kubespray

1598 Commits

38 Branches

82 Tags

159 MiB

Tree: e1faeb0f6c

Commit Graph

Author	SHA1	Message	Date
Aleksandr Didenko	3a39904011	Move calico-policy-controller into separate role By default Calico CNI does not create any network access policies or profiles if 'policy' is enabled in CNI config. And without any policies/profiles network access to/from PODs is blocked. K8s related policies are created by calico-policy-controller in such case. So we need to start it as soon as possible, before any real workloads. This patch also fixes kube-api port in calico-policy-controller yaml template. Closes #1132	8 years ago

Author

SHA1

Message

Date

Aleksandr Didenko

3a39904011

Move calico-policy-controller into separate role

By default Calico CNI does not create any network access policies
or profiles if 'policy' is enabled in CNI config. And without any
policies/profiles network access to/from PODs is blocked.

K8s related policies are created by calico-policy-controller in
such case. So we need to start it as soon as possible, before any
real workloads.

This patch also fixes kube-api port in calico-policy-controller
yaml template.

Closes #1132

8 years ago

1 Commits (e1faeb0f6c488e67b0fff2ee574bf4cc58160d7b)