Merge pull request #54796 from Cynerva/gkk/fix-docker-1.13

Automatic merge from submit-queue. If you want to cherry-pick this change to another branch, please follow the instructions <a href="https://github.com/kubernetes/community/blob/master/contributors/devel/cherry-picks.md">here</a>. Fix iptables FORWARD policy for Docker 1.13 in kubernetes-worker charm **What this PR does / why we need it**: This fixes the kubernetes-worker charm to work with Docker >= 1.13 by calling `iptables -P FORWARD ACCEPT`. **Which issue this PR fixes** *(optional, in `fixes #<issue number>(, fixes #<issue_number>, ...)` format, will close that issue when PR gets merged)*: fixes # **Special notes for your reviewer**: **Release note**: ```release-note Fix iptables FORWARD policy for Docker 1.13 in kubernetes-worker charm ```

Merge pull request #54796 from Cynerva/gkk/fix-docker-1.13
c2a18cca · Kubernetes Submit Queue · GitHub · ee3a08a7 · 42137988 · c2a18cca
Unverified Commit c2a18cca authored Oct 31, 2017 by Kubernetes Submit Queue Committed by GitHub Oct 31, 2017
Show whitespace changes
Inline Side-by-side

Showing with 10 additions and 0 deletions

kubernetes_worker.py ...ju/layers/kubernetes-worker/reactive/kubernetes_worker.py +10 -0

No files found.
--- a/cluster/juju/layers/kubernetes-worker/reactive/kubernetes_worker.py
+++ b/cluster/juju/layers/kubernetes-worker/reactive/kubernetes_worker.py
@@ -848,6 +848,16 @@ def missing_kube_control():
            hookenv.service_name()))


+@when('docker.ready')
+def fix_iptables_for_docker_1_13():
+    """ Fix iptables FORWARD policy for Docker >=1.13
+    https://github.com/kubernetes/kubernetes/issues/40182
+    https://github.com/kubernetes/kubernetes/issues/39823
+    """
+    cmd = ['iptables', '-P', 'FORWARD', 'ACCEPT']
+    check_call(cmd)
+
+
 def _systemctl_is_active(application):
    ''' Poll systemctl to determine if the application is running '''
    cmd = ['systemctl', 'is-active', application]