ZeroDownTime/KubeZero
3
0
Fork 0
Code Issues 1 Pull Requests 21 Packages Projects Releases Wiki Activity
a570431940
KubeZero/charts/kubezero-calico
History
Stefan Reimer 35b1570d18 Update of various components, new aroless bootstrap working
2020-11-21 04:24:57 -08:00
..
crds Update of various components, new aroless bootstrap working 2020-11-21 04:24:57 -08:00
templates Update of various components, new aroless bootstrap working 2020-11-21 04:24:57 -08:00
calico-v3.16.5.patch Update of various components, new aroless bootstrap working 2020-11-21 04:24:57 -08:00
Chart.yaml Update of various components, new aroless bootstrap working 2020-11-21 04:24:57 -08:00
README.md Update of various components, new aroless bootstrap working 2020-11-21 04:24:57 -08:00
README.md.gotmpl Updated helm-docs, fluentd SSL handled by Istio, ES&Istio tuning 2020-10-05 03:50:23 -07:00
test-pod.yaml Calico cleanup, add efs-csi 2020-07-29 14:46:55 +01:00
values.yaml Update of various components, new aroless bootstrap working 2020-11-21 04:24:57 -08:00

README.md

kubezero-calico

Version: 0.2.1 Type: application AppVersion: v3.16.5

KubeZero Umbrella Chart for Calico

Homepage: https://kubezero.com

Maintainers

Name Email Url
Quarky9

Requirements

Kubernetes: >= 1.16.0

Repository Name Version
https://zero-down-time.github.io/kubezero/ kubezero-lib >= 0.1.3

KubeZero default configuration

AWS

The setup is based on the upstream calico-vxlan config from https://docs.projectcalico.org/v3.15/manifests/calico-vxlan.yaml

Changes

  • VxLAN set to Always to not expose cluster communication to VPC

    -> EC2 SecurityGroups still apply and only need to allow UDP 4789 for VxLAN traffic -> No need to disable source/destination check on EC2 instances -> Prepared for optional WireGuard encryption for all inter node traffic

  • MTU set to 8941

  • Removed migration init-container

  • Disable BGB and BIRD health checks

  • Set FELIX log level to warning

Values

Key Type Default Description
image.tag string ""
loglevel string "Warning"
mtu int 8941
network string "vxlan"
prometheus bool false

Resources