Merge branch 'main' into dependabot/go_modules/golang.org/x/net-0.38.0

Ryan Lymburner · web-flow · commit 24b304bb128b · 2025-05-07T19:29:41.000-07:00
diff --git a/.github/workflows/validate-merge-queue-e2e-test.yaml b/.github/workflows/validate-merge-queue-e2e-test.yaml
@@ -37,6 +37,8 @@ jobs:
           cache-dependency-path: test/go.sum
       - name: Set up Docker Buildx
         uses: docker/setup-buildx-action@v3
+        with:
+          version: latest
       - name: Setup AWS credentials
         uses: aws-actions/configure-aws-credentials@v4
         with:
@@ -57,6 +59,8 @@ jobs:
           script: |
             core.exportVariable('ACTIONS_CACHE_URL', process.env['ACTIONS_CACHE_URL'])
             core.exportVariable('ACTIONS_RUNTIME_TOKEN', process.env['ACTIONS_RUNTIME_TOKEN'])
+            core.exportVariable('ACTIONS_RESULTS_URL', process.env['ACTIONS_RESULTS_URL'])
+            core.exportVariable('ACTIONS_CACHE_SERVICE_V2', process.env['ACTIONS_CACHE_SERVICE_V2'])
       - name: Build and push image
         run: |
           SKIP_BUILD_CHART=true scripts/release-controller.sh
diff --git a/.github/workflows/validate-pull-request-presubmit.yaml b/.github/workflows/validate-pull-request-presubmit.yaml
@@ -18,7 +18,7 @@ jobs:
         with:
           go-version: ${{ env.GO_VERSION }}
           check-latest: true
-      - uses: actions/cache@v3
+      - uses: actions/cache@v4
         with:
           path: |
             ~/.cache/go-build
diff --git a/.golangci.yaml b/.golangci.yaml
@@ -1,4 +1,32 @@
-# https://golangci-lint.run/usage/configuration
+version: "2"
 linters:
   disable:
-    - errcheck
+    - errcheck
+  exclusions:
+    generated: lax
+    presets:
+      - comments
+      - common-false-positives
+      - legacy
+      - std-error-handling
+    paths:
+      - third_party$
+      - builtin$
+      - examples$
+    rules:
+      - linters:
+          - staticcheck
+        text: "ST1012:"
+      - linters:
+          - staticcheck
+        text: "QF1003:"
+      - linters:
+          - staticcheck
+        text: "QF1001:"
+formatters:
+  exclusions:
+    generated: lax
+    paths:
+      - third_party$
+      - builtin$
+      - examples$
diff --git a/docs/concepts/overview.md b/docs/concepts/overview.md
@@ -65,6 +65,14 @@ With VPC Lattice you can also avoid some of these common problems:
 - **Sidecar management**: Changes to sidecars might require those sidecars to be reconfigured or rebooted.
   While this might not be a big issue for a handful of sidecars, it can be disruptive if you have thousands of pods, each with its own sidecar.
 
+## Limitations
+
+For those already familiar with the reference implementation of [Kubernetes Gateway API](https://gateway-api.sigs.k8s.io/), the API generally serves two purposes: enabling routing for both North-South (Ingress) and also East-West (Mesh) traffic.  
+
+The AWS Gateway API Controller is currently focused only on East-West (Mesh) traffic through VPC Lattice.
+
+Many users will expect North-South (Ingress) ALB/NLB-type features. This is available (still using the v1 Ingress spec) from the [AWS Load Balancer Controller](https://github.com/kubernetes-sigs/aws-load-balancer-controller)
+
 ## Relationship between VPC Lattice and Kubernetes
 
 As a Kubernetes user, you can have a very Kubernetes-native experience using the VPC Lattice APIs.
diff --git a/docs/guides/deploy.md b/docs/guides/deploy.md
diff --git a/pkg/controllers/accesslogpolicy_controller.go b/pkg/controllers/accesslogpolicy_controller.go
@@ -247,7 +247,7 @@ func (r *accessLogPolicyReconciler) targetRefExists(ctx context.Context, alp *an
 		grpcRoute := &gwv1.GRPCRoute{}
 		err = r.client.Get(ctx, targetRefNamespacedName, grpcRoute)
 	default:
-		return false, fmt.Errorf("Access Log Policy targetRef is for unsupported Kind: %s", alp.Spec.TargetRef.Kind)
+		return false, fmt.Errorf("access Log Policy targetRef is for unsupported Kind: %s", alp.Spec.TargetRef.Kind)
 	}
 
