scottk/kubernetes
1
0
Fork 0
mirror of https://github.com/optim-enterprises-bv/kubernetes.git synced 2025-11-03 19:58:17 +00:00
Code Issues Packages Projects Releases Wiki Activity

Document the existence of nftables as a kube-proxy mode.

Browse Source
This commit is contained in:
Dan Winship
2024-11-08 08:52:25 -05:00
parent 2691a29eac
commit 49080bf02a
3 changed files with 7 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
cmd/kube-proxy/app/options.go
View File

@@ -123,7 +123,7 @@ func (o *Options) AddFlags(fs *pflag.FlagSet) {
"rather than being surprised when they are permanently removed in the release after that. "+ "rather than being surprised when they are permanently removed in the release after that. "+
"This parameter is ignored if a config file is specified by --config.") "This parameter is ignored if a config file is specified by --config.")
fs.BoolVar(&o.InitAndExit, "init-only", o.InitAndExit, "If true, perform any initialization steps that must be done with full root privileges, and then exit. After doing this, you can run kube-proxy again with only the CAP_NET_ADMIN capability.") fs.BoolVar(&o.InitAndExit, "init-only", o.InitAndExit, "If true, perform any initialization steps that must be done with full root privileges, and then exit. After doing this, you can run kube-proxy again with only the CAP_NET_ADMIN capability.")
fs.Var(&o.config.Mode, "proxy-mode", "Which proxy mode to use: on Linux this can be 'iptables' (default) or 'ipvs'. On Windows the only supported value is 'kernelspace'."+ fs.Var(&o.config.Mode, "proxy-mode", "Which proxy mode to use: on Linux this can be 'iptables' (default), 'ipvs', or 'nftables'. On Windows the only supported value is 'kernelspace'."+
"This parameter is ignored if a config file is specified by --config.") "This parameter is ignored if a config file is specified by --config.")
fs.Int32Var(o.config.IPTables.MasqueradeBit, "iptables-masquerade-bit", ptr.Deref(o.config.IPTables.MasqueradeBit, 14), "If using the iptables or ipvs proxy mode, the bit of the fwmark space to mark packets requiring SNAT with. Must be within the range [0, 31].") fs.Int32Var(o.config.IPTables.MasqueradeBit, "iptables-masquerade-bit", ptr.Deref(o.config.IPTables.MasqueradeBit, 14), "If using the iptables or ipvs proxy mode, the bit of the fwmark space to mark packets requiring SNAT with. Must be within the range [0, 31].")

6
pkg/proxy/apis/config/types.go
View File

@@ -240,10 +240,10 @@ type KubeProxyConfiguration struct {
// ProxyMode represents modes used by the Kubernetes proxy server. // ProxyMode represents modes used by the Kubernetes proxy server.
// //
// Currently, three modes of proxy are available on Linux platforms: 'iptables', 'ipvs', // Three modes of proxy are available on Linux platforms: `iptables`, `ipvs`, and
// and 'nftables'. One mode of proxy is available on Windows platforms: 'kernelspace'. // `nftables`. One mode of proxy is available on Windows platforms: `kernelspace`.
// //
// If the proxy mode is unspecified, the best-available proxy mode will be used (currently this // If the proxy mode is unspecified, a default proxy mode will be used (currently this
// is `iptables` on Linux and `kernelspace` on Windows). If the selected proxy mode cannot be // is `iptables` on Linux and `kernelspace` on Windows). If the selected proxy mode cannot be
// used (due to lack of kernel support, missing userspace components, etc) then kube-proxy // used (due to lack of kernel support, missing userspace components, etc) then kube-proxy
// will exit with an error. // will exit with an error.

6
staging/src/k8s.io/kube-proxy/config/v1alpha1/types.go
View File

@@ -250,10 +250,10 @@ type KubeProxyConfiguration struct {
// ProxyMode represents modes used by the Kubernetes proxy server. // ProxyMode represents modes used by the Kubernetes proxy server.
// //
// Currently, two modes of proxy are available on Linux platforms: 'iptables' and 'ipvs'. // Three modes of proxy are available on Linux platforms: `iptables`, `ipvs`, and
// One mode of proxy is available on Windows platforms: 'kernelspace'. // `nftables`. One mode of proxy is available on Windows platforms: `kernelspace`.
// //
// If the proxy mode is unspecified, the best-available proxy mode will be used (currently this // If the proxy mode is unspecified, a default proxy mode will be used (currently this
// is `iptables` on Linux and `kernelspace` on Windows). If the selected proxy mode cannot be // is `iptables` on Linux and `kernelspace` on Windows). If the selected proxy mode cannot be
// used (due to lack of kernel support, missing userspace components, etc) then kube-proxy // used (due to lack of kernel support, missing userspace components, etc) then kube-proxy
// will exit with an error. // will exit with an error.