Skip to content

Conversation

@frozenprocess
Copy link
Contributor

Pull Request

  • Added some info for Kubeprsim
  • Fixed an installation issue

@smira

What? (description)

This PR fixes an installation issue with the previous way that Calico manifest was formed.

Why? (reasoning)

In my original #11966 there was some confusing sentences about nftables, and I forgot to include Kubeprsim.

Acceptance

Please use the following checklist:

  • you linked an issue (if applicable)
  • you included tests (if applicable)
  • you ran conformance (make conformance)
  • you formatted your code (make fmt)
  • you linted your code (make lint)
  • you generated documentation (make docs)
  • you ran unit-tests (make unit-tests)

See make help for a description of the available targets.

- Added some info for Kubeprsim
- Fixed an installation issue
@github-project-automation github-project-automation bot moved this to To Do in Planning Oct 9, 2025
@talos-bot talos-bot moved this from To Do to In Review in Planning Oct 9, 2025
{{< tabpane text=true >}}
{{% tab header="NFTables" %}}

> **Note**: Calico also supports iptables backend, if you wish to run Calico in iptables mode change `linuxdataplane` value to `Iptables`.
Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@james-callahan WDYT? I think this should be a bit more clear that I'm not suggesting what you should pick.

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Yeah that's fine.

As a side note, you might want to point out that you don't have to use the tigera-operator (we don't)

type: Calico
kubeletVolumePluginPath: None
---
# Kubectl integration for Calico unique resources.
Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@smira I removed API server since I found a bug (not talos related) with it when using kubeprsim IP. I'll have another update later to include it but for now it is safe to remove it.

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Out of curiousity, what's the bug? (I'm currently debugging something related to calico and talking to api server right now; so maybe you found it!)

{{< tabpane text=true >}}
{{% tab header="NFTables" %}}

> **Note**: Calico also supports iptables backend, if you wish to run Calico in iptables mode change `linuxdataplane` value to `Iptables`.
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Yeah that's fine.

As a side note, you might want to point out that you don't have to use the tigera-operator (we don't)

{{% tab header="eBPF" %}}

By default, Calico uses the `/var` directory to mount cgroups. However, since this path is not writable in Talos, you need to change it to `/sys/fs/cgroup`.
By default, Calico uses the `/var` directory to mount cgroups. However, since this path is not writable in Talos Linux, you need to change it to `/sys/fs/cgroup`.
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

if using eBPF mode.

Also might want to prefix this section and point out that eBPF mode has downsides+doesn't work everywhere. e.g. it doesn't support all architectures

ipPools:
- name: default-ipv4-ippool
blockSize: 26
cidr: 10.244.0.0/16
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This cidr block came out of nowhere: should mention how to pick it

@smira
Copy link
Member

smira commented Oct 13, 2025

@Iheanacho-ai please take care of this PR

@smira smira moved this from In Review to On Hold in Planning Oct 13, 2025
@github-project-automation github-project-automation bot moved this from On Hold to Done in Planning Oct 26, 2025
@frozenprocess
Copy link
Contributor Author

Closed in favour of updated version siderolabs/docs#113

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

Archived in project

Development

Successfully merging this pull request may close these issues.

4 participants