epostnikof/kubespray
1
0
Fork 0
mirror of https://github.com/kubernetes-sigs/kubespray.git synced 2025-12-15 22:34:21 +03:00
Code Issues Packages Projects Releases Wiki Activity

Directly list conntrack modules instead of using a variable (#12475)

Browse Source 
The conntrack kernel modules have no reason to be something else than
those two options, so there is no reason to have a variable.
This commit is contained in:
Max Gautier
2025-08-18 16:05:13 +00:00
committed by GitHub
parent dc9d3bf39d
commit f832271f5c
2 changed files with 3 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
roles/kubernetes/node/defaults/main.yml
View File

@@ -183,11 +183,6 @@ kube_proxy_ipvs_modules:
- ip_vs_wlc - ip_vs_wlc
- ip_vs_lc - ip_vs_lc
# Kubespray will use the first module of this list which it can successfully modprobe
conntrack_modules:
- nf_conntrack
- nf_conntrack_ipv4
# Set this option to "" (empty) to disable staticPodPath (See docs/operations/hardening.md) # Set this option to "" (empty) to disable staticPodPath (See docs/operations/hardening.md)
kubelet_static_pod_path: "{{ kube_manifest_dir }}" kubelet_static_pod_path: "{{ kube_manifest_dir }}"

4
roles/kubernetes/node/tasks/main.yml
View File

@@ -123,7 +123,9 @@
persistent: present persistent: present
register: modprobe_conntrack_module register: modprobe_conntrack_module
ignore_errors: true # noqa ignore-errors ignore_errors: true # noqa ignore-errors
loop: "{{ conntrack_modules }}" loop:
- nf_conntrack
- nf_conntrack_ipv4
when: when:
- kube_proxy_mode == 'ipvs' - kube_proxy_mode == 'ipvs'
- modprobe_conntrack_module is not defined or modprobe_conntrack_module is ansible.builtin.failed # loop until first success - modprobe_conntrack_module is not defined or modprobe_conntrack_module is ansible.builtin.failed # loop until first success