fix NodePorts settings in Calico/node

a1418692409 · Nov 21, 2018 · 5d068d5 · 5d068d5
1 parent 2efb33a
commit 5d068d5
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 1 deletion.
diff --git a/roles/calico/tasks/main.yml b/roles/calico/tasks/main.yml
@@ -106,4 +106,4 @@
   until: pod_status.stdout == "Running"
   delegate_to: "{{ groups.deploy[0] }}"
   retries: 15
-  delay: 8
+  delay: 15
diff --git a/roles/calico/templates/calico.yaml.j2 b/roles/calico/templates/calico.yaml.j2
@@ -188,6 +188,10 @@ spec:
               value: "{{ FELIX_LOG_LVL }}"
             - name: FELIX_HEALTHENABLED
               value: "true"
+            # Set Kubernetes NodePorts: If services do use NodePorts outside Calico’s expected range,
+            # Calico will treat traffic to those ports as host traffic instead of pod traffic.
+            - name: FELIX_KUBENODEPORTRANGES
+              value: "{{ NODE_PORT_RANGE.split('-')[0] }}:{{ NODE_PORT_RANGE.split('-')[1] }}"
           securityContext:
             privileged: true
           resources: