{"action":"opened","issue":{"url":"https://api.github.com/repos/weaveworks/weave/issues/2581","repository_url":"https://api.github.com/repos/weaveworks/weave","labels_url":"https://api.github.com/repos/weaveworks/weave/issues/2581/labels{/name}","comments_url":"https://api.github.com/repos/weaveworks/weave/issues/2581/comments","events_url":"https://api.github.com/repos/weaveworks/weave/issues/2581/events","html_url":"https://github.com/weaveworks/weave/issues/2581","id":186635346,"number":2581,"title":"Configuration of /proc/sys/net/bridge/bridge-nf-call-iptables should be optional","user":{"login":"marun","id":451477,"avatar_url":"https://avatars.githubusercontent.com/u/451477?v=3","gravatar_id":"","url":"https://api.github.com/users/marun","html_url":"https://github.com/marun","followers_url":"https://api.github.com/users/marun/followers","following_url":"https://api.github.com/users/marun/following{/other_user}","gists_url":"https://api.github.com/users/marun/gists{/gist_id}","starred_url":"https://api.github.com/users/marun/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/marun/subscriptions","organizations_url":"https://api.github.com/users/marun/orgs","repos_url":"https://api.github.com/users/marun/repos","events_url":"https://api.github.com/users/marun/events{/privacy}","received_events_url":"https://api.github.com/users/marun/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":0,"created_at":"2016-11-01T20:17:37Z","updated_at":"2016-11-01T20:17:37Z","closed_at":null,"body":"The launch script running weave on kube currently assumes it can manipulate ``/proc/sys/net/bridge/bridge-nf-call-iptables``: \r\n\r\nhttps://github.com/weaveworks/weave/blob/master/prog/weave-kube/launch.sh#L12-#L18\r\n\r\nFor my use-case I'm deploying kube on docker-in-docker.  Since docker is already ensuring that bridge-nf-call-iptables is set on the host, and I'd rather not have to avoid mounting /proc/sys/net rw  into the containers, it would be nice to be able to be able to disable this behavior in the launch script via an env variable (e.g. SET_BRIDGE_NF_CALL_IPTABLES, defaulted to true)."}}
{"actor":{"display_login":"marun"}}