Preload iptable_filter/ip6table_filter

ServiceLB now requires this module, but it will not get autoloaded by the kubelet if the host is using nftables. Signed-off-by: Brad Davidson <brad.davidson@rancher.com>

Preload iptable_filter/ip6table_filter
e41a7652 · Brad Davidson · Brad Davidson · 416d7053 · e41a7652
Commit e41a7652 authored Dec 13, 2022 by Brad Davidson Committed by Brad Davidson Dec 13, 2022
Hide whitespace changes
Inline Side-by-side

Showing with 2 additions and 0 deletions

setup.go pkg/agent/syssetup/setup.go +2 -0

No files found.
--- a/pkg/agent/syssetup/setup.go
+++ b/pkg/agent/syssetup/setup.go
@@ -33,8 +33,10 @@ func Configure(enableIPv6 bool, config *kubeproxyconfig.KubeProxyConntrackConfig
 	loadKernelModule("nf_conntrack")
 	loadKernelModule("br_netfilter")
 	loadKernelModule("iptable_nat")
+	loadKernelModule("iptable_filter")
 	if enableIPv6 {
 		loadKernelModule("ip6table_nat")
+		loadKernelModule("ip6table_filter")
 	}

 	// Kernel is inconsistent about how devconf is configured for