Mark Lamourine

This looks like it for https://bugzilla.redhat.com/show_bug.cgi?id=1459193 I'll test it and verify.

These rules, at least the MASQUERADE one need to have the `when` clause which applies the previous rule as well. Only masquerade when using `flannel` The IP save rule is...

Back to the original note: It seems that there is a requirement and an assumption: - Requirement: OpenShift services will be published via DNS - Assumption: DNS will be served...

Yes, though the DNS service has been moved out of the heat stack to reflect more real-world deployments. The mechanism is different but the desired result is the same.

I'm going to see if I can try this this week. it may be that this also solves the problem with a stack delete hanging.

From https://www.happyassassin.net/2014/09/06/adding-your-freeipa-servers-ca-certificate-to-the-system-wide-trust-store-on-fedora-and-rhel/ On RHEL you can add your docker registry server cert to the global CA list: sudo cp coreos-reg.crt /etc/pki/ca-trust/source/anchors/ sudo update-ca-trust sudo systemctl restart docker docker version Client...