Re: [atomic-devel] Atomic ISO has bad default IPtables

[Jason Brooks <jbrooks redhat com>]

On Wed, Aug 24, 2016 at 1:16 PM, Jonathan Lebon <jlebon redhat com> wrote:
> ----- Original Message -----
>> For instance, I bring up a two node, one master cluster w/ atomic
>> fedora or centos, using the kube/contrib ansible, and then I run the
>> projectatomic/guestbookgo-atomicapp, locate automatically-assigned
>> NodePort for the guestbook (kubectl describe service guestbook | grep
>> NodePort), and try to access the app from the node IP at the NodePort.
>> By default, this will fail, unless I remove the reject rules and
>> restart iptables.
>
> Thanks, I was able to reproduce this. This fixes it for me:
>
> https://github.com/kubernetes/contrib/pull/1612

Awesome! I'm testing this now.