docker-disable-ip-forward-b0490b71f9f07cd6.yaml

---
fixes:
  - |
    Adds a new flag, ``docker_disable_ip_forward``, which
    defaults to ``docker_disable_default_iptables_rules`` and is used to
    disable docker's ``ip-forward`` option which makes docker set
    ``net.ipv4.ip_forward`` sysctl to ``1``.
    This is to protect from creating all-forwarding hosts.
    `LP#1931615 <https://launchpad.net/bugs/1931615>`__