Tigera Calico Cloud Workshop

Join the Slack Channel

Calico User Group Slack is a great resource to ask any questions about Calico. If you are not a part of this Slack group yet, we highly recommend joining it to participate in discussions or ask questions. For example, you can ask questions specific to EKS and other managed Kubernetes services in the #eks-aks-gke-iks channel.

Workshop objectives

The intent of this workshop is to guide users on connecting their K8s cluster to Calico Cloud and to test out its security and observability features.

STEP 1 - Create a compatible k8s cluster

• Calico Cloud system requirements

• EKS: Use Cloud9 IDE to create a compatible EKS cluster

• AKS: Use Azure SDK to create a compatible AKS cluster

• GKE: Use gcloud SDK to create a compatible GKE cluster

• Kubeadm: Use kops to create a compatible self-managed cluster in GCP

• RKE: Use Rancher server to create a compatible RKE cluster in GCP

STEP 2 - Sign up for Calico Cloud

• Use this link to register for a Calico Trial account

STEP 3 - Connect your cluster to Calico Cloud

• Connect your cluster to Calico Cloud

STEP 4 - Configure demo applications

• Configure your cluster and install demo applications

STEP 5 - Test Calico Cloud features

Use cases:

Network Policy for segmentation and access control

• Segmentation and Workload Access Control
• Egress Traffic Policy Based on FQDN
• Calico Cloud UI and Policy Management

Observability

• L7 logging
• Service Graph
• Kibana Dashboard
• Packet Capture

Intrusion and Breach Detection

• Global ThreatFeeds
• Honeypods and Anomaly Detection
• Deep Packet Inspection

Compliance

• Compliance reports

Network Encryption with WireGuard

• WireGuard Encryption

STEP 6 - Clean up your test environment

• Clean Up