richard
/
kubespray
mirror of https://github.com/kubernetes-sigs/kubespray.git
1
0
Fork 0
Code Issues Projects Releases Wiki Activity
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
6514 Commits
33 Branches
82 Tags
153 MiB
Tree: 57c3aa4560
Branches Tags
${ item.name }
Create branch ${ searchTerm }
from '57c3aa4560'
${ noResults }
kubespray/roles/kubernetes-apps/policy_controller/meta/main.yml

16 lines
462 B
Raw Normal View History

Move calico-policy-controller into separate role By default Calico CNI does not create any network access policies or profiles if 'policy' is enabled in CNI config. And without any policies/profiles network access to/from PODs is blocked. K8s related policies are created by calico-policy-controller in such case. So we need to start it as soon as possible, before any real workloads. This patch also fixes kube-api port in calico-policy-controller yaml template. Closes #1132
8 years ago
​
​
Normalize tags in all places to prepare for tag fixing in future (#1739)
7 years ago
​
​
Add calico 3.7.3 support (#4953) * Add calico 3.7.3 support * add calico_datastore variable to policy controller role * add missing clusterrole rules for calico policy controller * disable calico kube controller when kdd mode is used for versions < 3.6
5 years ago
Normalize tags in all places to prepare for tag fixing in future (#1739)
7 years ago
​
​
Move calico-policy-controller into separate role By default Calico CNI does not create any network access policies or profiles if 'policy' is enabled in CNI config. And without any policies/profiles network access to/from PODs is blocked. K8s related policies are created by calico-policy-controller in such case. So we need to start it as soon as possible, before any real workloads. This patch also fixes kube-api port in calico-policy-controller yaml template. Closes #1132
8 years ago
Normalize tags in all places to prepare for tag fixing in future (#1739)
7 years ago
​
Add calico 3.7.3 support (#4953) * Add calico 3.7.3 support * add calico_datastore variable to policy controller role * add missing clusterrole rules for calico policy controller * disable calico kube controller when kdd mode is used for versions < 3.6
5 years ago
Normalize tags in all places to prepare for tag fixing in future (#1739)
7 years ago
​
  1. ---
  2. dependencies:
  3. - role: policy_controller/calico
  4. when:
  5. - kube_network_plugin == 'calico'
  6. - enable_network_policy
  7. - calico_datastore != "kdd" or calico_policy_version is version('v3.6.0', '>=')
  8. tags:
  9. - policy-controller
  11. - role: policy_controller/calico
  12. when:
  13. - kube_network_plugin == 'canal'
  14. - calico_datastore != "kdd" or calico_policy_version is version('v3.6.0', '>=')
  15. tags:
  16. - policy-controller