c12s-kubespray/roles/kubernetes-apps/policy_controller/meta/main.yml

---
dependencies:
  - role: policy_controller/calico
    when:
      - kube_network_plugin in ['calico', 'canal']
      - enable_network_policy
    tags:
      - policy-controller
Move calico-policy-controller into separate role By default Calico CNI does not create any network access policies or profiles if 'policy' is enabled in CNI config. And without any policies/profiles network access to/from PODs is blocked. K8s related policies are created by calico-policy-controller in such case. So we need to start it as soon as possible, before any real workloads. This patch also fixes kube-api port in calico-policy-controller yaml template. Closes #1132 2017-03-13 15:04:31 +00:00			`---`
			`dependencies:`
			`- role: policy_controller/calico`
Normalize tags in all places to prepare for tag fixing in future (#1739) 2017-10-05 07:43:04 +00:00			`when:`
Fix: install calico-kube-controller on kdd (#9358) * Fix: install policy controller on kdd too * Remove the calico_policy_version condition altogether * Install policy controller both on canal and calico under same condition 2022-10-11 02:45:01 +00:00			`- kube_network_plugin in ['calico', 'canal']`
Normalize tags in all places to prepare for tag fixing in future (#1739) 2017-10-05 07:43:04 +00:00			`- enable_network_policy`
			`tags:`
			`- policy-controller`