images/kube-proxy: update to 4.2, add iptables wrappers #23163
Conversation
openshift-ci-robot
added
the
size/S
|
/assign @JacobTanenbaum |
openshift-ci-robot
added
the
approved
|
/test images Want to verify that everything builds correctly |
|
/test images Wow, namespaces are cleaned up quickly. |
|
What the heck - the hyperkube base image seems to not have hyperkube? |
|
/hold |
openshift-ci-robot
added
the
do-not-merge/hold
|
Want openshift/release#4064 to merge first. |
| yum install -y --setopt=tsflags=nodocs $INSTALL_PKGS && \ | ||
| yum clean all && rm -rf /var/cache/* | ||
|
|
||
| COPY ./images/sdn/scripts/iptables /usr/sbin/ |
There was a problem hiding this comment.
@squeed for my own knowledge (if you don't mind), what is the rational of having this iptables scripts?
There was a problem hiding this comment.
We don't know what mode the host's iptables is in - is it nftables compat mode, or legacy iptables mode? So, we just escape via chroot to the host and execute iptables there.
|
/hold cancel |
openshift-ci-robot
removed
the
do-not-merge/hold
|
hey @JacobTanenbaum can you take a look? |
|
/lgtm |
|
[APPROVALNOTIFIER] This PR is APPROVED This pull-request has been approved by: JacobTanenbaum, squeed The full list of commands accepted by this bot can be found here. The pull request process is described here
Needs approval from an approver in each of these files:
Approvers can indicate their approval by writing |
No description provided.