 	if err != nil && !errors.IsNotFound(err) {
@@ -294,10 +294,10 @@ func (r *accessLogPolicyReconciler) updateAccessLogPolicyAnnotations(
 	for _, als := range accessLogSubscriptions {
 		if als.Spec.EventType != core.DeleteEvent {
 			oldAlp := alp.DeepCopy()
-			if alp.ObjectMeta.Annotations == nil {
-				alp.ObjectMeta.Annotations = make(map[string]string)
+			if alp.Annotations == nil {
+				alp.Annotations = make(map[string]string)
 			}
-			alp.ObjectMeta.Annotations[anv1alpha1.AccessLogSubscriptionAnnotationKey] = als.Status.Arn
+			alp.Annotations[anv1alpha1.AccessLogSubscriptionAnnotationKey] = als.Status.Arn
 			if err := r.client.Patch(ctx, alp, client.MergeFrom(oldAlp)); err != nil {
 				r.eventRecorder.Event(alp, corev1.EventTypeWarning, k8s.FailedReconcileEvent,
 					"Failed to update annotation due to "+err.Error())
diff --git a/pkg/controllers/serviceexport_controller.go b/pkg/controllers/serviceexport_controller.go
@@ -121,7 +121,7 @@ func (r *serviceExportReconciler) reconcile(ctx context.Context, req ctrl.Reques
 		return client.IgnoreNotFound(err)
 	}
 
-	if srvExport.ObjectMeta.Annotations["application-networking.k8s.aws/federation"] != "amazon-vpc-lattice" {
+	if srvExport.Annotations["application-networking.k8s.aws/federation"] != "amazon-vpc-lattice" {
 		return nil
 	}
 	r.log.Debugf(ctx, "Found matching service export %s-%s", srvExport.Name, srvExport.Namespace)
diff --git a/pkg/deploy/lattice/listener_manager.go b/pkg/deploy/lattice/listener_manager.go
@@ -109,7 +109,7 @@ func (d *defaultListenerManager) create(ctx context.Context, latticeSvcId string
 	resp, err := d.cloud.Lattice().CreateListenerWithContext(ctx, &listenerInput)
 	if err != nil {
 		return model.ListenerStatus{},
-			fmt.Errorf("Failed CreateListener %s due to %s", aws.StringValue(listenerInput.Name), err)
+			fmt.Errorf("failed CreateListener %s due to %s", aws.StringValue(listenerInput.Name), err)
 	}
 	d.log.Infof(ctx, "Success CreateListener %s, %s", aws.StringValue(resp.Name), aws.StringValue(resp.Id))
 
@@ -280,7 +280,7 @@ func (d *defaultListenerManager) Delete(ctx context.Context, modelListener *mode
 			d.log.Debugf(ctx, "Listener already deleted")
 			return nil
 		}
-		return fmt.Errorf("Failed DeleteListener %s, %s due to %s", modelListener.Status.Id, modelListener.Status.ServiceId, err)
+		return fmt.Errorf("failed DeleteListener %s, %s due to %s", modelListener.Status.Id, modelListener.Status.ServiceId, err)
 	}
 
 	d.log.Infof(ctx, "Success DeleteListener %s, %s", modelListener.Status.Id, modelListener.Status.ServiceId)
diff --git a/pkg/deploy/lattice/rule_synthesizer.go b/pkg/deploy/lattice/rule_synthesizer.go
@@ -87,7 +87,7 @@ func (r *ruleSynthesizer) createOrUpdateRules(ctx context.Context, rule *model.R
 	}
 	status, err := r.ruleManager.Upsert(ctx, rule, stackListener, stackSvc)
 	if err != nil {
-		return fmt.Errorf("Failed RuleManager.Upsert due to %s", err)
+		return fmt.Errorf("failed RuleManager.Upsert due to %s", err)
 	}
 	rule.Status = &status
 
