3919d666c1
The requirements for network policy feature are described here [1]. In order to enable it, appropriate configuration must be provided to the CNI plug in and Calico policy controller must be set up. Beside that corresponding extensions needed to be enabled in k8s API. Now to turn on the feature user can define `enable_network_policy` customization variable for Ansible. [1] http://kubernetes.io/docs/user-guide/networkpolicies/
24 lines
786 B
YAML
24 lines
786 B
YAML
---
|
|
- name: Kubernetes Apps | Lay Down KubeDNS Template
|
|
template: src={{item.file}} dest=/etc/kubernetes/{{item.file}}
|
|
with_items:
|
|
- {file: kubedns-rc.yml, type: rc}
|
|
- {file: kubedns-svc.yml, type: svc}
|
|
register: manifests
|
|
when: inventory_hostname == groups['kube-master'][0]
|
|
|
|
- name: Kubernetes Apps | Start Resources
|
|
kube:
|
|
name: kubedns
|
|
namespace: kube-system
|
|
kubectl: "{{bin_dir}}/kubectl"
|
|
resource: "{{item.item.type}}"
|
|
filename: /etc/kubernetes/{{item.item.file}}
|
|
state: "{{item.changed | ternary('latest','present') }}"
|
|
with_items: "{{ manifests.results }}"
|
|
when: inventory_hostname == groups['kube-master'][0]
|
|
|
|
|
|
- include: tasks/calico-policy-controller.yml
|
|
when: enable_network_policy is defined and enable_network_policy == True
|