2 years ago

The bad news is that you can install newer visions of Kubernetes and — Bang! — you can’t network with your worker nodes.

because kubelet, via iptables 1.8.8 as supplied by the host, writes: -A KUBE-FIREWALL -m comment –comment “kubernetes firewall for dropping marked packets” -m mark –mark 0x8000/0x8000 -j DROP

I’ve read through the GitHub comments both on the Kubernetes and IPTables sides. It’s in a word, “messy,” and I don’t see a fix coming anytime soon that will make Kubernetes users happy.