<p>Background: Have approx 50 nodes &quot;behind&quot; a namespace. Meaning that a given Pod in this namespace can land on any of those 50 nodes.</p>
<p>The task is to test if an outbound firewall rule (in a FW outside the cluster) has been implemented correctly. Therefore I would like to test a command <strong>on each potential node</strong> in the namespace which will tell me if I can reach my target from the given node. (using <code>curl</code> for such test but that is besides the point for my question)</p>
<p>I can create a small containerized app which will exit 0 on success. Then next step would be execute this on each potential node and harvest the result. How to do that?</p>
<p>(I don't have access to the nodes directly, only indirectly via Kubernetes/OpenShift. I only have access to the namespace-level, not the cluster-level.)</p>

peterh
<p>The underlying node firewall settings is NOT control by K8s network policies. To test network connectivity in a namespace you only need to run 1 pod in that namespace. To test firewall settings of the node you typically ssh into the node and execute command  to test - while this is possible with K8s but that would require the pod to run with root privileged; which not applicable to you as you only has access to a single namespace.</p>
