forked from k-space/kube
96 lines
2.2 KiB
YAML
96 lines
2.2 KiB
YAML
# This section includes base Calico installation configuration.
|
|
# For more information, see: https://projectcalico.docs.tigera.io/master/reference/installation/api#operator.tigera.io/v1.Installation
|
|
apiVersion: operator.tigera.io/v1
|
|
kind: Installation
|
|
metadata:
|
|
name: default
|
|
spec:
|
|
# Configures Calico networking.
|
|
calicoNetwork:
|
|
# Note: The ipPools section cannot be modified post-install.
|
|
ipPools:
|
|
- blockSize: 26
|
|
cidr: 10.244.0.0/16
|
|
natOutgoing: Disabled
|
|
nodeSelector: all()
|
|
---
|
|
apiVersion: crd.projectcalico.org/v1
|
|
kind: IPPool
|
|
metadata:
|
|
name: default-ipv4-ippool
|
|
spec:
|
|
allowedUses:
|
|
- Workload
|
|
- Tunnel
|
|
blockSize: 26
|
|
cidr: 10.244.0.0/16
|
|
ipipMode: Always
|
|
nodeSelector: all()
|
|
vxlanMode: Never
|
|
natOutgoing: True
|
|
---
|
|
# This section configures the Calico API server.
|
|
# For more information, see: https://projectcalico.docs.tigera.io/master/reference/installation/api#operator.tigera.io/v1.APIServer
|
|
apiVersion: operator.tigera.io/v1
|
|
kind: APIServer
|
|
metadata:
|
|
name: default
|
|
spec: {}
|
|
---
|
|
apiVersion: crd.projectcalico.org/v1
|
|
kind: BGPPeer
|
|
metadata:
|
|
name: mikrotik-router
|
|
spec:
|
|
peerIP: 172.21.255.254
|
|
asNumber: 64567
|
|
keepOriginalNextHop: true
|
|
password:
|
|
secretKeyRef:
|
|
name: bgp-secrets
|
|
key: password
|
|
---
|
|
apiVersion: crd.projectcalico.org/v1
|
|
kind: BGPConfiguration
|
|
metadata:
|
|
name: default
|
|
spec:
|
|
serviceLoadBalancerIPs:
|
|
- cidr: 172.21.51.4/32
|
|
- cidr: 172.21.53.1/32
|
|
- cidr: 172.21.53.2/32
|
|
- cidr: 172.21.53.3/32
|
|
- cidr: 193.40.103.36/32
|
|
- cidr: 193.40.103.37/32
|
|
- cidr: 193.40.103.38/32
|
|
- cidr: 193.40.103.39/32
|
|
- cidr: 62.65.250.36/32
|
|
- cidr: 62.65.250.37/32
|
|
- cidr: 62.65.250.38/32
|
|
- cidr: 62.65.250.2/32
|
|
- cidr: 193.40.103.25/32
|
|
---
|
|
apiVersion: rbac.authorization.k8s.io/v1
|
|
kind: Role
|
|
metadata:
|
|
name: secret-access
|
|
namespace: calico-system
|
|
rules:
|
|
- apiGroups: [""]
|
|
resources: ["secrets"]
|
|
resourceNames: ["bgp-secrets"]
|
|
verbs: ["watch", "list", "get"]
|
|
---
|
|
apiVersion: rbac.authorization.k8s.io/v1
|
|
kind: RoleBinding
|
|
metadata:
|
|
name: secret-access
|
|
namespace: calico-system
|
|
roleRef:
|
|
apiGroup: rbac.authorization.k8s.io
|
|
kind: Role
|
|
name: secret-access
|
|
subjects:
|
|
- kind: ServiceAccount
|
|
name: calico-node
|
|
namespace: calico-system |