From 9d07bb5e5996b3b14a023ce0864e3154dba281ff Mon Sep 17 00:00:00 2001 From: Sheogorath <sheogorath@shivering-isles.com> Date: Mon, 7 Feb 2022 02:32:59 +0100 Subject: [PATCH] docs(calico): Add infos about lessons learned about network interfaces --- infrastructure/calico/README.md | 2 ++ 1 file changed, 2 insertions(+) diff --git a/infrastructure/calico/README.md b/infrastructure/calico/README.md index acd3d9bd0..478841da3 100644 --- a/infrastructure/calico/README.md +++ b/infrastructure/calico/README.md @@ -9,6 +9,8 @@ Nice to knows --- - <del>The operator provides its own set of CRDs, examples from the docs, won't work by default. Operator uses `crd.projectcalico.org/v1` while calico itself uses `projectcalico.org/v3`</del> You have to install the [calico API server](https://projectcalico.docs.tigera.io/maintenance/install-apiserver) in order to use the correct CRD versions. +- metallb is required to be setup as host-endpoint in case you want to protect hosts with a `GlobalNetworkPolicy`. +- Additional network interfaces, like VPN interfaces, can confuse calico and result in routing everything over that VPN instead of the local network ports. Check the `projectcalico.org/IPv4Address`-annotation. Links --- -- GitLab