richard
/
kubespray
mirror of https://github.com/kubernetes-sigs/kubespray.git
1
0
Fork 0
Code Issues Projects Releases Wiki Activity
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
889 Commits
33 Branches
82 Tags
153 MiB
Tree: c58bd33af7
Branches Tags
${ item.name }
Create branch ${ searchTerm }
from 'c58bd33af7'
${ noResults }
kubespray/roles/kubernetes-apps/ansible/tasks/calico-policy-controller.yml

13 lines
485 B
Raw Normal View History

Add possibility to enable network policy via Calico network controller The requirements for network policy feature are described here [1]. In order to enable it, appropriate configuration must be provided to the CNI plug in and Calico policy controller must be set up. Beside that corresponding extensions needed to be enabled in k8s API. Now to turn on the feature user can define `enable_network_policy` customization variable for Ansible. [1] http://kubernetes.io/docs/user-guide/networkpolicies/
8 years ago
​
​
​
​
​
​
Fix idempotency of calico-policy-controller rs We need to specify kube resource type and name in order to avoid playbook errors related to k8s resource duplication.
8 years ago
Add possibility to enable network policy via Calico network controller The requirements for network policy feature are described here [1]. In order to enable it, appropriate configuration must be provided to the CNI plug in and Calico policy controller must be set up. Beside that corresponding extensions needed to be enabled in k8s API. Now to turn on the feature user can define `enable_network_policy` customization variable for Ansible. [1] http://kubernetes.io/docs/user-guide/networkpolicies/
8 years ago
Fix idempotency of calico-policy-controller rs We need to specify kube resource type and name in order to avoid playbook errors related to k8s resource duplication.
8 years ago
​
​
Add possibility to enable network policy via Calico network controller The requirements for network policy feature are described here [1]. In order to enable it, appropriate configuration must be provided to the CNI plug in and Calico policy controller must be set up. Beside that corresponding extensions needed to be enabled in k8s API. Now to turn on the feature user can define `enable_network_policy` customization variable for Ansible. [1] http://kubernetes.io/docs/user-guide/networkpolicies/
8 years ago
  1. - name: Write calico-policy-controller yaml
  2. template: src=calico-policy-controller.yml.j2 dest=/etc/kubernetes/calico-policy-controller.yml
  3. when: inventory_hostname == groups['kube-master'][0]
  6. - name: Start of Calico policy controller
  7. kube:
  8. name: "calico-policy-controller"
  9. kubectl: "{{bin_dir}}/kubectl"
  10. filename: "/etc/kubernetes/calico-policy-controller.yml"
  11. namespace: "kube-system"
  12. resource: "rs"
  13. when: inventory_hostname == groups['kube-master'][0]