Questions tagged [project-calico]

Project Calico aims to simplify, scale, and secure cloud networks.

Per the project website, Project Calico aims to be:

Simple

Let's remove the complexity

Traditional SDNs are complex, making them hard to deploy and troubleshoot. Calico removes that complexity, with a simplified networking model designed for the demands of today's cloud-native applications.

Scalable

From dev/test to enterprise deployment

Unlike SDNs that require a central controller, limiting scalability, Calico is built on a fully distributed, scale-out architecture. So it scales smoothly from a single developer laptop to large enterprise deployments.

Secure

Policy-based micro-segmentation

Defining secure network policy used to be reserved for skilled network engineers. Calico's powerful micro-segmentation capabilities build on a simple policy language that naturally expresses the developer's intent.

171 questions
3
votes
3 answers

Kubernetes Calico node 'XXXXXXXXXXX' already using IPv4 Address XXXXXXXXX, CrashLoopBackOff

I used the AWS Kubernetes Quickstart to create a Kubernetes cluster in a VPC and private subnet: https://aws-quickstart.s3.amazonaws.com/quickstart-heptio/doc/heptio-kubernetes-on-the-aws-cloud.pdf. It was running fine for a while. I have Calico…
Alex Conner
  • 240
  • 5
  • 19
2
votes
0 answers

Unable to reach the mutating webhooks in aws eks

I am using amamzon eks cluster with calico cni plugin installed. I deployed flink operator which will register mutating webhooks for the purpose of flink cluster handling to the cluster. I am successful in deploying flink operator on amazon eks…
user3553913
  • 373
  • 3
  • 17
2
votes
2 answers

How to find out what podcidr is assigned to each node by calico CNI in kubernetes

Is there any direct command to fetch the podcidr assigned to each node when using calico CNI. I am looking for exact network and netmask assigned to each node. I am not able to fetch it from kubectl get nodes neither via podCIDR value nor via…
apoorva kamath
  • 816
  • 1
  • 7
  • 19
2
votes
1 answer

K8s azure VM nodes - can ping worker node from master node but cannot ping pod on worker node

I have got a simple pod up and running on my worker node which I am trying to ping from my master node. I'm getting 100% packet loss. What's working? The worker node itself can be pinged from the master node. The pod inside the worker node can be…
Aakash Verma
  • 3,705
  • 5
  • 29
  • 66
2
votes
2 answers

What exactly happens when we try to ping an External IP for a service of type Load balancer (kubernetes)?

My cluster is running on-prem. Currently when I try to ping the external IP of service type LoadBalancer assigned to it from Metal LB. I get a reply from one of the VM's hosting the pods - Destination Host unreachable. Is this because the pods are…
2
votes
1 answer

Kubernetes with Calico on AWS -- Cannot ping pods on on different nodes

Just getting started with Kubernetes. I cannot seem to connect pods running on different nodes to communicate with each other. I set up a Kubernetes Cluster with Calico networking on three AWS EC2 instances (one master, two workers all with…
2
votes
2 answers

No route to host from some Kubernetes containers to other containers in same cluster

This is a Kubespray deployment using calico. All the defaults are were left as-is except for the fact that there is a proxy. Kubespray ran to the end without issues. Access to Kubernetes services started failing and after investigation, there was no…
user179763
  • 21
  • 1
  • 1
  • 3
2
votes
2 answers

How can I reach a Kubernetes service from a node using calico networking

I've setup a bare metal cluster and want to provide different types of shared storage to my applications, one of which is an s3 bucket I mount via goofys to a pod that exports if via NFS. I then use the NFS client provisioner to mount the share to…
Assis Ngolo
  • 73
  • 2
  • 9
2
votes
1 answer

pod-to-pod communication issues on k8s cluster created with kubeadm

I created a 2 node k8s cluster with kubeadm (1 master + 2 workers), on GCP, and everything seems to be fine, except the pod-to-pod communication. So, first thing first, there are no visible issues in the cluster. All pods are running. No errors, no…
suren
  • 7,817
  • 1
  • 30
  • 51
2
votes
1 answer

calico-node pods don't start after gke cluster upgrade from 1.10.x to 1.11.x

We have upgraded our GKE cluster to 1.11.x and although the process finished successfully the cluster is not working. There are multiple pods that crash or stay peding and it all points at calico network don`t working: calico-node-2hhfz 1/2 …
codependent
  • 23,193
  • 31
  • 166
  • 308
2
votes
1 answer

Any way to access Calico network by non-Calico nodes

I am very new to Calico and Calico networking, so far I went through the Calico docs. My question is, is there any way to access Calico network by non-Calico nodes? Went through all the docs, but haven't found any solution, am I missing something ?
2
votes
1 answer

Calico getting Hung when installing with k8

Being a newbie I was trying to install calico with minikube. I did downloaded it from https://github.com/kubernetes/minikube/releases/tag/v0.20.0 into my Ubuntu OS. I tried the following commands to install it: minikube start…
Sri Arun
  • 133
  • 11
2
votes
1 answer

Outbound connection intermittent failed to response

I'm experiencing intermittent failed to response when make an outbound connection such as RPC call, it is logged by my application (Java) like this : org.apache.http.NoHttpResponseException: RPC_SERVER.com:443 failed to respond ! Outbound…
2
votes
1 answer

Kubernetes: Using UDP broadcast to find other pods

I have a clustered legacy application that I am trying to deploy on kubernetes. The nodes in the cluster find each other using UDP broadcast. I cannot change this behaviour for various reasons. When deployed on docker, this would be done by creating…
Fredrik
  • 21
  • 2
2
votes
2 answers

route not working in kubernetes with calico

I have kubernetes v1.6.0 setup by kubeadm v1.6.1 calico setup by offical yaml iptables v1.6.0 nodes are provided by AliCloud Problem: The cni network is not working. Any deployment can only be visited from the node where it is running. I doubt it…
JasonW
  • 453
  • 1
  • 9
  • 16
1 2
3
11 12