diff --git a/resources/flannel/daemonset.yaml b/resources/flannel/daemonset.yaml index 075f675..3d343e4 100644 --- a/resources/flannel/daemonset.yaml +++ b/resources/flannel/daemonset.yaml @@ -75,6 +75,8 @@ spec: mountPath: /etc/kube-flannel/ - name: run-flannel mountPath: /run/flannel + - name: xtables-lock + mountPath: /run/xtables.lock volumes: - name: flannel-config configMap: @@ -89,3 +91,8 @@ spec: - name: cni-conf-dir hostPath: path: /etc/kubernetes/cni/net.d + # Access iptables concurrently + - name: xtables-lock + hostPath: + type: FileOrCreate + path: /run/xtables.lock diff --git a/resources/manifests/kube-proxy.yaml b/resources/manifests/kube-proxy.yaml index 36bfdfd..05e3297 100644 --- a/resources/manifests/kube-proxy.yaml +++ b/resources/manifests/kube-proxy.yaml @@ -74,6 +74,8 @@ spec: - name: ssl-certs-host mountPath: /etc/ssl/certs readOnly: true + - name: xtables-lock + mountPath: /run/xtables.lock volumes: - name: kubeconfig configMap: @@ -84,3 +86,8 @@ spec: - name: ssl-certs-host hostPath: path: ${trusted_certs_dir} + # Access iptables concurrently + - name: xtables-lock + hostPath: + type: FileOrCreate + path: /run/xtables.lock