fix: cannot create iptable chain in some environment

Signed-off-by: OrangeBao <[email protected]>

Author: OrangeBao

deploy/clusterlink-agent.yaml

@@ -46,6 +46,12 @@ spec:
           - mountPath: /etc/clusterlink/kubeconfig
             name: proxy-config
             readOnly: true
+          - mountPath: /run/xtables.lock
+            name: iptableslock
+            readOnly: false
+          - mountPath: /lib/modules
+            name: lib-modules
+            readOnly: true
       terminationGracePeriodSeconds: 30
       securityContext:
         privileged: true
@@ -55,3 +61,12 @@ spec:
         configMap:
           defaultMode: 420
           name: proxy-config
+      - hostPath:
+          path: /run/xtables.lock
+          type: FileOrCreate
+        name: iptableslock
+      - name: lib-modules
+        hostPath:
+          path: /lib/modules
+
+      

pkg/operator/clusterlink/agent/manifests.go

@@ -56,13 +56,25 @@ spec:
         - mountPath: /etc/clusterlink
           name: proxy-config
           readOnly: true
+        - mountPath: /run/xtables.lock
+          name: iptableslock
+          readOnly: false
+        - mountPath: /lib/modules
+          name: lib-modules
+          readOnly: true
       terminationGracePeriodSeconds: 30
       hostNetwork: true
       volumes:
       - name: proxy-config
         secret:
           secretName: {{ .ProxyConfigMapName }}
-
+      - hostPath:
+          path: /run/xtables.lock
+          type: FileOrCreate
+        name: iptableslock
+      - name: lib-modules
+        hostPath:
+          path: /lib/modules
 `
 
 // DaemonSetReplace is a struct to help to concrete