richard/kubespray - kubespray - Gitea: RS Source Repository

Author	SHA1	Message	Date
jwfang	0b3badf3d8	revert calico-related changes	7 years ago
jwfang	2cda982345	binding group system:nodes to clusterrole calico-role	7 years ago
jwfang	c9734b6d7b	run calico-policy-controller with proper sa/role/rolebinding	7 years ago
Aleksandr Didenko	3a39904011	Move calico-policy-controller into separate role By default Calico CNI does not create any network access policies or profiles if 'policy' is enabled in CNI config. And without any policies/profiles network access to/from PODs is blocked. K8s related policies are created by calico-policy-controller in such case. So we need to start it as soon as possible, before any real workloads. This patch also fixes kube-api port in calico-policy-controller yaml template. Closes #1132	7 years ago