Skip to content

fix: fall back to nftables kube-proxy on ip_tables-less kernels - #5567

Open
kjackal-hermes wants to merge 1 commit into
canonical:masterfrom
kjackal-hermes:fix/nftables-kube-proxy-fallback
Open

fix: fall back to nftables kube-proxy on ip_tables-less kernels#5567
kjackal-hermes wants to merge 1 commit into
canonical:masterfrom
kjackal-hermes:fix/nftables-kube-proxy-fallback

Conversation

@kjackal-hermes

@kjackal-hermes kjackal-hermes commented Jul 11, 2026

Copy link
Copy Markdown

Summary

  • Detect kernels that do not provide the ip_tables module
  • Auto-configure kube-proxy to use nftables mode on startup
  • Add an inspect warning that points to the root cause and fallback

Why

This addresses canonical/microk8s#5525, where MicroK8s can fail silently on nftables-only kernels because kube-proxy cannot load ip_tables.

Verification

  • bash -n microk8s-resources/wrappers/run-kubelite-with-args scripts/inspect.sh
  • git diff --check

Fixes canonical/microk8s#5525

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

bug: microk8s silently fails on nftables-only kernels

2 participants