<p>I'm trying to start FIWARE Orion in Kubernetes.
Here is the manifest:</p>

<pre><code>apiVersion: extensions/v1beta1
kind: Deployment
metadata:
  name: broker
spec:
  replicas: 1
  template:
    metadata:
      labels:
        name: broker
    spec:
      containers:
      - name: mongo
        image: waziup/mongodb:latest
        args: ["--nojournal"]
        ports:
        - containerPort: 27017

      - name: orion
        image: waziup/orion:latest
        ports:
        - containerPort: 1026
        args: ["-dbhost", "localhost:27017", "-logLevel", "INFO"]

      - name: cygnus
        image: waziup/cygnus:latest
        ports:
        - containerPort: 8081
        - containerPort: 5050

----
apiVersion: v1
kind: Service
metadata:
  name: broker
  labels:
    name: broker
spec:
  type: LoadBalancer
  ports:
  - port: 1026
    targetPort: 8026
  selector:
    name: broker
</code></pre>

<p>To be deployed with:</p>

<pre><code>kubectl apply -f manifest.yaml
</code></pre>

<p>The service is exposed:</p>

<pre><code>$ kubectl describe svc broker
Name:                   broker
Namespace:              default
Labels:                 name=broker
Selector:               name=broker
Type:                   LoadBalancer
IP:                     100.69.249.225
Port:                   &lt;unset&gt; 1026/TCP
NodePort:               &lt;unset&gt; 30458/TCP
Endpoints:              10.40.0.13:8026
Session Affinity:       None
No events.
</code></pre>

<p>However it is not responding:</p>

<pre><code>curl &lt;my public IP&gt;:30458/version
</code></pre>

<p>The command above hangs forever. If I run it directly on the master node, it works.
Any ideas?
It seems that the TCP connection is not established... Orion will not send back the ACK, or it will not be routed.</p>

<p>The problem was linked to Kubernetes networking.
It seems that adding and then deleting the "sock shop" does not remove the network "Deny Policy".
The solution is to run:</p>

<p><code>kubectl annotate namespace default net.beta.kubernetes.io/network-policy-</code></p>

<p>That will remove old policies.</p>
