Skip to content
Snippets Groups Projects
Select Git revision
  • 55b03a41b2979de3a1db40444abcd775ecd7f7a1
  • master default protected
  • v2.28.0
  • v2.27.0
  • v2.25.1
  • v2.24.3
  • v2.26.0
  • v2.24.2
  • v2.25.0
  • v2.24.1
  • v2.22.2
  • v2.23.3
  • v2.24.0
  • v2.23.2
  • v2.23.1
  • v2.23.0
  • v2.22.1
  • v2.22.0
  • v2.21.0
  • v2.20.0
  • v2.19.1
  • v2.18.2
22 results

centos8.md

Blame
  • user avatar
    Etienne Champetier authored and GitHub committed
    This new version uses the same base image as kube-proxy
    (k8s.gcr.io/build-image/debian-iptables)
    This allow to automatically pick iptables-legacy or iptables-nft,
    and be compatible with RHEL/CentOS 8
    https://github.com/kubernetes/dns/pull/367
    
    
    
    Signed-off-by: default avatarEtienne Champetier <champetier.etienne@gmail.com>
    e909f849
    History
    centos8.md 533 B

    CentOS 8

    CentOS 8 ships only with iptables-nft (ie without iptables-legacy) The only tested configuration for now is using Calico CNI You need to use K8S 1.17+ and to add calico_iptables_backend: "NFT" or calico_iptables_backend: "Auto" to your configuration

    If you have containers that are using iptables in the host network namespace (hostNetwork=true), you need to ensure they are using iptables-nft. An example how k8s do the autodetection can be found in this PR