{"action":"created","issue":{"url":"https://api.github.com/repos/projectcalico/calico/issues/1073","repository_url":"https://api.github.com/repos/projectcalico/calico","labels_url":"https://api.github.com/repos/projectcalico/calico/issues/1073/labels{/name}","comments_url":"https://api.github.com/repos/projectcalico/calico/issues/1073/comments","events_url":"https://api.github.com/repos/projectcalico/calico/issues/1073/events","html_url":"https://github.com/projectcalico/calico/issues/1073","id":254618017,"number":1073,"title":"POD to Service no response","user":{"login":"prasenforu","id":19322497,"avatar_url":"https://avatars1.githubusercontent.com/u/19322497?v=4","gravatar_id":"","url":"https://api.github.com/users/prasenforu","html_url":"https://github.com/prasenforu","followers_url":"https://api.github.com/users/prasenforu/followers","following_url":"https://api.github.com/users/prasenforu/following{/other_user}","gists_url":"https://api.github.com/users/prasenforu/gists{/gist_id}","starred_url":"https://api.github.com/users/prasenforu/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/prasenforu/subscriptions","organizations_url":"https://api.github.com/users/prasenforu/orgs","repos_url":"https://api.github.com/users/prasenforu/repos","events_url":"https://api.github.com/users/prasenforu/events{/privacy}","received_events_url":"https://api.github.com/users/prasenforu/received_events","type":"User","site_admin":false},"labels":[{"id":500142011,"url":"https://api.github.com/repos/projectcalico/calico/labels/kind/support","name":"kind/support","color":"cc317c","default":false}],"state":"closed","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":11,"created_at":"2017-09-01T11:51:35Z","updated_at":"2017-09-06T17:30:17Z","closed_at":"2017-09-06T17:30:17Z","author_association":"NONE","body":"Version\r\n\r\nCentOS 3.7\r\nOC 3.6\r\nAnsible 2.3\r\ndocker 1.12.6\r\nkubectl 1.6.1\r\n\r\n## NO policy setup as of now\r\n\r\n#### Ansible hostfile\r\n\r\n```\r\n[OSEv3:children]\r\nnodes\r\nmasters\r\nnfs\r\netcd\r\n\r\n[OSEv3:vars]\r\nopenshift_master_default_subdomain=cloudapps.cloud-cafe.in\r\nansible_ssh_user=root\r\ndeployment_type=origin\r\nos_sdn_network_plugin_name=cni\r\nopenshift_use_calico=true\r\nopenshift_use_openshift_sdn=false\r\nopenshift_disable_check=disk_availability,memory_availability\r\nopenshift_release=v3.6\r\nopenshift_image_tag=v3.6.0\r\n\r\n\r\n# Comment the following to disable htpasswd authentication; defaults to DenyAllPasswordIdentityProvider\r\nopenshift_master_identity_providers=[{'name': 'htpasswd_auth', 'login': 'true', 'challenge': 'true', 'kind': 'HTPasswdPasswordIdentityProvider', 'filename': '/etc/origin/master/users.htpasswd'}]\r\n\r\n[nodes]\r\nose-master  openshift_ip=10.90.1.208 openshift_public_ip=XXXXXXXXX openshift_hostname=ose-master.cloud-cafe.in openshift_public_hostname=XXXXXXXXX openshift_node_labels=\"{'region': 'infra'}\" openshift_schedulable=False\r\nose-hub  openshift_ip=10.90.1.209 openshift_public_ip=10.90.1.209 openshift_hostname=ose-hub.cloud-cafe.in openshift_public_hostname=ose-hub.cloud-cafe.in openshift_node_labels=\"{'region': 'infra'}\" openshift_schedulable=True\r\nose-node1  openshift_ip=10.90.2.210 openshift_public_ip=10.90.2.210 openshift_hostname=ose-node1.cloud-cafe.in openshift_public_hostname=ose-node1.cloud-cafe.in openshift_schedulable=True\r\nose-node2  openshift_ip=10.90.2.211 openshift_public_ip=10.90.2.210 openshift_hostname=ose-node2.cloud-cafe.in openshift_public_hostname=ose-node2.cloud-cafe.in openshift_schedulable=True\r\n\r\n[masters]\r\nose-master  openshift_ip=10.90.1.208 openshift_public_ip=XXXXXXXXX openshift_hostname=ose-master.cloud-cafe.in openshift_public_hostname=XXXXXXXXX\r\n\r\n[nfs]\r\nose-hub  openshift_ip=10.90.1.209 openshift_public_ip=10.90.1.209 openshift_hostname=ose-hub.cloud-cafe.in openshift_public_hostname=ose-hub.cloud-cafe.in\r\n\r\n[etcd]\r\nose-master  openshift_ip=10.90.1.208 openshift_public_ip=XXXXXXXXX openshift_hostname=ose-master.cloud-cafe.in openshift_public_hostname=XXXXXXXXX\r\n```\r\n\r\n```\r\n[root@ose-master ~]# oc get po --all-namespaces -o wide\r\nNAMESPACE     NAME                                        READY     STATUS    RESTARTS   AGE       IP               NODE\r\ndefault       docker-registry-1-gzq7c                     1/1       Running   2          3h        10.128.157.168   ose-hub.cloud-cafe.in\r\ndefault       registry-console-1-w9lkc                    1/1       Running   4          2d        10.130.134.197   ose-node1.cloud-cafe.in\r\ndefault       router-1-k7h18                              1/1       Running   3          23h       10.90.1.209      