From ecdaec30da0972f9e69fbda33720d7ee6d4800cd Mon Sep 17 00:00:00 2001
From: Daniel Newman <dan@danlovesprogramming.com>
Date: Fri, 17 Jul 2026 12:03:03 -0500
Subject: [PATCH] test: add airgap.daily build tag for daily airgap CI
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Introduce a new `airgap.daily` build tag to define a curated set of
pit.daily suites that run daily against an airgap cluster. Each suite
was validated against a live airgap RKE2 cluster (Rancher v2.14.2,
custom ansible-provisioned nodes).

Included (cleared, || airgap.daily):
- validation/workloads        TestWorkloadTestSuite (13/13 pass)

Excluded (&& !airgap.daily) — verified unsuitable for airgap:
- networking/connectivity     requires node-driver SSH (custom airgap
                              nodes carry none; no external IPs)
- fleet/public_gitrepo        clones public GitHub (no egress)
- fleet/upgrade               node SSH + public GitHub
- upgrade/workload            upgrade-flow test (needs real cluster
                              upgrade between pre/post phases)
- charts/{alerting,cis,istio,logging,monitoring,neuvector},
  charts/appco/istio, longhorn/{longhorn,chartinstall}
                              blocked by catalog-apps watch instability
                              (reproduced on CI) + external-node-IP deps

Under -tags=airgap.daily only TestWorkloadTestSuite compiles; under
-tags=pit.daily all 15 suites remain intact.
---
 validation/charts/alerting_test.go                        | 2 +-
 validation/charts/appco/istio_test.go                     | 2 +-
 validation/charts/cis_benchmark_test.go                   | 2 +-
 validation/charts/istio_test.go                           | 2 +-
 validation/charts/logging_test.go                         | 2 +-
 validation/charts/monitoring_test.go                      | 2 +-
 validation/charts/neuvector_test.go                       | 2 +-
 validation/fleet/public_gitrepo_test.go                   | 2 +-
 validation/fleet/upgrade/upgrade_test.go                  | 2 +-
 validation/longhorn/chartinstall/installation_test.go     | 2 +-
 validation/longhorn/longhorn_test.go                      | 2 +-
 validation/networking/connectivity/network_policy_test.go | 2 +-
 validation/networking/connectivity/port_test.go           | 2 +-
 validation/upgrade/workload_test.go                       | 2 +-
 validation/workloads/workload_test.go                     | 2 +-
 15 files changed, 15 insertions(+), 15 deletions(-)

diff --git a/validation/charts/alerting_test.go b/validation/charts/alerting_test.go
index d8f5eb9bd5..971e7450ff 100644
--- a/validation/charts/alerting_test.go
+++ b/validation/charts/alerting_test.go
@@ -1,4 +1,4 @@
-//go:build (validation || infra.any || cluster.any || sanity || pit.daily || pit.elemental || pit.harvester.daily) && !stress && !extended
+//go:build (validation || infra.any || cluster.any || sanity || pit.daily || pit.elemental || pit.harvester.daily) && !stress && !extended && !airgap.daily
 
 package charts
 
diff --git a/validation/charts/appco/istio_test.go b/validation/charts/appco/istio_test.go
index a0967068d6..b8981658b6 100644
--- a/validation/charts/appco/istio_test.go
+++ b/validation/charts/appco/istio_test.go
@@ -1,4 +1,4 @@
-//go:build (validation || infra.any || cluster.any || extended || pit.daily || pit.elemental || pit.harvester.daily) && !sanity && !stress
+//go:build (validation || infra.any || cluster.any || extended || pit.daily || pit.elemental || pit.harvester.daily) && !sanity && !stress && !airgap.daily
 
