From 929c68c4792f5fd77d5c2ea46cf03b2e1bb26478 Mon Sep 17 00:00:00 2001 From: Pablo Acevedo Montserrat Date: Fri, 17 Jul 2026 12:27:42 +0200 Subject: [PATCH] USHIFT-7408: Add kernel-modules-extra dependency for RHEL 10 RHEL 10.2 kernel 6.12.0-211.34.1 moved iptables compat modules (nft_compat, xt_CT) from kernel-modules-core to kernel-modules-extra. Without these modules, both ovnkube-master and kubelet fail to create iptables rules, preventing MicroShift from starting. Add an unconditional Requires on kernel-modules-extra. The dependency cannot be gated on %{rhel} >= 10 because the RPM is built on el9 but cross-installed on el10. On RHEL 9 this is a no-op since the modules are already in kernel-modules-core. --- packaging/rpm/microshift.spec | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/packaging/rpm/microshift.spec b/packaging/rpm/microshift.spec index 82de81d057..87ba06c9e6 100644 --- a/packaging/rpm/microshift.spec +++ b/packaging/rpm/microshift.spec @@ -79,6 +79,13 @@ Requires: cri-tools >= 1.35.0, cri-tools < 1.36.0 # the missing package when it is not available. Recommends: containernetworking-plugins Requires: iptables +# RHEL 10 moved iptables compat kernel modules (nft_compat, xt_CT) from +# kernel-modules-core to kernel-modules-extra. These are needed by OVN-K +# and kubelet until OVN-K completes its nftables migration (OCPBUGS-98161). +# The dependency is unconditional because the RPM is built on el9 (where +# %{rhel} is 9) but cross-installed on el10, so conditionals do not work. +# On RHEL 9 this is a no-op as the modules are already in kernel-modules-core. +Requires: kernel-modules-extra Requires: microshift-selinux = %{version} Requires: microshift-networking = %{version} Requires: microshift-greenboot = %{version}