Merge pull request #22 from iflix/kubeproxy-iptables-lock-fix

kube-proxy - fix isolated xtables lock
iflix · Feb 25, 2019 · aeff462 · aeff462
2 parents 52f6202 + 90e8ede
commit aeff462
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/core/controlplane/config/templates/cloud-config-controller b/core/controlplane/config/templates/cloud-config-controller
@@ -3120,6 +3120,9 @@ write_files:
                 - mountPath: /etc/kubernetes/kube-proxy
                   name: kube-proxy-config
                   readOnly: true
+                - mountPath: /run/xtables.lock
+                  name: xtables
+                  readOnly: false
               volumes:
               {{if .KubeProxy.IPVSMode.Enabled -}}
               - name: lib-modules
@@ -3132,6 +3135,9 @@ write_files:
               - name: kube-proxy-config
                 configMap:
                   name: kube-proxy-config
+              - name: xtables
+                hostPath:
+                  path: /run/xtables.lock
 
   - path: /etc/kubernetes/manifests/kube-apiserver.yaml
     content: |