Stories Tag: calico

AKS with Calico Network Policies. Using Calico Network Policy with Azure… | by Joaquín Menchaca (智裕) | Jul, 2021 |...

admin 15 hours ago in

Network policies in Kubernetes are essentially firewalls for pods. By default, pods are accessible from anywhere with no protections. If you like to to use network policies, you’ll need to install a network plugin that supports this feature. This article will demonstrate how to use this feature with Calico network plugin on AKS. The default network plugin for AKS as well as many other Kubernetes…

Getting IPv6 K8s services in your EC2 instances using Calico | by Jainam MJ | Jul, 2021 | Medium

admin 2 weeks ago in

Despite IPv6 protocol being around for a quarter-century, IPv4 addresses are still dominantly used. But with more address endpoints coming into existence and IPv4s getting exhausted, the internet is fast moving towards IPv6. IPv6 addresses are plenty and it would benefit the organization to have IPv6 address endpoints alongside IPv4 addresses. This article describes step-by-step how to enable IPv6 Kubernetes on AWS EC2 instances. 1….

[Kubernetes]使用Calico CNI在CentOS8上pod to pod連線問題 | by Morpheus Huang | Jul, 2021 | Medium

admin 2 weeks ago in

因為有需求要在CentOS上安裝Kubernetes，同事使用CentOS 8與Calico v3.10，結果出現pod to pod無法連線的問題… 實際裝了一遍發現CentOS 8搭配最新版本的Calico v3.19，測起來沒啥問題，改用Calico v3.10後，確實Pod-to-Pod不通。因此，查了有問題的叢集的iptables規則，發現並沒看到應該有的cali-開頭的規則，這時候想到了之前友人安裝Kubernets時，提到RHEL 8不支援iptable-legacy導致kubernetes裝不起來的情形，又CentOS是RHEL-based，於是查了CentOS 8 iptabels版本 iptables v1.8.4 (nf_tables) ，看來問題可能在這了。知道可能的問題原因，就先…..萬事問google大神XD 從上面的issue討論，其實Calico早在v3.8.1+就有相關設定參數FELIX_IPTABLESBACKEND，可以處理這個問題，根據官方文件的解釋: This parameter controls which variant of iptables binary Felix uses. Set this to Auto for auto detection of the backend. If a specific backend is needed then use NFT for hosts using a netfilter backend or Legacy for others. [Default: Auto] 從官方文件可以知道，目前這個值預設是Auto的，那使用Calico 3.10為何會有問題，原因在於 Default: Auto 是Calico v3.18.0才改的(Default for…

CKA Exercises, Network policy, Namespace | by Igor Zhivilo | Jul, 2021 | Medium

admin 3 weeks ago in

I am a DevOps/Software engineer (at Cloudify.co), and I started preparation for the CKA Kubernetes exam. In this series, I will share some exercises I find useful during my preparation in order to help you better prepare for the CKA exam. I will gather all exercises in this GitHub account, clone this repo to get all exercises at once. CKA exercises series published posts: Let’s…

Network policy and Calico CNI to Secure a Kubernetes cluster | by Igor Zhivilo | Jun, 2021 | Medium

admin 1 month ago in

As a DevOps engineer at Cloudify.co, I am working on the migration of the CaaS (Cloudify as a Service) solution to Kubernetes (EKS), previously it was running directly on AWS’s EC2 instances and my main goal was to migrate it to Kubernetes, which includes: https://cloudify.co/download The main purpose of this post is to share my knowledge related to Calico CNI installation to the already existing…

Become certified calico operator: L1 | by Rishi Jain | Jun, 2021 | Medium

admin 1 month ago in

In this article, I will share my experience with Calico Operator certification course. What do you learn in this course? This free and self-paced course will arm you with the knowledge you need to understand how Kubernetes networking works, how to configure and manage a Calico network, and how to secure your cluster following today’s best practices, with the confidence you need to run mission-critical…

AWS EKS: Calico for Windows networking | by Shyam Kumar | May, 2021 | Medium

admin 2 months ago in

In this blog we talk about enabling Calico networking on EKS Windows nodes. By default when you set up EKS cluster in AWS , default cluster you will get has VPC CNI which assigns pod IPs from VPC network. So with this you quickly see IPs getting exhausted when we start deploying pods !! To overcome above issue , we need to use different networking…

[K8S]Eazy way to mirgate weavenet to calico-etcd without reboot | by Thanaphat Nuangjumnong | May, 2021 | Medium

admin 3 months ago in

1.Prepare Etcd-cluster for calico2.Prepare configuration on calico-etcd.yaml (https://docs.projectcalico.org/getting-started/kubernetes/self-managed-onprem/onpremises)3. Remove all config weave and Network Interface4.Rollout restart coredns , nodelocal-dns5.Deploy calico-etcd6.Rollout restart all pod in the kube-cluster without ns=kube-system. 3. Remove all config weave and Network Interface 4.Rollout restart coredns 5.Deploy calico-etcd 6.Rollout restart all pod in the kube-cluster without ns=kube-system Wait for along time to restart all pods in the cluster. I hope you can…

Quick Calico – Jbn1233 – Medium

admin 5 months ago in

Getting bored with weavenet, now I tried calico First of all, you must have one https etcd cluster for it. Edit these 3 lines, inset output from command cat | base64 -w 0 inset etcd url and un-comment these lines (don’t change certificate filename) finally, change etcd-certs file permission to 0440 done

K8s Cluster using kubeadm and calico networking | by kunal borse | Nov, 2020 | Medium

admin 9 months ago in

Create on premise Kubernetes cluster using kubeadm. This article shows how to install a Kubernetes cluster with multiple nodes on ubuntu 16.04. You’ll run the nodes inside virtual machines through VirtualBox, but you can also use a different virtualization tool. First, Create a Virtual machine for k8s master. Perform the below steps on the master VM. apt-get update -y && apt-get install apt-transport-https ca-certificates curl…