Merge "baremetal: Install iptables for Docker if enabled"

ansible/roles/baremetal/defaults/main.yml

@@ -45,6 +45,7 @@ debian_pkg_install:
  - "{% if virtualenv is not none %}python3-virtualenv{% endif %}"
  - "{% if enable_host_ntp | bool %}ntp{% endif %}"
  - "{% if enable_multipathd|bool %}sg3-utils-udev{% endif %}"
+ - "{% if not docker_disable_default_iptables_rules | bool %}iptables{% endif %}"
 
 redhat_pkg_install:
  - "{{ docker_yum_package }}"
@@ -53,6 +54,7 @@ redhat_pkg_install:
  - "{% if virtualenv is not none %}python3-virtualenv{% endif %}"
  - "{% if enable_host_ntp | bool %}ntp{% endif %}"
  - sudo
+ - "{% if not docker_disable_default_iptables_rules | bool %}iptables{% endif %}"
 
 ubuntu_pkg_removals:
  - lxd

releasenotes/notes/docker-install-iptables-f24fef8ce2418963.yaml

+---
+fixes:
+  - |
+    Fixes an issue where Docker may fail to start if ``iptables`` is not
+    installed. `LP#1899060
+    <https://bugs.launchpad.net/kolla-ansible/+bug/1899060>`__