History

Stefan Reimer 3689f9aaeb First version of calico as helm chart		2020-07-06 12:32:24 +01:00
..
aws	New Calico AWS config	2020-07-03 15:33:36 +01:00
canal.yaml	Restore workaround for kustomize bug	2020-07-02 16:51:51 +01:00
kustomization.yaml	New consitent naming scheme for umbrella charts/artifacts	2020-05-06 18:20:53 +01:00
logging.yaml	New consitent naming scheme for umbrella charts/artifacts	2020-05-06 18:20:53 +01:00
prometheus.yaml	New consitent naming scheme for umbrella charts/artifacts	2020-05-06 18:20:53 +01:00
README.md	First version of calico as helm chart	2020-07-06 12:32:24 +01:00
remove-namespace.patch	Update patch for 3.15	2020-07-02 16:57:17 +01:00

Calico CNI

Current top-level still contains the deprecated Canal implementation. Removed once new AWS config is tested and rolled out to all existing clusters.

AWS

Calico is setup based on the upstream calico-vxlan config from
https://docs.projectcalico.org/v3.15/manifests/calico-vxlan.yaml

Changes:

VxLAN set to Always to not expose cluster communication to VPC

-> EC2 SecurityGroups still apply and only need to allow UDP 4789 for VxLAN traffic
-> No need to disable source/destination check on EC2 instances
-> Prepared for optional WireGuard encryption for all inter node traffic
MTU set to 8941
Removed migration init-container
Disable BGB and BIRD health checks
Set FELIX log level to warning
Enable Prometheus metrics