• Kubernetes Submit Queue's avatar
    Merge pull request #52028 from leblancd/v6_conntrack · a0c93de0
    Kubernetes Submit Queue authored
    Automatic merge from submit-queue. If you want to cherry-pick this change to another branch, please follow the instructions <a href="https://github.com/kubernetes/community/blob/master/contributors/devel/cherry-picks.md">here</a>.
    
    Add required family flag for conntrack IPv6 operation
    
    This change causes kube-proxy to supply the required "-f ipv6"
    family flag whenever the conntrack utility is executed and the
    associated service is using IPv6.
    
    This change is required for IPv6-only operation.
    
    Note that unit test coverage for the 2-line changes in
    pkg/proxy/iptables/proxier.go and /pkg/proxy/ipvs/proxier.go will need
    to be added after support for IPv6 service addresses is added to these
    files. For pkg/proxy/iptables/proxier.go, this coverage will be added
    either with PR #48551.
    
    fixes #52027
    
    
    
    **What this PR does / why we need it**:
    Kube-proxy is currently not supplying the required "-f ipv6" family flag whenever it
    calls the conntrack utility and the associated service is using an IPv6 service IP address.
    This means that for IPv6-only operation, conntrack is not properly cleaning up
    stale UDP connections, and this may be effecting ip6tables operation.
    
    **Which issue this PR fixes** *(optional, in `fixes #<issue number>(, fixes #<issue_number>, ...)` format, will close that issue when PR gets merged)*: fixes # 52027
    
    **Special notes for your reviewer**:
    
    **Release note**:
    
    ```release-note
    NONE
    ```
    a0c93de0
Name
Last commit
Last update
..
api Loading commit data...
apimachinery/tests Loading commit data...
apis Loading commit data...
auth Loading commit data...
bootstrap/api Loading commit data...
capabilities Loading commit data...
client Loading commit data...
cloudprovider Loading commit data...
controller Loading commit data...
credentialprovider Loading commit data...
features Loading commit data...
fieldpath Loading commit data...
generated Loading commit data...
hyperkube Loading commit data...
kubeapiserver Loading commit data...
kubectl Loading commit data...
kubelet Loading commit data...
kubemark Loading commit data...
master Loading commit data...
printers Loading commit data...
probe Loading commit data...
proxy Loading commit data...
quota Loading commit data...
registry Loading commit data...
routes Loading commit data...
security Loading commit data...
securitycontext Loading commit data...
serviceaccount Loading commit data...
ssh Loading commit data...
util Loading commit data...
version Loading commit data...
volume Loading commit data...
watch Loading commit data...
BUILD Loading commit data...
OWNERS Loading commit data...