Calico the hard way
Calico the hard way
Step-by-step tutorial intro for Calico the hard way — the cluster you build with Calico Open Source, the components installed by hand, and prerequisites.
Stand up Kubernetes
Calico the hard way — stand up a minimal Kubernetes cluster ready to receive a manual Calico Open Source installation.
The Calico datastore
Calico the hard way — choose between the Kubernetes API datastore and etcd for the Calico Open Source operational and configuration store.
Configure IP pools
Calico the hard way — define IP pools that govern which address ranges Calico Open Source assigns to pods and services.
Install CNI plugin
Calico the hard way — install the Calico Open Source CNI plugin on each node and wire it into kubelet.
Install Typha
Calico the hard way — install Typha to fan out datastore reads so Calico Open Source can scale to large clusters.
Install calico/node
Calico the hard way — deploy calico/node as a DaemonSet so the Calico Open Source agent runs on every cluster node.
Configure BGP peering
Calico the hard way — configure BGP peering between Calico Open Source nodes and review the available peering topologies.
Test networking
Calico the hard way — verify pod-to-pod connectivity and routing on a cluster after the manual Calico Open Source build-out.
Test network policy
Calico the hard way — verify that Calico Open Source network policy enforcement is working after the manual install.
End user RBAC
Calico the hard way — RBAC roles and access controls that govern who can edit Calico Open Source resources in a production cluster.
Istio integration
Calico the hard way — extend Calico Open Source policy enforcement into Istio service-mesh sidecars for layer-7 traffic.