fix(cni-networking): Enables br_netfilter kernel module (#3484)

Without this module, iptables rules to not apply to bridges.
Azure · Jul 17, 2018 · 8f53c34 · 8f53c34
1 parent 35d85bd
commit 8f53c34
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/parts/k8s/kubernetescustomscript.sh b/parts/k8s/kubernetescustomscript.sh
@@ -250,6 +250,11 @@ function installCNI() {
     tar -xzf $CONTAINERNETWORKING_CNI_TGZ_TMP -C $CNI_BIN_DIR
     chown -R root:root $CNI_BIN_DIR
     chmod -R 755 $CNI_BIN_DIR
+    # Turn on br_netfilter (needed for the iptables rules to work on bridges)
+    # and permanently enable it
+    modprobe br_netfilter
+    # /etc/modules-load.d is the location used by systemd to load modules
+    echo -n "br_netfilter" > /etc/modules-load.d/br_netfilter.conf
 }
 
 function configAzureCNI() {