Test TLS termination, SSL-redirect, Canary, and CORS

e2e/crd.go

@@ -37,8 +37,9 @@ import (
 )
 
 const (
-	gatewayAPIVersion    = "v1.4.1"
-	gatewayAPIInstallURL = "https://github.com/kubernetes-sigs/gateway-api/releases/download/" + gatewayAPIVersion + "/standard-install.yaml"
+	// gatewayAPIVersion    = "v1.4.1"
+	// gatewayAPIInstallURL = "https://github.com/kubernetes-sigs/gateway-api/releases/download/" + gatewayAPIVersion + "/experimental-install.yaml"
+	gatewayAPIInstallURL = "https://github.com/kubernetes-sigs/gateway-api/releases/download/monthly-2026.01/monthly-2026.01-install.yaml"
 )
 
 func deployCRDs(ctx context.Context, l logger, client *apiextensionsclientset.Clientset, skipCleanup bool) (func(), error) {

e2e/dummy_app.go

@@ -31,21 +31,20 @@ import (
 )
 
 const (
-	name    = "dummy-app"
 	image   = "registry.k8s.io/e2e-test-images/agnhost"
 	version = "2.39"
 )
 
-func deployDummyApp(ctx context.Context, l logger, client *kubernetes.Clientset, namespace string, skipCleanup bool) (func(), error) {
-	if err := createDummyAppDeployment(ctx, l, client, namespace); err != nil {
+func deployDummyApp(ctx context.Context, l logger, client *kubernetes.Clientset, name, namespace string, skipCleanup bool) (func(), error) {
+	if err := createDummyAppDeployment(ctx, l, client, name, namespace); err != nil {
 		return nil, fmt.Errorf("creating deployment: %w", err)
 	}
 
-	if err := createDummyAppService(ctx, client, namespace); err != nil {
+	if err := createDummyAppService(ctx, client, name, namespace); err != nil {
 		return nil, fmt.Errorf("creating service: %w", err)
 	}
 
-	if err := waitForDummyApp(ctx, l, client, namespace); err != nil {
+	if err := waitForDummyApp(ctx, l, client, name, namespace); err != nil {
 		return nil, fmt.Errorf("waiting for dummy app: %w", err)
 	}
 
@@ -72,7 +71,7 @@ func deployDummyApp(ctx context.Context, l logger, client *kubernetes.Clientset,
 	}, nil
 }
 
-func createDummyAppDeployment(ctx context.Context, l logger, client *kubernetes.Clientset, namespace string) error {
+func createDummyAppDeployment(ctx context.Context, l logger, client *kubernetes.Clientset, name, namespace string) error {
 	labels := map[string]string{"app": name}
 
 	l.Logf("Creating dummy app %s", name)
@@ -116,7 +115,7 @@ func createDummyAppDeployment(ctx context.Context, l logger, client *kubernetes.
 	return nil
 }
 
-func createDummyAppService(ctx context.Context, client *kubernetes.Clientset, namespace string) error {
+func createDummyAppService(ctx context.Context, client *kubernetes.Clientset, name, namespace string) error {
 	service := &corev1.Service{
 		ObjectMeta: metav1.ObjectMeta{
 			Name:      name,
@@ -141,7 +140,7 @@ func createDummyAppService(ctx context.Context, client *kubernetes.Clientset, na
 	return nil
 }
 
-func waitForDummyApp(ctx context.Context, l logger, client *kubernetes.Clientset, namespace string) error {
+func waitForDummyApp(ctx context.Context, l logger, client *kubernetes.Clientset, name, namespace string) error {
 	l.Logf("Waiting for dummy app to be ready")
 	err := wait.PollUntilContextTimeout(ctx, 1*time.Second, 5*time.Minute, true, func(ctx context.Context) (bool, error) {
 		dep, err := client.AppsV1().Deployments(namespace).Get(ctx, name, metav1.GetOptions{})

e2e/gwapi.go

@@ -23,6 +23,7 @@ import (
 	"time"
 
