github/kubernetes
1
0
Fork 0
mirror of https://github.com/k3s-io/kubernetes.git synced 2025-07-22 11:21:47 +00:00
Code Issues Projects Releases Wiki Activity

Require same min iptables version as -C

Browse Source
This commit is contained in:
Tim Hockin 2015-08-15 21:16:04 -07:00
parent 3d309700d0
commit 7e9c685ba6
1 changed files with 12 additions and 11 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

23
pkg/proxy/iptables/proxier.go
View File

@ -16,9 +16,9 @@ limitations under the License.
package iptables package iptables
/* //
NOTE: this needs to be tested in e2e since it uses iptables for everything. // NOTE: this needs to be tested in e2e since it uses iptables for everything.
*/ //
import ( import (
"bytes" "bytes"
@ -45,13 +45,14 @@ import (
"k8s.io/kubernetes/pkg/util/slice" "k8s.io/kubernetes/pkg/util/slice"
) )
// NOTE: IPTABLES_MIN_VERSION is the minimum version of iptables for which we will use the Proxier // iptablesMinVersion is the minimum version of iptables for which we will use the Proxier
// from this package instead of the userspace Proxier. // from this package instead of the userspace Proxier. While most of the
// This is will not be enough, as the version number is somewhat unreliable, // features we need were available earlier, the '-C' flag was added more
// features are backported in various distros and this could get pretty hairy. // recently. We use that indirectly in Ensure* functions, and if we don't
// However iptables-1.4.0 was released 2007-Dec-22 and appears to have every feature we use, // have it, we have to be extra careful about the exact args we feed in being
// so this seems prefectly reasonable for now. // the same as the args we read back (iptables itself normalizes some args).
const IPTABLES_MIN_VERSION string = "1.4.0" // This is the "new" Proxier, so we require "new" versions of tools.
const iptablesMinVersion = utiliptables.MinCheckVersion
// the services chain // the services chain
const iptablesServicesChain utiliptables.Chain = "KUBE-SERVICES" const iptablesServicesChain utiliptables.Chain = "KUBE-SERVICES"
@ -69,7 +70,7 @@ const iptablesMasqueradeMark = "0x4d415351"
// case it will also return false. // case it will also return false.
func ShouldUseIptablesProxier() (bool, error) { func ShouldUseIptablesProxier() (bool, error) {
exec := utilexec.New() exec := utilexec.New()
minVersion, err := semver.NewVersion(IPTABLES_MIN_VERSION) minVersion, err := semver.NewVersion(iptablesMinVersion)
if err != nil { if err != nil {
return false, err return false, err
} }