----- Original Message ----- > For instance, I bring up a two node, one master cluster w/ atomic > fedora or centos, using the kube/contrib ansible, and then I run the > projectatomic/guestbookgo-atomicapp, locate automatically-assigned > NodePort for the guestbook (kubectl describe service guestbook | grep > NodePort), and try to access the app from the node IP at the NodePort. > By default, this will fail, unless I remove the reject rules and > restart iptables.
Thanks, I was able to reproduce this. This fixes it for me: https://github.com/kubernetes/contrib/pull/1612