From 1ca0ffeaf2c4401549b82f549f7481313308d4b9 Mon Sep 17 00:00:00 2001 From: Antonio Ojea Date: Sun, 27 Oct 2019 18:11:55 +0100 Subject: [PATCH] kube-proxy: check KUBE-MARK-DROP --- pkg/proxy/iptables/proxier.go | 2 +- pkg/proxy/iptables/proxier_test.go | 1 + 2 files changed, 2 insertions(+), 1 deletion(-) diff --git a/pkg/proxy/iptables/proxier.go b/pkg/proxy/iptables/proxier.go index 02bf0ed6de2..f9952c1e25d 100644 --- a/pkg/proxy/iptables/proxier.go +++ b/pkg/proxy/iptables/proxier.go @@ -778,7 +778,7 @@ func (proxier *Proxier) syncProxyRules() { writeLine(proxier.filterChains, utiliptables.MakeChainLine(chainName)) } } - for _, chainName := range []utiliptables.Chain{kubeServicesChain, kubeNodePortsChain, kubePostroutingChain, KubeMarkMasqChain} { + for _, chainName := range []utiliptables.Chain{kubeServicesChain, kubeNodePortsChain, kubePostroutingChain, KubeMarkMasqChain, KubeMarkDropChain} { if chain, ok := existingNATChains[chainName]; ok { writeBytesLine(proxier.natChains, chain) } else { diff --git a/pkg/proxy/iptables/proxier_test.go b/pkg/proxy/iptables/proxier_test.go index af5e40d5981..4a95624eff8 100644 --- a/pkg/proxy/iptables/proxier_test.go +++ b/pkg/proxy/iptables/proxier_test.go @@ -2353,6 +2353,7 @@ COMMIT :KUBE-NODEPORTS - [0:0] :KUBE-POSTROUTING - [0:0] :KUBE-MARK-MASQ - [0:0] +:KUBE-MARK-DROP - [0:0] :KUBE-SVC-AHZNAGK3SCETOS2T - [0:0] :KUBE-SEP-PXD6POUVGD2I37UY - [0:0] :KUBE-SEP-SOKZUIT7SCEVIP33 - [0:0]