diff --git a/pkg/deploy/lattice/target_group_manager.go b/pkg/deploy/lattice/target_group_manager.go
@@ -103,7 +103,7 @@ func (s *defaultTargetGroupManager) create(ctx context.Context, modelTg *model.T
 	resp, err := lattice.CreateTargetGroupWithContext(ctx, &createInput)
 	if err != nil {
 		return model.TargetGroupStatus{},
-			fmt.Errorf("Failed CreateTargetGroup %s due to %s", latticeTgName, err)
+			fmt.Errorf("failed CreateTargetGroup %s due to %s", latticeTgName, err)
 	}
 	s.log.Infof(ctx, "Success CreateTargetGroup %s", latticeTgName)
 
diff --git a/pkg/deploy/lattice/target_group_synthesizer_test.go b/pkg/deploy/lattice/target_group_synthesizer_test.go
@@ -240,16 +240,16 @@ func Test_DoNotDeleteCases(t *testing.T) {
 		},
 	}
 	svcExportModelTg := baseModelTg
-	svcExportModelTg.Spec.TargetGroupTagFields.K8SSourceType = model.SourceTypeSvcExport
+	svcExportModelTg.Spec.K8SSourceType = model.SourceTypeSvcExport
 
 	mockSvcExportTgBuilder.EXPECT().BuildTargetGroup(ctx, gomock.Any()).Return(&svcExportModelTg, nil)
 
 	stack := core.NewDefaultStack(core.StackID{Name: "foo", Namespace: "bar"})
 	svcModelTg := baseModelTg
 	svcModelTg.ResourceMeta = core.NewResourceMeta(stack, "AWS:VPCServiceNetwork::TargetGroup", "tg-id")
-	svcModelTg.Spec.TargetGroupTagFields.K8SSourceType = model.SourceTypeHTTPRoute
-	svcModelTg.Spec.TargetGroupTagFields.K8SRouteName = "route"
-	svcModelTg.Spec.TargetGroupTagFields.K8SRouteNamespace = "route-ns"
+	svcModelTg.Spec.K8SSourceType = model.SourceTypeHTTPRoute
+	svcModelTg.Spec.K8SRouteName = "route"
+	svcModelTg.Spec.K8SRouteNamespace = "route-ns"
 	stack.AddResource(&svcModelTg)
 
 	mockTGManager.EXPECT().IsTargetGroupMatch(ctx, gomock.Any(), gomock.Any(), gomock.Any()).Return(true, nil)
diff --git a/pkg/deploy/lattice/targets_manager.go b/pkg/deploy/lattice/targets_manager.go
@@ -119,10 +119,10 @@ func (s *defaultTargetsManager) registerTargets(
 		}
 		resp, err := s.cloud.Lattice().RegisterTargetsWithContext(ctx, &registerTargetsInput)
 		if err != nil {
-			registerTargetsError = errors.Join(registerTargetsError, fmt.Errorf("Failed to register targets from VPC Lattice Target Group %s due to %s", modelTg.Status.Id, err))
+			registerTargetsError = errors.Join(registerTargetsError, fmt.Errorf("failed to register targets from VPC Lattice Target Group %s due to %s", modelTg.Status.Id, err))
 		}
 		if len(resp.Unsuccessful) > 0 {
-			registerTargetsError = errors.Join(registerTargetsError, fmt.Errorf("Failed to register targets from VPC Lattice Target Group %s for chunk %d/%d, unsuccessful targets %v",
+			registerTargetsError = errors.Join(registerTargetsError, fmt.Errorf("failed to register targets from VPC Lattice Target Group %s for chunk %d/%d, unsuccessful targets %v",
 				modelTg.Status.Id, i+1, len(chunks), resp.Unsuccessful))
 		}
 		s.log.Debugf(ctx, "Successfully registered %d targets from VPC Lattice Target Group %s for chunk %d/%d",
@@ -152,10 +152,10 @@ func (s *defaultTargetsManager) deregisterTargets(
 		}
 		resp, err := s.cloud.Lattice().DeregisterTargetsWithContext(ctx, &deregisterTargetsInput)
 		if err != nil {
-			deregisterTargetsError = errors.Join(deregisterTargetsError, fmt.Errorf("Failed to deregister targets from VPC Lattice Target Group %s due to %s", modelTg.Status.Id, err))
+			deregisterTargetsError = errors.Join(deregisterTargetsError, fmt.Errorf("failed to deregister targets from VPC Lattice Target Group %s due to %s", modelTg.Status.Id, err))
 		}
 		if len(resp.Unsuccessful) > 0 {
-			deregisterTargetsError = errors.Join(deregisterTargetsError, fmt.Errorf("Failed to deregister targets from VPC Lattice Target Group %s for chunk %d/%d, unsuccessful targets %v",
+			deregisterTargetsError = errors.Join(deregisterTargetsError, fmt.Errorf("failed to deregister targets from VPC Lattice Target Group %s for chunk %d/%d, unsuccessful targets %v",
 				modelTg.Status.Id, i+1, len(chunks), resp.Unsuccessful))
 		}
 		s.log.Debugf(ctx, "Successfully deregistered %d targets from VPC Lattice Target Group %s for chunk %d/%d", len(resp.Successful), modelTg.Status.Id, i+1, len(chunks))
diff --git a/pkg/gateway/model_build_targetgroup.go b/pkg/gateway/model_build_targetgroup.go
@@ -423,7 +423,7 @@ func buildTargetGroupIpAddressType(svc *corev1.Service) (string, error) {
 	ipFamilies := svc.Spec.IPFamilies
 
