Or, more specifically, containers on it can't hit kube-dns, while containers on the others still can. I'm not quite sure what to poke at