mirror of
https://github.com/k3s-io/kubernetes.git
synced 2025-07-28 14:07:14 +00:00
Merge pull request #13348 from thockin/kubelet-masq-rule
Don't name 'eth0' in MASQUERADE rule
This commit is contained in:
commit
067e76b509
@ -121,13 +121,23 @@ func cbr0CidrCorrect(wantCIDR *net.IPNet) bool {
|
|||||||
// TODO(dawnchen): Using pkg/util/iptables
|
// TODO(dawnchen): Using pkg/util/iptables
|
||||||
func ensureIPTablesMasqRule() error {
|
func ensureIPTablesMasqRule() error {
|
||||||
// Check if the MASQUERADE rule exist or not
|
// Check if the MASQUERADE rule exist or not
|
||||||
if err := exec.Command("iptables", "-t", "nat", "-C", "POSTROUTING", "-o", "eth0", "-j", "MASQUERADE", "!", "-d", "10.0.0.0/8").Run(); err == nil {
|
if err := exec.Command("iptables",
|
||||||
|
"-t", "nat",
|
||||||
|
"-C", "POSTROUTING",
|
||||||
|
"!", "-d", "10.0.0.0/8",
|
||||||
|
"-m", "addrtype", "!", "--dst-type", "LOCAL",
|
||||||
|
"-j", "MASQUERADE").Run(); err == nil {
|
||||||
// The MASQUERADE rule exists
|
// The MASQUERADE rule exists
|
||||||
return nil
|
return nil
|
||||||
}
|
}
|
||||||
|
|
||||||
glog.Infof("MASQUERADE rule doesn't exist, recreate it")
|
glog.Infof("MASQUERADE rule doesn't exist, recreate it")
|
||||||
if err := exec.Command("iptables", "-t", "nat", "-A", "POSTROUTING", "-o", "eth0", "-j", "MASQUERADE", "!", "-d", "10.0.0.0/8").Run(); err != nil {
|
if err := exec.Command("iptables",
|
||||||
|
"-t", "nat",
|
||||||
|
"-A", "POSTROUTING",
|
||||||
|
"!", "-d", "10.0.0.0/8",
|
||||||
|
"-m", "addrtype", "!", "--dst-type", "LOCAL",
|
||||||
|
"-j", "MASQUERADE").Run(); err != nil {
|
||||||
return err
|
return err
|
||||||
}
|
}
|
||||||
return nil
|
return nil
|
||||||
|
Loading…
Reference in New Issue
Block a user