c12s-kubespray/roles/kubernetes-apps/ansible/tasks/calico-policy-controller.yml

- name: Write calico-policy-controller yaml
  template: src=calico-policy-controller.yml.j2 dest=/etc/kubernetes/calico-policy-controller.yml
  when: inventory_hostname == groups['kube-master'][0]


- name: Start of Calico policy controller
  kube:
    name: "calico-policy-controller"
    kubectl: "{{bin_dir}}/kubectl"
    filename: "/etc/kubernetes/calico-policy-controller.yml"
    namespace: "kube-system"
    resource: "rs"
  when: inventory_hostname == groups['kube-master'][0]
Add possibility to enable network policy via Calico network controller The requirements for network policy feature are described here [1]. In order to enable it, appropriate configuration must be provided to the CNI plug in and Calico policy controller must be set up. Beside that corresponding extensions needed to be enabled in k8s API. Now to turn on the feature user can define `enable_network_policy` customization variable for Ansible. [1] http://kubernetes.io/docs/user-guide/networkpolicies/ 2016-10-10 14:09:50 +00:00			`- name: Write calico-policy-controller yaml`
			`template: src=calico-policy-controller.yml.j2 dest=/etc/kubernetes/calico-policy-controller.yml`
			`when: inventory_hostname == groups['kube-master'][0]`


			`- name: Start of Calico policy controller`
			`kube:`
Fix idempotency of calico-policy-controller rs We need to specify kube resource type and name in order to avoid playbook errors related to k8s resource duplication. 2016-11-08 11:20:55 +00:00			`name: "calico-policy-controller"`
Add possibility to enable network policy via Calico network controller The requirements for network policy feature are described here [1]. In order to enable it, appropriate configuration must be provided to the CNI plug in and Calico policy controller must be set up. Beside that corresponding extensions needed to be enabled in k8s API. Now to turn on the feature user can define `enable_network_policy` customization variable for Ansible. [1] http://kubernetes.io/docs/user-guide/networkpolicies/ 2016-10-10 14:09:50 +00:00			`kubectl: "{{bin_dir}}/kubectl"`
Fix idempotency of calico-policy-controller rs We need to specify kube resource type and name in order to avoid playbook errors related to k8s resource duplication. 2016-11-08 11:20:55 +00:00			`filename: "/etc/kubernetes/calico-policy-controller.yml"`
			`namespace: "kube-system"`
			`resource: "rs"`
Add possibility to enable network policy via Calico network controller The requirements for network policy feature are described here [1]. In order to enable it, appropriate configuration must be provided to the CNI plug in and Calico policy controller must be set up. Beside that corresponding extensions needed to be enabled in k8s API. Now to turn on the feature user can define `enable_network_policy` customization variable for Ansible. [1] http://kubernetes.io/docs/user-guide/networkpolicies/ 2016-10-10 14:09:50 +00:00			`when: inventory_hostname == groups['kube-master'][0]`