• Kubernetes Submit Queue's avatar
    Merge pull request #52028 from leblancd/v6_conntrack · a0c93de0
    Kubernetes Submit Queue authored
    Automatic merge from submit-queue. If you want to cherry-pick this change to another branch, please follow the instructions <a href="https://github.com/kubernetes/community/blob/master/contributors/devel/cherry-picks.md">here</a>.
    
    Add required family flag for conntrack IPv6 operation
    
    This change causes kube-proxy to supply the required "-f ipv6"
    family flag whenever the conntrack utility is executed and the
    associated service is using IPv6.
    
    This change is required for IPv6-only operation.
    
    Note that unit test coverage for the 2-line changes in
    pkg/proxy/iptables/proxier.go and /pkg/proxy/ipvs/proxier.go will need
    to be added after support for IPv6 service addresses is added to these
    files. For pkg/proxy/iptables/proxier.go, this coverage will be added
    either with PR #48551.
    
    fixes #52027
    
    
    
    **What this PR does / why we need it**:
    Kube-proxy is currently not supplying the required "-f ipv6" family flag whenever it
    calls the conntrack utility and the associated service is using an IPv6 service IP address.
    This means that for IPv6-only operation, conntrack is not properly cleaning up
    stale UDP connections, and this may be effecting ip6tables operation.
    
    **Which issue this PR fixes** *(optional, in `fixes #<issue number>(, fixes #<issue_number>, ...)` format, will close that issue when PR gets merged)*: fixes # 52027
    
    **Special notes for your reviewer**:
    
    **Release note**:
    
    ```release-note
    NONE
    ```
    a0c93de0
Name
Last commit
Last update
..
BUILD Loading commit data...
OWNERS Loading commit data...
metrics.go Loading commit data...
proxier.go Loading commit data...
proxier_test.go Loading commit data...