 package appco
 
diff --git a/validation/charts/cis_benchmark_test.go b/validation/charts/cis_benchmark_test.go
index 7ddad4cb3c..c44281ad1b 100644
--- a/validation/charts/cis_benchmark_test.go
+++ b/validation/charts/cis_benchmark_test.go
@@ -1,4 +1,4 @@
-//go:build (validation || infra.any || cluster.any || sanity || pit.daily || pit.elemental || pit.harvester.daily) && !stress && !extended
+//go:build (validation || infra.any || cluster.any || sanity || pit.daily || pit.elemental || pit.harvester.daily) && !stress && !extended && !airgap.daily
 
 package charts
 
diff --git a/validation/charts/istio_test.go b/validation/charts/istio_test.go
index 44a29c24ce..6fbbb46abe 100644
--- a/validation/charts/istio_test.go
+++ b/validation/charts/istio_test.go
@@ -1,4 +1,4 @@
-//go:build (validation || infra.rke1 || cluster.any || stress || pit.daily || pit.elemental || pit.harvester.daily) && !infra.any && !infra.aks && !infra.eks && !infra.gke && !infra.rke2k3s && !sanity && !extended
+//go:build (validation || infra.rke1 || cluster.any || stress || pit.daily || pit.elemental || pit.harvester.daily) && !infra.any && !infra.aks && !infra.eks && !infra.gke && !infra.rke2k3s && !sanity && !extended && !airgap.daily
 
 package charts
 
diff --git a/validation/charts/logging_test.go b/validation/charts/logging_test.go
index ed6dbe0a39..679c18add4 100644
--- a/validation/charts/logging_test.go
+++ b/validation/charts/logging_test.go
@@ -1,4 +1,4 @@
-//go:build (validation || infra.any || cluster.any || sanity || pit.daily || pit.elemental || pit.harvester.daily) && !stress && !extended
+//go:build (validation || infra.any || cluster.any || sanity || pit.daily || pit.elemental || pit.harvester.daily) && !stress && !extended && !airgap.daily
 
 package charts
 
diff --git a/validation/charts/monitoring_test.go b/validation/charts/monitoring_test.go
index ff39ff69dd..bcb4972a2b 100644
--- a/validation/charts/monitoring_test.go
+++ b/validation/charts/monitoring_test.go
@@ -1,4 +1,4 @@
-//go:build (validation || infra.rke1 || cluster.any || stress || pit.daily || pit.elemental || pit.harvester.daily) && !infra.any && !infra.aks && !infra.eks && !infra.gke && !infra.rke2k3s && !sanity && !extended
+//go:build (validation || infra.rke1 || cluster.any || stress || pit.daily || pit.elemental || pit.harvester.daily) && !infra.any && !infra.aks && !infra.eks && !infra.gke && !infra.rke2k3s && !sanity && !extended && !airgap.daily
 
 package charts
 
diff --git a/validation/charts/neuvector_test.go b/validation/charts/neuvector_test.go
index 33e53fa755..b748086918 100644
--- a/validation/charts/neuvector_test.go
+++ b/validation/charts/neuvector_test.go
@@ -1,4 +1,4 @@
-//go:build (validation || infra.any || cluster.any || sanity || pit.daily || pit.elemental || pit.harvester.daily) && !stress && !extended
+//go:build (validation || infra.any || cluster.any || sanity || pit.daily || pit.elemental || pit.harvester.daily) && !stress && !extended && !airgap.daily
 
 package charts
 
diff --git a/validation/fleet/public_gitrepo_test.go b/validation/fleet/public_gitrepo_test.go
index 08da914e60..46e9e11e41 100644
--- a/validation/fleet/public_gitrepo_test.go
+++ b/validation/fleet/public_gitrepo_test.go
@@ -1,4 +1,4 @@
-//go:build validation || sanity || pit.daily || pit.elemental || pit.harvester.daily
+//go:build (validation || sanity || pit.daily || pit.elemental || pit.harvester.daily) && !airgap.daily
 
