By default --make-iptables-util-chain is true, so PASS if this flag is not set.

6 years ago · 0a5358665e
parent ed7f6cf3fc
commit 0a5358665e
1 changed files with 2 additions and 0 deletions
--- a/cfg/1.11/node.yaml
+++ b/cfg/1.11/node.yaml
@ -164,6 +164,8 @@ groups:
          op: eq
          value: true
        set: true
+      - flag: "--make-iptables-util-chains"
+        set: false
    remediation: |
      If using a Kubelet config file, edit the file to set makeIPTablesUtilChains: true .
      If using command line arguments, edit the kubelet service file