c12s-kubespray/roles/kubernetes-apps/policy_controller/meta/main.yml

---
dependencies:
  - role: policy_controller/calico
    when:
      - kube_network_plugin == 'calico'
      - enable_network_policy
    tags:
      - policy-controller

  - role: policy_controller/calico
    when:
      - kube_network_plugin == 'canal'
    tags:
      - policy-controller
Move calico-policy-controller into separate role By default Calico CNI does not create any network access policies or profiles if 'policy' is enabled in CNI config. And without any policies/profiles network access to/from PODs is blocked. K8s related policies are created by calico-policy-controller in such case. So we need to start it as soon as possible, before any real workloads. This patch also fixes kube-api port in calico-policy-controller yaml template. Closes #1132 2017-03-13 15:04:31 +00:00			`---`
			`dependencies:`
			`- role: policy_controller/calico`
Normalize tags in all places to prepare for tag fixing in future (#1739) 2017-10-05 07:43:04 +00:00			`when:`
			`- kube_network_plugin == 'calico'`
			`- enable_network_policy`
			`tags:`
			`- policy-controller`

Move calico-policy-controller into separate role By default Calico CNI does not create any network access policies or profiles if 'policy' is enabled in CNI config. And without any policies/profiles network access to/from PODs is blocked. K8s related policies are created by calico-policy-controller in such case. So we need to start it as soon as possible, before any real workloads. This patch also fixes kube-api port in calico-policy-controller yaml template. Closes #1132 2017-03-13 15:04:31 +00:00			`- role: policy_controller/calico`
Normalize tags in all places to prepare for tag fixing in future (#1739) 2017-10-05 07:43:04 +00:00			`when:`
			`- kube_network_plugin == 'canal'`
			`tags:`
			`- policy-controller`