Merge pull request #101168 from mikedanese/warning

add a warning about the filter table
This commit is contained in:
Kubernetes Prow Robot 2021-05-24 21:48:40 -07:00 committed by GitHub
commit 06d44d2f42
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

View File

@ -126,6 +126,9 @@ function gce-metadata-fw-helper {
iptables -w ${command} OUTPUT -p tcp --dport 80 -d ${METADATA_SERVER_IP} -m owner ${invert:-} --uid-owner=${METADATA_SERVER_ALLOWED_UID_RANGE:-0-2999} -j ${action}
}
# WARNING: DO NOT USE THE FILTER TABLE! Some implementations of network policy
# think they own it and will stomp all over your changes. At this time, the
# mangle table is less contentious so use that if possible.
function config-ip-firewall {
echo "Configuring IP firewall rules"