From 60929432f5300a3748d6ccf55cd88be85c191cc1 Mon Sep 17 00:00:00 2001 From: ICHx <11556527+rtsui-harmonicinc@users.noreply.github.com> Date: Tue, 23 Jun 2026 19:50:17 -0700 Subject: [PATCH] flannel: set EnableNFTables when kube_proxy_mode use nftables (#13291) * flannel: set EnableNFTables when kube_proxy_mode use nftables * Clean up cni-flannel.yml.j2 by removing comments Removed commented-out environment variable for cache readiness. * update cni-flannel.yml.j2 --------- Co-authored-by: ric-mb --- roles/network_plugin/flannel/templates/cni-flannel.yml.j2 | 3 +++ 1 file changed, 3 insertions(+) diff --git a/roles/network_plugin/flannel/templates/cni-flannel.yml.j2 b/roles/network_plugin/flannel/templates/cni-flannel.yml.j2 index da4cfcde5..25a118a06 100644 --- a/roles/network_plugin/flannel/templates/cni-flannel.yml.j2 +++ b/roles/network_plugin/flannel/templates/cni-flannel.yml.j2 @@ -37,6 +37,9 @@ data: {% if ipv6_stack %} "EnableIPv6": true, "IPv6Network": "{{ kube_pods_subnet_ipv6 }}", +{% endif %} +{% if flannel_version is version('0.25.5', '>=') %} + "EnableNFTables": {{ (kube_proxy_mode == 'nftables') | bool | to_json }}, {% endif %} "Backend": { "Type": "{{ flannel_backend_type }}"{% if flannel_backend_type == "vxlan" %},