Load nft modules at startup

[galal-hussein]

Proposed Changes

Types of Changes

Verification

Testing

Linked Issues

Issue: #11525

User-Facing Change

Further Comments

[dereknola]

Should we add checks for these in https://github.com/k3s-io/k3s/blob/master/contrib/util/check-config.sh

[brandond]

Probably. I'm also curious if this is a complete list of all the modules we'd need, it seems short compared to the legacy iptables module list.

[galal-hussein]

Probably. I'm also curious if this is a complete list of all the modules we'd need, it seems short compared to the legacy iptables module list.

Well, these are the one related to the nat chain, as well as filter chain, it seems all what svclb needs

[brandond]

Can you try on an ipv6 host and see if there are any more needed to support that as well?

[galal-hussein]

Can you try on an ipv6 host and see if there are any more needed to support that as well?

sure

[codecov]

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 36.82%. Comparing base (e64e2fc) to head (d44c05e).
Report is 1 commits behind head on master.

❗ There is a different number of reports uploaded between BASE (e64e2fc) and HEAD (d44c05e). Click for more details.

HEAD has 4 uploads less than BASE

Flag	BASE (e64e2fc)	HEAD (d44c05e)
unittests	1	0
inttests	11	8

Additional details and impacted files

@@            Coverage Diff             @@
##           master   #11524      +/-   ##
==========================================
- Coverage   43.85%   36.82%   -7.04%     
==========================================
  Files         181      164      -17     
  Lines       18809    18333     -476     
==========================================
- Hits         8249     6751    -1498     
- Misses       9351    10493    +1142     
+ Partials     1209     1089     -120     

Flag	Coverage Δ
e2etests	35.90% <100.00%> (+0.10%)	⬆️
inttests	31.02% <100.00%> (-3.96%)	⬇️
unittests	?

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.