 	if len(ipFamilies) != 1 {
-		return "", errors.New("Lattice Target Group only supports single stack IP addresses")
+		return "", errors.New("lattice Target Group only supports single stack IP addresses")
 	}
 
 	// IpFamilies will always have at least 1 element
diff --git a/pkg/gateway/model_build_targets.go b/pkg/gateway/model_build_targets.go
@@ -212,14 +212,14 @@ func (t *latticeTargetsModelBuildTask) getDefinedPorts() map[int32]struct{} {
 
 	isServiceExport := t.serviceExport != nil
 	if isServiceExport {
-		portsAnnotations := strings.Split(t.serviceExport.ObjectMeta.Annotations[portAnnotationsKey], ",")
+		portsAnnotations := strings.Split(t.serviceExport.Annotations[portAnnotationsKey], ",")
 
 		for _, portAnnotation := range portsAnnotations {
 			if portAnnotation != "" {
 				definedPort, err := strconv.ParseInt(portAnnotation, 10, 32)
 				if err != nil {
 					t.log.Infof(context.TODO(), "failed to read Annotations/Port: %s due to %s",
-						t.serviceExport.ObjectMeta.Annotations[portAnnotationsKey], err)
+						t.serviceExport.Annotations[portAnnotationsKey], err)
 				} else {
 					definedPorts[int32(definedPort)] = struct{}{}
 				}
diff --git a/pkg/model/core/stack_test.go b/pkg/model/core/stack_test.go
@@ -96,7 +96,7 @@ func Test_defaultStack_ListResources(t *testing.T) {
 			} else {
 				assert.NoError(t, err)
 				for _, want := range tt.wantFakeResources {
-					want.ResourceMeta.stack = s
+					want.stack = s
 				}
 				sort.Slice(gotFakeResources, func(i, j int) bool {
 					return gotFakeResources[i].ID() < gotFakeResources[j].ID()
diff --git a/scripts/setup.sh b/scripts/setup.sh
@@ -3,7 +3,7 @@
 declare -a DEPENDENCY_LIST=("go" "awscli" "kubernetes-cli" "eksctl" "helm" "jq" "yq" "make")
 CURRENT_CONTROLLER_VERSION="1.1.0"
 CURRENT_CRD_VERSION="1.2.0"
-GOLANGCI_LINT_VERSION="1.63.4"
+GOLANGCI_LINT_VERSION="2.1.5"
 EKS_POD_IDENTITY_AGENT_VERSION="1.0.0-eksbuild.1"
 
 main() {
@@ -68,7 +68,13 @@ tools() {
             echo "Installing golangci-lint"
             curl -sSfL https://raw.githubusercontent.com/golangci/golangci-lint/master/install.sh | sh -s -- -b $(go env GOPATH)/bin v$GOLANGCI_LINT_VERSION
         else
-            echo "golangci-lint is already installed."
+
+            read -p "golangci-lint is already installed, do you want to update? (Y/N): " update_package
+
+            if [[ $update_package == 'Y' || $update_package == 'y' ]]; then
+                echo "Updating golangci-lint"
+                curl -sSfL https://raw.githubusercontent.com/golangci/golangci-lint/master/install.sh | sh -s -- -b $(go env GOPATH)/bin v$GOLANGCI_LINT_VERSION
+            fi
         fi
 
         go install github.com/golang/mock/mockgen@v1.6.0
diff --git a/test/suites/integration/access_log_policy_test.go b/test/suites/integration/access_log_policy_test.go
@@ -220,6 +220,7 @@ var _ = Describe("Access Log Policy", Ordered, func() {
 	})
 
