Add netfilter statistic module to check-config

[anders-larsson]

Proposed Changes

Add CONFIG_NETFILTER_XT_MATCH_STATISTIC to check-config script as discussed on rancher slack.

E0227 20:36:41.752351  411079 proxier.go:1564] "Failed to execute iptables-restore" err=<
        exit status 1: Ignoring deprecated --wait-interval option.
        Warning: Extension statistic revision 0 not supported, missing kernel module?
        iptables-restore: line 86 failed
 >

Types of Changes

Bug fix

Verification

Ran the modified code on both a system with and without the kernel module added.

With:

- CONFIG_NETFILTER_XT_MATCH_STATISTIC: enabled (as module)

Without:

- CONFIG_NETFILTER_XT_MATCH_STATISTIC: missing (fail)

Testing

As far as I know it is not covered by any tests.

Linked Issues

• CONFIG_NETFILTER_XT_MATCH_STATISTIC is required by kube-proxy but not validated by check-config #11862

User-Facing Change

NONE

Further Comments

[brandond]

Thanks!

[codecov]

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 44.90%. Comparing base (1c6dc31) to head (d5e0d07).
Report is 7 commits behind head on master.

Additional details and impacted files

@@            Coverage Diff             @@
##           master   #11860      +/-   ##
==========================================
- Coverage   47.50%   44.90%   -2.60%     
==========================================
  Files         190      190              
  Lines       19094    19094              
==========================================
- Hits         9070     8574     -496     
- Misses       8722     9277     +555     
+ Partials     1302     1243      -59     

Flag	Coverage Δ
e2etests	35.83% <ø> (-5.54%)	⬇️
inttests	35.23% <ø> (-0.14%)	⬇️
unittests	16.80% <ø> (-0.01%)	⬇️

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.