Merge pull request #17945 from kubernetes/peter.rifel/iproute2

Create iproute2 symlink for kuberouter on older distros

Author: k8s-ci-robot

nodeup/pkg/model/networking/kube_router.go

@@ -21,6 +21,7 @@ import (
 	"k8s.io/kops/pkg/rbac"
 	"k8s.io/kops/upup/pkg/fi"
 	"k8s.io/kops/upup/pkg/fi/nodeup/nodetasks"
+	"k8s.io/kops/util/pkg/distributions"
 )
 
 // KuberouterBuilder installs kube-router
@@ -56,5 +57,23 @@ func (b *KuberouterBuilder) Build(c *fi.NodeupModelBuilderContext) error {
 		BeforeServices: []string{"kubelet.service"},
 	})
 
+	// On older Debian/Ubuntu versions, iproute2 config lives in /etc/iproute2/ rather than /usr/share/iproute2/.
+	// Create a symlink so the kube-router DaemonSet can mount /usr/share/iproute2/rt_tables.
+	// Ref: https://github.com/kubernetes/kops/issues/17914
+	switch b.Distribution {
+	case distributions.DistributionDebian11,
+		distributions.DistributionDebian12,
+		distributions.DistributionUbuntu2204,
+		distributions.DistributionUbuntu2404:
+		c.AddTask(&nodetasks.File{
+			Path:    "/usr/share/iproute2",
+			Type:    nodetasks.FileType_Symlink,
+			Symlink: fi.PtrTo("/etc/iproute2"),
+			Owner:   fi.PtrTo("root"),
+			Group:   fi.PtrTo("root"),
+			Mode:    fi.PtrTo("0755"),
+		})
+	}
+
 	return nil
 }

upup/models/cloudup/resources/addons/networking.kuberouter/k8s-1.12.yaml.template

@@ -110,7 +110,7 @@ spec:
           mountPath: /run/xtables.lock
           readOnly: false
         - name: rt-tables
-          mountPath: /etc/iproute2/rt_tables
+          mountPath: /usr/share/iproute2/rt_tables
           readOnly: false
         - name: containerd-sock
           mountPath: /run/containerd/containerd.sock
@@ -158,7 +158,7 @@ spec:
           type: FileOrCreate
       - name: rt-tables
         hostPath:
-          path: /etc/iproute2/rt_tables
+          path: /usr/share/iproute2/rt_tables
           type: FileOrCreate
       - name: containerd-sock
         hostPath: