treewide: update nftables to 0.3 with patches
This update nftables to 0.3. The bigger-buffer patch is no longer
needed, because it turns out that it is possible to increase the buffer
size using nftables.WithSockOptions, which k8s-nft-npc now does. I added
two new patches which implement features which we need for k8s-nft-npc.
I made upstream PRs for these which are still pending review.
Change-Id: Iefbf850147a4c6dfd110e356fb43e822f436e843
Reviewed-on: https://review.monogon.dev/c/monogon/+/3994
Reviewed-by: Lorenz Brun <lorenz@monogon.tech>
Tested-by: Jenkins CI
diff --git a/build/bazel/go.MODULE.bazel b/build/bazel/go.MODULE.bazel
index 4f9ef10..a723144 100644
--- a/build/bazel/go.MODULE.bazel
+++ b/build/bazel/go.MODULE.bazel
@@ -327,8 +327,9 @@
},
"github.com/google/nftables": {
"pre_patches": [
- "//third_party/com_github_google_nftables:nftables-bigger-buffers.patch",
"//third_party/com_github_google_nftables:nftables-dynamic-exprs.patch",
+ "//third_party/com_github_google_nftables:nftables-rule-handle.patch",
+ "//third_party/com_github_google_nftables:nftables-element-batching.patch",
],
},
"k8s.io/kubectl": {