Questions tagged [calico]

Project Calico is an open-source networking and security solution for Kubernetes. Use this tag to mark questions related to the project.

Project Calico

Project Calico is an open source networking and network security solution for containers, virtual machines, and native host-based workloads. Calico supports a broad range of platforms including Kubernetes, OpenShift, Docker EE, OpenStack, and bare metal services.

207 questions
0
votes
0 answers

How to fix my issue of not being able to use kubectl command

I am trying to kubectl -f apply a calico plugin, but I keep getting an error: "The connection to the server localhost:8080 was refused - did you specify the right host or port? how do i fix this issue. i tried the calico plugin command for cluster…
0
votes
1 answer

Calico Error: Get "https://10.96.0.1:443/apis/crd.projectcalico.org/v1/clusterinformations/default": dial tcp 10.96.0.1:443: i/o timeout

deploy list: k8s-controller-pannel: 10.0.0.12 k8s-node-1(vm-0-3-centos): 10.0.0.3 k8s-node-2(vm-0-5-centos): 10.0.0.5 version: k8s: 1.27.3 calico: 3.26.1 When I deploy calico for k8s cluster,the pod calico-kube-controllers-674fc58b64-zv57j's…
0
votes
1 answer

Why is my networkpolicy not being applied on a minikube cluster with calico enabled?

Im using Calico on minikube by following the instructions here: https://docs.tigera.io/calico/latest/getting-started/kubernetes/minikube I have followed the verification process and confirm I am seeing what is expected. I have a nginx deployment…
0
votes
0 answers

Can not install Calico using kubeadm, says connection to server xx:6443 was refused?

Im trying to install calico using kubeadm with the following command kubectl apply -f https://docs.projectcalico.org/v3.9/manifests/calico.yaml but it's showing the following error The connection to the server 10.x.x.47:6443 was refused - did you…
0
votes
0 answers

Calico felix/vxlan_mgr.go 645: Failed to get VXLAN tunnel device, assuming it isn't present error=Link not found ipVersion=0x4

All time i see this error in Kibana: 2023-07-01 10:21:08.415 [INFO][71] felix/vxlan_mgr.go 645: Failed to get VXLAN tunnel device, assuming it isn't present error=Link not found ipVersion=0x4 How to fix the error in microk8s? OS: ubuntu server…
s.w.a.t
  • 13
  • 1
0
votes
2 answers

K8S cluster pod can't solve service name if pod on different node from coredns pod

I created a k8s Cluster v1.26.0 with kubeadm and I am using Calico as CNI. I deploy calico with the helm chart and I followed the steps by the Calico official page and chart. The container engine is containerd. The nodes Node are Centos 8 and we…
0
votes
0 answers

Egress TLS Origination without Istio

Is it possible to do something similar to TLS Egress origination described here without relying on Istio? We have a use case where we'd like all outbound traffic to a particular CIDR block to go through a TLS proxy that handles the mTLS with another…
Jessica
  • 721
  • 1
  • 6
  • 13
0
votes
0 answers

Access from the pod to a third-party server IP

I need to get access from the pod to the servers from the same subnet as the nodes of the kubernetes cluster (10.10.11.x), for example , to my gitlab server. I can ping onle k8s nodes from pods. From the cluster node, the IP address of my gitlab…
0
votes
1 answer

Kubernetes can't find locally built containerd images

I'm running an on-premise K8s cluster. The problem is Kubernetes doesn't see the locally built container images, despite the images being visible in the k8s.io namespace - tested both with nerdctl --namespace=k8s.io images and crictl images…
0
votes
0 answers

Define --service-cidr in calico-policy-only.yaml

I am using https://github.com/projectcalico/calico/blob/master/manifests/calico-policy-only.yaml to install calico via helm chart. I have service_cidr = 10.251.0.0/16 I have pod_cidr = 10.254.0.0/16 I have a pod trying to reach out at 10.251.0.1:443…
0
votes
1 answer

Kubernetes pod response size limit

We have a rancher based kubernetes cluster with calico on openstack. A spring config server (server pod here onwards) is deployed as a service. Service is exposed on nodeport. Another pod is deployed with curl (client pod here onwards) Doing a curl…
Vinay Taneja
  • 89
  • 2
  • 8
0
votes
2 answers

Install Calico on Kubernetes with docker-desktop on Windows

I'm trying to install calico locally (for development/testing) on Kubernetes with docker-desktop (Windows with WSL2). I want to install it to test network policies. I'm following the following quickstart guide:…
Karthik
  • 129
  • 11
0
votes
0 answers

runtime network not ready: NetworkReady=false Kubernetes after installing flannel

I have existing control plane node, here is details about it: System Info: Machine ID: b17c3aeb591145c3a2179bf59a6fd463 System UUID: b17c3aeb-5911-45c3-a217-9bf59a6fd463 Boot ID: …
0
votes
1 answer

Kubent Plugin with Calico Network Policy

I have created an AKS Cluster with the Kubenet plugin and Calico Network Policy. I wanted to know whether I should consider Calico and its components as part of the managed AKS experience, or I should take care of updating it? I wasn't able to find…
Mike
  • 45
  • 1
  • 5
0
votes
1 answer

Install calico GlobalNetworkPolicy via helm chart

I am trying to install a calico GlobalNetworkPolicy that will be applicable to all the pods in the cluster regardless of namespace , and to apply GlobalNetworkPolicy as per docs here - Calico network policies and Calico global network policies are…