Helm installation reference
You can customize the following resources and settings during Calico Helm-based installation using the file, values.yaml.
If you customize Felix configuration when you install Calico, the crd.projectcalico.org/v1 API group is used. However, when you apply
Felix configuration customization after installation (when the tigera-apiserver is running), use the projectcalico.org/v3 API group.
When using native v3 CRDs, only the projectcalico.org/v3 API group is installed and should always be used.
Sample values.yaml
Here is a sample values.yaml file with settings for custom resources. You must enable the custom resource using
enabled: true to provide custom configurations; custom resources set to false are ignored.
installation:
enabled: true
<installation resource spec fields to configure>
defaultFelixConfiguration:
enabled: false
<if enabled is true: felixConfiguration resource spec fields to configure>
Common customizations
Example of common customizations that you might want to configure in you values.yaml for your Helm-based installation:
Encryption using WireGuard
WireGuard encryption is configured in the FelixConfiguration. To set encryption for your cluster, update the values.yaml file.
defaultFelixConfiguration:
enabled: true
wireguardEnabled: true
wireguardEnabledV6: true