This week brings more developments with the release of Flocker 1.15.
flocker-container-agent, which has been deprecated since Flocker 1.10.1, no longer manipulates
iptables firewall rules. It will no longer create firewall rules to allow access to ports which have been exposed on Docker containers that it starts. And it will no longer maintain NAT routing rules to allow access to exposed ports from other nodes in the cluster.
This is a continued effort to make Flocker more lightweight. Most Flocker users do not run
flocker-container-agent since it is deprecated and opt to use
Kubernetes for their container orchestration so that native orchestration can be removed from Flocker and let Flocker focus on what it does best - automate operations around volumes.