Modify iptables bridge to create the chaos chains if they dont exist

Author: mininny

roles/chaosd/templates/chaos-iptables-bridge.sh.j2

@@ -12,16 +12,15 @@ add_jump() {
   iptables -t "$table" -C "$from" -j "$to" 2>/dev/null || iptables -t "$table" -I "$from" "$pos" -j "$to"
 }
 
-# Reuse Chaos Mesh chains if they exist
-has_chain() { iptables -t filter -nL "$1" >/dev/null 2>&1; }
+ensure_chain() {
+  local table="$1" chain="$2"
+  iptables -t "$table" -nL "$chain" >/dev/null 2>&1 || iptables -t "$table" -N "$chain"
+}
 
-# 1) Container egress: DOCKER-USER -> CHAOS-OUTPUT
-if has_chain CHAOS-OUTPUT; then
-  add_jump filter DOCKER-USER CHAOS-OUTPUT 1
-fi
+# 1) Ensure CHAOS chains exist
+ensure_chain filter CHAOS-OUTPUT
+ensure_chain filter CHAOS-INPUT
 
-# 2) Container ingress prep: DOCKER-USER -> CHAOS-INPUT
-# (This lets CHAOS-INPUT rules, when present, also run for FORWARDed traffic to containers.)
-if has_chain CHAOS-INPUT; then
-  add_jump filter DOCKER-USER CHAOS-INPUT 1
-fi
+# 2) Add jumps from DOCKER-USER to CHAOS chains if not present
+add_jump filter DOCKER-USER CHAOS-OUTPUT 1
+add_jump filter DOCKER-USER CHAOS-INPUT 1

roles/generate_kubernetes_config/defaults/main.yaml

@@ -189,7 +189,7 @@ gen_kubernetes_config_helm_charts: # noqa var-naming[no-role-prefix]
     dependencies:
       - name: chaos-mesh
         repository: https://ethpandaops.github.io/ethereum-helm-charts
-        version: 0.0.4
+        version: 0.0.3
   syncoor-server:
     valuesTemplatePath: templates/syncoor-server.yaml.j2
     dependencies: