From e6f6fce676f2e79fe38024a1082fcbf3e002efeb Mon Sep 17 00:00:00 2001 From: Hussein Galal Date: Tue, 7 Jan 2025 03:01:02 +0200 Subject: [PATCH] Load kernel modules for nft in agent setup (#11524) Signed-off-by: galal-hussein --- pkg/agent/syssetup/setup.go | 3 +++ 1 file changed, 3 insertions(+) diff --git a/pkg/agent/syssetup/setup.go b/pkg/agent/syssetup/setup.go index 8fea5bc6e4b..2cb65cf6dd9 100644 --- a/pkg/agent/syssetup/setup.go +++ b/pkg/agent/syssetup/setup.go @@ -34,6 +34,9 @@ func Configure(enableIPv6 bool, config *kubeproxyconfig.KubeProxyConntrackConfig loadKernelModule("br_netfilter") loadKernelModule("iptable_nat") loadKernelModule("iptable_filter") + loadKernelModule("nft-expr-counter") + loadKernelModule("nfnetlink-subsys-11") + loadKernelModule("nft-chain-2-nat") if enableIPv6 { loadKernelModule("ip6table_nat") loadKernelModule("ip6table_filter")