docker - --cap-add in Google Container Engine -
i running issue google container engine unable add capabilities running of docker container.
i need able alter iptables
can forward traffic through docker vpn container.
the docker container runs fine when able pass --cap-add=net_admin run command, since gce (seemingly) able run images not seem possible. insufficient permissions error when running docker image , fails deploy.
is there anyway around can alter theiptables
? or gce not have ability?
i have checked out issue. references building image privileges doesn't seem close resolved.
my iptables
commands reference:
iptables -t nat -a postrouting -s 10.0.0.0/8 -o eth0 -m policy --dir out --pol ipsec -j accept
iptables -t nat -a postrouting -s 10.0.0.0/8 -o eth0 -j masquerade
there pull request filed yesterday add feature kubernetes. once has been added kubernetes should able test building head , deploying cluster gce.
this feature show in google container engine shortly after next release of kubernetes.
Comments
Post a Comment