 	It("creation produces an Access Log Subscription for the corresponding Service Network when the targetRef's Kind is Gateway", func() {
+		Skip("This test is unreliable.")
 		accessLogPolicy := &anv1alpha1.AccessLogPolicy{
 			ObjectMeta: metav1.ObjectMeta{
 				Name:      k8sResourceName,
@@ -279,6 +280,7 @@ var _ = Describe("Access Log Policy", Ordered, func() {
 	})
 
 	It("creation produces an Access Log Subscription for the corresponding VPC Lattice Service when the targetRef's Kind is HTTPRoute", func() {
+		Skip("This test is unreliable.")
 		accessLogPolicy := &anv1alpha1.AccessLogPolicy{
 			ObjectMeta: metav1.ObjectMeta{
 				Name:      k8sResourceName,
@@ -339,6 +341,7 @@ var _ = Describe("Access Log Policy", Ordered, func() {
 	})
 
 	It("creation produces an Access Log Subscription for the corresponding VPC Lattice Service when the targetRef's Kind is GRPCRoute", func() {
+		Skip("This test is unreliable.")
 		accessLogPolicy := &anv1alpha1.AccessLogPolicy{
 			ObjectMeta: metav1.ObjectMeta{
 				Name:      k8sResourceName,
@@ -399,6 +402,7 @@ var _ = Describe("Access Log Policy", Ordered, func() {
 	})
 
 	It("creation produces Access Log Subscriptions with Bucket, Log Group, and Delivery Stream destinations on the same targetRef", func() {
+		Skip("This test is unreliable.")
 		// Create Access Log Policy for S3 Bucket
 		s3AccessLogPolicy := &anv1alpha1.AccessLogPolicy{
 			ObjectMeta: metav1.ObjectMeta{
@@ -488,6 +492,7 @@ var _ = Describe("Access Log Policy", Ordered, func() {
 	})
 
 	It("creation sets Access Log Policy status to Conflicted when creating a new policy for the same targetRef and destination type", func() {
+		Skip("This test is unreliable.")
 		accessLogPolicy1 := &anv1alpha1.AccessLogPolicy{
 			ObjectMeta: metav1.ObjectMeta{
 				Name:      k8sResourceName + "-1",
@@ -540,6 +545,7 @@ var _ = Describe("Access Log Policy", Ordered, func() {
 	})
 
 	It("creation sets Access Log Policy status to Invalid when the destination does not exist", func() {
+		Skip("This test is unreliable.")
 		accessLogPolicy := &anv1alpha1.AccessLogPolicy{
 			ObjectMeta: metav1.ObjectMeta{
 				Name:      k8sResourceName,
@@ -575,6 +581,7 @@ var _ = Describe("Access Log Policy", Ordered, func() {
 	})
 
 	It("creation sets Access Log Policy status to Invalid when the targetRef's Group is not gateway.networking.k8s.io", func() {
+		Skip("This test is unreliable.")
 		accessLogPolicy := &anv1alpha1.AccessLogPolicy{
 			ObjectMeta: metav1.ObjectMeta{
 				Name:      k8sResourceName,
@@ -610,6 +617,7 @@ var _ = Describe("Access Log Policy", Ordered, func() {
 	})
 
 	It("creation sets Access Log Policy status to Invalid when the targetRef's Kind is not Gateway, HTTPRoute, or GRPCRoute", func() {
+		Skip("This test is unreliable.")
 		accessLogPolicy := &anv1alpha1.AccessLogPolicy{
 			ObjectMeta: metav1.ObjectMeta{
 				Name:      k8sResourceName,
@@ -645,6 +653,7 @@ var _ = Describe("Access Log Policy", Ordered, func() {
 	})
 
 	It("update properly changes or replaces Access Log Subscription and sets Access Log Policy status", func() {
+		Skip("This test is unreliable.")
 		originalAlsArn := ""
 		currentAlsArn := ""
 		expectedGeneration := 1
@@ -1031,6 +1040,7 @@ var _ = Describe("Access Log Policy", Ordered, func() {
 	})
 
