From 9e6a6873527f2654be87fd153a8bcac969ac2d85 Mon Sep 17 00:00:00 2001
From: Lars Ekman <lars.g.ekman@est.tech>
Date: Sun, 1 Sep 2019 09:24:49 +0200
Subject: [PATCH] Ensure the KUBE-MARK-DROP chain in kube-proxy mode=ipvs

---
 pkg/proxy/ipvs/proxier.go | 1 +
 1 file changed, 1 insertion(+)

diff --git a/pkg/proxy/ipvs/proxier.go b/pkg/proxy/ipvs/proxier.go
index c344806c3fc..6c72e8a7f7d 100644
--- a/pkg/proxy/ipvs/proxier.go
+++ b/pkg/proxy/ipvs/proxier.go
@@ -111,6 +111,7 @@ var iptablesChains = []struct {
 	{utiliptables.TableNAT, KubeNodePortChain},
 	{utiliptables.TableNAT, KubeLoadBalancerChain},
 	{utiliptables.TableNAT, KubeMarkMasqChain},
+	{utiliptables.TableNAT, KubeMarkDropChain},
 	{utiliptables.TableFilter, KubeForwardChain},
 }