Skip to content

Commit 98be783

Browse files
committed
Revert "kube-proxy: check KUBE-MARK-DROP"
This reverts commit 1ca0ffe. kube-proxy is not recreating the rules associated to the KUBE-MARK-DROP chain, that is created by the kubelet. Is preferrable avoid the dependency between the kubelet and kube-proxy and that each of them handle their own rules.
1 parent d87c921 commit 98be783

File tree

2 files changed

+1
-2
lines changed

2 files changed

+1
-2
lines changed

pkg/proxy/iptables/proxier.go

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -842,7 +842,7 @@ func (proxier *Proxier) syncProxyRules() {
842842
writeLine(proxier.filterChains, utiliptables.MakeChainLine(chainName))
843843
}
844844
}
845-
for _, chainName := range []utiliptables.Chain{kubeServicesChain, kubeNodePortsChain, kubePostroutingChain, KubeMarkMasqChain, KubeMarkDropChain} {
845+
for _, chainName := range []utiliptables.Chain{kubeServicesChain, kubeNodePortsChain, kubePostroutingChain, KubeMarkMasqChain} {
846846
if chain, ok := existingNATChains[chainName]; ok {
847847
writeBytesLine(proxier.natChains, chain)
848848
} else {

pkg/proxy/iptables/proxier_test.go

Lines changed: 0 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -2350,7 +2350,6 @@ COMMIT
23502350
:KUBE-NODEPORTS - [0:0]
23512351
:KUBE-POSTROUTING - [0:0]
23522352
:KUBE-MARK-MASQ - [0:0]
2353-
:KUBE-MARK-DROP - [0:0]
23542353
:KUBE-SVC-AHZNAGK3SCETOS2T - [0:0]
23552354
:KUBE-SEP-PXD6POUVGD2I37UY - [0:0]
23562355
:KUBE-SEP-SOKZUIT7SCEVIP33 - [0:0]

0 commit comments

Comments
 (0)