<p dir="auto">As Kubernetes moves to support more multi-tenant use cases and to increase security in general, it would be helpful if there was a way to firewall pods from other pods, ideally using something simple like labels.</p>
<p dir="auto">Is there a preferred approach to support this use case?  If this is implemented via dynamic iptables rules, I assume it would need to be part of the pod definition and kubelet rather than an external firewall service? Or perhaps there are lessons learned at Google regarding how to best isolate applications?</p>
<p dir="auto">Somewhat related <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="49954539" data-permission-text="Title is private" data-url="https://github.com/kubernetes/kubernetes/issues/2585" data-hovercard-type="issue" data-hovercard-url="/kubernetes/kubernetes/issues/2585/hovercard" href="https://github.com/kubernetes/kubernetes/issues/2585">#2585</a>.</p>
<p dir="auto">I'd like to update a replication controller's name using <code class="notranslate">kubectl</code>, but am unable to do so.</p>
<p dir="auto">Basically, I want to mimic the <code class="notranslate">rolling-update</code> command where it creates a temporary rc name and then renames it.</p>
<p dir="auto">There are the steps I'd like to take:</p>
<div class="snippet-clipboard-content notranslate position-relative overflow-auto" data-snippet-clipboard-copy-content="kubectl rolling-update app app-tmp -f app-rc.json
kubectl patch rc app-tmp -p '{ &quot;metadata&quot;: { &quot;name&quot;: &quot;app&quot; } }'"><pre class="notranslate"><code class="notranslate">kubectl rolling-update app app-tmp -f app-rc.json
kubectl patch rc app-tmp -p '{ "metadata": { "name": "app" } }'
</code></pre></div>
<p dir="auto">And the error I am getting:</p>
<div class="snippet-clipboard-content notranslate position-relative overflow-auto" data-snippet-clipboard-copy-content="Error from server: the name of the object (app) does not match the name on the URL (app-tmp)"><pre class="notranslate"><code class="notranslate">Error from server: the name of the object (app) does not match the name on the URL (app-tmp)
</code></pre></div>