cilium / cilium / 10218

39%

push

travis-ci-com

iptables: Allow xt_socket match rules to fail

Allow failure to insert xt_socket match rules for directing traffic
towards the proxy. In some environments like the cos_containerd GKE
image, the required xt_socket module (and its nf_socket_ipv4 /
nf_socket_ipv6 dependencies) are not available, which causes this rule
insertion to fail, which currently crashes out the entire daemon in
vanilla v1.6.0. In these cases, allow quiet failure and complain once if
the relevant configuration mode is enabled which might cause subsequent
issues for users.

Fixes: #8982

Signed-off-by: Joe Stringer <joe@cilium.io>

29 of 29 new or added lines in 1 file covered. (100.0%)

25421 of 57622 relevant lines covered (44.12%)

1183.96 hits per line