 	It("deletion removes the Access Log Subscription for the corresponding Service Network when the targetRef's Kind is Gateway", func() {
+		Skip("This test is unreliable.")
 		accessLogPolicy := &anv1alpha1.AccessLogPolicy{
 			ObjectMeta: metav1.ObjectMeta{
 				Name:      k8sResourceName,
@@ -1073,6 +1083,7 @@ var _ = Describe("Access Log Policy", Ordered, func() {
 	})
 
 	It("deletion removes the Access Log Subscription for the corresponding VPC Lattice Service when the targetRef's Kind is HTTPRoute", func() {
+		Skip("This test is unreliable.")
 		accessLogPolicy := &anv1alpha1.AccessLogPolicy{
 			ObjectMeta: metav1.ObjectMeta{
 				Name:      k8sResourceName,
@@ -1117,6 +1128,7 @@ var _ = Describe("Access Log Policy", Ordered, func() {
 	})
 
 	It("deletion removes the Access Log Subscription for the corresponding VPC Lattice Service when the targetRef's Kind is GRPCRoute", func() {
+		Skip("This test is unreliable.")
 		accessLogPolicy := &anv1alpha1.AccessLogPolicy{
 			ObjectMeta: metav1.ObjectMeta{
 				Name:      k8sResourceName,
@@ -1161,6 +1173,7 @@ var _ = Describe("Access Log Policy", Ordered, func() {
 	})
 
 	It("status is updated when targetRef is deleted and recreated", func() {
+		Skip("This test is unreliable.")
 		// Create HTTPRoute, Service, and Deployment
 		deployment, k8sService := testFramework.NewNginxApp(test.ElasticSearchOptions{
 			Name:      k8sResourceName2,
diff --git a/test/suites/integration/httproute_header_match_test.go b/test/suites/integration/httproute_header_match_test.go
@@ -88,15 +88,15 @@ var _ = Describe("HTTPRoute header matches", func() {
 			stdout, _, err := testFramework.PodExec(pod, cmd)
 			g.Expect(err).To(BeNil())
 			g.Expect(stdout).To(ContainSubstring("test-v3 handler pod"))
-		}).WithTimeout(time.Minute).WithOffset(1).Should(Succeed())
+		}).WithTimeout(2 * time.Minute).WithOffset(1).Should(Succeed())
 
 		// check incorrect headers
 		Eventually(func(g Gomega) {
 			invalidCmd := fmt.Sprintf("curl %s -H \"my-header-name1: my-header-value1\" -H \"my-header-name2: value2-invalid\"", dnsName)
 			stdout, _, err := testFramework.PodExec(pod, invalidCmd)
 			g.Expect(err).To(BeNil())
 			g.Expect(stdout).To(ContainSubstring("Not Found"))
-		}).WithTimeout(30 * time.Second).WithOffset(1).Should(Succeed())
+		}).WithTimeout(2 * time.Minute).WithOffset(1).Should(Succeed())
 	})
 
 	AfterEach(func() {
diff --git a/test/suites/integration/httproute_method_match_test.go b/test/suites/integration/httproute_method_match_test.go
@@ -109,21 +109,21 @@ var _ = Describe("HTTPRoute method matches", func() {
 			stdout, _, err := testFramework.PodExec(pod, cmd)
 			g.Expect(err).To(BeNil())
 			g.Expect(stdout).To(ContainSubstring("test-get handler pod"))
-		}).WithTimeout(60 * time.Second).WithOffset(1).Should(Succeed())
+		}).WithTimeout(2 * time.Minute).WithOffset(1).Should(Succeed())
 
 		Eventually(func(g Gomega) {
 			cmd := fmt.Sprintf("curl -X POST %s", dnsName)
 			stdout, _, err := testFramework.PodExec(pod, cmd)
 			g.Expect(err).To(BeNil())
 			g.Expect(stdout).To(ContainSubstring("test-post handler pod"))
-		}).WithTimeout(30 * time.Second).WithOffset(1).Should(Succeed())
+		}).WithTimeout(2 * time.Minute).WithOffset(1).Should(Succeed())
 
 		Eventually(func(g Gomega) {
 			invalidCmd := fmt.Sprintf("curl -X DELETE %s", dnsName)
 			stdout, _, err := testFramework.PodExec(pod, invalidCmd)
 			g.Expect(err).To(BeNil())
 			g.Expect(stdout).To(ContainSubstring("Not Found"))
-		}).WithTimeout(30 * time.Second).WithOffset(1).Should(Succeed())
+		}).WithTimeout(2 * time.Minute).WithOffset(1).Should(Succeed())
 	})
 
