c12s-kubespray/docs/centos8.md
2020-11-24 08:33:00 -08:00

496 B

CentOS 8

CentOS 8 ships only with iptables-nft (ie without iptables-legacy) The only tested configuration for now is using Calico CNI You need to use K8S 1.17+ and to add calico_iptables_backend: "NFT" to your configuration

If you have containers that are using iptables in the host network namespace (hostNetwork=true), you need to ensure they are using iptables-nft. An example how k8s do the autodetection can be found in this PR