search

antrea-io / antrea

Kubernetes networking based on Open vSwitch
https://antrea.io
Apache License 2.0
1.65k stars 364 forks source link

Fix issue with ipset or iptables chain removal during NodeNetworkPolicy updates or deletions #6707

Open hongliangl opened 1 day ago

hongliangl commented 1 day ago

Fix #6706

This commit addresses an issue where stale ipset or iptables chain is not deleted during NodeNetworkPolicy updates or deletions. The root cause is that the ipset or iptables chain is still referenced by other iptables rules during the deletion or update attempt. The fix ensures proper order of ipset and iptables synchronization.

antoninbas commented 1 day ago

@hongliangl please fix the commit title / PR title (it's not a correct sentence), and add a commit message that explains what the issue was and what your change is doing.

hongliangl commented 1 day ago

@hongliangl please fix the commit title / PR title (it's not a correct sentence), and add a commit message that explains what the issue was and what your change is doing.

Will do.