mirror of
https://github.com/k3s-io/kubernetes.git
synced 2025-07-31 15:25:57 +00:00
Make comment about reject action more accurate
Signed-off-by: Quan Tian <qtian@vmware.com>
This commit is contained in:
parent
c7e48f1ebf
commit
42672ee2ea
@ -353,7 +353,7 @@ type nftablesJumpChain struct {
|
||||
var nftablesJumpChains = []nftablesJumpChain{
|
||||
// We can't jump to endpointsCheckChain from filter-prerouting like
|
||||
// firewallCheckChain because reject action is only valid in chains using the
|
||||
// input, forward or output hooks.
|
||||
// input, forward or output hooks with kernels before 5.9.
|
||||
{nodePortEndpointsCheckChain, filterInputChain, "ct state new"},
|
||||
{serviceEndpointsCheckChain, filterInputChain, "ct state new"},
|
||||
{serviceEndpointsCheckChain, filterForwardChain, "ct state new"},
|
||||
|
Loading…
Reference in New Issue
Block a user