Merge pull request #119374 from danwinship/kep-3178-ga
move KEP-3178 IPTablesOwnershipCleanup to GA
This commit is contained in:
@@ -1693,11 +1693,6 @@ func (proxier *Proxier) writeIptablesRules() {
|
||||
// this so that it is easier to flush and change, for example if the mark
|
||||
// value should ever change.
|
||||
|
||||
// NOTE: kubelet creates identical copies of these rules. If you want to change
|
||||
// these rules in the future, you MUST do so in a way that will interoperate
|
||||
// correctly with skewed versions of the rules created by kubelet. (Remove this
|
||||
// comment once IPTablesOwnershipCleanup is GA.)
|
||||
|
||||
proxier.natRules.Write(
|
||||
"-A", string(kubePostroutingChain),
|
||||
"-m", "mark", "!", "--mark", fmt.Sprintf("%s/%s", proxier.masqueradeMark, proxier.masqueradeMark),
|
||||
|
Reference in New Issue
Block a user