From a8f984464e2c5bcdefdecf3fb77675621ed7094f Mon Sep 17 00:00:00 2001 From: James Antill Date: Thu, 24 Apr 2025 16:25:57 -0400 Subject: [PATCH] Add nft_nat_rules for openqa Signed-off-by: James Antill --- inventory/group_vars/openqa_tap_workers | 3 +++ 1 file changed, 3 insertions(+) diff --git a/inventory/group_vars/openqa_tap_workers b/inventory/group_vars/openqa_tap_workers index 5c0a2fb4a5..ab7147fcc0 100644 --- a/inventory/group_vars/openqa_tap_workers +++ b/inventory/group_vars/openqa_tap_workers @@ -12,3 +12,6 @@ host_group: openqa-tap-workers nat_rules: [ # masquerade for openQA openvswitch workers to reach the outside '-A POSTROUTING -o {{ openqa_tap_iface }} -j MASQUERADE'] +nft_nat_rules: [ + # masquerade for openQA openvswitch workers to reach the outside + 'add rule ip filter POSTROUTING oifname "{{ openqa_tap_iface }}" counter masquerade']