Cleanup KUBE-NODE-PORT chain in filter table.

When cleaning up iptables rules and ipsets used by kube-proxy in IPVS mode
iptables chain KUBE-NODE-PORT needs to be deleted before ipset
KUBE-HEALTH-CHECK-NODE-PORT can be removed. Therefore, deletion of
iptables chain KUBE-NODE-PORT is added in this change.
This commit is contained in:
Johannes Scheerer 2022-04-04 16:10:06 +02:00 committed by GitHub
parent 00bd91e558
commit a3b7f219a1
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

View File

@ -143,6 +143,7 @@ var iptablesCleanupChains = []struct {
{utiliptables.TableNAT, KubeNodePortChain},
{utiliptables.TableNAT, KubeLoadBalancerChain},
{utiliptables.TableFilter, KubeForwardChain},
{utiliptables.TableFilter, KubeNodePortChain},
}
// ipsetInfo is all ipset we needed in ipvs proxier