Networking somewhat broken with iptables nf_tables mode 1.8.8 on the host

[BenTheElder]

Quick placeholder issue for kubernetes/minikube#15573 (comment)

We're going to have to get creative to deal with this properly. cc @aojea

[aojea]

@danwinship these is the second weird report about iptables, the first was this one kubernetes/kubernetes#114537

Is there something new going on with the iptables binaries?

[aojea]

Oh, I see, it seems to be related to https://bugzilla.netfilter.org/show_bug.cgi?id=1632

[aojea]

/assign

[BenTheElder]

I actually think we should just do the minimum viable thing and unblock this. I think it's less fragile than parsing the rules and reconstructing the entire rule and hopefully iptables nftables is working on compatibility improvements now.

#3121

[BenTheElder]

mitigated in #3121, should be released soon (maybe next week, lot going on atm http://k8s.io/image-registry-redirect)