Skip to content

Conversation

adberger
Copy link
Contributor

@adberger adberger commented Aug 6, 2025

Enable CONFIG_INET_DIAG_DESTROY in kernel options

Enables cilium to work with kubeProxyReplacement using socketLB.
Also helps other tools like ss -K to work.

See: flatcar/Flatcar#1844

How to use

Testing done

  • Changelog entries added in the respective changelog/ directory (user-facing change, bug fix, security fix, update)

  • Inspected CI output for image differences: /boot and /usr size, packages, list files for any missing binaries, kernel modules, config files, kernel modules, etc.

Copy link
Contributor

@ader1990 ader1990 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGMT, and we got confirmation to be working in production environment.

@ader1990 ader1990 merged commit ffa8f56 into flatcar:main Aug 20, 2025
8 of 11 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants