iso: enable IPv6 iptables support in ISO kernels

Prepare the ISO kernels to support IPv6 Services using the legacy
iptables/ip6tables backend.

x86_64:
- Explicitly enable IPv6 (CONFIG_IPV6=y).
- Enable IPv6 conntrack defragmentation
  (CONFIG_NF_DEFRAG_IPV6=m).
- Enable IPv6 iptables raw and NAT support:
  - CONFIG_IP6_NF_RAW=m
  - CONFIG_IP6_NF_NAT=m
  - CONFIG_IP6_NF_TARGET_MASQUERADE=m

aarch64:
- Enable IPv6 conntrack defragmentation
  (CONFIG_NF_DEFRAG_IPV6=m).
- Enable IPv6 iptables raw table support
  (CONFIG_IP6_NF_RAW=m).

With these options, the ISO kernels provide the full legacy
ip6tables stack (filter/mangle/raw/nat + MASQUERADE) needed by
kube-proxy and Calico in iptables mode for IPv6 Services.

Fixes: #21878
Signed-off-by: Kartik Joshi <[email protected]>

Author: kartikjoshi21

deploy/iso/minikube-iso/board/minikube/aarch64/linux_aarch64_defconfig

@@ -1,6 +1,7 @@
 CONFIG_SYSVIPC=y
 CONFIG_POSIX_MQUEUE=y
 CONFIG_AUDIT=y
+CONFIG_NF_DEFRAG_IPV6=m
 CONFIG_NO_HZ_IDLE=y
 CONFIG_HIGH_RES_TIMERS=y
 CONFIG_BPF_SYSCALL=y
@@ -224,6 +225,7 @@ CONFIG_IP6_NF_MATCH_IPV6HEADER=m
 CONFIG_IP6_NF_FILTER=m
 CONFIG_IP6_NF_TARGET_REJECT=m
 CONFIG_IP6_NF_MANGLE=m
+CONFIG_IP6_NF_RAW=m
 CONFIG_IP6_NF_NAT=m
 CONFIG_IP6_NF_TARGET_MASQUERADE=m
 CONFIG_BRIDGE=m

deploy/iso/minikube-iso/board/minikube/x86_64/linux_x86_64_defconfig

@@ -1,6 +1,7 @@
 # CONFIG_LOCALVERSION_AUTO is not set
 CONFIG_KERNEL_LZ4=y
 CONFIG_SYSVIPC=y
+CONFIG_IPV6=y
 CONFIG_POSIX_MQUEUE=y
 CONFIG_AUDIT=y
 CONFIG_NO_HZ=y
@@ -106,6 +107,7 @@ CONFIG_NETLABEL=y
 CONFIG_NETFILTER=y
 CONFIG_BRIDGE_NETFILTER=m
 CONFIG_NETFILTER_NETLINK_ACCT=y
+CONFIG_NF_DEFRAG_IPV6=m
 CONFIG_NETFILTER_NETLINK_QUEUE=y
 CONFIG_NF_CONNTRACK=m
 CONFIG_NF_CONNTRACK_ZONES=y
@@ -237,6 +239,9 @@ CONFIG_IP6_NF_MATCH_IPV6HEADER=y
 CONFIG_IP6_NF_FILTER=y
 CONFIG_IP6_NF_TARGET_REJECT=y
 CONFIG_IP6_NF_MANGLE=y
+CONFIG_IP6_NF_RAW=m
+CONFIG_IP6_NF_NAT=m
+CONFIG_IP6_NF_TARGET_MASQUERADE=m
 CONFIG_BRIDGE_NF_EBTABLES=m
 CONFIG_BRIDGE_EBT_BROUTE=m
 CONFIG_BRIDGE_EBT_T_FILTER=m