Skip to content

Commit

Permalink
Add 'flush ip6tables' task in reset role (kubernetes-sigs#9168)
Browse files Browse the repository at this point in the history
* Add 'flush ip6tables' task in reset role 

If enable_dual_stack_networks is set to true and ip6 is defined,ip6tables will be created. But when reset the kubernetes cluster, kubespray doesn't flush ip6tables.

* [CI] fix molecule tests on opensuse by upgrading to 15.4 (kubernetes-sigs#9175)

* [CI] fix molecule tests on opensuse by upgrading to 15.4

* [opensuse] use correct python crytography package name depending on distribution version

Co-authored-by: Cristian Calin <6627509+cristicalin@users.noreply.github.com>
  • Loading branch information
2 people authored and LuckySB committed Jul 2, 2023
1 parent ab85971 commit d470751
Showing 1 changed file with 14 additions and 0 deletions.
14 changes: 14 additions & 0 deletions roles/reset/tasks/main.yml
Original file line number Diff line number Diff line change
Expand Up @@ -205,6 +205,20 @@
tags:
- iptables

- name: flush ip6tables
iptables:
table: "{{ item }}"
flush: yes
ip_version: ipv6
with_items:
- filter
- nat
- mangle
- raw
when: flush_iptables|bool and enable_dual_stack_networks
tags:
- ip6tables

- name: Clear IPVS virtual server table
command: "ipvsadm -C"
ignore_errors: true # noqa ignore-errors
Expand Down

0 comments on commit d470751

Please sign in to comment.