mirror of
https://github.com/k3s-io/kubernetes.git
synced 2026-07-18 04:54:54 +00:00
b61ca041b4
iptables and ipvs were both leaving KUBE-MARK-MASQ behind (even though the corresponding KUBE-POSTROUTING rule to actually do the masquerade got deleted). iptables was failing to clean up its KUBE-PROXY-FIREWALL chain (the cleanup rules never got updated when that was split out of KUBE-FIREWALL), and also not cleaning up its canary chain.