github/kubernetes
1
0
Fork 0
mirror of https://github.com/k3s-io/kubernetes.git synced 2025-08-15 06:43:54 +00:00
Code Issues Projects Releases Wiki Activity

belated cleanup of some kube-proxy stuff for old versions

Browse Source
This commit is contained in:
Dan Winship 2023-05-17 18:34:27 -04:00
parent e553fe1fff
commit 80b9c85361
1 changed files with 3 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
pkg/proxy/iptables/proxier.go
View File

@ -384,10 +384,9 @@ var iptablesKubeletJumpChains = []iptablesJumpChain{
{utiliptables.TableNAT, kubePostroutingChain, utiliptables.ChainPostrouting, "kubernetes postrouting rules", nil}, {utiliptables.TableNAT, kubePostroutingChain, utiliptables.ChainPostrouting, "kubernetes postrouting rules", nil},
} }
var iptablesCleanupOnlyChains = []iptablesJumpChain{ // When chains get removed from iptablesJumpChains, add them here so they get cleaned up
// Present in kube 1.13 - 1.19. Removed by #95252 in favor of adding reject rules for incoming/forwarding packets to kubeExternalServicesChain // on upgrade.
{utiliptables.TableFilter, kubeServicesChain, utiliptables.ChainInput, "kubernetes service portals", []string{"-m", "conntrack", "--ctstate", "NEW"}}, var iptablesCleanupOnlyChains = []iptablesJumpChain{}
}
// CleanupLeftovers removes all iptables rules and chains created by the Proxier // CleanupLeftovers removes all iptables rules and chains created by the Proxier
// It returns true if an error was encountered. Errors are logged. // It returns true if an error was encountered. Errors are logged.
@ -683,9 +682,6 @@ const (
serviceFirewallChainNamePrefix = "KUBE-FW-" serviceFirewallChainNamePrefix = "KUBE-FW-"
serviceExternalChainNamePrefix = "KUBE-EXT-" serviceExternalChainNamePrefix = "KUBE-EXT-"
servicePortEndpointChainNamePrefix = "KUBE-SEP-" servicePortEndpointChainNamePrefix = "KUBE-SEP-"
// For cleanup. This can be removed after 1.26 is released.
deprecatedServiceLBChainNamePrefix = "KUBE-XLB-"
) )
// servicePortPolicyClusterChain returns the name of the KUBE-SVC-XXXX chain for a service, which is the // servicePortPolicyClusterChain returns the name of the KUBE-SVC-XXXX chain for a service, which is the
@ -731,7 +727,6 @@ func isServiceChainName(chainString string) bool {
servicePortEndpointChainNamePrefix, servicePortEndpointChainNamePrefix,
serviceFirewallChainNamePrefix, serviceFirewallChainNamePrefix,
serviceExternalChainNamePrefix, serviceExternalChainNamePrefix,
deprecatedServiceLBChainNamePrefix,
} }
for _, p := range prefixes { for _, p := range prefixes {