Skip to content

Add nftables package#17583

Merged
k8s-ci-robot merged 1 commit intokubernetes:masterfrom
ameukam:add-nftables-package
Aug 29, 2025
Merged

Add nftables package#17583
k8s-ci-robot merged 1 commit intokubernetes:masterfrom
ameukam:add-nftables-package

Conversation

@ameukam
Copy link
Copy Markdown
Member

@ameukam ameukam commented Aug 28, 2025

NFtables proxy mode is GA in Kubernetes 1.33. See: https://kubernetes.io/blog/2025/02/28/nftables-kube-proxy/

@k8s-ci-robot k8s-ci-robot added cncf-cla: yes Indicates the PR's author has signed the CNCF CLA. size/XS Denotes a PR that changes 0-9 lines, ignoring generated files. labels Aug 28, 2025
@k8s-ci-robot k8s-ci-robot requested a review from olemarkus August 28, 2025 15:51
@k8s-ci-robot k8s-ci-robot requested a review from zetaab August 28, 2025 15:51
@hakman
Copy link
Copy Markdown
Member

hakman commented Aug 28, 2025

@ameukam this should be enabled probably only KubeProxy is in NFT mode, right?

@ameukam
Copy link
Copy Markdown
Member Author

ameukam commented Aug 28, 2025

@ameukam this should be enabled probably only KubeProxy is in NFT mode, right?

Yes. I think the default mode is still iptables. Something to do in a separate PR ?

@ameukam
Copy link
Copy Markdown
Member Author

ameukam commented Aug 28, 2025

/test pull-kops-aws-distro-debian12
/test pull-kops-aws-distro-rhel8

@ameukam
Copy link
Copy Markdown
Member Author

ameukam commented Aug 28, 2025

/retest

@hakman
Copy link
Copy Markdown
Member

hakman commented Aug 28, 2025

@ameukam this should be enabled probably only KubeProxy is in NFT mode, right?

Yes. I think the default mode is still iptables. Something to do in a separate PR ?

Can you try adding the condition? Should be pretty easy to access KubeProxy settings.

@ameukam
Add nftables package
3940478 
NFtables proxy mode is GA in Kubernetes 1.33. See: https://kubernetes.io/blog/2025/02/28/nftables-kube-proxy/
We ensure the nftables package is installed if the cluster is created if
kube-proxy mode is `nftables`.

Signed-off-by: Arnaud Meukam <ameukam@gmail.com>
@ameukam ameukam force-pushed the add-nftables-package branch from ff0f186 to 3940478 Compare August 29, 2025 09:39
@ameukam
Copy link
Copy Markdown
Member Author

ameukam commented Aug 29, 2025

Follow-up would be to have e2e tests with kube-proxy mode nftables.

@k8s-ci-robot
Copy link
Copy Markdown
Contributor

k8s-ci-robot commented Aug 29, 2025

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: hakman

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@k8s-ci-robot k8s-ci-robot added lgtm "Looks good to me", indicates that a PR is ready to be merged. approved Indicates a PR has been approved by an approver from all required OWNERS files. labels Aug 29, 2025
@k8s-ci-robot k8s-ci-robot merged commit cd4d7ae into kubernetes:master Aug 29, 2025
26 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@hakman hakman hakman approved these changes

@olemarkus olemarkus Awaiting requested review from olemarkus

@zetaab zetaab Awaiting requested review from zetaab

Assignees

@hakman hakman

Labels

approved Indicates a PR has been approved by an approver from all required OWNERS files. area/nodeup cncf-cla: yes Indicates the PR's author has signed the CNCF CLA. lgtm "Looks good to me", indicates that a PR is ready to be merged. size/XS Denotes a PR that changes 0-9 lines, ignoring generated files.

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

3 participants

@ameukam @hakman @k8s-ci-robot