ose-hub.cloud-cafe.in\r\nkube-system   calico-policy-controller-4072784145-h60v8   1/1       Running   6          3d        10.90.1.208      ose-master.cloud-cafe.in\r\nprometheus    alertmanager-1-50kf3                        1/1       Running   3          23h       10.128.157.169   ose-hub.cloud-cafe.in\r\nprometheus    node-exporter-3d1nn                         1/1       Running   3          1d        10.90.2.211      ose-node2.cloud-cafe.in\r\nprometheus    node-exporter-64x5w                         1/1       Running   4          1d        10.90.1.209      ose-hub.cloud-cafe.in\r\nprometheus    node-exporter-jv283                         1/1       Running   4          1d        10.90.1.208      ose-master.cloud-cafe.in\r\nprometheus    node-exporter-wlxq6                         1/1       Running   3          1d        10.90.2.210      ose-node1.cloud-cafe.in\r\n```\r\n\r\n## POD to Service no response\r\n\r\n```\r\n/alertmanager # wget http://172.30.200.102:9093\r\nConnecting to 172.30.200.102:9093 (172.30.200.102:9093)\r\n^C\r\n/alertmanager # ping 172.30.200.102\r\nPING 172.30.200.102 (172.30.200.102): 56 data bytes\r\n\r\n^C^C\r\n--- 172.30.200.102 ping statistics ---\r\n18 packets transmitted, 0 packets received, 100% packet loss\r\n/alertmanager # ping 172.30.0.1\r\nPING 172.30.0.1 (172.30.0.1): 56 data bytes\r\n^C\r\n--- 172.30.0.1 ping statistics ---\r\n25 packets transmitted, 0 packets received, 100% packet loss\r\n```\r\n\r\n## POD to POD response OK\r\n\r\n\r\n```\r\n[root@ose-master ~]# oc rsh po/alertmanager-1-50kf3 sh\r\n/alertmanager # ping 10.90.1.208\r\nPING 10.90.1.208 (10.90.1.208): 56 data bytes\r\n64 bytes from 10.90.1.208: seq=0 ttl=63 time=0.373 ms\r\n64 bytes from 10.90.1.208: seq=1 ttl=63 time=0.519 ms\r\n64 bytes from 10.90.1.208: seq=2 ttl=63 time=0.564 ms\r\n^C\r\n--- 10.90.1.208 ping statistics ---\r\n3 packets transmitted, 3 packets received, 0% packet loss\r\nround-trip min/avg/max = 0.373/0.485/0.564 ms\r\n/alertmanager # ping 10.128.157.168\r\nPING 10.128.157.168 (10.128.157.168): 56 data bytes\r\n64 bytes from 10.128.157.168: seq=0 ttl=63 time=0.075 ms\r\n64 bytes from 10.128.157.168: seq=1 ttl=63 time=0.066 ms\r\n64 bytes from 10.128.157.168: seq=2 ttl=63 time=0.068 ms\r\n64 bytes from 10.128.157.168: seq=3 ttl=63 time=0.070 ms\r\n64 bytes from 10.128.157.168: seq=4 ttl=63 time=0.073 ms\r\n^C\r\n--- 10.128.157.168 ping statistics ---\r\n5 packets transmitted, 5 packets received, 0% packet loss\r\nround-trip min/avg/max = 0.066/0.070/0.075 ms\r\n/alertmanager #\r\n```\r\n```\r\n[root@ose-master ~]# calicoctl get profiles -o wide\r\nNAME                      TAGS\r\nk8s_ns.default            k8s_ns.default\r\nk8s_ns.kube-public        k8s_ns.kube-public\r\nk8s_ns.kube-system        k8s_ns.kube-system\r\nk8s_ns.logging            k8s_ns.logging\r\nk8s_ns.management-infra   k8s_ns.management-infra\r\nk8s_ns.openshift          k8s_ns.openshift\r\nk8s_ns.openshift-infra    k8s_ns.openshift-infra\r\nk8s_ns.prometheus         k8s_ns.prometheus\r\n\r\n[root@ose-master ~]# calicoctl get policy\r\nNAME\r\n\r\n[root@ose-master ~]#\r\n```"},"comment":{"url":"https://api.github.com/repos/projectcalico/calico/issues/comments/327556590","html_url":"https://github.com/projectcalico/calico/issues/1073#issuecomment-327556590","issue_url":"https://api.github.com/repos/projectcalico/calico/issues/1073","id":327556590,"user":{"login":"ozdanborne","id":3444362,"avatar_url":"https://avatars2.githubusercontent.com/u/3444362?v=4","gravatar_id":"","url":"https://api.github.com/users/ozdanborne","html_url":"https://github.com/ozdanborne","followers_url":"https://api.github.com/users/ozdanborne/followers","following_url":"https://api.github.com/users/ozdanborne/following{/other_user}","gists_url":"https://api.github.com/users/ozdanborne/gists{/gist_id}","starred_url":"https://api.github.com/users/ozdanborne/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/ozdanborne/subscriptions","organizations_url":"https://api.github.com/users/ozdanborne/orgs","repos_url":"https://api.github.com/users/ozdanborne/repos","events_url":"https://api.github.com/users/ozdanborne/events{/privacy}","received_events_url":"https://api.github.com/users/ozdanborne/received_events","type":"User","site_admin":false},"created_at":"2017-09-06T17:30:17Z","updated_at":"2017-09-06T17:30:17Z","author_association":"MEMBER","body":"@prasenforu are you deploying on public cloud? By default Calico for OpenShift enables IPIP encapsulation. You may need to either [allow IPIP traffic]() or [disable ipip mode](https://docs.projectcalico.org/v2.5/usage/configuration/ip-in-ip)"}}
{"actor":{"display_login":"ozdanborne"}}