 package fleet
 
diff --git a/validation/fleet/upgrade/upgrade_test.go b/validation/fleet/upgrade/upgrade_test.go
index 80a192db4f..5a1c4497e4 100644
--- a/validation/fleet/upgrade/upgrade_test.go
+++ b/validation/fleet/upgrade/upgrade_test.go
@@ -1,4 +1,4 @@
-//go:build (validation || infra.any || cluster.any || extended || pit.daily || pit.elemental || pit.harvester.daily) && !sanity && !stress
+//go:build (validation || infra.any || cluster.any || extended || pit.daily || pit.elemental || pit.harvester.daily) && !sanity && !stress && !airgap.daily
 
 package upgrade
 
diff --git a/validation/longhorn/chartinstall/installation_test.go b/validation/longhorn/chartinstall/installation_test.go
index 53460c11d5..21262135f4 100644
--- a/validation/longhorn/chartinstall/installation_test.go
+++ b/validation/longhorn/chartinstall/installation_test.go
@@ -1,4 +1,4 @@
-//go:build validation || pit.daily || pit.elemental || pit.harvester.daily
+//go:build (validation || pit.daily || pit.elemental || pit.harvester.daily) && !airgap.daily
 
 package longhorn
 
diff --git a/validation/longhorn/longhorn_test.go b/validation/longhorn/longhorn_test.go
index d449304e76..4195235bf5 100644
--- a/validation/longhorn/longhorn_test.go
+++ b/validation/longhorn/longhorn_test.go
@@ -1,4 +1,4 @@
-//go:build validation || pit.daily || pit.elemental || pit.harvester.daily
+//go:build (validation || pit.daily || pit.elemental || pit.harvester.daily) && !airgap.daily
 
 package longhorn
 
diff --git a/validation/networking/connectivity/network_policy_test.go b/validation/networking/connectivity/network_policy_test.go
index 717afbd8fb..1c5dd69891 100644
--- a/validation/networking/connectivity/network_policy_test.go
+++ b/validation/networking/connectivity/network_policy_test.go
@@ -1,4 +1,4 @@
-//go:build (validation || infra.rke2k3s || cluster.any || sanity || pit.daily || pit.elemental || pit.harvester.daily) && !stress && !extended
+//go:build (validation || infra.rke2k3s || cluster.any || sanity || pit.daily || pit.elemental || pit.harvester.daily) && !stress && !extended && !airgap.daily
 
 package connectivity
 
diff --git a/validation/networking/connectivity/port_test.go b/validation/networking/connectivity/port_test.go
index b372c61a88..2f6604a694 100644
--- a/validation/networking/connectivity/port_test.go
+++ b/validation/networking/connectivity/port_test.go
@@ -1,4 +1,4 @@
-//go:build (validation || infra.rke2k3s || cluster.any || sanity || pit.daily || pit.elemental || pit.harvester.daily) && !stress && !extended
+//go:build (validation || infra.rke2k3s || cluster.any || sanity || pit.daily || pit.elemental || pit.harvester.daily) && !stress && !extended && !airgap.daily
 
 package connectivity
 
diff --git a/validation/upgrade/workload_test.go b/validation/upgrade/workload_test.go
index b5b72df9fb..bab3323049 100644
--- a/validation/upgrade/workload_test.go
+++ b/validation/upgrade/workload_test.go
@@ -1,4 +1,4 @@
-//go:build validation || pit.daily || pit.elemental || pit.harvester.daily
+//go:build (validation || pit.daily || pit.elemental || pit.harvester.daily) && !airgap.daily
 
 package upgrade
 
diff --git a/validation/workloads/workload_test.go b/validation/workloads/workload_test.go
index 5759526a44..fdf47b0d71 100644
--- a/validation/workloads/workload_test.go
+++ b/validation/workloads/workload_test.go
@@ -1,4 +1,4 @@
-//go:build (validation || infra.any || cluster.any || sanity || pit.daily || pit.elemental || pit.harvester.daily) && !stress && !extended
+//go:build (validation || infra.any || cluster.any || sanity || pit.daily || pit.elemental || pit.harvester.daily || airgap.daily) && !stress && !extended
 
 package workloads