GoogleCloudPlatform/kubernetes — pull request #2638 by thockin (2014-11-26 20:51:35+00:00)
Title: Fix iptables for old systems

The iptables args list needs to include all fields as they are eventually spit
out by iptables-save. This is because some systems do not support the
'iptables -C' arg, and so fall back on parsing iptables-save output. If this
does not match, it will not pass the check. For example: adding the /32 on
the destination IP arg is not strictly required, but causes this list to not
match the final iptables-save output. This is fragile and I hope one day we
can stop supporting such old iptables versions.

@hmrm @mindscratch

Fixes #2623