kubernetes
/
website
mirror of https://github.com/kubernetes/website.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Update container-runtimes.md

This commit is contained in:
Ashik008 2022-11-14 20:51:31 +05:30 committed by GitHub
parent fbb5331e51
commit b872709853
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 13 additions and 15 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

28
content/en/docs/setup/production-environment/container-runtimes.md
View File

@ -56,21 +56,7 @@ For more information, see [Network Plugin Requirements](/docs/concepts/extend-ku
### Forwarding IPv4 and letting iptables see bridged traffic
Verify that the below modules are loaded:
Verify `br_netfilter` module is loaded by running `lsmod | grep br_netfilter`.
Verify `overlay` module is loaded by running `lsmod | grep overlay`.
To load the modules explicitly, run:
`sudo modprobe br_netfilter`
`sudo modprobe overlay`
In order for a Linux node's iptables to correctly view bridged traffic, verify that following system variables are set to 1 in your `sysctl` config: `net.bridge.bridge-nf-call-iptables`, `net.bridge.bridge-nf-call-ip6tables`, `net.ipv4.ip_forward`.
To verify, run the below command to get the values of system variables:
`sysctl -n net.bridge.bridge-nf-call-iptables net.bridge.bridge-nf-call-ip6tables net.ipv4.ip_forward`
Follow the below mentioned steps if any of the above verification fails:
Execute the below mentioned instructions:
```bash
cat <<EOF | sudo tee /etc/modules-load.d/k8s.conf
@ -92,6 +78,18 @@ EOF
sudo sysctl --system
```
Verify that the `br_netfilter`, `overlay` modules are loaded by running below instructions:
```bash
lsmod | grep br_netfilter
lsmod | grep overlay
```
Verify that the `net.bridge.bridge-nf-call-iptables`, `net.bridge.bridge-nf-call-ip6tables`, `net.ipv4.ip_forward` system variables are set to 1 in your `sysctl` config by running below instruction:
```bash
sysctl net.bridge.bridge-nf-call-iptables net.bridge.bridge-nf-call-ip6tables net.ipv4.ip_forward
```
## Cgroup drivers
On Linux, {{< glossary_tooltip text="control groups" term_id="cgroup" >}}