 	AfterEach(func() {
diff --git a/test/suites/integration/httproute_path_match_test.go b/test/suites/integration/httproute_path_match_test.go
diff --git a/test/suites/integration/https_listener_weighted_rule_with_service_export_import_test.go b/test/suites/integration/https_listener_weighted_rule_with_service_export_import_test.go

Original file line number	Diff line number	Diff line change
`@@ -121,7 +121,7 @@ func (r *serviceExportReconciler) reconcile(ctx context.Context, req ctrl.Reques`
`121`	`121`	`return client.IgnoreNotFound(err)`
`122`	`122`	`}`
`123`	`123`
`124`		`- if srvExport.ObjectMeta.Annotations["application-networking.k8s.aws/federation"] != "amazon-vpc-lattice" {`
	`124`	`+ if srvExport.Annotations["application-networking.k8s.aws/federation"] != "amazon-vpc-lattice" {`
`125`	`125`	`return nil`
`126`	`126`	`}`
`127`	`127`	`r.log.Debugf(ctx, "Found matching service export %s-%s", srvExport.Name, srvExport.Namespace)`
Original file line number	Diff line number	Diff line change
`@@ -109,7 +109,7 @@ func (d *defaultListenerManager) create(ctx context.Context, latticeSvcId string`
`109`	`109`	`resp, err := d.cloud.Lattice().CreateListenerWithContext(ctx, &listenerInput)`
`110`	`110`	`if err != nil {`
`111`	`111`	`return model.ListenerStatus{},`
`112`		`- fmt.Errorf("Failed CreateListener %s due to %s", aws.StringValue(listenerInput.Name), err)`
	`112`	`+ fmt.Errorf("failed CreateListener %s due to %s", aws.StringValue(listenerInput.Name), err)`
`113`	`113`	`}`
`114`	`114`	`d.log.Infof(ctx, "Success CreateListener %s, %s", aws.StringValue(resp.Name), aws.StringValue(resp.Id))`
`115`	`115`
`@@ -280,7 +280,7 @@ func (d defaultListenerManager) Delete(ctx context.Context, modelListener mode`
`280`	`280`	`d.log.Debugf(ctx, "Listener already deleted")`
`281`	`281`	`return nil`
`282`	`282`	`}`
`283`		`- return fmt.Errorf("Failed DeleteListener %s, %s due to %s", modelListener.Status.Id, modelListener.Status.ServiceId, err)`
	`283`	`+ return fmt.Errorf("failed DeleteListener %s, %s due to %s", modelListener.Status.Id, modelListener.Status.ServiceId, err)`
`284`	`284`	`}`
`285`	`285`
`286`	`286`	`d.log.Infof(ctx, "Success DeleteListener %s, %s", modelListener.Status.Id, modelListener.Status.ServiceId)`
Original file line number	Diff line number	Diff line change
`@@ -87,7 +87,7 @@ func (r ruleSynthesizer) createOrUpdateRules(ctx context.Context, rule model.R`
`87`	`87`	`}`
`88`	`88`	`status, err := r.ruleManager.Upsert(ctx, rule, stackListener, stackSvc)`
`89`	`89`	`if err != nil {`
`90`		`- return fmt.Errorf("Failed RuleManager.Upsert due to %s", err)`
	`90`	`+ return fmt.Errorf("failed RuleManager.Upsert due to %s", err)`
`91`	`91`	`}`
`92`	`92`	`rule.Status = &status`
`93`	`93`
Original file line number	Diff line number	Diff line change
`@@ -103,7 +103,7 @@ func (s defaultTargetGroupManager) create(ctx context.Context, modelTg model.T`
`103`	`103`	`resp, err := lattice.CreateTargetGroupWithContext(ctx, &createInput)`
`104`	`104`	`if err != nil {`
`105`	`105`	`return model.TargetGroupStatus{},`
`106`		`- fmt.Errorf("Failed CreateTargetGroup %s due to %s", latticeTgName, err)`
	`106`	`+ fmt.Errorf("failed CreateTargetGroup %s due to %s", latticeTgName, err)`
`107`	`107`	`}`
`108`	`108`	`s.log.Infof(ctx, "Success CreateTargetGroup %s", latticeTgName)`
`109`	`109`