kubespray/roles/kubernetes-apps/policy_controller/meta/main.yml

---
dependencies:
  - role: policy_controller/calico
    when:
      - kube_network_plugin in ['calico']
      - enable_network_policy
    tags:
      - policy-controller
Move calico-policy-controller into separate role By default Calico CNI does not create any network access policies or profiles if 'policy' is enabled in CNI config. And without any policies/profiles network access to/from PODs is blocked. K8s related policies are created by calico-policy-controller in such case. So we need to start it as soon as possible, before any real workloads. This patch also fixes kube-api port in calico-policy-controller yaml template. Closes #1132 2017-03-13 23:04:31 +08:00			`---`
			`dependencies:`
			`- role: policy_controller/calico`
Normalize tags in all places to prepare for tag fixing in future (#1739) 2017-10-05 15:43:04 +08:00			`when:`
Drop canal network_plugin (#10100) According to the canal github[1] the repo is not maintained over 5 years. In addition, the README says ``` Originally, we thought we might more deeply integrate the two projects (possibly even going as far as a rebranding!). However, over time it became clear that that wasn't really necessary to fulfil our goal of making them work well together. Ultimately, we decided to focus on adding features to both projects rather than doing work just to combine them. ``` So it is difficult to support canal by Kubespray at this situation. [1]: https://github.com/projectcalico/canal 2023-05-18 18:40:33 +08:00			`- kube_network_plugin in ['calico']`
Normalize tags in all places to prepare for tag fixing in future (#1739) 2017-10-05 15:43:04 +08:00			`- enable_network_policy`
			`tags:`
			`- policy-controller`