From 035df9b7c45bdbd61e19e18a634af9bf5f5a34a3 Mon Sep 17 00:00:00 2001 From: Clement Verna Date: Thu, 26 Nov 2020 17:30:29 +0100 Subject: [PATCH] osbs: allow docker to talk to the aarch64 cluster Signed-off-by: Clement Verna --- files/osbs/fix-docker-iptables.production | 3 +++ 1 file changed, 3 insertions(+) diff --git a/files/osbs/fix-docker-iptables.production b/files/osbs/fix-docker-iptables.production index f112f78c47..eb9e6dc548 100644 --- a/files/osbs/fix-docker-iptables.production +++ b/files/osbs/fix-docker-iptables.production @@ -83,5 +83,8 @@ iptables -A FILTER_FORWARD -p tcp -m tcp -d 10.3.163.84 --dport 443 -j ACCEPT iptables -A FILTER_FORWARD -p udp -m udp -d 8.8.8.8 --dport 53 -j ACCEPT iptables -A FILTER_FORWARD -p udp -m udp -d 8.8.4.4 --dport 53 -j ACCEPT +# aarch64 cluster +iptables -A FILTER_FORWARD -p tcp -m tcp -d 10.3.170.147 --dport 8443 -j ACCEPT + iptables -A FORWARD -j REJECT --reject-with icmp-host-prohibited