2016-01-30 15:04:47 +00:00
|
|
|
---
|
2016-02-21 11:42:23 +00:00
|
|
|
# Enables Internet connectivity from containers
|
|
|
|
|
nat_outgoing: true
|
2016-03-23 16:27:06 +00:00
|
|
|
|
2016-07-21 11:05:40 +00:00
|
|
|
# Use IP-over-IP encapsulation across hosts
|
|
|
|
|
ipip: false
|
|
|
|
|
|
2016-09-22 15:34:11 +00:00
|
|
|
# Set to true if you want your calico cni binaries to overwrite the
|
|
|
|
|
# ones from hyperkube while leaving other cni plugins intact.
|
2016-10-08 17:19:25 +00:00
|
|
|
overwrite_hyperkube_cni: true
|
2016-11-09 10:44:41 +00:00
|
|
|
|
|
|
|
|
calico_cert_dir: /etc/calico/certs
|
|
|
|
|
etcd_cert_dir: /etc/ssl/etcd/ssl
|
2016-11-14 07:48:28 +00:00
|
|
|
|
2016-12-08 16:48:54 +00:00
|
|
|
# Global as_num (/calico/bgp/v1/global/as_num)
|
|
|
|
|
global_as_num: "64512"
|
|
|
|
|
|
2016-11-14 07:48:28 +00:00
|
|
|
# You can set MTU value here. If left undefined or empty, it will
|
|
|
|
|
# not be specified in calico CNI config, so Calico will use built-in
|
|
|
|
|
# defaults. The value should be a number, not a string.
|
|
|
|
|
# calico_mtu: 1500
|
2016-12-23 14:44:44 +00:00
|
|
|
|
2016-12-28 13:58:37 +00:00
|
|
|
# Linux capabilities to be dropped for container engines
|
|
|
|
|
calico_drop_cap:
|
|
|
|
|
- chown
|
|
|
|
|
- dac_override
|
|
|
|
|
- fowner
|
|
|
|
|
- fsetid
|
|
|
|
|
- kill
|
|
|
|
|
- setgid
|
|
|
|
|
- setuid
|
|
|
|
|
- setpcap
|
|
|
|
|
- net_bind_service
|
|
|
|
|
- net_raw
|
|
|
|
|
- sys_chroot
|
|
|
|
|
- mknod
|
|
|
|
|
- audit_write
|
|
|
|
|
- setfcap
|
|
|
|
|
|
2016-12-23 14:44:44 +00:00
|
|
|
# Limits for apps
|
|
|
|
|
calico_node_memory_limit: 500M
|
|
|
|
|
calico_node_cpu_limit: 300m
|
|
|
|
|
calico_node_memory_requests: 256M
|
|
|
|
|
calico_node_cpu_requests: 150m
|
|
|
|
|
calicoctl_memory_limit: 170M
|
|
|
|
|
calicoctl_cpu_limit: 100m
|
|
|
|
|
calicoctl_memory_requests: 70M
|
|
|
|
|
calicoctl_cpu_requests: 50m
|
