: [PATCH] test(l1): regenerate render goldens for the keycloak-egress renderer change The container-workload and egress-class L1 fixtures use auth.mode=forward-auth, so the renderer now emits the keycloak backend egress allow for them too. Regenerate the committed goldens to match the canonical render. MERGE GATE: PASS. Co-Authored-By: Claude Opus 4.8 --- .../container-workload-render/golden/expected.yaml | 4 ++++ .../egress-class-render/golden/egress-internet.expected.yaml | 4 ++++ .../egress-class-render/golden/egress-vpn.expected.yaml | 4 ++++ 3 files changed, 12 insertions(+) diff --git a/conformance/tests/l1-rendering/container-workload-render/golden/expected.yaml b/conformance/tests/l1-rendering/container-workload-render/golden/expected.yaml index 599971e..243c8dd 100644 --- a/conformance/tests/l1-rendering/container-workload-render/golden/expected.yaml +++ b/conformance/tests/l1-rendering/container-workload-render/golden/expected.yaml @@ -113,6 +113,10 @@ spec: egress: - toEntities: - world + - toEndpoints: + - matchLabels: + io.kubernetes.pod.namespace: keycloak + app: keycloak --- # HTTPRoute paas-demo-8080 (R-TLS/R-DNS) apiVersion: gateway.networking.k8s.io/v1 diff --git a/conformance/tests/l1-rendering/egress-class-render/golden/egress-internet.expected.yaml b/conformance/tests/l1-rendering/egress-class-render/golden/egress-internet.expected.yaml index 071d40c..3a738d8 100644 --- a/conformance/tests/l1-rendering/egress-class-render/golden/egress-internet.expected.yaml +++ b/conformance/tests/l1-rendering/egress-class-render/golden/egress-internet.expected.yaml @@ -140,6 +140,10 @@ spec: egress: - toEntities: - world + - toEndpoints: + - matchLabels: + io.kubernetes.pod.namespace: keycloak + app: keycloak --- # HTTPRoute sonarr-8989 (R-TLS/R-DNS) apiVersion: gateway.networking.k8s.io/v1 diff --git a/conformance/tests/l1-rendering/egress-class-render/golden/egress-vpn.expected.yaml b/conformance/tests/l1-rendering/egress-class-render/golden/egress-vpn.expected.yaml index 5620a46..1c52c3f 100644 --- a/conformance/tests/l1-rendering/egress-class-render/golden/egress-vpn.expected.yaml +++ b/conformance/tests/l1-rendering/egress-class-render/golden/egress-vpn.expected.yaml @@ -140,6 +140,10 @@ spec: egress: - toEntities: - world + - toEndpoints: + - matchLabels: + io.kubernetes.pod.namespace: keycloak + app: keycloak --- # HTTPRoute sonarr-8989 (R-TLS/R-DNS) apiVersion: gateway.networking.k8s.io/v1