We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent 328e12b commit 7386316Copy full SHA for 7386316
mgmtfn/k8splugin/driver.go
@@ -355,9 +355,12 @@ func getEPSpec(pInfo *cniapi.CNIPodAttr) (*epSpec, error) {
355
resp.Network = netw
356
resp.Group = epg
357
358
- // non-system pod with no EPG ? configure it in namespace
+ // Pods need to be in a group to allow policies to be applied after pod
359
+ // creation, if a group is not specified by the user, then place pod
360
+ // into a group shared across the pod's namespace, as contiv group is part
361
+ // of a network and network is in a k8s namespace
362
if pInfo.K8sNameSpace != "kube-system" && len(resp.Group) <= 0 {
- resp.Group = pInfo.K8sNameSpace
363
+ resp.Group = "ns-" + pInfo.K8sNameSpace + "-default"
364
}
365
366
resp.EndpointID = pInfo.InfraContainerID
0 commit comments