<p>Now we're using <code>Kubernetes</code> to implement the PaaS service and users can ssh into the containers. Because container runs inside the network of Kubernetes, users can access the services like <code>kube-apiserver</code>.</p>

<p>We want to restrict the outbound of the user's pods. It seems that <code>Kubernetes Network Policy</code> is only for inbound traffic now.</p>

<p>Is that possible to do that? Should we setup the rules of <code>iptables</code> in compute nodes?</p>

<p>Outbound traffic is now supported by Network Policies since v1.8, you should check again and see if your use case is fully supported.</p>

<p><a href="https://kubernetes.io/docs/concepts/services-networking/network-policies/#default-deny-all-egress-traffic" rel="nofollow noreferrer">https://kubernetes.io/docs/concepts/services-networking/network-policies/#default-deny-all-egress-traffic</a></p>
