mirror of https://github.com/k3s-io/k3s
a0c93de03d
Automatic merge from submit-queue. If you want to cherry-pick this change to another branch, please follow the instructions <a href="https://github.com/kubernetes/community/blob/master/contributors/devel/cherry-picks.md">here</a>. Add required family flag for conntrack IPv6 operation This change causes kube-proxy to supply the required "-f ipv6" family flag whenever the conntrack utility is executed and the associated service is using IPv6. This change is required for IPv6-only operation. Note that unit test coverage for the 2-line changes in pkg/proxy/iptables/proxier.go and /pkg/proxy/ipvs/proxier.go will need to be added after support for IPv6 service addresses is added to these files. For pkg/proxy/iptables/proxier.go, this coverage will be added either with PR #48551. fixes #52027 **What this PR does / why we need it**: Kube-proxy is currently not supplying the required "-f ipv6" family flag whenever it calls the conntrack utility and the associated service is using an IPv6 service IP address. This means that for IPv6-only operation, conntrack is not properly cleaning up stale UDP connections, and this may be effecting ip6tables operation. **Which issue this PR fixes** *(optional, in `fixes #<issue number>(, fixes #<issue_number>, ...)` format, will close that issue when PR gets merged)*: fixes # 52027 **Special notes for your reviewer**: **Release note**: ```release-note NONE ``` |
||
|---|---|---|
| .. | ||
| BUILD | ||
| conntrack.go | ||
| conntrack_test.go | ||
| port.go | ||
| port_test.go | ||
| utils.go | ||
| utils_test.go | ||