richard
/
kubespray
mirror of https://github.com/kubernetes-sigs/kubespray.git
1
0
Fork 0
Code Issues Projects Releases Wiki Activity
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
7801 Commits
33 Branches
82 Tags
153 MiB
Tree: 533dbc62fe
Branches Tags
${ item.name }
Create branch ${ searchTerm }
from '533dbc62fe'
${ noResults }
kubespray/roles/kubernetes-apps/policy_controller/calico/defaults/main.yml

11 lines
365 B
Raw Normal View History

Adding yamllinter to ci steps (#1556) * Adding yaml linter to ci check * Minor linting fixes from yamllint * Changing CI to install python pkgs from requirements.txt - adding in a secondary requirements.txt for tests - moving yamllint to tests requirements
7 years ago
Move calico-policy-controller into separate role By default Calico CNI does not create any network access policies or profiles if 'policy' is enabled in CNI config. And without any policies/profiles network access to/from PODs is blocked. K8s related policies are created by calico-policy-controller in such case. So we need to start it as soon as possible, before any real workloads. This patch also fixes kube-api port in calico-policy-controller yaml template. Closes #1132
8 years ago
Increase cpu limit to prevent throttling (#8076)
3 years ago
Move calico-policy-controller into separate role By default Calico CNI does not create any network access policies or profiles if 'policy' is enabled in CNI config. And without any policies/profiles network access to/from PODs is blocked. K8s related policies are created by calico-policy-controller in such case. So we need to start it as soon as possible, before any real workloads. This patch also fixes kube-api port in calico-policy-controller yaml template. Closes #1132
8 years ago
​
​
Add nodeSelctor for other services and node labels before CNI setup (#7613)
3 years ago
Make calico-kube-controllers log level configurable (#11335)
7 months ago
Move calico-policy-controller into separate role By default Calico CNI does not create any network access policies or profiles if 'policy' is enabled in CNI config. And without any policies/profiles network access to/from PODs is blocked. K8s related policies are created by calico-policy-controller in such case. So we need to start it as soon as possible, before any real workloads. This patch also fixes kube-api port in calico-policy-controller yaml template. Closes #1132
8 years ago
​
​
  1. ---
  2. # Limits for calico apps
  3. calico_policy_controller_cpu_limit: 1000m
  4. calico_policy_controller_memory_limit: 256M
  5. calico_policy_controller_cpu_requests: 30m
  6. calico_policy_controller_memory_requests: 64M
  7. calico_policy_controller_deployment_nodeselector: "kubernetes.io/os: linux"
  8. calico_policy_controller_log_level: info
  10. # SSL
  11. calico_cert_dir: "/etc/calico/certs"