{"action":"created","issue":{"url":"https://api.github.com/repos/rancher/rancher/issues/2856","labels_url":"https://api.github.com/repos/rancher/rancher/issues/2856/labels{/name}","comments_url":"https://api.github.com/repos/rancher/rancher/issues/2856/comments","events_url":"https://api.github.com/repos/rancher/rancher/issues/2856/events","html_url":"https://github.com/rancher/rancher/issues/2856","id":119722303,"number":2856,"title":"unable to deploy a container when using a private registry deployed by rancher on the same host","user":{"login":"bsauvajon","id":16101305,"avatar_url":"https://avatars.githubusercontent.com/u/16101305?v=3","gravatar_id":"","url":"https://api.github.com/users/bsauvajon","html_url":"https://github.com/bsauvajon","followers_url":"https://api.github.com/users/bsauvajon/followers","following_url":"https://api.github.com/users/bsauvajon/following{/other_user}","gists_url":"https://api.github.com/users/bsauvajon/gists{/gist_id}","starred_url":"https://api.github.com/users/bsauvajon/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/bsauvajon/subscriptions","organizations_url":"https://api.github.com/users/bsauvajon/orgs","repos_url":"https://api.github.com/users/bsauvajon/repos","events_url":"https://api.github.com/users/bsauvajon/events{/privacy}","received_events_url":"https://api.github.com/users/bsauvajon/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/rancher/rancher/labels/kind/question","name":"kind/question","color":"dddddd"}],"state":"closed","locked":false,"assignee":null,"milestone":null,"comments":2,"created_at":"2015-12-01T13:57:02Z","updated_at":"2015-12-30T23:10:03Z","closed_at":"2015-12-30T23:10:03Z","body":"Hi,\r\n\r\nWe use artifactory to deploy our own docker images.\r\nThe artifactory server is running in a container deployed by rancher, and accessed through a load balancing service.\r\nIf I want to deploy a new container on the same host, the agent can't access the registry.\r\nIt seems that the packets sent by the agent are not catched by the iptables rules, so it can't connect to the lb service. A workaround was to manually add the CATTLE_PREROUTING chain in the OUTPUT chain of NAT table.\r\nIs it a good idea to make it by default on each hosts ?"},"comment":{"url":"https://api.github.com/repos/rancher/rancher/issues/comments/168092361","html_url":"https://github.com/rancher/rancher/issues/2856#issuecomment-168092361","issue_url":"https://api.github.com/repos/rancher/rancher/issues/2856","id":168092361,"user":{"login":"deniseschannon","id":11410997,"avatar_url":"https://avatars.githubusercontent.com/u/11410997?v=3","gravatar_id":"","url":"https://api.github.com/users/deniseschannon","html_url":"https://github.com/deniseschannon","followers_url":"https://api.github.com/users/deniseschannon/followers","following_url":"https://api.github.com/users/deniseschannon/following{/other_user}","gists_url":"https://api.github.com/users/deniseschannon/gists{/gist_id}","starred_url":"https://api.github.com/users/deniseschannon/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/deniseschannon/subscriptions","organizations_url":"https://api.github.com/users/deniseschannon/orgs","repos_url":"https://api.github.com/users/deniseschannon/repos","events_url":"https://api.github.com/users/deniseschannon/events{/privacy}","received_events_url":"https://api.github.com/users/deniseschannon/received_events","type":"User","site_admin":false},"created_at":"2015-12-30T23:10:03Z","updated_at":"2015-12-30T23:10:03Z","body":"@bsauvajon As I mentioned, I think this is the Hairpin NAT issue. "}}