kubernetes
/
kubelet
mirror of https://github.com/kubernetes/kubelet.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Deprecate now-unused kubelet iptables flags 

Kubernetes-commit: f1e7386fbc4008e8079ff0d3eb142c935ec3ba57
This commit is contained in:
Dan Winship 2023-07-17 09:37:17 -04:00 committed by Kubernetes Publisher
parent 21bb5a7b9d
commit 1486708f08
1 changed files with 8 additions and 10 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

18
config/v1beta1/types.go
View File

@ -548,22 +548,20 @@ type KubeletConfiguration struct {
// Default: false // Default: false
// +optional // +optional
ProtectKernelDefaults bool `json:"protectKernelDefaults,omitempty"` ProtectKernelDefaults bool `json:"protectKernelDefaults,omitempty"`
// makeIPTablesUtilChains, if true, causes the Kubelet ensures a set of iptables rules // makeIPTablesUtilChains, if true, causes the Kubelet to create the
// are present on host. // KUBE-IPTABLES-HINT chain in iptables as a hint to other components about the
// These rules will serve as utility rules for various components, e.g. kube-proxy. // configuration of iptables on the system.
// The rules will be created based on iptablesMasqueradeBit and iptablesDropBit.
// Default: true // Default: true
// +optional // +optional
MakeIPTablesUtilChains *bool `json:"makeIPTablesUtilChains,omitempty"` MakeIPTablesUtilChains *bool `json:"makeIPTablesUtilChains,omitempty"`
// iptablesMasqueradeBit is the bit of the iptables fwmark space to mark for SNAT. // iptablesMasqueradeBit formerly controlled the creation of the KUBE-MARK-MASQ
// Values must be within the range [0, 31]. Must be different from other mark bits. // chain.
// Warning: Please match the value of the corresponding parameter in kube-proxy. // Deprecated: no longer has any effect.
// TODO: clean up IPTablesMasqueradeBit in kube-proxy.
// Default: 14 // Default: 14
// +optional // +optional
IPTablesMasqueradeBit *int32 `json:"iptablesMasqueradeBit,omitempty"` IPTablesMasqueradeBit *int32 `json:"iptablesMasqueradeBit,omitempty"`
// iptablesDropBit is the bit of the iptables fwmark space to mark for dropping packets. // iptablesDropBit formerly controlled the creation of the KUBE-MARK-DROP chain.
// Values must be within the range [0, 31]. Must be different from other mark bits. // Deprecated: no longer has any effect.
// Default: 15 // Default: 15
// +optional // +optional
IPTablesDropBit *int32 `json:"iptablesDropBit,omitempty"` IPTablesDropBit *int32 `json:"iptablesDropBit,omitempty"`