mirror of
https://github.com/k3s-io/kubernetes.git
synced 2026-07-17 20:00:07 +00:00
iptables and ipvs were both leaving KUBE-MARK-MASQ behind (even though the corresponding KUBE-POSTROUTING rule to actually do the masquerade got deleted). iptables was failing to clean up its KUBE-PROXY-FIREWALL chain (the cleanup rules never got updated when that was split out of KUBE-FIREWALL), and also not cleaning up its canary chain.