Expose application inside a container

Application inside a container might be consumed by end-users/other containers. Although each container has its own IP address that can be used to access, those IP addresses cannot be relied upon to be stable over time (container could die and be re-created). It would be useful to have a way to reliably expose the service inside container(s). The solution might be similar to k8s service.

NOTE: this BP requires a spec to clarify the design