richard/kubespray - kubespray - Gitea: RS Source Repository

Author	SHA1	Message	Date
Matthew Mosesohn	03bcfa7ff5	Stop templating kube-system namespace and creating it (#2545 ) Kubernetes makes this namespace automatically, so there is no need for kubespray to manage it.	6 years ago
Kevin Lefevre	9368dbe0e7	update calico to 2.6.2 (#1874 ) Move RS to deployment so no need to take care of the revision history limits : - Delete the old RS - Make Calico manifest a deployment - move deployments to apps/v1beta2 API since Kubernetes 1.8	7 years ago
Matthew Mosesohn	a56738324a	Move set_facts to kubespray-defaults defaults These facts can be generated in defaults with a performance boost. Also cleaned up duplicate etcd var names.	7 years ago
Matthew Mosesohn	a3e6896a43	Add RBAC support for canal (#1604 ) Refactored how rbac_enabled is set Added RBAC to ubuntu-canal-ha CI job Added rbac for calico policy controller	7 years ago
Matthew Mosesohn	6bb3463e7c	Enable scheduling of critical pods and network plugins on master Added toleration to DNS, netchecker, fluentd, canal, and calico policy. Also small fixes to make yamllint pass.	7 years ago
jwfang	0b3badf3d8	revert calico-related changes	7 years ago
jwfang	c9734b6d7b	run calico-policy-controller with proper sa/role/rolebinding	7 years ago
Aleksandr Didenko	3a39904011	Move calico-policy-controller into separate role By default Calico CNI does not create any network access policies or profiles if 'policy' is enabled in CNI config. And without any policies/profiles network access to/from PODs is blocked. K8s related policies are created by calico-policy-controller in such case. So we need to start it as soon as possible, before any real workloads. This patch also fixes kube-api port in calico-policy-controller yaml template. Closes #1132	7 years ago