ппц -случайно нагуглил
Normally kubespray totally disables docker networking with --ip-masq=false and --iptables=false so when I start a docker container outside of kubernetes it won't have access to any network specially internet. Sometimes this is necessary, like when I want to use a application that needs internet access and doesn't have kubernetes manifest or more importantly when I use Docker-out-side-of-Docker for CI/CD pipelines and jobs creates docker containers when I run docker build inside kubernetes powered runner, the new container does not have internet access and I can't build docker image. I've manually added following iptables rule and enabled internet access.

iptables -t nat -A POSTROUTING -s 172.17.0.0/16 ! -d 10.0.0.0/8 -m addrtype ! --dst-type LOCAL -j MASQUERADE

не знаю  что делает эта строчка, но она  сработала как по волшебству, интернет в докере снова появился
https://github.com/kubernetes-sigs/kubespray/issues/2002 - вот ссылка(может кому пригодится)