Skip to content
Snippets Groups Projects
Verified Commit 061b0c3a authored by Sheogorath's avatar Sheogorath :european_castle:
Browse files

Revert "calico: Remove from setup"

This reverts commit d1106014.
parent 60c85442
Branches
Tags
No related merge requests found
apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization
namespace: default
resources:
- repository.yaml
- release.yaml
apiVersion: helm.toolkit.fluxcd.io/v2beta1
kind: HelmRelease
metadata:
name: calico
namespace: default
spec:
releaseName: calico
chart:
spec:
chart: tigera-operator
sourceRef:
kind: HelmRepository
name: projectcalico
version: v3.20.2
interval: 15m
values:
installation:
enabled: true
kubernetesProvider: ""
calicoNetwork:
bgp: Disabled
hostPorts: Enabled
ipPools:
- blockSize: 26
cidr: 192.168.0.0/16
encapsulation: VXLAN
natOutgoing: Enabled
nodeSelector: all()
apiVersion: source.toolkit.fluxcd.io/v1beta1
kind: HelmRepository
metadata:
name: projectcalico
spec:
interval: 30m
url: https://docs.projectcalico.org/charts
apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization
resources:
- calico
# kyverno
- hcloud-csi
- rook
......
......@@ -38,6 +38,27 @@ resource "hcloud_firewall" "k8s-node" {
port = "30000-32767"
source_ips = [for s in concat(module.nodes.ipv4_addresses) : "${s}/32"]
}
rule {
description = "Calico BGP"
direction = "in"
protocol = "tcp"
port = "179"
source_ips = [for s in concat(module.nodes.ipv4_addresses) : "${s}/32"]
}
rule {
description = "Calico VXLAN"
direction = "in"
protocol = "udp"
port = "4789"
source_ips = [for s in concat(module.nodes.ipv4_addresses) : "${s}/32"]
}
rule {
description = "Calico Typha"
direction = "in"
protocol = "tcp"
port = "5473"
source_ips = [for s in concat(module.nodes.ipv4_addresses) : "${s}/32"]
}
# Host level services, including the node exporter on ports 9100-9101.
rule {
description = "Host level services"
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment