{"action":"created","issue":{"url":"https://api.github.com/repos/kubernetes/kubernetes/issues/64193","repository_url":"https://api.github.com/repos/kubernetes/kubernetes","labels_url":"https://api.github.com/repos/kubernetes/kubernetes/issues/64193/labels{/name}","comments_url":"https://api.github.com/repos/kubernetes/kubernetes/issues/64193/comments","events_url":"https://api.github.com/repos/kubernetes/kubernetes/issues/64193/events","html_url":"https://github.com/kubernetes/kubernetes/issues/64193","id":325665079,"node_id":"MDU6SXNzdWUzMjU2NjUwNzk=","number":64193,"title":"kube-proxy iptables-restore conntrack ERROR","user":{"login":"lurenjia528","id":37833630,"node_id":"MDQ6VXNlcjM3ODMzNjMw","avatar_url":"https://avatars1.githubusercontent.com/u/37833630?v=4","gravatar_id":"","url":"https://api.github.com/users/lurenjia528","html_url":"https://github.com/lurenjia528","followers_url":"https://api.github.com/users/lurenjia528/followers","following_url":"https://api.github.com/users/lurenjia528/following{/other_user}","gists_url":"https://api.github.com/users/lurenjia528/gists{/gist_id}","starred_url":"https://api.github.com/users/lurenjia528/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/lurenjia528/subscriptions","organizations_url":"https://api.github.com/users/lurenjia528/orgs","repos_url":"https://api.github.com/users/lurenjia528/repos","events_url":"https://api.github.com/users/lurenjia528/events{/privacy}","received_events_url":"https://api.github.com/users/lurenjia528/received_events","type":"User","site_admin":false},"labels":[{"id":105146071,"node_id":"MDU6TGFiZWwxMDUxNDYwNzE=","url":"https://api.github.com/repos/kubernetes/kubernetes/labels/kind/bug","name":"kind/bug","color":"e11d21","default":false},{"id":116712108,"node_id":"MDU6TGFiZWwxMTY3MTIxMDg=","url":"https://api.github.com/repos/kubernetes/kubernetes/labels/sig/network","name":"sig/network","color":"d2b48c","default":false}],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":6,"created_at":"2018-05-23T11:34:02Z","updated_at":"2018-08-05T22:52:29Z","closed_at":null,"author_association":"NONE","body":"**Is this a BUG REPORT or FEATURE REQUEST?**:\r\n\r\n/kind bug\r\n/kind request\r\n/sig network\r\n\r\narm64 ubuntu \r\n**What happened**:\r\nE0523 18:32:14.075223       1 proxier.go:792] Failed to execute iptables-restore for nat: exit status 1 (iptables-restore: line 7 failed)\r\n\r\nFailed to delete stale service IP 10.96.0.10 connections, error: error deleting connection tracking state for UDP service IP: 10.96.0.10, error: error looking for path of conntrack: exec: \"conntrack\": executable file not found in $PATH\r\n\r\n![image](https://user-images.githubusercontent.com/37833630/40421411-6a927914-5ebe-11e8-8b02-61f8027a02a1.png)\r\n![image](https://user-images.githubusercontent.com/37833630/40421463-9f3003f8-5ebe-11e8-9eb3-906b25bfed33.png)\r\n![image](https://user-images.githubusercontent.com/37833630/40421505-bbb3d3d8-5ebe-11e8-8bf9-4085aceab8b8.png)\r\n\r\nI had install conntrack(apt-get install conntrack),but kube-proxy still (Failed ...conntrack...)