kind
kind copied to clipboard
Allow kubeProxyMode: "nftables" in the networking configuration
What would you like to be added:
The nftables proxier is added in "alpha" with feature-gate NFTablesProxyMode
in K8s v1.29. When it becomes more available, it should be possible to specify:
networking:
kubeProxyMode: "nftables"
in the kind configuration.
Why is this needed:
For improved UE
Background
To try the nftables proxier before this feature, please use:
featureGates:
"NFTablesProxyMode": true
nodes:
- role: control-plane
kubeadmConfigPatches:
- |
kind: KubeProxyConfiguration
mode: "nftables"
nftables:
masqueradeAll: false
masqueradeBit: 14
minSyncPeriod: 1s
syncPeriod: 30s
and, use an image built on "master" or K8s v1.29 or later.
Please see also the thread in slack.
/assign @aojea
@uablrek since we are already in 1.30 , can you add the new proxy mode?
https://github.com/kubernetes-sigs/kind/blob/40c81f187425254daf2bf84360a6257a278252df/pkg/apis/config/v1alpha4/types.go#L212-L215
/assign @uablrek
@uablrek oh wait, I read now the slack thread, I forgot the option is feature gated, despite we allow the option we also have to enable the feature gate to be able to use it ... not a nice if :/
You could add the enum value now and just note that it also requires setting a feature gate for now.
les jobs kubernetes/test-infra#31539
the experience is that people don't read and they will be opening bugs, is just because of that, for our needs we can just go with this https://github.com/kubernetes/test-infra/pull/31539