[cern] Add iptables -P FORWARD ACCEPT unit

Spyridon Trigazis requested to merge os7556 into cern-queens

On node reboot, kubelet and kube-proxy set iptables -P FORWARD DROP which doesn't work with flannel in the way we use it. Add a systemd unit to set the rule to ACCEPT after flannel,docker,kubelet,kube-proxy.

jira: OS-7556

Signed-off-by: Spyros Trigazis spyridon.trigazis@cern.ch

Merge request reports