Sébastien , thanks for your reply. I was missing one important detail in my question, which is that matches are played in real time, just like a multiplayer match of Battlefield. In the case a Pod crashes, the Match would be cancelled and the players would need to find a new Match.

How would you securely handle opening ports to these pods? Can one open a certain range and limit the assignment of ports to the pods within this range?

Someone in the Kubernetes Slack channel suggested using Jobs for each match, what do you think about that?