Give br_netfilter a moment to load before sysctls

voxpupuli · Apr 12, 2023 · 5d79abc · 5d79abc
1 parent 4e61f20
commit 5d79abc
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/manifests/node/kubelet.pp b/manifests/node/kubelet.pp
@@ -193,6 +193,13 @@
 
     if $manage_kernel_modules {
       Kmod::Load['br_netfilter']
+      ~> exec { 'Wait for br_netfilter to load before kubelet sysctls':
+        command     => 'sysctl -aNr net.bridge | grep nf-call-iptables',
+        path        => $facts['path'],
+        refreshonly => true,
+        tries       => 5,
+        try_sleep   => 1,
+      }
       -> [
         Sysctl['net.bridge.bridge-nf-call-iptables'],
         Sysctl['net.bridge.bridge-nf-call-ip6tables']