Skip to content

[portmap] Setting hostNetwork: true an existing pod with a UDP hostPort to black holes traffic. #1190

@JasonMichalski-at

Description

@JasonMichalski-at

When a pod with a hostPort is moved from hostNetwork: false to hostNetwork: true the plugin is called with an empty RuntimeConfig.PortMaps this is expected because the pod is in the host's network namespace and will not need NAT rule. 108c2ae handles the case where the pod is replaced with a new IP by flushing conntrack the add command.

I think the solution is for the del command to also flush conntrack.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions