Calico can be used as a network plugin for Kubernetes to provide connectivity and network policy in a Kubernetes cluster. Calico allows you to enforce fine-grained network security policy natively in Kubernetes. The video below shows a quick demonstration of Calico policy in action.
The following guides help you get started with Calico.
- Integration Guide: Discusses adding Calico to an existing cluster, or integrating Calico with your own install scripts.
These guides let you get a cluster set up quickly, and walk you through using Calico for networking and network policy.
- The kube-proxy must be started in
iptablesproxy mode. This is the default as of Kubernetes v1.2.0.
- The kube-proxy must be started without the
--masquerade-allflag, which conflicts with Calico policy.