Skip to content

Instantly share code, notes, and snippets.

@atomlab
Last active February 20, 2025 19:59
Show Gist options
  • Save atomlab/59000e4bf245e367b9d7af156d357c75 to your computer and use it in GitHub Desktop.
Save atomlab/59000e4bf245e367b9d7af156d357c75 to your computer and use it in GitHub Desktop.
Talos. nft list ruleset. netlink: Error: cache initialization failed: Operation not permitted

Encountered an error in Talos when running nft list ruleset

% kubectl debug -n kube-system -it --image alpine node/$NODE
/ # apk add nftables
/ # nft list ruleset
netlink: Error: cache initialization failed: Operation not permitted

The issue was related to security capabilities and was resolved by using --profile=sysadmin:

% kubectl debug -n kube-system --profile=sysadmin -it --image alpine node/$NODE
/ # apk add nftables
/ # nft list ruleset
table ip mangle {
        chain KUBE-IPTABLES-HINT {
        }
}
table inet talos {
...
}
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment