I have configured the 3 EA master and 3EA worker nodes.
When I deploy both the application of nginx on the worker and master , The nginx deployment on the worker node is pending status but The nginx deployment on the master node is deployed well.
The calico-node messages is as follow:
kubectl logs calico-node-xcjkz -n kube-system on worker node
Hit error connecting to datastore - retry error=Get “https://10.152.185.1:443/api/v1/nodes/foo”: dial tcp 10.152.185.1:443: connect: network is unreachable
Chain KUBE-SERVICES (2 references)
target prot opt source destination
REJECT tcp – anywhere 10.152.185.11 /* default/webserver:http has no endpoints / tcp dpt:http reject-with icmp-port-unreachable
REJECT tcp – anywhere 10.152.185.124 / istio-system/istiod:https-dns has no endpoints / tcp dpt:15012 reject-with icmp-port-unreachable
REJECT tcp – anywhere 10.152.185.52 / istio-system/istio-egressgateway:http2 has no endpoints / tcp dpt:http reject-with icmp-port-unreachable
REJECT tcp – anywhere 10.152.185.212 / monitoring/blackbox-exporter:https has no endpoints / tcp dpt:9115 reject-with icmp-port-unreachable
REJECT tcp – anywhere 10.152.185.212 / monitoring/blackbox-exporter:probe has no endpoints / tcp dpt:19115 reject-with icmp-port-unreachable
REJECT tcp – anywhere 10.152.185.124 / istio-system/istiod:grpc-xds has no endpoints / tcp dpt:15010 reject-with icmp-port-unreachable
REJECT tcp – anywhere 10.152.185.124 / istio-system/istiod:http-monitoring has no endpoints / tcp dpt:15014 reject-with icmp-port-unreachable
REJECT tcp – anywhere 10.152.185.142 / istio-system/istio-ingressgateway:status-port has no endpoints / tcp dpt:15021 reject-with icmp-port-unreachable
REJECT tcp – anywhere 10.152.185.142 / istio-system/istio-ingressgateway:http2 has no endpoints / tcp dpt:http reject-with icmp-port-unreachable
REJECT tcp – anywhere 10.152.185.142 / istio-system/istio-ingressgateway:https has no endpoints / tcp dpt:https reject-with icmp-port-unreachable
REJECT tcp – anywhere 10.152.185.118 / my-nginx/webserver:http has no endpoints / tcp dpt:http reject-with icmp-port-unreachable
REJECT tcp – anywhere 10.152.185.52 / istio-system/istio-egressgateway:https has no endpoints / tcp dpt:https reject-with icmp-port-unreachable
REJECT tcp – anywhere 10.152.185.124 / istio-system/istiod:https-webhook has no endpoints */ tcp dpt:https reject-with icmp-port-unreachable