You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: calico/readme.adoc
+3-29Lines changed: 3 additions & 29 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -28,7 +28,9 @@ View the cluster configuration using the following command:
28
28
This will show the following fragment under `.spec`:
29
29
30
30
networking:
31
-
calico: {}
31
+
calico: {
32
+
crossSubnet: true
33
+
}
32
34
33
35
Rest of the chapter goes with the presumption that you are using an existing cluster.
34
36
@@ -279,34 +281,6 @@ test 100% |*****************************************************
279
281
```
280
282
HTTP POST request succeeds.
281
283
282
-
=== Update calico to 2.4.1 in kops 1.7.x
283
-
kops 1.7.x comes with calico 1.2.1 out-of-the-box which does not support the latest network-policy updates for kubernetes 1.7.
284
-
In order to make this work, we need to update calico via:
285
-
286
-
```
287
-
$ kubectl apply -f templates/calico-update.yaml
288
-
configmap "calico-config" configured
289
-
clusterrole "calico" configured
290
-
serviceaccount "calico" configured
291
-
clusterrolebinding "calico" configured
292
-
daemonset "calico-node" configured
293
-
deployment "calico-policy-controller" configured
294
-
clusterrole "k8s-ec2-srcdst" configured
295
-
serviceaccount "k8s-ec2-srcdst" configured
296
-
clusterrolebinding "k8s-ec2-srcdst" configured
297
-
deployment "k8s-ec2-srcdst" created
298
-
```
299
-
300
-
After this, wait for the calico pods to be updated via:
301
-
```
302
-
$ kubectl rollout status ds/calico-node -n kube-system
303
-
Waiting for rollout to finish: 0 out of 3 new pods have been updated...
304
-
Waiting for rollout to finish: 1 out of 3 new pods have been updated...
305
-
Waiting for rollout to finish: 2 out of 3 new pods have been updated...
306
-
Waiting for rollout to finish: 2 of 3 updated pods are available...
307
-
daemon set "calico-node" successfully rolled out
308
-
```
309
-
310
284
=== Create default network policy
311
285
312
286
Let's now create a Network Policy, but we will not configure any rules which by default will deny all traffic within the namespace. Leaving the 2 shells open from the previous steps, run the following in another shell, say `shell 3`:
0 commit comments