Known issues¶

MKE 3.5.3 issues for which there are available workaround solutions include:

[MKE-8538] Limited Windows support dump availability¶

Only limited support dumps are available on Windows worker nodes.

Workaround:

Manually collect the Windows worker node logs.

The calico-node firewalld-policy init container can disable the docker ingress routing mesh when reloading firewalld.

Workaround:

Prevent the issue from recurring by disabling firewalld:
```
sudo systemctl disable --now firewalld
```
Restore missing iptables chains by restarting dockerd:
```
sudo systemctl restart docker
```
Note

Restarting dockerd stops all containers on the corresponding node. The node capacity will not be available to the cluster until the node returns to a healthy state in MKE. You must restart dockerd on manager nodes one node at a time, confirming the health of each one in MKE before moving on to the next.

Confirm issue resolution by checking for the presence of the DOCKER-INGRESS iptables chain:

sudo iptables --list DOCKER-INGRESS

Expected output:

Chain DOCKER-INGRESS (2 references)
target     prot opt source               destination
[...]