From 1afbdf1111ab13b355ab4402e1fa76a6f9e330a9 Mon Sep 17 00:00:00 2001 From: Martynas Pumputis Date: Sat, 27 Jan 2018 11:17:49 +0100 Subject: [PATCH] WIP --- net/bridge.go | 3 +++ test/840_weave_kube_3_test.sh | 4 ++++ 2 files changed, 7 insertions(+) diff --git a/net/bridge.go b/net/bridge.go index c084d7cd82..959fb104dc 100644 --- a/net/bridge.go +++ b/net/bridge.go @@ -480,6 +480,9 @@ func configureIPTables(config *BridgeConfig) error { // and allow replies back fwdRules = append(fwdRules, []string{"-o", config.WeaveBridgeName, "-m", "conntrack", "--ctstate", "RELATED,ESTABLISHED", "-j", "ACCEPT"}) + rules, _ := ipt.List("filter", "FORWARD") + fmt.Println("!!! filter/FORWARD", rules) + if err := ensureRules("filter", "FORWARD", fwdRules, ipt); err != nil { return err } diff --git a/test/840_weave_kube_3_test.sh b/test/840_weave_kube_3_test.sh index d9ba6c8ad2..e73aadb1c9 100755 --- a/test/840_weave_kube_3_test.sh +++ b/test/840_weave_kube_3_test.sh @@ -73,6 +73,10 @@ assert_raises "run_on $HOST1 $PING $HOST2EXPIP" assert_raises "run_on $HOST2 $PING $HOST1EXPIP" assert_raises "run_on $HOST3 $PING $HOST2EXPIP" +echo ">>> WEAVE NET LOGS <<<" +tmpPod=$($SSH $HOST1 "$KUBECTL get pods -n=kube-system |grep weave-net | head -n1 | awk '{print $1}'") +run_on $HOST1 "$KUBECTL logs -n kube-system $tmpPod weave" + # Ensure we do not generate any defunct process (e.g. launch.sh) after starting weaver: assert "run_on $HOST1 ps aux | grep -c '[d]efunct'" "0" assert "run_on $HOST2 ps aux | grep -c '[d]efunct'" "0"