Merge pull request #119374 from danwinship/kep-3178-ga

move KEP-3178 IPTablesOwnershipCleanup to GA
This commit is contained in:
Kubernetes Prow Robot
2023-07-17 15:53:47 -07:00
committed by GitHub
10 changed files with 26 additions and 217 deletions

View File

@@ -1693,11 +1693,6 @@ func (proxier *Proxier) writeIptablesRules() {
// this so that it is easier to flush and change, for example if the mark
// value should ever change.
// NOTE: kubelet creates identical copies of these rules. If you want to change
// these rules in the future, you MUST do so in a way that will interoperate
// correctly with skewed versions of the rules created by kubelet. (Remove this
// comment once IPTablesOwnershipCleanup is GA.)
proxier.natRules.Write(
"-A", string(kubePostroutingChain),
"-m", "mark", "!", "--mark", fmt.Sprintf("%s/%s", proxier.masqueradeMark, proxier.masqueradeMark),