From 9af6cefa2a4d6bfb07ecf8ae3f0ac879b6114374 Mon Sep 17 00:00:00 2001
From: "Khaled Henidak (Kal)" <khnidk@outlook.com>
Date: Thu, 8 Nov 2018 09:50:50 -0800
Subject: [PATCH] mount xtables lock in proxy (#4210)

---
 .../addons/kubernetesmasteraddons-kube-proxy-daemonset.yaml  | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/parts/k8s/addons/kubernetesmasteraddons-kube-proxy-daemonset.yaml b/parts/k8s/addons/kubernetesmasteraddons-kube-proxy-daemonset.yaml
index ce6591bf8..064e83bc5 100644
--- a/parts/k8s/addons/kubernetesmasteraddons-kube-proxy-daemonset.yaml
+++ b/parts/k8s/addons/kubernetesmasteraddons-kube-proxy-daemonset.yaml
@@ -43,6 +43,8 @@ spec:
         - mountPath: /var/lib/kubelet/kubeconfig
           name: kubeconfig
           readOnly: true
+        - mountPath: /run/xtables.lock
+          name: iptableslock
       hostNetwork: true
       volumes:
       - hostPath:
@@ -54,5 +56,8 @@ spec:
       - hostPath:
           path: /etc/kubernetes
         name: etc-kubernetes
+      - hostPath:
+          path: /run/xtables.lock
+        name: iptableslock
       nodeSelector:
         beta.kubernetes.io/os: linux