Enable nftables for kube-proxy and calico

Zj12248 · Zj12248 · commit 53c0ea8b8613 · 2025-12-21T20:01:36.000+08:00
Signed-off-by: Zj12248 &lt;minezijun@gmail.com&gt;
diff --git a/config/kubeadm_init.yaml b/config/kubeadm_init.yaml
@@ -43,4 +43,5 @@ configMapAndSecretChangeDetectionStrategy: "Watch"
 ---
 apiVersion: kubeproxy.config.k8s.io/v1alpha1
 kind: KubeProxyConfiguration
+mode: nftables
 metricsBindAddress: 0.0.0.0:10249
diff --git a/scripts/setup/rewrite_yaml_files.sh b/scripts/setup/rewrite_yaml_files.sh
@@ -93,7 +93,7 @@ cat ../calico/calico.yaml | \
         (
             .spec.template.spec.containers[].name == "calico-node"
         ) | .spec.template.spec.containers[0].env 
-    ) |= . + [ {"name": "CALICO_IPV4POOL_CIDR", "value": "10.168.0.0/16"} ]' | 
+    ) |= . + [ {"name": "CALICO_IPV4POOL_CIDR", "value": "10.168.0.0/16"}, {"name": "FELIX_IPTABLESBACKEND", "value": "NFT"} ]' | 
     yq '
     (
         select

Original file line number	Diff line number	Diff line change
`@@ -93,7 +93,7 @@ cat ../calico/calico.yaml \| \`
`93`	`93`	`(`
`94`	`94`	`.spec.template.spec.containers[].name == "calico-node"`
`95`	`95`	`) \| .spec.template.spec.containers[0].env`
`96`		`- ) \|= . + [ {"name": "CALICO_IPV4POOL_CIDR", "value": "10.168.0.0/16"} ]' \|`
	`96`	`+ ) \|= . + [ {"name": "CALICO_IPV4POOL_CIDR", "value": "10.168.0.0/16"}, {"name": "FELIX_IPTABLESBACKEND", "value": "NFT"} ]' \|`
`97`	`97`	`yq '`
`98`	`98`	`(`
`99`	`99`	`select`