Merge pull request #73 from chenchun/iptables

Make hostport to cowork with ipvs kube-proxy
tkestack · May 21, 2020 · 6f27a69 · 6f27a69
2 parents ce578c1 + 71c3936
commit 6f27a69
Show file tree

Hide file tree

Showing 3 changed files with 3 additions and 3 deletions.
diff --git a/build/docker/galaxy-ipam/Dockerfile b/build/docker/galaxy-ipam/Dockerfile
@@ -31,7 +31,7 @@ RUN make build BINS="galaxy-ipam"
 ARG TARGETARCH
 ARG OUTPUTDIR="_output/bin-${TARGETARCH}"
 RUN mv -f ${OUTPUTDIR}/* /
-
+WORKDIR /
 
 
 

diff --git a/build/docker/galaxy/Dockerfile b/build/docker/galaxy/Dockerfile
@@ -31,7 +31,7 @@ RUN make build BINS="galaxy"
 ARG TARGETARCH
 ARG OUTPUTDIR="_output/bin-${TARGETARCH}"
 RUN mv -f ${OUTPUTDIR}/* /
-
+WORKDIR /
 
 
 

diff --git a/pkg/network/portmapping/iptables.go b/pkg/network/portmapping/iptables.go
@@ -307,7 +307,7 @@ func (h *PortMappingHandler) EnsureBasicRule() error {
 		"-m", "addrtype", "--dst-type", "LOCAL",
 		"-j", string(kubeHostportsChain)}
 	for _, tc := range tableChainsNeedJumpServices {
-		if _, err := h.Interface.EnsureRule(utiliptables.Prepend, tc.table, tc.chain, args...); err != nil {
+		if _, err := h.Interface.EnsureRule(utiliptables.Append, tc.table, tc.chain, args...); err != nil {
 			return fmt.Errorf("Failed to ensure that %s chain %s jumps to %s: %v", tc.table, tc.chain,
 				kubeHostportsChain, err)
 		}