-
-
Notifications
You must be signed in to change notification settings - Fork 738
docs: update Calico installation docs #11993
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Conversation
- Added some info for Kubeprsim - Fixed an installation issue
| {{< tabpane text=true >}} | ||
| {{% tab header="NFTables" %}} | ||
|
|
||
| > **Note**: Calico also supports iptables backend, if you wish to run Calico in iptables mode change `linuxdataplane` value to `Iptables`. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
@james-callahan WDYT? I think this should be a bit more clear that I'm not suggesting what you should pick.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Yeah that's fine.
As a side note, you might want to point out that you don't have to use the tigera-operator (we don't)
| type: Calico | ||
| kubeletVolumePluginPath: None | ||
| --- | ||
| # Kubectl integration for Calico unique resources. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
@smira I removed API server since I found a bug (not talos related) with it when using kubeprsim IP. I'll have another update later to include it but for now it is safe to remove it.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Out of curiousity, what's the bug? (I'm currently debugging something related to calico and talking to api server right now; so maybe you found it!)
| {{< tabpane text=true >}} | ||
| {{% tab header="NFTables" %}} | ||
|
|
||
| > **Note**: Calico also supports iptables backend, if you wish to run Calico in iptables mode change `linuxdataplane` value to `Iptables`. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Yeah that's fine.
As a side note, you might want to point out that you don't have to use the tigera-operator (we don't)
| {{% tab header="eBPF" %}} | ||
|
|
||
| By default, Calico uses the `/var` directory to mount cgroups. However, since this path is not writable in Talos, you need to change it to `/sys/fs/cgroup`. | ||
| By default, Calico uses the `/var` directory to mount cgroups. However, since this path is not writable in Talos Linux, you need to change it to `/sys/fs/cgroup`. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
if using eBPF mode.
Also might want to prefix this section and point out that eBPF mode has downsides+doesn't work everywhere. e.g. it doesn't support all architectures
| ipPools: | ||
| - name: default-ipv4-ippool | ||
| blockSize: 26 | ||
| cidr: 10.244.0.0/16 |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
This cidr block came out of nowhere: should mention how to pick it
|
@Iheanacho-ai please take care of this PR |
|
Closed in favour of updated version siderolabs/docs#113 |
Pull Request
@smira
What? (description)
This PR fixes an installation issue with the previous way that Calico manifest was formed.
Why? (reasoning)
In my original #11966 there was some confusing sentences about nftables, and I forgot to include Kubeprsim.
Acceptance
Please use the following checklist:
make conformance)make fmt)make lint)make docs)make unit-tests)