The container does not have access outside the container network if the container network is defined.
How to reproduce
Download any container image with shell
add container image docker.io/gotechnies/alpine-ssh:helm-chart configure set container name alpine image 'docker.io/gotechnies/alpine-ssh:helm-chart' set container name alpine network alpine set container network alpine prefix '192.168.0.0/24' commit
Test connectivity
vyos@vyos:~$ sudo podman exec -ti alpine /bin/sh / # ping 8.8.8.8 PING 8.8.8.8 (8.8.8.8): 56 data bytes ^C --- 8.8.8.8 ping statistics --- 2 packets transmitted, 0 packets received, 100% packet loss
The same config works in rolling release
Source NAT helps in this situation. But the behavior should be the same.
The problem also exists if VRF is used