 	"github.com/kubernetes-sigs/ingress2gateway/pkg/i2gw"
+	"k8s.io/apimachinery/pkg/api/errors"
 	metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
 	"k8s.io/apimachinery/pkg/types"
 	gwapiv1 "sigs.k8s.io/gateway-api/apis/v1"
@@ -169,6 +170,9 @@ func createGatewayClasses(ctx context.Context, l logger, client *gwclientset.Cli
 			&gc,
 			metav1.CreateOptions{},
 		)
+		if errors.IsAlreadyExists(err) {
+			_, err = client.GatewayV1().GatewayClasses().Update(ctx, &gc, metav1.UpdateOptions{})
+		}
 		if err != nil {
 			return nil, fmt.Errorf("creating GatewayClass %s: %w", name.String(), err)
 		}

e2e/gwapi_kong.go

@@ -23,6 +23,7 @@ import (
 	"time"
 
 	"helm.sh/helm/v4/pkg/cli"
+	"k8s.io/apimachinery/pkg/api/errors"
 	metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
 	"k8s.io/client-go/kubernetes"
 	gwapiv1 "sigs.k8s.io/gateway-api/apis/v1"
@@ -92,6 +93,9 @@ func deployGatewayAPIKong(
 
 	l.Logf("Creating GatewayClass %s", kongGatewayClass)
 	_, err := gwClient.GatewayV1().GatewayClasses().Create(ctx, gc, metav1.CreateOptions{})
+	if errors.IsAlreadyExists(err) {
+		_, err = gwClient.GatewayV1().GatewayClasses().Update(ctx, gc, metav1.UpdateOptions{})
+	}
 	if err != nil {
 		return nil, fmt.Errorf("creating GatewayClass: %w", err)
 	}

e2e/ingress_nginx_canary_test.go

@@ -0,0 +1,78 @@
+/*
+Copyright 2026 The Kubernetes Authors.
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+    http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+*/
+
+package e2e
+
+import (
+	"fmt"
+	"regexp"
+	"testing"
+
+	"github.com/kubernetes-sigs/ingress2gateway/pkg/i2gw/providers/ingressnginx"
+	"github.com/kubernetes-sigs/ingress2gateway/pkg/i2gw/providers/istio"
+	"github.com/stretchr/testify/require"
+	networkingv1 "k8s.io/api/networking/v1"
+)
+
+func TestIngressNGINXCanary(t *testing.T) {
+	t.Parallel()
+	t.Run("to Istio", func(t *testing.T) {
+		t.Parallel()
+		t.Run("base canary", func(t *testing.T) {
+			suffix, err := randString()
+			require.NoError(t, err)
+			host := fmt.Sprintf("canary-%s.com", suffix)
+			runTestCase(t, &testCase{
+				gatewayImplementation: istio.ProviderName,
+				providers:             []string{ingressnginx.Name},
+				providerFlags: map[string]map[string]string{
+					ingressnginx.Name: {
+						ingressnginx.NginxIngressClassFlag: ingressnginx.NginxIngressClass,
+					},
+				},
+				ingresses: []*networkingv1.Ingress{
+					basicIngress().
+						withName("foo1").
+						withHost(host).
+						withIngressClass(ingressnginx.NginxIngressClass).
+						build(),
+					basicIngress().
+						withName("foo2").
+						withHost(host).
+						withIngressClass(ingressnginx.NginxIngressClass).
+						withAnnotation("nginx.ingress.kubernetes.io/canary", "true").
+						withAnnotation("nginx.ingress.kubernetes.io/canary-weight", "20").
+						withBackend(DummyAppName2).
+						build(),
+				},
+				verifiers: map[string][]verifier{
+					"foo1": {
+						&canaryVerifier{
+							verifier: &httpRequestVerifier{
+								host:      host,
+								path:      "/hostname",
+								bodyRegex: regexp.MustCompile("^dummy-app2"),
+							},
+							runs:         200,
+							minSuccesses: 0.1,
+							maxSuccesses: 0.3,
+						},
+					},
+				},
+			})
+		})
+	})
+}