[openstack-chef-repo] aio-nova, missing eth0 MASQUERADE

when aio deployed (in my case to existing VM over ssh) the VM's created in the openstack do not route to the internet. They can sucessfully resolve IP over DNS servise on controller node. Hover ping/wget are not working.

A way to make it runnig is:

sudo iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE

I am aware of the fact that this goes from the individual attributes of the urser environment. Feel free to close bug if you assume this an offtopic.

However would be fine to mention it in docs, add tests for deployed VM whether it can reach public internet, consider circumstances and intentionally run such command during provisioning of the controller node as example vagrant-aio-nova creates only a private network that must be somehow NATed to external world.