On Fri, May 27, 2016 at 09:14:23AM -0700, Matt Hughes wrote: > Is it possible or on the roadmap to have a pod drive the host's firewall
There was an idea of an "egress" (like ingress) > settings? I'm talking here about stock k8s, not GCE. GCE is stock k8s :) > My particular use case is I have some pods that need to set DSCP markings > (MANGLE table) on their outgoing traffic. Right now, my only solution is > to modify iptables on every node in the cluster. I can limit by Just curious (haven't tested it), if you use a priviledged container can't you run iptables with those rules there? If that is an option, it might be also adding a container to the pod, using it as proxy, and that added container is priviledged and runs these rules. Although not sure if that is an option :) Thanks, Rodrigo -- You received this message because you are subscribed to the Google Groups "Containers at Google" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To post to this group, send email to [email protected]. Visit this group at https://groups.google.com/group/google-containers. For more options, visit https://groups.google.com/d/optout.
