kubespray

2457 Commits

29 Branches

81 Tags

149 MiB

Tree: b455a1bf76

Commit Graph

Author	SHA1	Message	Date
Matthew Mosesohn	a3e6896a43	Add RBAC support for canal (#1604 ) Refactored how rbac_enabled is set Added RBAC to ubuntu-canal-ha CI job Added rbac for calico policy controller	7 years ago
Brad Beam	8b151d12b9	Adding yamllinter to ci steps (#1556 ) * Adding yaml linter to ci check * Minor linting fixes from yamllint * Changing CI to install python pkgs from requirements.txt - adding in a secondary requirements.txt for tests - moving yamllint to tests requirements	7 years ago
Aleksandr Didenko	3a39904011	Move calico-policy-controller into separate role By default Calico CNI does not create any network access policies or profiles if 'policy' is enabled in CNI config. And without any policies/profiles network access to/from PODs is blocked. K8s related policies are created by calico-policy-controller in such case. So we need to start it as soon as possible, before any real workloads. This patch also fixes kube-api port in calico-policy-controller yaml template. Closes #1132	7 years ago

Author

SHA1

Message

Date

Matthew Mosesohn

a3e6896a43

Add RBAC support for canal (#1604 )

Refactored how rbac_enabled is set
Added RBAC to ubuntu-canal-ha CI job
Added rbac for calico policy controller

7 years ago

Brad Beam

8b151d12b9

Adding yamllinter to ci steps (#1556 )

* Adding yaml linter to ci check

* Minor linting fixes from yamllint

* Changing CI to install python pkgs from requirements.txt

- adding in a secondary requirements.txt for tests
- moving yamllint to tests requirements

7 years ago

Aleksandr Didenko

3a39904011

Move calico-policy-controller into separate role

By default Calico CNI does not create any network access policies
or profiles if 'policy' is enabled in CNI config. And without any
policies/profiles network access to/from PODs is blocked.

K8s related policies are created by calico-policy-controller in
such case. So we need to start it as soon as possible, before any
real workloads.

This patch also fixes kube-api port in calico-policy-controller
yaml template.

Closes #1132

7 years ago

3 Commits (b455a1bf7663cbd471eb9643093db8633acb2bc5)