ci: run the IPv6-only e2e job on both sandbox classes [DO NOT MERGE — signal only] - #1123

Draft

Yuan Gao (ygao-g) wants to merge 28 commits into

agent-substrate:mainfrom

ygao-g:ci-ipv6-microvm

Commits on Aug 19, 2026

hack: fix DNS on IPv6-only kind clusters
Yuan Gao (ygao-g)
committed
2022b65
atenet/router: bind the Envoy ingress listeners dual-stack
Yuan Gao (ygao-g)
committed
d74e677
atenet/router: bind the admin socket and Service dual-stack
Yuan Gao (ygao-g)
committed
7684e39
atenet/egress: bind the Envoy sockets and Service dual-stack
Yuan Gao (ygao-g)
committed
eb25794
hack/verify: keep the gateway Envoy admin sockets dual-stack
Yuan Gao (ygao-g)
committed
504170a
atenet/router: bind the CONNECT listeners dual-stack too
Yuan Gao (ygao-g)
committed
9146916
atunnel: support IPv6 original destination lookup

Bingtan Lu (lubingtan)
and
Yuan Gao (ygao-g)
committed
729f95f

Commits on Aug 21, 2026

atunnel: preserve IPv4 original destination errors

Bingtan Lu (lubingtan)
authored and
Yuan Gao (ygao-g)
committed
1771134
atunnel: stabilize original destination tests

Bingtan Lu (lubingtan)
authored and
Yuan Gao (ygao-g)
committed
5728f51
ateom: drop the family from the atunnel ingress listen defaults
Yuan Gao (ygao-g)
committed
a87ff5a
ateomnet: enable IPv6 forwarding in worker pod netns

SURAJ KUMAR (krsnaSuraj)
authored and
Yuan Gao (ygao-g)
committed
b7fd047
ateomnet: return nil when sysctl path missing in writeSysctlIfUnset

SURAJ KUMAR (krsnaSuraj)
authored and
Yuan Gao (ygao-g)
committed
a1e5ca5
ateomnet: rename EnableIPv4Forwarding to EnableForwarding

SURAJ KUMAR (krsnaSuraj)
authored and
Yuan Gao (ygao-g)
committed
3753982
ateomnet: cover writeSysctlIfUnset's missing-path branch

SURAJ KUMAR (krsnaSuraj)
authored and
Yuan Gao (ygao-g)
committed
d2b61ed
atenet/egress: resolve upstream names on both address families
Yuan Gao (ygao-g)
committed
9185af7
ci: add an IPv6-only kind e2e job
Yuan Gao (ygao-g)
committed
5190881
hack: read the IPv6 DNS probe from the pod log
Yuan Gao (ygao-g)
committed
30b4ab2
atenet/dns: answer non-A actor queries instead of SERVFAIL
Yuan Gao (ygao-g)
committed
81ae66a
internal/ipfamily: add ClusterIPsByFamily
Yuan Gao (ygao-g)
committed
cf39993
atenet/dns: hoist the Corefile generation stamp to a package var
Yuan Gao (ygao-g)
committed
7c0a2f8
atenet/dns: publish the router's IPv6 ClusterIP as an AAAA
Yuan Gao (ygao-g)
committed
8148ad8
e2e: add an in-cluster DNS client and router IP family helpers
Yuan Gao (ygao-g)
committed
8e9ff3a
e2e: assert the actor DNS zone answers benign rcodes
Yuan Gao (ygao-g)
committed
84e02b6
e2e: assert the router ingress works on every IP family
Yuan Gao (ygao-g)
committed
57c1791
ateomnet: move the actor nftables table to the inet family
Yuan Gao (ygao-g)
committed
a369c2b
ateomnet: give the actor an IPv6 address when the pod has one
Yuan Gao (ygao-g)
committed
4ea369f
hack/microvm-assets: stage assets to rustfs over IPv6
Yuan Gao (ygao-g)
committed
5a25f2e
ci: run the IPv6-only e2e job on both sandbox classes
Yuan Gao (ygao-g)
committed
bbfeadd

Navigation Menu

Uh oh!

ci: run the IPv6-only e2e job on both sandbox classes [DO NOT MERGE — signal only] - #1123

ci: run the IPv6-only e2e job on both sandbox classes [DO NOT MERGE — signal only]#1123
Yuan Gao (ygao-g) wants to merge 28 commits into
agent-substrate:mainfrom
ygao-g:ci-ipv6-microvm

Commits on Aug 19, 2026

hack: fix DNS on IPv6-only kind clusters

atenet/router: bind the Envoy ingress listeners dual-stack

atenet/router: bind the admin socket and Service dual-stack

atenet/egress: bind the Envoy sockets and Service dual-stack

hack/verify: keep the gateway Envoy admin sockets dual-stack

atenet/router: bind the CONNECT listeners dual-stack too

atunnel: support IPv6 original destination lookup

Commits on Aug 21, 2026

atunnel: preserve IPv4 original destination errors

atunnel: stabilize original destination tests

ateom: drop the family from the atunnel ingress listen defaults

ateomnet: enable IPv6 forwarding in worker pod netns

ateomnet: return nil when sysctl path missing in writeSysctlIfUnset

ateomnet: rename EnableIPv4Forwarding to EnableForwarding

ateomnet: cover writeSysctlIfUnset's missing-path branch

atenet/egress: resolve upstream names on both address families

ci: add an IPv6-only kind e2e job

hack: read the IPv6 DNS probe from the pod log

atenet/dns: answer non-A actor queries instead of SERVFAIL

internal/ipfamily: add ClusterIPsByFamily

atenet/dns: hoist the Corefile generation stamp to a package var

atenet/dns: publish the router's IPv6 ClusterIP as an AAAA

e2e: add an in-cluster DNS client and router IP family helpers

e2e: assert the actor DNS zone answers benign rcodes

e2e: assert the router ingress works on every IP family

ateomnet: move the actor nftables table to the inet family

ateomnet: give the actor an IPv6 address when the pod has one

hack/microvm-assets: stage assets to rustfs over IPv6

ci: run the IPv6-only e2e job on both sandbox classes