Clean up xt_set_exists components in advance
If this function dies in the middle, the leftover weave-kube-test set causes this function and weave-npc to break. In particular this means we can never restart weave with the launch script. Here we clean up in advance, in case there's leftovers from a previous run Fixes #2934
This commit is contained in:
1 parent
2c12c4f67e
commit
9419ad16bf
1 file changed
+5
@@ -8,6 +8,11 @@ modprobe_safe() {
|
||||
|
||||
# Check whether xt_set actually exists
|
||||
xt_set_exists() {
|
||||
# Clean everything up in advance, in case there's leftovers
|
||||
iptables -F WEAVE-KUBE-TEST 2>/dev/null || true
|
||||
iptables -X WEAVE-KUBE-TEST 2>/dev/null || true
|
||||
ipset destroy weave-kube-test 2>/dev/null || true
|
||||
|
||||
ipset create weave-kube-test hash:ip
|
||||
iptables -t filter -N WEAVE-KUBE-TEST
|
||||
if ! iptables -A WEAVE-KUBE-TEST -m set --match-set weave-kube-test src -j DROP; then
|
||||
|
||||
Reference in new issue
Block a user