linkerd2/controller/proxy-injector/fake
Alejandro Pedraza fe79b598ed
chore(helm)!: change iptables default mode to `nft` (#14326)
* chore(helm)!: change iptables default mode to `nft`

This change sets as a new default `nft` for the `proxyInit.iptablesMode`
and `iptablesMode` values in the linkerd-control-plane and linkerd2-cni
helm charts. This doesn't imply any change in user-facing behavior.

This was prompted by EKS with k8s 1.33 no longer supporting the iptables
legacy mode.

Further testing in multiple platforms with different k8s versions
revealed nft mode is now broadly supported.

Upgrading via Helm will apply the new default, unless the initial
install explicitly set the legacy mode.
2025-08-06 17:01:09 -05:00
..
data chore(helm)!: change iptables default mode to `nft` (#14326) 2025-08-06 17:01:09 -05:00
client.go Add pod spec annotation to disable injection in CLI and auto-injector (#2187) 2019-02-01 16:57:06 -08:00
factory.go Replace usage of io/ioutil package (#9613) 2022-10-13 12:10:58 -05:00