Add /run/xtables.lock mount to kube-flannel.yml

This prevents iptables contention with kube-proxy and the host OS. Fixes flannel-io#988.
manuelbuil · Jan 24, 2022 · 5f27126 · 5f27126
1 parent df6eb03
commit 5f27126
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/Documentation/kube-flannel.yml b/Documentation/kube-flannel.yml
@@ -222,6 +222,8 @@ spec:
           mountPath: /run/flannel
         - name: flannel-cfg
           mountPath: /etc/kube-flannel/
+        - name: xtables-lock
+          mountPath: /run/xtables.lock
       volumes:
       - name: run
         hostPath:
@@ -235,3 +237,7 @@ spec:
       - name: flannel-cfg
         configMap:
           name: kube-flannel-cfg
+      - name: xtables-lock
+        hostPath:
+          path: /run/xtables.lock
+          type: FileOrCreate