Ensure the KUBE-MARK-DROP chain in kube-proxy mode=ipvs

Lars Ekman · Lars Ekman · commit 9e6a6873527f · 2019-09-03T21:08:54.000+02:00
diff --git a/pkg/proxy/ipvs/proxier.go b/pkg/proxy/ipvs/proxier.go
@@ -111,6 +111,7 @@ var iptablesChains = []struct {
 	{utiliptables.TableNAT, KubeNodePortChain},
 	{utiliptables.TableNAT, KubeLoadBalancerChain},
 	{utiliptables.TableNAT, KubeMarkMasqChain},
+	{utiliptables.TableNAT, KubeMarkDropChain},
 	{utiliptables.TableFilter, KubeForwardChain},
 }
 

Original file line number	Diff line number	Diff line change
`@@ -111,6 +111,7 @@ var iptablesChains = []struct {`
`111`	`111`	`{utiliptables.TableNAT, KubeNodePortChain},`
`112`	`112`	`{utiliptables.TableNAT, KubeLoadBalancerChain},`
`113`	`113`	`{utiliptables.TableNAT, KubeMarkMasqChain},`
	`114`	`+ {utiliptables.TableNAT, KubeMarkDropChain},`
`114`	`115`	`{utiliptables.TableFilter, KubeForwardChain},`
`115`	`116`	`}`
`116`	`117`