1
0
forked from k-space/kube
kube/tigera-operator/application.yaml

81 lines
2.0 KiB
YAML
Raw Normal View History

2022-08-16 09:40:54 +00:00
# This section includes base Calico installation configuration.
2022-10-14 11:03:34 +00:00
# For more information, see: https://projectcalico.docs.tigera.io/master/reference/installation/api#operator.tigera.io/v1.Installation
2022-08-16 09:40:54 +00:00
apiVersion: operator.tigera.io/v1
kind: Installation
metadata:
name: default
spec:
# Configures Calico networking.
calicoNetwork:
# Note: The ipPools section cannot be modified post-install.
ipPools:
- blockSize: 26
2022-10-14 11:03:34 +00:00
cidr: 10.244.0.0/16
2022-08-16 09:40:54 +00:00
encapsulation: VXLANCrossSubnet
natOutgoing: Disabled
nodeSelector: all()
2022-08-16 09:40:54 +00:00
---
# This section configures the Calico API server.
2022-10-14 11:03:34 +00:00
# For more information, see: https://projectcalico.docs.tigera.io/master/reference/installation/api#operator.tigera.io/v1.APIServer
2022-08-16 09:40:54 +00:00
apiVersion: operator.tigera.io/v1
2024-07-28 07:38:25 +00:00
kind: APIServer
metadata:
name: default
2022-08-16 09:40:54 +00:00
spec: {}
---
apiVersion: crd.projectcalico.org/v1
kind: BGPPeer
metadata:
name: mikrotik-router
spec:
peerIP: 172.21.255.254
asNumber: 64567
keepOriginalNextHop: true
password:
secretKeyRef:
name: bgp-secrets
key: password
---
apiVersion: crd.projectcalico.org/v1
kind: BGPConfiguration
metadata:
name: default
spec:
serviceLoadBalancerIPs:
- cidr: 172.21.51.4/32
- cidr: 172.21.53.1/32
- cidr: 172.21.53.2/32
- cidr: 172.21.53.3/32
- cidr: 193.40.103.36/32
- cidr: 193.40.103.37/32
- cidr: 193.40.103.38/32
- cidr: 193.40.103.39/32
- cidr: 62.65.250.36/32
- cidr: 62.65.250.37/32
- cidr: 62.65.250.2/32
- cidr: 193.40.103.25/32
---
apiVersion: rbac.authorization.k8s.io/v1
kind: Role
metadata:
name: secret-access
namespace: calico-system
rules:
- apiGroups: [""]
resources: ["secrets"]
resourceNames: ["bgp-secrets"]
verbs: ["watch", "list", "get"]
---
apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
metadata:
name: secret-access
namespace: calico-system
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: Role
name: secret-access
subjects:
- kind: ServiceAccount
name: calico-node
namespace: calico-system