mirror of
https://github.com/k3s-io/kubernetes.git
synced 2025-08-02 16:29:21 +00:00
Merge pull request #8484 from thockin/proxier-old-iptables
Clean up old iptables (pre-ip-per-service) legacy
This commit is contained in:
commit
270c031bec
@ -101,8 +101,6 @@ func NewProxier(loadBalancer LoadBalancer, listenIP net.IP, iptables iptables.In
|
|||||||
}
|
}
|
||||||
|
|
||||||
func createProxier(loadBalancer LoadBalancer, listenIP net.IP, iptables iptables.Interface, hostIP net.IP) (*Proxier, error) {
|
func createProxier(loadBalancer LoadBalancer, listenIP net.IP, iptables iptables.Interface, hostIP net.IP) (*Proxier, error) {
|
||||||
// Clean up old messes. Ignore erors.
|
|
||||||
iptablesDeleteOld(iptables)
|
|
||||||
// Set up the iptables foundations we need.
|
// Set up the iptables foundations we need.
|
||||||
if err := iptablesInit(iptables); err != nil {
|
if err := iptablesInit(iptables); err != nil {
|
||||||
return nil, fmt.Errorf("failed to initialize iptables: %v", err)
|
return nil, fmt.Errorf("failed to initialize iptables: %v", err)
|
||||||
@ -408,7 +406,6 @@ func (proxier *Proxier) closeOnePortal(portalIP net.IP, portalPort int, protocol
|
|||||||
// use two chains.
|
// use two chains.
|
||||||
var iptablesContainerPortalChain iptables.Chain = "KUBE-PORTALS-CONTAINER"
|
var iptablesContainerPortalChain iptables.Chain = "KUBE-PORTALS-CONTAINER"
|
||||||
var iptablesHostPortalChain iptables.Chain = "KUBE-PORTALS-HOST"
|
var iptablesHostPortalChain iptables.Chain = "KUBE-PORTALS-HOST"
|
||||||
var iptablesOldPortalChain iptables.Chain = "KUBE-PROXY"
|
|
||||||
|
|
||||||
// Ensure that the iptables infrastructure we use is set up. This can safely be called periodically.
|
// Ensure that the iptables infrastructure we use is set up. This can safely be called periodically.
|
||||||
func iptablesInit(ipt iptables.Interface) error {
|
func iptablesInit(ipt iptables.Interface) error {
|
||||||
@ -430,16 +427,6 @@ func iptablesInit(ipt iptables.Interface) error {
|
|||||||
return nil
|
return nil
|
||||||
}
|
}
|
||||||
|
|
||||||
func iptablesDeleteOld(ipt iptables.Interface) {
|
|
||||||
// DEPRECATED: The iptablesOldPortalChain is from when we had a single chain
|
|
||||||
// for all rules. We'll unilaterally delete it here. We will remove this
|
|
||||||
// code at some future date (before 1.0).
|
|
||||||
ipt.DeleteRule(iptables.TableNAT, iptables.ChainPrerouting, "-j", string(iptablesOldPortalChain))
|
|
||||||
ipt.DeleteRule(iptables.TableNAT, iptables.ChainOutput, "-j", string(iptablesOldPortalChain))
|
|
||||||
ipt.FlushChain(iptables.TableNAT, iptablesOldPortalChain)
|
|
||||||
ipt.DeleteChain(iptables.TableNAT, iptablesOldPortalChain)
|
|
||||||
}
|
|
||||||
|
|
||||||
// Flush all of our custom iptables rules.
|
// Flush all of our custom iptables rules.
|
||||||
func iptablesFlush(ipt iptables.Interface) error {
|
func iptablesFlush(ipt iptables.Interface) error {
|
||||||
el := []error{}
|
el := []error{}
|
||||||
|
Loading…
Reference in New Issue
Block a user