mirror of
https://github.com/kubernetes/kubernetes.git
synced 2026-11-06 05:17:08 +00:00
Dan Winship
562bc43ae4
Originally, this test used the conntrack binary to check the conntrack state, so it used the distroless-iptables image (the base of the kube-proxy image) as a helper, since that contained the conntrack binary. But later, we removed conntrack from that image after kube-proxy no longer needed it, and the test got updated to read /proc/net/nf_conntrack directly. Thus, there is no longer any reason to be using distroless-iptables (and forcing the distroless-iptables image to contain "sleep", "cat", and "grep"). (The test still had code to use the conntrack binary if /proc/net/nf_conntrack was unavailable, but this fallback would never be used because the image it was using never contained that binary.)