Amazon-eks-ami: Too old version of iptables

[mogren]

In order to support --random-fully we need at least iptables-1.6.2. The latest Amazon Linux 2 supports 1.8.2. We need to update to that version and configure legacy mode in order for things to work well with Kubernetes.

Environment:

• AWS Region:
• Instance Type(s):
• EKS Platform version (use aws eks describe-cluster --name <name> --query cluster.platformVersion):
• Kubernetes version (use aws eks describe-cluster --name <name> --query cluster.version):
• AMI Version:
• Kernel (e.g. uname -a):
• Release information (run cat /etc/eks/release on a node):
  

[sbkg0002]

We experience the issues described in https://github.com/aws/amazon-vpc-cni-k8s/issues/516 and need iptables to be >=1.6.2.

[mogren]

Latest images have v1.8.2

[terrych0u]

I got the same issue on the newest eks 1.16 with CNI 1.6.1 and my kube-proxy 1.16.8 keeps show log :

Not using `--random-fully` in the MASQUERADE rule for iptables because the local version of iptables does not support it

is there any way to fix it?

[gregops]

Still an issue with 1.16.8 and worker AMIs 1.16.8-20200507. Seeing the same message.

[pdeva]

we are seeing the same issue on eks 1.16.8.

Not using `--random-fully` in the MASQUERADE rule for iptables because the local version of iptables does not support it

please provide some workaround

[ishaannarang]

@pdeva update to 1.16.12

[pierluigilenoci]

I get this error in EKS with the latest AMI v20201007 v1.18