{"action":"created","issue":{"url":"https://api.github.com/repos/openshift/origin/issues/19540","repository_url":"https://api.github.com/repos/openshift/origin","labels_url":"https://api.github.com/repos/openshift/origin/issues/19540/labels{/name}","comments_url":"https://api.github.com/repos/openshift/origin/issues/19540/comments","events_url":"https://api.github.com/repos/openshift/origin/issues/19540/events","html_url":"https://github.com/openshift/origin/issues/19540","id":318413672,"node_id":"MDU6SXNzdWUzMTg0MTM2NzI=","number":19540,"title":"Enabling NetworkPolicy breaks internal networking","user":{"login":"Gh0s7","id":3979059,"node_id":"MDQ6VXNlcjM5NzkwNTk=","avatar_url":"https://avatars0.githubusercontent.com/u/3979059?v=4","gravatar_id":"","url":"https://api.github.com/users/Gh0s7","html_url":"https://github.com/Gh0s7","followers_url":"https://api.github.com/users/Gh0s7/followers","following_url":"https://api.github.com/users/Gh0s7/following{/other_user}","gists_url":"https://api.github.com/users/Gh0s7/gists{/gist_id}","starred_url":"https://api.github.com/users/Gh0s7/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/Gh0s7/subscriptions","organizations_url":"https://api.github.com/users/Gh0s7/orgs","repos_url":"https://api.github.com/users/Gh0s7/repos","events_url":"https://api.github.com/users/Gh0s7/events{/privacy}","received_events_url":"https://api.github.com/users/Gh0s7/received_events","type":"User","site_admin":false},"labels":[{"id":657292400,"node_id":"MDU6TGFiZWw2NTcyOTI0MDA=","url":"https://api.github.com/repos/openshift/origin/labels/sig/networking","name":"sig/networking","color":"f9d0c4","default":false}],"state":"open","locked":false,"assignee":{"login":"knobunc","id":10033853,"node_id":"MDQ6VXNlcjEwMDMzODUz","avatar_url":"https://avatars1.githubusercontent.com/u/10033853?v=4","gravatar_id":"","url":"https://api.github.com/users/knobunc","html_url":"https://github.com/knobunc","followers_url":"https://api.github.com/users/knobunc/followers","following_url":"https://api.github.com/users/knobunc/following{/other_user}","gists_url":"https://api.github.com/users/knobunc/gists{/gist_id}","starred_url":"https://api.github.com/users/knobunc/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/knobunc/subscriptions","organizations_url":"https://api.github.com/users/knobunc/orgs","repos_url":"https://api.github.com/users/knobunc/repos","events_url":"https://api.github.com/users/knobunc/events{/privacy}","received_events_url":"https://api.github.com/users/knobunc/received_events","type":"User","site_admin":false},"assignees":[{"login":"knobunc","id":10033853,"node_id":"MDQ6VXNlcjEwMDMzODUz","avatar_url":"https://avatars1.githubusercontent.com/u/10033853?v=4","gravatar_id":"","url":"https://api.github.com/users/knobunc","html_url":"https://github.com/knobunc","followers_url":"https://api.github.com/users/knobunc/followers","following_url":"https://api.github.com/users/knobunc/following{/other_user}","gists_url":"https://api.github.com/users/knobunc/gists{/gist_id}","starred_url":"https://api.github.com/users/knobunc/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/knobunc/subscriptions","organizations_url":"https://api.github.com/users/knobunc/orgs","repos_url":"https://api.github.com/users/knobunc/repos","events_url":"https://api.github.com/users/knobunc/events{/privacy}","received_events_url":"https://api.github.com/users/knobunc/received_events","type":"User","site_admin":false}],"milestone":null,"comments":1,"created_at":"2018-04-27T13:40:11Z","updated_at":"2018-07-30T01:47:12Z","closed_at":null,"author_association":"NONE","body":"<!--\r\nNote that this is the issue tracker for OpenShift Origin.\r\n\r\nOpenShift Installer issues should be reported at https://github.com/openshift/openshift-ansible/issues\r\nManagement Console issues are collected at https://github.com/openshift/origin-web-console/issues\r\nDocumentation issues are better reported at https://github.com/openshift/openshift-docs/issues\r\n-->\r\n\r\n(tried with both a pod's terminal and master node's bash)\r\n_before enabling NetworkPolicy_\r\n\r\nEach pod can ping any service and deploying any sample image from git works.