• Kubernetes Submit Queue's avatar
    Merge pull request #52028 from leblancd/v6_conntrack · a0c93de0
    Kubernetes Submit Queue authored
    Automatic merge from submit-queue. If you want to cherry-pick this change to another branch, please follow the instructions <a href="https://github.com/kubernetes/community/blob/master/contributors/devel/cherry-picks.md">here</a>.
    
    Add required family flag for conntrack IPv6 operation
    
    This change causes kube-proxy to supply the required "-f ipv6"
    family flag whenever the conntrack utility is executed and the
    associated service is using IPv6.
    
    This change is required for IPv6-only operation.
    
    Note that unit test coverage for the 2-line changes in
    pkg/proxy/iptables/proxier.go and /pkg/proxy/ipvs/proxier.go will need
    to be added after support for IPv6 service addresses is added to these
    files. For pkg/proxy/iptables/proxier.go, this coverage will be added
    either with PR #48551.
    
    fixes #52027
    
    
    
    **What this PR does / why we need it**:
    Kube-proxy is currently not supplying the required "-f ipv6" family flag whenever it
    calls the conntrack utility and the associated service is using an IPv6 service IP address.
    This means that for IPv6-only operation, conntrack is not properly cleaning up
    stale UDP connections, and this may be effecting ip6tables operation.
    
    **Which issue this PR fixes** *(optional, in `fixes #<issue number>(, fixes #<issue_number>, ...)` format, will close that issue when PR gets merged)*: fixes # 52027
    
    **Special notes for your reviewer**:
    
    **Release note**:
    
    ```release-note
    NONE
    ```
    a0c93de0
Name
Last commit
Last update
..
config Loading commit data...
healthcheck Loading commit data...
iptables Loading commit data...
ipvs Loading commit data...
userspace Loading commit data...
util Loading commit data...
winkernel Loading commit data...
winuserspace Loading commit data...
BUILD Loading commit data...
OWNERS Loading commit data...
doc.go Loading commit data...
types.go Loading commit data...