Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Ignoring these failures can cause IPv6 traffic to bypass the proxy; i.e. IPv6 traffic can work in a cluster but linkerd might not be configured with the appropriate iptables flavor (nft or legacy) and so the rules won't be set. Back when we had IPv6 support enabled by default we still ran these ip6tables rules in IPv4-only clusters and so ignored failures to avoid breaking things unexpectedly. But now that IPv6 support is opt-in, we should expect the cluster to provide a fully functional IPv6 stack and linkerd is configured appropriately for it, and so fail early when things don't work as expected.
- Loading branch information