Dan Winship edbce228cb Create a KUBE-IPTABLES-HINT chain for other components ...

Components that run in a container but modify the host network
namespace iptables rules need to know whether the system is using
iptables-legacy or iptables-nft. Given that kubelet will run before
any container-based components, it is well-positioned to help them
figure this out. So create a chain with a well-known name that they
can look for.

2022-03-27 14:12:36 -04:00

8.5 KiB

Raw Blame History

View Raw