Skip to content
Snippets Groups Projects
Commit ebf9daf7 authored by Sergii Golovatiuk's avatar Sergii Golovatiuk
Browse files

Statically disable iptables management for docker

Docker 1.13 changes the behaviour of iptables defaults from allow
to drop. This patch disables docker's iptables management as it was
in Docker 1.12 [1]

[1] https://github.com/docker/docker/pull/28257



Signed-off-by: default avatarSergii Golovatiuk <sgolovatiuk@mirantis.com>
parent 0afadb91
No related branches found
No related tags found
No related merge requests found
...@@ -195,7 +195,7 @@ docker_daemon_graph: "/var/lib/docker" ...@@ -195,7 +195,7 @@ docker_daemon_graph: "/var/lib/docker"
## This string should be exactly as you wish it to appear. ## This string should be exactly as you wish it to appear.
## An obvious use case is allowing insecure-registry access ## An obvious use case is allowing insecure-registry access
## to self hosted registries like so: ## to self hosted registries like so:
docker_options: "--insecure-registry={{ kube_service_addresses }} --graph={{ docker_daemon_graph }}" docker_options: "--insecure-registry={{ kube_service_addresses }} --graph={{ docker_daemon_graph }} --iptables=false"
docker_bin_dir: "/usr/bin" docker_bin_dir: "/usr/bin"
## Uncomment this if you want to force overlay/overlay2 as docker storage driver ## Uncomment this if you want to force overlay/overlay2 as docker storage driver
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment