From c06d47a8c073c6d37b2e60235d5483eb4fa8a0cc Mon Sep 17 00:00:00 2001
From: Dalton Hubble <dghubble@gmail.com>
Date: Tue, 5 Oct 2021 19:09:51 -0700
Subject: [PATCH] Add file to hold nodes on iptables-legacy

* Add `/etc/fedora-coreos/iptables-legacy.stamp` to declare
that `iptables-legacy` should be used instead of `iptables-nft`
(until support is added in future releases)
* https://github.com/coreos/fedora-coreos-tracker/issues/676
---
 fedora-coreos/kubernetes/fcc/controller.yaml | 1 +
 fedora-coreos/kubernetes/fcc/worker.yaml     | 1 +
 2 files changed, 2 insertions(+)

diff --git a/fedora-coreos/kubernetes/fcc/controller.yaml b/fedora-coreos/kubernetes/fcc/controller.yaml
index a4b9a26cd..01d7b0de0 100644
--- a/fedora-coreos/kubernetes/fcc/controller.yaml
+++ b/fedora-coreos/kubernetes/fcc/controller.yaml
@@ -222,6 +222,7 @@ storage:
           ETCD_PEER_CERT_FILE=/etc/ssl/certs/etcd/peer.crt
           ETCD_PEER_KEY_FILE=/etc/ssl/certs/etcd/peer.key
           ETCD_PEER_CLIENT_CERT_AUTH=true
+    - path: /etc/fedora-coreos/iptables-legacy.stamp
 passwd:
   users:
     - name: core
diff --git a/fedora-coreos/kubernetes/fcc/worker.yaml b/fedora-coreos/kubernetes/fcc/worker.yaml
index 0bbbf09d6..f6ea5490b 100644
--- a/fedora-coreos/kubernetes/fcc/worker.yaml
+++ b/fedora-coreos/kubernetes/fcc/worker.yaml
@@ -120,6 +120,7 @@ storage:
           DefaultCPUAccounting=yes
           DefaultMemoryAccounting=yes
           DefaultBlockIOAccounting=yes
+    - path: /etc/fedora-coreos/iptables-legacy.stamp
 passwd:
   users:
     - name: core