ZeroDownTime/KubeZero
3
0
Fork 0
Code Issues 1 Pull Requests 25 Packages Projects Releases Wiki Activity
967f27baac
KubeZero/artifacts/kubezero-calico
History
Stefan Reimer 967f27baac New calico config without flannel
2020-07-05 23:42:23 +01:00
..
aws New Calico AWS config 2020-07-03 15:33:36 +01:00
canal.yaml Restore workaround for kustomize bug 2020-07-02 16:51:51 +01:00
kustomization.yaml New consitent naming scheme for umbrella charts/artifacts 2020-05-06 18:20:53 +01:00
logging.yaml New consitent naming scheme for umbrella charts/artifacts 2020-05-06 18:20:53 +01:00
prometheus.yaml New consitent naming scheme for umbrella charts/artifacts 2020-05-06 18:20:53 +01:00
README.md New calico config without flannel 2020-07-05 23:42:23 +01:00
remove-namespace.patch Update patch for 3.15 2020-07-02 16:57:17 +01:00

README.md

Calico CNI

Current top-level still contains the deprecated Canal implementation. Removed once new AWS config is tested and rolled out to all existing clusters.

AWS

Calico is setup based on the upstream calico-vxlan config from
https://docs.projectcalico.org/v3.15/manifests/calico-vxlan.yaml

Changes:

  • VxLAN set to Always to not expose cluster communication to VPC

    -> EC2 SecurityGroups still apply and only need to allow UDP 4789 for VxLAN traffic
    -> No need to disable source/destination check on EC2 instances
    -> Prepared for optional WireGuard encryption for all inter node traffic

  • MTU set to 8941

  • Removed migration init-container

  • Disable BGB and BIRD health checks

  • Set FELIX log level to warning

  • Enable Prometheus metrics