Date: 2026-02-02
Restored ClusterIP/service routing by adjusting UFW forwarding policy and allowing routed traffic on the primary NIC and Calico interfaces. This resolved Calico token timeouts, brought the node to Ready, and allowed addon pods to schedule.
DEFAULT_FORWARD_POLICY="ACCEPT" in /etc/default/ufw.enp1s0, tunl0, and cali+ interfaces.Ready.Running.deny (routed) prevented service IP routing to 10.96.0.1:443, causing Calico init token creation timeouts.