Questions tagged [project-calico]

Project Calico aims to simplify, scale, and secure cloud networks.

Per the project website, Project Calico aims to be:

Simple

Let's remove the complexity

Traditional SDNs are complex, making them hard to deploy and troubleshoot. Calico removes that complexity, with a simplified networking model designed for the demands of today's cloud-native applications.

Scalable

From dev/test to enterprise deployment

Unlike SDNs that require a central controller, limiting scalability, Calico is built on a fully distributed, scale-out architecture. So it scales smoothly from a single developer laptop to large enterprise deployments.

Secure

Policy-based micro-segmentation

Defining secure network policy used to be reserved for skilled network engineers. Calico's powerful micro-segmentation capabilities build on a simple policy language that naturally expresses the developer's intent.

171 questions
0
votes
1 answer

No outgoing network connection in Kubernetes cluster

I've built the cluster that has 3 worker nodes and an admin node. The worker nodes have kube-dns and calica deployed and set. Each machine has it's own external IP and associated DNS. I successfully run nginx-ingress-controller and its default…
0
votes
1 answer

adding node port to an exciting istio service

I created a local kubernetes cluster with a master and 2 workers using VM(ubuntu 16.04) I am also using calico for networking and I am exploring istio for the moment. my problem is the ingress load balancer doesn't get an external IP. to my…
0
votes
1 answer

How can I write a minimal NetworkPolicy to firewall a Kubernetes application with a Service of type LoadBalancer using Calico?

I have a Kubernetes cluster running Calico as the overlay and NetworkPolicy implementation configured for IP-in-IP encapsulation and I am trying to expose a simple nginx application using the following Service: apiVersion: v1 kind:…
dippynark
  • 2,743
  • 20
  • 58
0
votes
1 answer

Kubernetes Canal CNI error on masters

I'm setting up a Kubernetes cluster on a customer. I've done this process before multiple times, including dealing with vagrant specifics and I've been able to constantly get a K8s cluster up and running without too much fuss. Now, on this customer…
Zed_Blade
  • 1,009
  • 3
  • 18
  • 38
0
votes
1 answer

Flink Could not upload the jar files on Kubernetes with Calico. PUT operation failed

We run Flink in Kubernetes 1.8 in AWS. It's been fine for months. I've setup a new k8s clusters. Everything the same EXCEPT we enabled Calico (instead of using only Flannel) Just like Flannel, Calico gives us networking between containers. Since…
VinceMD
  • 111
  • 1
  • 7
0
votes
1 answer

Kubernetes service not working as expected with kafka

I'm trying to setup a zookeeper and kafka as separate Kubernetes deployments/pods in a shared namespace. I've bootstraped a local K8s 1.8 with Calico via kubeadm on my Ubuntu sandbox... For the Zookeeper, I'm using the image zookeeper:3.4 from…
0
votes
1 answer

How to uninstall or remove policy-demo in Calico

new to calico, trying to secure Kubernetes cluster using calico. I have installed kubectl using command curl -LO https://storage.googleapis.com/kubernetes-release/release/$(curl -s…
0
votes
1 answer

Turning off the calico/felix iptables rules or allow-all profile?

I am using calico 2.6 with docker 17.09.0-ce and it is working fine. I only have 2 questions that I cannot find an answer to. 1) How do I turn off the calico/felix iptables rules completely? I was thinking this might work with the…
cs224
  • 328
  • 2
  • 12
0
votes
2 answers

Newbie Installation Help: Calico CLI - Windows

hopefully this is rookie and easy question. I'm trying to install CLI on my local Windows machine to modify a hosted Kubernetes server. Upon downloading basic Windows Installer from their Github, I cannot seem to run successfully to install. A…
0
votes
1 answer

why CNI conf file name has number as prefix

I am trying to create a CNI conf file.why CNI conf file name has number as prefix? For e.g "10-calico.conf" "10-weave.conf" "10-Flannel.conf". Is there a convetion to follow?
0
votes
1 answer

calico-node fails starting on worker node

I'm trying to install Kubernetes. configuration details: Controler OS: Container Linux by CoreOS alpha (1339.0.0) LAN IP: 192.168.1.2 FQDN: coreos-2.tux-in.com environment variables used for installation: export…
ufk
  • 30,912
  • 70
  • 235
  • 386
0
votes
1 answer

Kubernetes Network Policy for External Name Service

We are looking at setting up network policies for our Kubernetes cluster. However in at least one of our namespaces we have an ExternalName service (kubernetes reference - service types) for an AWS RDS intance. We would like to restrict traffic to…
iBlocksShaun
  • 103
  • 8
0
votes
2 answers

Does Calico work with Docker in Swarm Mode, If so what is the version?

Does any one of know which version of calico works with Docker in Swarm Mode?
Rajesh
  • 179
  • 1
  • 2
  • 9
0
votes
1 answer

calico-policy-container on the worker node is on a restart loop. how can i check why?

I have two coreos stable machines (with latest stable version installed) to test Kubernetes. i installed kubernetes 1.5.1 using the script from https://github.com/coreos/coreos-kubernetes/tree/master/multi-node/generic and patched it with…
ufk
  • 30,912
  • 70
  • 235
  • 386
0
votes
1 answer

calico-node rkt returns stage1-fly.aci.asc: no such file or directory

I have a CoreOS beta (1185.2.0) installed. I have the following systemd service file to start calico-node: [Unit] Description=Calico per-host…
ufk
  • 30,912
  • 70
  • 235
  • 386
1 2 3
11
12