Skip to content

Commit 4baf12b

Browse files
committed
update readme (noop)
1 parent bf362ae commit 4baf12b

File tree

1 file changed

+1
-0
lines changed

1 file changed

+1
-0
lines changed

azure-iptables-monitor/README.md

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -34,6 +34,7 @@ Follow the steps below to build and run the program:
3434
- The `-ipv6` flag enables IPv6 ip6tables monitoring using the IPv6 allowlists. Default: `false`
3535
- The `-checkMap` flag enables checking the pinned bpf map specified in mapPath for increases. Default: `false`
3636
- The `-mapPath` flag specifies the pinned bpf map path to check. Default: `/azure-block-iptables-bpf-map/iptables_block_event_counter`
37+
- The `-terminateOnSuccess` flag, when set, will exit the program once there are no longer user iptables rules detected. Default: `false`
3738
- The program must be in a k8s environment and `NODE_NAME` must be a set environment variable with the current node.
3839

3940
5. The program will set the `kubernetes.azure.com/user-iptables-rules` label to `true` on the specified ciliumnode resource if unexpected rules are found, or `false` if all rules match expected patterns. Proper RBAC is required for patching (patch for ciliumnodes, create for events, get for nodes).

0 commit comments

Comments
 (0)