# This section includes base Calico installation configuration. # For more information, see: https://projectcalico.docs.tigera.io/master/reference/installation/api#operator.tigera.io/v1.Installation apiVersion: operator.tigera.io/v1 kind: Installation metadata: name: default spec: # Configures Calico networking. calicoNetwork: # Note: The ipPools section cannot be modified post-install. ipPools: - blockSize: 26 cidr: 10.244.0.0/16 natOutgoing: Disabled nodeSelector: all() --- # This section configures the Calico API server. # For more information, see: https://projectcalico.docs.tigera.io/master/reference/installation/api#operator.tigera.io/v1.APIServer apiVersion: operator.tigera.io/v1 kind: APIServer metadata: name: default spec: {} --- apiVersion: crd.projectcalico.org/v1 kind: BGPPeer metadata: name: mikrotik-router spec: peerIP: 172.21.255.254 asNumber: 64567 keepOriginalNextHop: true password: secretKeyRef: name: bgp-secrets key: password --- apiVersion: crd.projectcalico.org/v1 kind: BGPConfiguration metadata: name: default spec: serviceLoadBalancerIPs: - cidr: 172.21.51.4/32 - cidr: 172.21.53.1/32 - cidr: 172.21.53.2/32 - cidr: 172.21.53.3/32 - cidr: 193.40.103.36/32 - cidr: 193.40.103.37/32 - cidr: 193.40.103.38/32 - cidr: 193.40.103.39/32 - cidr: 62.65.250.36/32 - cidr: 62.65.250.37/32 - cidr: 62.65.250.2/32 - cidr: 193.40.103.25/32 --- apiVersion: rbac.authorization.k8s.io/v1 kind: Role metadata: name: secret-access namespace: calico-system rules: - apiGroups: [""] resources: ["secrets"] resourceNames: ["bgp-secrets"] verbs: ["watch", "list", "get"] --- apiVersion: rbac.authorization.k8s.io/v1 kind: RoleBinding metadata: name: secret-access namespace: calico-system roleRef: apiGroup: rbac.authorization.k8s.io kind: Role name: secret-access subjects: - kind: ServiceAccount name: calico-node namespace: calico-system