External-Mirrors/kubespray
2
0
Fork 0
mirror of https://github.com/kubernetes-sigs/kubespray.git synced 2026-05-07 17:37:39 -02:30
Code Issues Packages Projects Releases Wiki Activity

Support configuring the Calico iptables insert mode (#5473)

Browse Source 
* Support configuring the insert mode

Defaults to the upstream default https://docs.projectcalico.org/v3.9/reference/felix/configuration

so nothing should change for existing deployments.

This allows coexistence with other firewall management technologies.

* Add a note to the sample config
This commit is contained in:
hfinucane
2020-03-14 06:36:35 -07:00
committed by GitHub
parent 168241df4f
commit 158d998ec4
3 changed files with 5 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
roles/network_plugin/calico/defaults/main.yml
View File

@@ -31,6 +31,7 @@ calicoctl_memory_limit: 170M
calicoctl_cpu_limit: 100m
calicoctl_memory_requests: 32M
calicoctl_cpu_requests: 250m
calico_felix_chaininsertmode: Insert
# Enable Prometheus Metrics endpoint for felix
calico_felix_prometheusmetricsenabled: false