Skip to content

Instantly share code, notes, and snippets.

@vincentbernat
Created April 30, 2018 14:48
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save vincentbernat/09fcb9b8af834686f2729b5cc77194c1 to your computer and use it in GitHub Desktop.
Save vincentbernat/09fcb9b8af834686f2729b5cc77194c1 to your computer and use it in GitHub Desktop.
'100 Kubernetes integration 1/n':
chain: FORWARD
comment: ""
spec:
- 'COPY CHAIN cali-.*'
- 'COPY CHAIN KUBE-.*'
- '-j cali-FORWARD'
- '-j KUBE-FORWARD'
'100 Kubernetes integration 2/n':
chain: INPUT
comment: ""
spec:
- '-j cali-INPUT'
- '-m conntrack --ctstate NEW -j KUBE-EXTERNAL-SERVICES'
- '-j KUBE-FIREWALL'
'100 Kubernetes integration 3/n':
chain: OUTPUT
comment: ""
spec:
- '-j cali-OUTPUT'
- '-m conntrack --ctstate NEW -j KUBE-SERVICES'
- '-j KUBE-FIREWALL'
'100 Kubernetes integration 4/n':
table: nat
chain: PREROUTING
comment: ""
spec:
- 'COPY CHAIN cali-.*'
- 'COPY CHAIN KUBE-.*'
- '-j cali-PREROUTING'
- '-j KUBE-SERVICES'
'100 Kubernetes integration 5/n':
table: nat
chain: POSTROUTING
comment: ""
spec:
- '-j cali-POSTROUTING'
- '-j KUBE-POSTROUTING'
'100 Kubernetes integration 6/n':
table: nat
chain: OUTPUT
comment: ""
spec:
- '-j cali-OUTPUT'
- '-j KUBE-SERVICES'
'100 Kubernetes integration 7/n':
table: mangle
chain: PREROUTING
comment: ""
spec:
- 'COPY CHAIN cali-.*'
- 'COPY CHAIN KUBE-.*'
- '-j cali-PREROUTING'
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment