Accept all traffic to lo

kubernetes-sigs · Jul 2, 2024 · b13285f · b13285f
1 parent 34193e3
commit b13285f
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/pkg/networkpolicy/controller.go b/pkg/networkpolicy/controller.go
@@ -665,6 +665,11 @@ func (c *Controller) syncNFTablesRules(ctx context.Context) error {
 			Rule: knftables.Concat(
 				"ct", "state", "established,related", "accept"),
 		})
+		tx.Add(&knftables.Rule{
+			Chain: chainName,
+			Rule: knftables.Concat(
+				"oif", "lo", "accept"),
+		})
 
 		action := fmt.Sprintf("queue num %d", c.config.QueueID)
 		if c.config.FailOpen {