From 831c4ba8ca2f92c8a4554ae5d31088a18eadcc2d Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Patrick=20Sodr=C3=A9?= <psodre@gmail.com>
Date: Wed, 20 Nov 2019 22:45:21 -0500
Subject: [PATCH] Add Amazon's TaskIAM configuration to ecs image

  - Implements the instructions in rancher/docs#2015, directly in the
ecs-optimized image.
  - Depends on rancher/os-release#217
---
 scripts/install2disk | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/scripts/install2disk b/scripts/install2disk
index ad50141..d0f58d7 100755
--- a/scripts/install2disk
+++ b/scripts/install2disk
@@ -38,6 +38,14 @@ EOF
         cat >cloud-config.yml<<EOF
 #cloud-config
 rancher:
+  network:
+    post_cmds:
+      - iptables -t nat -A PREROUTING -p tcp -d 169.254.170.2 --dport 80 -j DNAT --to-destination 127.0.0.1:51679
+      - iptables -t nat -A OUTPUT -d 169.254.170.2 -p tcp -m tcp --dport 80 -j REDIRECT --to-ports 51679
+      - iptables --insert DOCKER-USER 1 --in-interface docker+ --destination 169.254.169.254/32 --jump DROP
+      - iptables --insert DOCKER-USER 1 --in-interface docker-sys --destination 169.254.169.254/32 --jump ACCEPT
+  sysctl:
+    net.ipv4.conf.all.route_localnet: 1
   services_include:
     amazon-ecs-agent: true
   modules: [ena]