configure kube-proxy to run with unset conntrack param when in lxc

This commit is contained in:
Rye Terrell 2017-07-03 21:58:54 -05:00
parent 4ae3b032f4
commit 05fbc7a7f8
2 changed files with 4 additions and 0 deletions

View File

@ -22,6 +22,7 @@ options:
- 'ceph-common'
- 'nfs-common'
- 'socat'
- 'virt-what'
tls-client:
ca_certificate_path: '/root/cdk/ca.crt'
server_certificate_path: '/root/cdk/server.crt'

View File

@ -485,6 +485,9 @@ def configure_worker_services(api_servers, dns, cluster_cidr):
kube_proxy_opts.add('v', '0')
kube_proxy_opts.add('master', random.choice(api_servers), strict=True)
if b'lxc' in check_output('virt-what', shell=True):
kube_proxy_opts.add('conntrack-max-per-core', '0')
cmd = ['snap', 'set', 'kubelet'] + kubelet_opts.to_s().split(' ')
check_call(cmd)
cmd = ['snap', 'set', 'kube-proxy'] + kube_proxy_opts.to_s().split(' ')