docker-ce is unable to be installed on UBI 10 container images because iptables-nft is not available

When attempting to install docker-ce on UBI 10 I am unable to.

# cat /etc/redhat-release
Red Hat Enterprise Linux release 10.2 (Coughlan)

# dnf install docker-ce
Updating Subscription Management repositories.
Unable to read consumer identity

This system is not registered with an entitlement server. You can use subscription-manager to register.

Last metadata expiration check: 0:00:14 ago on Tue Sep  1 20:20:11 2026.
Error:
 Problem: cannot install the best candidate for the job
  - nothing provides (iptables-nft or iptables) needed by docker-ce-3:29.7.2-1.el10.x86_64 from docker-ce-stable
(try to add '--skip-broken' to skip uninstallable packages or '--nobest' to use not only best candidate packages)

[root@f14b9547a19f ~]# dnf repolist
Updating Subscription Management repositories.
Unable to read consumer identity

This system is not registered with an entitlement server. You can use subscription-manager to register.

repo id                                                                                                                 repo name
artifactory_satellite_epel_10                                                                                           EPEL EL 10 x86_64 RPMs
artifactory_satellite_ubi_appstream_10                                                                                  Red Hat Universal Base Image 10 (RPMs) - AppStream
artifactory_satellite_ubi_baseos_10                                                                                     Red Hat Universal Base Image 10 (RPMs) - BaseOS
artifactory_satellite_ubi_codeready-builder_10                                                                          Red Hat Universal Base Image 10 (RPMs) - CodeReady Builder
docker-ce-stable                                                                                                        Docker CE Stable - x86_64

iptables-nft is included in the ubi 9 baseos stream and iptables is included in the ubi 8 baseos stream, neither are included in ubi 10's baseos stream or appstream.

Start by tracing the docker-ce-stable RPM dependency metadata used by the packaging scripts and compare it with the UBI 10 BaseOS and AppStream package lists cited here. Reproduce dnf install docker-ce in a UBI 10 container; done means Docker CE has an installable dependency set on that image.