Autoconnect request for k8s-snap

store-requests
1

Hi,

We need to get kernel-module-load autoconnect because Cilium Ingress requires and loads iptable_raw and xt_socket modules. If these modules are not loaded, ingress responses return “503 Service Unavailable” since datapath L7 redirection does not work correctly [1, 2].

This blocks the uploading of the snaps on the store.

Thanks

[1] https://github.com/cilium/cilium/blob/1ab043d546e52fb2428300e6c6ea35fa3bd7c711/install/kubernetes/cilium/values.yaml#L792-L796

[2] https://github.com/cilium/cilium/issues/25021#issuecomment-1699969830

2

+1 for auto-connecting cilium-module-load given the reasoning with the L7 redirection issue.

3

+1 from me as well for auto-connect kernel-module-load to k8s scoped to iptable_raw and xt_socket modules to make Cilium datapath L7 redirection to properly work.

4

+1 from me too for the reasons outlined above by @emitorino

5

+3 votes for, 0 votes against, fast-tracking auto-connect of interface kernel-module-load to snap k8s. This is now live.