Re: [kubernetes-users] IPTABLES -P FORWARD ACCEPT

2017-12-22 Thread Du Jun
xref: https://github.com/kubernetes/kubernetes/pull/52569

2017-12-23 7:44 GMT+08:00 'Tim Hockin' via Kubernetes user discussion and
Q :

> I think this is fixed in Kube 1.9
>
> On Mon, Dec 18, 2017 at 5:53 PM, 'Stephan Z.' via Kubernetes user
> discussion and Q  wrote:
> > can you provide more infos? :) what linux are you using? how is your
> docker
> > image and pod config structures w/ regards to the exposed ports.
> >
> > 2017-12-19 2:37 GMT+01:00 Wayne Dengel :
> >>
> >> Hello,
> >> Totally new using Kubernetes.   Things have been going well, accept I
> had
> >> to do "iptables -P FORWARD ACCEPT" to be able to access my apps
> HTTP/HTTPS
> >> interfaces.
> >> I did the usual expose of my ports, but alas, nothing works until I
> enable
> >> FORWARD.
> >>
> >> Big problem is that I cannot do this due to security.
> >>
> >> Any pointers on what to do?   I'm a developer, and not an admin, so
> flying
> >> blind in respect to IPTABLES.
> >>
> >>
> >> Thanks for any advice.
> >>
> >> V/r
> >> wayne
> >>
> >> --
> >> You received this message because you are subscribed to the Google
> Groups
> >> "Kubernetes user discussion and Q" group.
> >> To unsubscribe from this group and stop receiving emails from it, send
> an
> >> email to kubernetes-users+unsubscr...@googlegroups.com.
> >> To post to this group, send email to kubernetes-users@googlegroups.com.
> >> Visit this group at https://groups.google.com/group/kubernetes-users.
> >> For more options, visit https://groups.google.com/d/optout.
> >
> >
> > --
> > You received this message because you are subscribed to the Google Groups
> > "Kubernetes user discussion and Q" group.
> > To unsubscribe from this group and stop receiving emails from it, send an
> > email to kubernetes-users+unsubscr...@googlegroups.com.
> > To post to this group, send email to kubernetes-users@googlegroups.com.
> > Visit this group at https://groups.google.com/group/kubernetes-users.
> > For more options, visit https://groups.google.com/d/optout.
>
> --
> You received this message because you are subscribed to the Google Groups
> "Kubernetes user discussion and Q" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to kubernetes-users+unsubscr...@googlegroups.com.
> To post to this group, send email to kubernetes-users@googlegroups.com.
> Visit this group at https://groups.google.com/group/kubernetes-users.
> For more options, visit https://groups.google.com/d/optout.
>

-- 
You received this message because you are subscribed to the Google Groups 
"Kubernetes user discussion and Q" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to kubernetes-users+unsubscr...@googlegroups.com.
To post to this group, send email to kubernetes-users@googlegroups.com.
Visit this group at https://groups.google.com/group/kubernetes-users.
For more options, visit https://groups.google.com/d/optout.


Re: [kubernetes-users] IPTABLES -P FORWARD ACCEPT

2017-12-18 Thread 'Stephan Z.' via Kubernetes user discussion and Q
can you provide more infos? :) what linux are you using? how is your docker
image and pod config structures w/ regards to the exposed ports.

2017-12-19 2:37 GMT+01:00 Wayne Dengel :

> Hello,
> Totally new using Kubernetes.   Things have been going well, accept I had
> to do "iptables -P FORWARD ACCEPT" to be able to access my apps HTTP/HTTPS
> interfaces.
> I did the usual expose of my ports, but alas, nothing works until I enable
> FORWARD.
>
> Big problem is that I cannot do this due to security.
>
> Any pointers on what to do?   I'm a developer, and not an admin, so flying
> blind in respect to IPTABLES.
>
>
> Thanks for any advice.
>
> V/r
> wayne
>
> --
> You received this message because you are subscribed to the Google Groups
> "Kubernetes user discussion and Q" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to kubernetes-users+unsubscr...@googlegroups.com.
> To post to this group, send email to kubernetes-users@googlegroups.com.
> Visit this group at https://groups.google.com/group/kubernetes-users.
> For more options, visit https://groups.google.com/d/optout.
>

-- 
You received this message because you are subscribed to the Google Groups 
"Kubernetes user discussion and Q" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to kubernetes-users+unsubscr...@googlegroups.com.
To post to this group, send email to kubernetes-users@googlegroups.com.
Visit this group at https://groups.google.com/group/kubernetes-users.
For more options, visit https://groups.google.com/d/optout.


[kubernetes-users] IPTABLES -P FORWARD ACCEPT

2017-12-18 Thread Wayne Dengel
Hello,
Totally new using Kubernetes.   Things have been going well, accept I had 
to do "iptables -P FORWARD ACCEPT" to be able to access my apps HTTP/HTTPS 
interfaces.
I did the usual expose of my ports, but alas, nothing works until I enable 
FORWARD.  

Big problem is that I cannot do this due to security.

Any pointers on what to do?   I'm a developer, and not an admin, so flying 
blind in respect to IPTABLES.


Thanks for any advice.

V/r
wayne

-- 
You received this message because you are subscribed to the Google Groups 
"Kubernetes user discussion and Q" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to kubernetes-users+unsubscr...@googlegroups.com.
To post to this group, send email to kubernetes-users@googlegroups.com.
Visit this group at https://groups.google.com/group/kubernetes-users.
For more options, visit https://groups.google.com/d/optout.