Commit graph

2 commits

Author SHA1 Message Date
Boris Zanetti
eb8fc0fe83 first try of root RBAC 2017-04-24 14:24:23 +02:00
Aleksandr Didenko
3a39904011 Move calico-policy-controller into separate role
By default Calico CNI does not create any network access policies
or profiles if 'policy' is enabled in CNI config. And without any
policies/profiles network access to/from PODs is blocked.

K8s related policies are created by calico-policy-controller in
such case. So we need to start it as soon as possible, before any
real workloads.

This patch also fixes kube-api port in calico-policy-controller
yaml template.

Closes #1132
2017-03-17 11:21:52 +01:00
Renamed from roles/kubernetes-apps/ansible/templates/calico-policy-controller.yml.j2 (Browse further)