figure out why docker doesn't create the nft tables for port redirection on fastpath
Nobody has claimed this yet.
- Dominant language
- HCL
- Stars
- 4
- Forks
- 15
- Avg merge
- 1h 50m
- Merged PRs (30d)
- 4
Description
statsd-exporter service is unreachable by fastpath container because the nft rules are not being updated due to missing tables; despite our ansible rules reloading docker. we could try rebooting the system and seeing if it comes up cleanly; or create the nft tables rules manually, or see if we need to restart containerd rather than docker in order for these rules to be inserted (the /etc/containder/config.yml does specify the nft firewall backend)
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by reviewing the Ansible rules reload and /etc/containder/config.yml, then inspect whether Docker or containerd is responsible for inserting the nft rules. Compare the reboot, manual table creation, and containerd restart possibilities. Done means the required nft tables are created and the statsd-exporter service is reachable from the fastpath container.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- ansible, docker
- Domain
- devops, infrastructure, networking
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Quiet
- Clarity
- Needs clarification
- Newbie friendliness
- 42/100