From c7425719f8072b3ef0df19a97535508bad8ecfd2 Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Tue, 1 Feb 2022 15:28:54 -0500
Subject: [PATCH] manifest: add 35coreos-iptables overlay

This overlay contains a script allowing existing nodes to opt-out from
the iptables-nft migration.

We should remove it after a barrier release.

The overlay was added in
https://github.com/coreos/fedora-coreos-config/pull/1324.
---
 manifest.yaml | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/manifest.yaml b/manifest.yaml
index b021aeffcc..64a97dd239 100644
--- a/manifest.yaml
+++ b/manifest.yaml
@@ -26,6 +26,11 @@ add-commit-metadata:
 packages:
  - microdnf
 
+# Scripts for opting into staying on iptables-legacy after migration. Lower into
+# `fedora-coreos-base.yaml` once we're ready to migrate `testing`.
+ostree-layers:
+  - overlay/35coreos-iptables
+
 postprocess:
   # Disable Zincati and fedora-coreos-pinger on non-production streams
   # https://github.com/coreos/fedora-coreos-tracker/issues/163