mirror of
https://github.com/kubernetes-sigs/kubespray.git
synced 2026-01-11 18:09:59 -03:30
By default Calico blocks traffic from endpoints to the host itself by using an iptables DROP action. It could lead to a situation when service has one alive endpoint, but pods which run on the same node can not access it. Changed the action to RETURN.