I'm using iptables myself and it works fine, though you have to make sure that traffic on the kube-bridge interface is allowed. With iptables: -A INPUT -i k

I'm using iptables myself and it works fine, though you have to make sure that traffic on the kube-bridge interface is allowed. With iptables: -A INPUT -i kube-bridge -j ACCEPT -A OUTPUT -o kube-bridge -j ACCEPT Other than that I've configured iptables to drop all incoming traffic except a few whitelisted ports.