match kubernetes-sigs/iptables-wrappers logic

[BenTheElder]

see discussion: kubernetes-sigs/kind#2289

What type of PR is this?

/kind bug

What this PR does / why we need it:

Uses the more ideal iptables legacy/nft selection logic to match https://github.com/kubernetes-sigs/iptables-wrappers/

Which issue(s) this PR fixes:

Special notes for your reviewer:

See discussion in kubernetes-sigs/kind#2289

Does this PR introduce a user-facing change?

debian-iptables: select nft mode if ntf lines > legacy lines, matching https://github.com/kubernetes-sigs/iptables-wrappers/

[BenTheElder]

I'm not sure how these are managed now, I'm guessing I should probably change the debian-iptables image version in variants.yaml, but I'm not positive or what to. My guess would be 1.6.2 but I don't see anything covering it.

[saschagrunert]

I'm not sure how these are managed now, I'm guessing I should probably change the debian-iptables image version in variants.yaml, but I'm not positive or what to. My guess would be 1.6.2 but I don't see anything covering it.

Yes, I think bumping to 1.6.2 should be fine. 👍

[BenTheElder]

done, I think?

[k8s-ci-robot]

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: BenTheElder, saschagrunert

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

• OWNERS [saschagrunert]
• images/build/debian-iptables/OWNERS [BenTheElder,saschagrunert]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[saschagrunert]

done, I think?

Thanks! Do you wanna do the image promotion and k/k bump or are you fine if a release manager does it?

[BenTheElder]

I went ahead and filed those 😅