mirror of
https://github.com/kubernetes-sigs/kubespray.git
synced 2026-03-01 08:48:50 -03:30
By default Calico blocks traffic from endpoints to the host itself by using an iptables DROP action. It could lead to a situation when service has one alive endpoint, but pods which run on the same node can not access it. Changed the action to RETURN.