\r\n\r\n**Environment**:\r\n![image](https://user-images.githubusercontent.com/37833630/40421351-366d43d0-5ebe-11e8-9d2a-5cb8735096e1.png)\r\n![image](https://user-images.githubusercontent.com/37833630/40421779-95980ab0-5ebf-11e8-9fab-753c196c06d4.png)\r\n\r\n![image](https://user-images.githubusercontent.com/37833630/40421324-1c59e21e-5ebe-11e8-90bd-2e018a41bde1.png)\r\n\r\n\r\nhow can i fix it"},"comment":{"url":"https://api.github.com/repos/kubernetes/kubernetes/issues/comments/410554375","html_url":"https://github.com/kubernetes/kubernetes/issues/64193#issuecomment-410554375","issue_url":"https://api.github.com/repos/kubernetes/kubernetes/issues/64193","id":410554375,"node_id":"MDEyOklzc3VlQ29tbWVudDQxMDU1NDM3NQ==","user":{"login":"martynd","id":669891,"node_id":"MDQ6VXNlcjY2OTg5MQ==","avatar_url":"https://avatars2.githubusercontent.com/u/669891?v=4","gravatar_id":"","url":"https://api.github.com/users/martynd","html_url":"https://github.com/martynd","followers_url":"https://api.github.com/users/martynd/followers","following_url":"https://api.github.com/users/martynd/following{/other_user}","gists_url":"https://api.github.com/users/martynd/gists{/gist_id}","starred_url":"https://api.github.com/users/martynd/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/martynd/subscriptions","organizations_url":"https://api.github.com/users/martynd/orgs","repos_url":"https://api.github.com/users/martynd/repos","events_url":"https://api.github.com/users/martynd/events{/privacy}","received_events_url":"https://api.github.com/users/martynd/received_events","type":"User","site_admin":false},"created_at":"2018-08-05T22:52:29Z","updated_at":"2018-08-05T22:52:29Z","author_association":"NONE","body":"Having also got the ```Failed to execute iptables-restore for nat: exit status 1 (iptables-restore: line 7 failed\r\n)``` error I figured id give providing some useful info a whirl @thockin \r\n\r\nIts worth noting that I didnt get the later conntrack error at all, but I dont believe that is of direct relevance here since the reporter still got the iptables-restore error after resolving the conntrack one\r\n\r\nThis is also kube-proxy 1.9.x, specifically 1.9.10\r\n\r\nThe command ran was\r\n```iptables-restore -T nat --noflush --counters```\r\n\r\nAssuming the previous commands (```iptables-save -t nat```) stdout goes directly to stdin for the second, line 7 would be:\r\n```:DOCKER - [0:0]```\r\n\r\nI didnt notice anything in the code, but in case any stripping goes on, the top 20 lines from a manual execution of the iptables-save command (from inside the kube-proxy container) is as follows:\r\n```# Generated by iptables-save v1.6.0 on Sun Aug  5 22:41:56 2018\r\n*nat\r\n:PREROUTING ACCEPT [249:20801]\r\n:INPUT ACCEPT [94:11291]\r\n:OUTPUT ACCEPT [75:15275]\r\n:POSTROUTING ACCEPT [139:19285]\r\n:DOCKER - [0:0]\r\n:KUBE-MARK-DROP - [0:0]\r\n:KUBE-MARK-MASQ - [0:0]\r\n:KUBE-NODEPORTS - [0:0]\r\n:KUBE-POSTROUTING - [0:0]\r\n:KUBE-SEP-223C5RHMC32OQIJT - [0:0]\r\n:KUBE-SEP-243TDJ7432ZJMW3Y - [0:0]\r\n:KUBE-SEP-2AQPUFCTD6D35A4N - [0:0]\r\n:KUBE-SEP-3IAY7U5KE6BOCNLQ - [0:0]\r\n:KUBE-SEP-3NNTLEUZ6H3YWGDY - [0:0]\r\n:KUBE-SEP-3Q446XHIPIIIZXEJ - [0:0]\r\n:KUBE-SEP-464OEKW73JEEFJY5 - [0:0]\r\n:KUBE-SEP-47CXPTOUUKYVQSYQ - [0:0]\r\n:KUBE-SEP-4KGRSRXAM7IGI4ZH - [0:0]```\r\n\r\nHope that helps!\r\n\r\nThank you"}}
{"actor":{"display_login":"martynd"}}