From 56763d4288fc20b21313be3b36e3e8aee48d447b Mon Sep 17 00:00:00 2001 From: Julian Poschmann Date: Fri, 13 Oct 2017 11:50:29 +0200 Subject: [PATCH] Persist br_netfilter module loading (#1760) --- roles/kubernetes/node/tasks/main.yml | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/roles/kubernetes/node/tasks/main.yml b/roles/kubernetes/node/tasks/main.yml index b2229cd5c..72ae274ca 100644 --- a/roles/kubernetes/node/tasks/main.yml +++ b/roles/kubernetes/node/tasks/main.yml @@ -79,6 +79,12 @@ state: present when: modinfo_br_netfilter.rc == 0 +- name: Persist br_netfilter module + copy: + dest: /etc/modules-load.d/kubespray-br_netfilter.conf + content: br_netfilter + when: modinfo_br_netfilter.rc == 0 + # kube-proxy needs net.bridge.bridge-nf-call-iptables enabled when found if br_netfilter is not a module - name: Check if bridge-nf-call-iptables key exists command: "sysctl net.bridge.bridge-nf-call-iptables"