fix(gke): network-policies deny all, don't patch non-existent ingress

place-labs · Nov 1, 2022 · b010f63 · b010f63
1 parent 0ee4ebc
commit b010f63
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/ansible/roles/placeos.networkpolicies/tasks/main.yml b/ansible/roles/placeos.networkpolicies/tasks/main.yml
@@ -34,6 +34,7 @@
           metadata:
             labels:
               networking/allow-external-access: "true"
+  when: gke is not defined
 
 - name: service for dispatch
   community.kubernetes.k8s:
@@ -78,7 +79,6 @@
     "{{ internal_ns }}"
   loop_control:
     loop_var: "ns"
-  when: gke is not defined
 
 - name: ingress access to upstream apps
   community.kubernetes.k8s: