Skip to content

Commit ca74a14

Browse files
kwohlfahrtSenthil Kumaran
andauthored
Mount /run/xtables.lock as FileOrCreate (#2841)
Otherwise, if the file doesn't already exist on the host at startup, it will be created as a directory. This breaks (among other things) `kube-proxy`, which leads to the AWS CNI not being able to reach the API-server, which leads to the node being stuck in `NotReady` state. Co-authored-by: Senthil Kumaran <senthilx@amazon.com>
1 parent 87115cf commit ca74a14

1 file changed

Lines changed: 1 addition & 0 deletions

File tree

charts/aws-vpc-cni/templates/daemonset.yaml

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -183,6 +183,7 @@ spec:
183183
- name: xtables-lock
184184
hostPath:
185185
path: /run/xtables.lock
186+
type: FileOrCreate
186187
{{- with .Values.extraVolumes }}
187188
{{- toYaml .| nindent 6 }}
188189
{{- end }}

0 commit comments

Comments
 (0)