rancher-service-iptables.yml

rancher:
  services_include:
    ubuntu-console: true
  services:
    iptables:
      image: busybox
      net: host
      uts: host
      pid: host
      ipc: host
      privileged: true
      volumes_from:
        - user-volumes
      volumes:
        - /sbin/iptables:/usr/bin/iptables:ro
        - /var/run/docker.sock:/var/run/docker.sock
        - /opt/rancher/init:/opt/rancher/init
      labels:
        - io.rancher.os.scope=system
        - io.rancher.os.after: wait-for-network, cloud-init
      command: iptables -t nat -I PREROUTING -p tcp -d 169.254.169.254 --dport 80 -j DNAT --to-destination 172.17.0.1:9999 -i docker0