wait for new resource to program

Signed-off-by: Guy Daich <[email protected]>

test/e2e/testdata/certificate-rotation.yaml

@@ -0,0 +1,16 @@
+apiVersion: gateway.networking.k8s.io/v1
+kind: HTTPRoute
+metadata:
+  name: http-for-cert-rotation
+  namespace: gateway-conformance-infra
+spec:
+  parentRefs:
+  - name: same-namespace
+  rules:
+  - matches:
+    - path:
+        type: PathPrefix
+        value: /cert-rotation
+    backendRefs:
+    - name: infra-backend-v1
+      port: 8080

test/e2e/tests/certificate_rotation.go

@@ -22,6 +22,7 @@ import (
 	corev1 "k8s.io/api/core/v1"
 	"k8s.io/apimachinery/pkg/types"
 	"sigs.k8s.io/gateway-api/conformance/utils/http"
+	"sigs.k8s.io/gateway-api/conformance/utils/kubernetes"
 	"sigs.k8s.io/gateway-api/conformance/utils/suite"
 	"sigs.k8s.io/gateway-api/conformance/utils/tlog"
 
@@ -128,7 +129,29 @@ var CertificateRotationTest = suite.ConformanceTest{
 					require.NoError(t, err)
 					return true
 				})
+
+			// Apply a new config and confirm that it's programmed successfully on proxies
+			suite.Applier.MustApplyWithCleanup(t, suite.Client, suite.TimeoutConfig, "testdata/certificate-rotation.yaml", false)
+			ns := "gateway-conformance-infra"
+			routeNN := types.NamespacedName{Name: "http-for-cert-rotation", Namespace: ns}
+			gwNN := types.NamespacedName{Name: "same-namespace", Namespace: ns}
+			gwAddr := kubernetes.GatewayAndHTTPRoutesMustBeAccepted(t, suite.Client, suite.TimeoutConfig, suite.ControllerName, kubernetes.NewGatewayRef(gwNN), routeNN)
+			kubernetes.NamespacesMustBeReady(t, suite.Client, suite.TimeoutConfig, []string{ns})
+
+			expected := http.ExpectedResponse{
+				Request: http.Request{
+					Path: "/cert-rotation",
+				},
+				Response: http.Response{
+					StatusCode: 200,
+				},
+				Namespace: ns,
+			}
+
+			http.MakeRequestAndExpectEventuallyConsistentResponse(t, suite.RoundTripper, suite.TimeoutConfig, gwAddr, expected)
 		})
+
+		cleanUpResources(suite.Client, t)
 	},
 }