kubeovn / kube-ovn / 15064843754

23%

Build Type

push

github

Committed by web-flow

Commit Message

fix: put iptables nat prerouting rule right before kube-proxy inserted one (#5232)

* fix: put iptables nat prerouting rule right before kube-proxy inserted one

The iptables NAT PREROUTING rule inserted by Kube-OVN will have higher
priority than the one inserted by kube-proxy. All the duplicated NAT
PREROUTING rules inserted by us will be deleted. This potentially
removes the block from running Kube-OVN along with other CNI plug-ins
such as Calico/Canal, at least from the perspective of the iptables NAT
PREROUTING chain.

Signed-off-by: Zespre Schmidt <starbops@zespre.com>

* fix: simplify rule existence check logic

Signed-off-by: Zespre Schmidt <starbops@zespre.com>
Co-authored-by: oilbeater <liumengxinfly@gmail.com>

---------

Signed-off-by: Zespre Schmidt <starbops@zespre.com>
Co-authored-by: oilbeater <liumengxinfly@gmail.com>

Run Details

0 of 66 new or added lines in 1 file covered. (0.0%)

261 existing lines in 2 files now uncovered.

10261 of 47225 relevant lines covered (21.73%)

0.25 hits per line