kubernetes/pkg/util/iptables
Kubernetes Submit Queue 2f622b2a28
Merge pull request #52569 from tmjd/add-proxy-forward-rules
Automatic merge from submit-queue (batch tested with PRs 55009, 55532, 55601, 52569, 55533). If you want to cherry-pick this change to another branch, please follow the instructions <a href="https://github.com/kubernetes/community/blob/master/contributors/devel/cherry-picks.md">here</a>.

Kube-proxy adds forward rules to ensure NodePorts work

**What this PR does / why we need it**:
Updates kube-proxy to set up proper forwarding so that NodePorts work with docker 1.13 without depending on iptables FORWARD being changed manually/externally.

**Which issue this PR fixes** *(optional, in `fixes #<issue number>(, fixes #<issue_number>, ...)` format, will close that issue when PR gets merged)*: fixes #39823

**Special notes for your reviewer**:
@thockin I used option number 2 that I mentioned in the #39823 issue, please let me know what you think about this change.  If you are happy with the change then I can try to add tests but may need a little direction about what and where to add them.

**Release note**:

```release-note
Add iptables rules to allow Pod traffic even when default iptables policy is to reject.
```
2017-11-14 00:09:57 -08:00
..
testing [kube-proxy] Fix session affinity with local endpoints traffic 2017-11-10 18:42:07 -08:00
BUILD update BUILD files 2017-10-15 18:18:13 -07:00
doc.go Use Go canonical import paths 2016-07-16 13:48:21 -04:00
iptables.go Merge pull request #52569 from tmjd/add-proxy-forward-rules 2017-11-14 00:09:57 -08:00
iptables_linux.go expose lock release error from iptables util 2017-07-05 14:31:24 -07:00
iptables_test.go Add the iptables wait flag change to more places 2017-11-07 10:50:28 -05:00
iptables_unsupported.go util/iptables: fix cross-build failures due to syscall.Flock() 2017-05-14 23:37:52 -05:00
OWNERS iptables: add OWNERS file 2017-05-05 23:34:18 -05:00
save_restore.go Minor improvement for memory allocations 2017-05-30 08:11:12 +02:00