ZeroDownTime/KubeZero
3
0
Fork 0
Code Issues 1 Pull Requests 29 Packages Projects Releases Wiki Activity
19d915cb92
KubeZero/charts/kubezero-calico
History
Stefan Reimer c556df65ff Updated helm-docs, fluentd SSL handled by Istio, ES&Istio tuning
2020-10-05 03:50:23 -07:00
..
crds Calico version bump to 3.16.1 2020-09-09 14:17:02 +01:00
templates Calico version bump to 3.16.1 2020-09-09 14:17:02 +01:00
calico-v3.15.patch First version of calico as helm chart 2020-07-06 12:32:24 +01:00
Chart.yaml Calico version bump to 3.16.1 2020-09-09 14:17:02 +01:00
README.md Updated helm-docs, fluentd SSL handled by Istio, ES&Istio tuning 2020-10-05 03:50:23 -07:00
README.md.gotmpl Updated helm-docs, fluentd SSL handled by Istio, ES&Istio tuning 2020-10-05 03:50:23 -07:00
test-pod.yaml Calico cleanup, add efs-csi 2020-07-29 14:46:55 +01:00
values.yaml Calico version bump to 3.16.1 2020-09-09 14:17:02 +01:00

README.md

kubezero-calico

Version: 0.2.0 Type: application AppVersion: v3.16.1

KubeZero Umbrella Chart for Calico

Homepage: https://kubezero.com

Maintainers

Name Email Url
Quarky9

Requirements

Kubernetes: >= 1.16.0

Repository Name Version
https://zero-down-time.github.io/kubezero/ kubezero-lib >= 0.1.3

KubeZero default configuration

AWS

The setup is based on the upstream calico-vxlan config from https://docs.projectcalico.org/v3.15/manifests/calico-vxlan.yaml

Changes

  • VxLAN set to Always to not expose cluster communication to VPC

    -> EC2 SecurityGroups still apply and only need to allow UDP 4789 for VxLAN traffic -> No need to disable source/destination check on EC2 instances -> Prepared for optional WireGuard encryption for all inter node traffic

  • MTU set to 8941

  • Removed migration init-container

  • Disable BGB and BIRD health checks

  • Set FELIX log level to warning

Values

Key Type Default Description
image.tag string ""
installCRDs bool false
loglevel string "Warning"
mtu int 8941
network string "vxlan"
prometheus bool false

Resources