openstack/openstack-helm
Code Issues Proposed changes

Merge "Dev-Deploy: Setup iptables for use with docker >= 1.13.1"

Browse Source
This commit is contained in:
Zuul 2017-12-28 18:26:42 +00:00 committed by Gerrit Code Review
commit 2e609c2bcd
1 changed files with 5 additions and 0 deletions

5
tools/deployment/developer/16-setup-gateway.sh

@ -21,6 +21,11 @@ OSH_EXT_SUBNET="172.24.4.0/24"
sudo ip addr add ${OSH_BR_EX_ADDR} dev br-ex
sudo ip link set br-ex up
# NOTE(portdirect): With Docker >= 1.13.1 the default the default FORWARD chain
# policy is configured to DROP, for the l3 agent to function as expected and
# VMs reach the outside world correctly this needs to be set to ACCEPT.
sudo iptables -P FORWARD ACCEPT
# Setup masquerading on default route dev to public subnet
DEFAULT_ROUTE_DEV="$(sudo ip -4 route list 0/0 | awk '{ print $5; exit }')"
sudo iptables -t nat -A POSTROUTING -o ${DEFAULT_ROUTE_DEV} -s ${OSH_EXT_SUBNET} -j MASQUERADE