Merge "Add nat rules for floating networks"
diff --git a/de/heat-templates/scripts/instance_boot.sh b/de/heat-templates/scripts/instance_boot.sh
index 82ef911..24b4dad 100644
--- a/de/heat-templates/scripts/instance_boot.sh
+++ b/de/heat-templates/scripts/instance_boot.sh
@@ -59,6 +59,7 @@
UCP_MASTER_HOST=${UCP_MASTER_HOST:-${CONTROL_IP_ADDRESS}}
UCP_IP_ADDRESS=${UCP_IP_ADDRESS:-$CONTROL_IP_ADDRESS}
NTP_SERVERS=${NTP_SERVERS:-"ldap.scc.mirantis.net ldap.bud.mirantis.net"}
+DEFAULT_INTERFACE=$(ip route show default | awk '{print $5}')
function retry {
@@ -295,6 +296,21 @@
-A DOCKER-USER -j RETURN
COMMIT
EOF
+
+#Allow access to Internet from VMs for virtualized environment.
+cat << EOF >> /etc/iptables/rules.v4
+*nat
+:POSTROUTING ACCEPT - [0:0]
+EOF
+ for net in $FLOATING_NETWORK_PREFIXES; do
+cat << EOF >> /etc/iptables/rules.v4
+-A POSTROUTING -s ${net} -o ${DEFAULT_INTERFACE} -j MASQUERADE
+EOF
+ done
+
+cat << EOF >> /etc/iptables/rules.v4
+COMMIT
+EOF
sudo netfilter-persistent reload
}