\r\n\r\n_after enabling NetworkPolicy_\r\n\r\nPing doesn't work anymore, even between services from the same project.\r\nDeplyoing from git doesn't work either, as it fails to push into our private registry (which is in the default project). \r\nI can't even ping the router, meaning that services resolution won't work.\r\n\r\nTo get to this state, I followed the instructions [here](https://docs.openshift.com/container-platform/3.7/install_config/configuring_sdn.html#migrating-between-sdn-plugins), doing everything but step 3 as I'm not migrating to a third party plugin.\r\n\r\nRemoving NetworkPolicy and restarting my cluster makes everything work again.\r\n\r\nI'm assuming that NetworkPolicy uses an \"allow all\" rule by default when nothing is set, so I'm expecting it to keep on working after the install and before setting my custom rules.\r\n\r\n##### Version\r\n`oc version`\r\n> oc v3.7.0+7ed6862\r\nkubernetes v1.7.6+a08f5eeb62\r\nfeatures: Basic-Auth GSSAPI Kerberos SPNEGO\r\nServer xxx\r\nopenshift v3.7.0+7ed6862\r\nkubernetes v1.7.6+a08f5eeb62\r\n\r\n\r\n##### Steps To Reproduce\r\n1. Change the networkPluginName parameter on all masters and nodes in their configuration files.\r\n2. Restart the atomic-openshift-master-api and atomic-openshift-master-controller on masters and the atomic-openshift-node service on nodes.\r\n\r\n##### Current Result\r\nServices can't be reached anymore, even within the same project.\r\nAny build will fail as the registry, which is a service too, can't be reached by the builders.\r\n\r\n##### Expected Result\r\nAnything should work as it was before installing the NetworkPolicy plugin, until I set up some custom rules.\r\n\r\n##### Additional Information\r\n[try to run `$ oc adm diagnostics` (or `oadm diagnostics`) command if possible]\r\n[if you are reporting issue related to builds, provide build logs with `BUILD_LOGLEVEL=5`]\r\n[consider attaching output of the `$ oc get all -o json -n <namespace>` command to the issue]\r\n[visit https://docs.openshift.org/latest/welcome/index.html]\r\n"},"comment":{"url":"https://api.github.com/repos/openshift/origin/issues/comments/408724447","html_url":"https://github.com/openshift/origin/issues/19540#issuecomment-408724447","issue_url":"https://api.github.com/repos/openshift/origin/issues/19540","id":408724447,"node_id":"MDEyOklzc3VlQ29tbWVudDQwODcyNDQ0Nw==","user":{"login":"openshift-bot","id":1779249,"node_id":"MDQ6VXNlcjE3NzkyNDk=","avatar_url":"https://avatars2.githubusercontent.com/u/1779249?v=4","gravatar_id":"","url":"https://api.github.com/users/openshift-bot","html_url":"https://github.com/openshift-bot","followers_url":"https://api.github.com/users/openshift-bot/followers","following_url":"https://api.github.com/users/openshift-bot/following{/other_user}","gists_url":"https://api.github.com/users/openshift-bot/gists{/gist_id}","starred_url":"https://api.github.com/users/openshift-bot/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/openshift-bot/subscriptions","organizations_url":"https://api.github.com/users/openshift-bot/orgs","repos_url":"https://api.github.com/users/openshift-bot/repos","events_url":"https://api.github.com/users/openshift-bot/events{/privacy}","received_events_url":"https://api.github.com/users/openshift-bot/received_events","type":"User","site_admin":false},"created_at":"2018-07-30T01:47:12Z","updated_at":"2018-07-30T01:47:12Z","author_association":"MEMBER","body":"Issues go stale after 90d of inactivity.\n\nMark the issue as fresh by commenting `/remove-lifecycle stale`.\nStale issues rot after an additional 30d of inactivity and eventually close.\nExclude this issue from closing by commenting `/lifecycle frozen`.\n\nIf this issue is safe to close now please do so with `/close`.\n\n/lifecycle stale"}}
{"actor":{"display_login":"openshift-bot"}}