From fa78dba6a947bad4c7467fdd2bac48ad11a7b2c3 Mon Sep 17 00:00:00 2001
From: Erki Aas <erki@veebkolm.ee>
Date: Sun, 23 Aug 2026 13:31:03 +0300
Subject: [PATCH] Update Calico CRD

---
 tigera-operator/custom-resources.yaml | 13 ++++++++++---
 1 file changed, 10 insertions(+), 3 deletions(-)

diff --git a/tigera-operator/custom-resources.yaml b/tigera-operator/custom-resources.yaml
index 188a467..5b72a4f 100644
--- a/tigera-operator/custom-resources.yaml
+++ b/tigera-operator/custom-resources.yaml
@@ -12,6 +12,7 @@ spec:
     - allowedUses:
         - Workload
         - Tunnel
+      assignmentMode: Automatic
       blockSize: 26
       cidr: 10.244.0.0/16
       disableBGPExport: false
@@ -20,10 +21,15 @@ spec:
       name: default-ipv4-ippool
       natOutgoing: Disabled
       nodeSelector: all()
-    - blockSize: 122
+    - allowedUses:
+        - Workload
+        - Tunnel
+      assignmentMode: Automatic
+      blockSize: 122
       cidr: 2001:bb8:4008:21:244::/80
       disableBGPExport: false
-      disableNewAllocations: false      
+      disableNewAllocations: false
+      name: default-ipv6-ippool
       nodeSelector: all()
       encapsulation: None
       natOutgoing: Disabled
@@ -56,7 +62,8 @@ spec:
   ipipMode: Never
   nodeSelector: all()
   vxlanMode: Never
-  natOutgoing: false
+  # natOutgoing is omitted on purpose: false is the default, the apiserver drops
+  # the field, and declaring it keeps this pool permanently OutOfSync in Argo
 ---
 apiVersion: projectcalico.org/v3
 kind: FelixConfiguration