From b47c6afed0bb39bf4d1c93a40206a8489adb1491 Mon Sep 17 00:00:00 2001
From: Steven Dake <sdake@redhat.com>
Date: Thu, 16 Oct 2014 14:19:03 -0700
Subject: [PATCH] Run nova-api as privileged so it can muck with iptables

Not sure if mucking with iptables is safe, but appears required.

Change-Id: I766b0e61e247c47b4449c1ed2c204ddb8919a87d
---
 k8s/pod/nova-controller-pod.yaml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/k8s/pod/nova-controller-pod.yaml b/k8s/pod/nova-controller-pod.yaml
index 3b432bb6ac..b7e9bce0d3 100644
--- a/k8s/pod/nova-controller-pod.yaml
+++ b/k8s/pod/nova-controller-pod.yaml
@@ -34,8 +34,10 @@ desiredState:
         value: sharedsecret
       image: kollaglue/fedora-rdo-nova-api
       name: nova-api
+      privileged: true
     id: nova-1
     version: v1beta1
+
 id: nova
 labels:
   name: nova-controller