Skip to content

Instantly share code, notes, and snippets.

@atomlab

atomlab/talos_nft_list_ruleset_issue_fix.md

Last active February 20, 2025 19:59
Show Gist options

  • Select an option

    Learn more about clone URLs
  • Save atomlab/59000e4bf245e367b9d7af156d357c75 to your computer and use it in GitHub Desktop.

Select an option

Learn more about clone URLs
Save atomlab/59000e4bf245e367b9d7af156d357c75 to your computer and use it in GitHub Desktop.
Download ZIP

Revisions

  1. atomlab revised this gist Feb 20, 2025. 1 changed file with 1 addition and 1 deletion.
    2 changes: 1 addition & 1 deletion talos_nft_list_ruleset_issue_fix.md
    View file
    Original file line number Diff line number Diff line change
    @@ -1,6 +1,6 @@
    Encountered an error in Talos when running `nft list ruleset`
    ```sh
    % kubectl debug -n kube-system --profile=sysadmin -it --image alpine node/$NODE
    % kubectl debug -n kube-system -it --image alpine node/$NODE
    / # apk add nftables
    / # nft list ruleset
    netlink: Error: cache initialization failed: Operation not permitted
  2. atomlab revised this gist Feb 20, 2025. 1 changed file with 1 addition and 1 deletion.
    2 changes: 1 addition & 1 deletion talos_nft_list_ruleset_issue_fix.md
    View file
    Original file line number Diff line number Diff line change
    @@ -1,4 +1,4 @@
    Encountered an error in Talos when running nft list ruleset
    Encountered an error in Talos when running `nft list ruleset`
    ```sh
    % kubectl debug -n kube-system --profile=sysadmin -it --image alpine node/$NODE
    / # apk add nftables
  3. atomlab created this gist Feb 20, 2025.
    22 changes: 22 additions & 0 deletions talos_nft_list_ruleset_issue_fix.md
    View file
    Original file line number Diff line number Diff line change
    @@ -0,0 +1,22 @@
    Encountered an error in Talos when running nft list ruleset
    ```sh
    % kubectl debug -n kube-system --profile=sysadmin -it --image alpine node/$NODE
    / # apk add nftables
    / # nft list ruleset
    netlink: Error: cache initialization failed: Operation not permitted
    ```

    The issue was related to security capabilities and was resolved by using `--profile=sysadmin`:

    ```sh
    % kubectl debug -n kube-system --profile=sysadmin -it --image alpine node/$NODE
    / # apk add nftables
    / # nft list ruleset
    table ip mangle {
    chain KUBE-IPTABLES-HINT {
    }
    }
    table inet talos {
    ...
    }
    ```