Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

init container - iptables-nft-restore failed #12658

Open
dbones opened this issue Jan 23, 2025 · 0 comments
Open

init container - iptables-nft-restore failed #12658

dbones opened this issue Jan 23, 2025 · 0 comments
Labels
kind/bug A bug triage/pending This issue will be looked at on the next triage meeting

Comments

@dbones
Copy link

dbones commented Jan 23, 2025

Kuma Version

2.9.3

Describe the bug

deploying the demo application (kumahq/kuma-demo)

as kubernetes sets up the pods, the init container on both (redis, and demo-app), does not work, with a failed code

COMMIT
# [iptables] [1/5] /usr/sbin/iptables-nft-restore --noflush /tmp/iptables-rules.4137472968.txt
# [iptables] [1/5] restoring failed: exit status 4: iptables-nft-restore v1.8.7 (nf_tables): , line 9: RULE_APPEND failed (Operation not supported): rule in chain PREROUTING, line 9: RULE_APPEND failed (Operation not supported): rule in chain OUTPUT, line 9: RULE_APPEND failed (Operation not supported): rule in chain OUTPUT, line 9: RULE_APPEND failed (Operation not supported): rule in chain OUTPUT
# [iptables] [1/5] will try again in 2s
# [iptables] [2/5] /usr/sbin/iptables-nft-restore --noflush /tmp/iptables-rules.4137472968.txt
# [iptables] [2/5] will try again in 2s
# [iptables] [2/5] restoring failed: exit status 4: iptables-nft-restore v1.8.7 (nf_tables): , line 9: RULE_APPEND failed (Operation not supported): rule in chain PREROUTING, line 9: RULE_APPEND failed (Operation not supported): rule in chain OUTPUT, line 9: RULE_APPEND failed (Operation not supported): rule in chain OUTPUT, line 9: RULE_APPEND failed (Operation not supported): rule in chain OUTPUT
# [iptables] [3/5] /usr/sbin/iptables-nft-restore --noflush /tmp/iptables-rules.4137472968.txt
# [iptables] [3/5] restoring failed: exit status 4: iptables-nft-restore v1.8.7 (nf_tables): , line 9: RULE_APPEND failed (Operation not supported): rule in chain PREROUTING, line 9: RULE_APPEND failed (Operation not supported): rule in chain OUTPUT, line 9: RULE_APPEND failed (Operation not supported): rule in chain OUTPUT, line 9: RULE_APPEND failed (Operation not supported): rule in chain OUTPUT
# [iptables] [3/5] will try again in 2s
# [iptables] [4/5] /usr/sbin/iptables-nft-restore --noflush /tmp/iptables-rules.4137472968.txt
# [iptables] [4/5] restoring failed: exit status 4: iptables-nft-restore v1.8.7 (nf_tables): , line 9: RULE_APPEND failed (Operation not supported): rule in chain PREROUTING, line 9: RULE_APPEND failed (Operation not supported): rule in chain OUTPUT, line 9: RULE_APPEND failed (Operation not supported): rule in chain OUTPUT, line 9: RULE_APPEND failed (Operation not supported): rule in chain OUTPUT
# [iptables] [4/5] will try again in 2s
# [iptables] [5/5] /usr/sbin/iptables-nft-restore --noflush /tmp/iptables-rules.4137472968.txt
# [iptables] [5/5] restoring failed: exit status 4: iptables-nft-restore v1.8.7 (nf_tables): , line 9: RULE_APPEND failed (Operation not supported): rule in chain PREROUTING, line 9: RULE_APPEND failed (Operation not supported): rule in chain OUTPUT, line 9: RULE_APPEND failed (Operation not supported): rule in chain OUTPUT, line 9: RULE_APPEND failed (Operation not supported): rule in chain OUTPUT
Error: failed to setup transparent proxy: unable to restore iptables rules: /usr/sbin/iptables-nft-restore failed

To Reproduce

kuma 2.9.3 has been installed onto the K3s Cluster (Arm CPU) using GitOps

helm chart setttings:

  defaultNamespace: kuma-system
  helm:
    chart: kuma
    repo: https://kumahq.github.io/charts
    version: 2.9.3
    values:
      controlPlane:
        mode: zone
      egress:
        enabled: false

deploy application

kubectl apply -f https://bit.ly/3Kh2Try

Expected behavior

application should be deployed, added to the mesh with a working side car

Additional context (optional)

Cluster

Image

Overview

Image

Pod

Image

@dbones dbones added kind/bug A bug triage/pending This issue will be looked at on the next triage meeting labels Jan 23, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
kind/bug A bug triage/pending This issue will be looked at on the next triage meeting
Projects
None yet
Development

No branches or pull requests

1 participant