Merge pull request #117723 from Nordix/healthcheck-via-lbadr

Kube-proxy/ipvs: accept access to healthCheckNodePort on LbIP
This commit is contained in:
Kubernetes Prow Robot 2023-05-02 12:44:22 -07:00 committed by GitHub
commit c76efa64ee
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

View File

@ -1694,6 +1694,9 @@ func (proxier *Proxier) writeIptablesRules() {
proxier.filterRules.Write(
"-A", string(kubeIPVSFilterChain),
"-m", "set", "--match-set", proxier.ipsetList[kubeExternalIPSet].Name, "dst,dst", "-j", "RETURN")
proxier.filterRules.Write(
"-A", string(kubeIPVSFilterChain),
"-m", "set", "--match-set", proxier.ipsetList[kubeHealthCheckNodePortSet].Name, "dst", "-j", "RETURN")
proxier.filterRules.Write(
"-A", string(kubeIPVSFilterChain),
"-m", "conntrack", "--ctstate", "NEW",