Merge pull request #117755 from Nordix/automated-cherry-pick-of-#117723-upstream-release-1.27

Automated cherry pick of #117723: Kube-proxy/ipvs: accept access to healthCheckNodePort on LbIP
This commit is contained in:
Kubernetes Prow Robot
2023-05-04 03:14:50 -07:00
committed by GitHub

View File

@@ -1733,6 +1733,9 @@ func (proxier *Proxier) writeIptablesRules() {
proxier.filterRules.Write(
"-A", string(kubeIPVSFilterChain),
"-m", "set", "--match-set", proxier.ipsetList[kubeExternalIPSet].Name, "dst,dst", "-j", "RETURN")
proxier.filterRules.Write(
"-A", string(kubeIPVSFilterChain),
"-m", "set", "--match-set", proxier.ipsetList[kubeHealthCheckNodePortSet].Name, "dst", "-j", "RETURN")
proxier.filterRules.Write(
"-A", string(kubeIPVSFilterChain),
"-m", "conntrack", "--ctstate", "NEW",