With firewalld active containers cannot do networking, not even with hosts jn the same lan.
Everything else works beautifully though.
With iptables:
-A INPUT -i kube-bridge -j ACCEPT -A OUTPUT -o kube-bridge -j ACCEPT
With iptables:
Other than that I've configured iptables to drop all incoming traffic except a few whitelisted ports.