Encountered an error in Talos when running nft list ruleset
% kubectl debug -n kube-system -it --image alpine node/$NODE
/ # apk add nftables
/ # nft list ruleset
netlink: Error: cache initialization failed: Operation not permitted
The issue was related to security capabilities and was resolved by using --profile=sysadmin
:
% kubectl debug -n kube-system --profile=sysadmin -it --image alpine node/$NODE
/ # apk add nftables
/ # nft list ruleset
table ip mangle {
chain KUBE-IPTABLES-HINT {
}
}
table inet talos {
...
}