Add 'flush ip6tables' task in reset role (#9168)
* Add 'flush ip6tables' task in reset role If enable_dual_stack_networks is set to true and ip6 is defined,ip6tables will be created. But when reset the kubernetes cluster, kubespray doesn't flush ip6tables. * [CI] fix molecule tests on opensuse by upgrading to 15.4 (#9175) * [CI] fix molecule tests on opensuse by upgrading to 15.4 * [opensuse] use correct python crytography package name depending on distribution version Co-authored-by: Cristian Calin <6627509+cristicalin@users.noreply.github.com>pull/9191/head
parent
ea29cd0890
commit
175cdba9b1
|
@ -205,6 +205,20 @@
|
||||||
tags:
|
tags:
|
||||||
- iptables
|
- iptables
|
||||||
|
|
||||||
|
- name: flush ip6tables
|
||||||
|
iptables:
|
||||||
|
table: "{{ item }}"
|
||||||
|
flush: yes
|
||||||
|
ip_version: ipv6
|
||||||
|
with_items:
|
||||||
|
- filter
|
||||||
|
- nat
|
||||||
|
- mangle
|
||||||
|
- raw
|
||||||
|
when: flush_iptables|bool and enable_dual_stack_networks
|
||||||
|
tags:
|
||||||
|
- ip6tables
|
||||||
|
|
||||||
- name: Clear IPVS virtual server table
|
- name: Clear IPVS virtual server table
|
||||||
command: "ipvsadm -C"
|
command: "ipvsadm -C"
|
||||||
ignore_errors: true # noqa ignore-errors
|
ignore_errors: true # noqa ignore-errors
|
||||||
|
|
Loading…
Reference in New Issue