1 views collected around this technical thread.
Learn how to correctly install, configure, and activate Calico's API server on a Kubernetes cluster—including prerequisites, downloading manifests, adjusting namespaces, pulling and tagging images, generating certificates, applying resources, and verifying the service—to manage Calico custom resources via kubectl.
This article explains the concept of multi‑tenant Kubernetes clusters, outlines common enterprise scenarios, and details native security mechanisms such as RBAC, NetworkPolicy, PodSecurityPolicy, OPA, resource quotas, and dedicated nodes to achieve effective isolation and protect sensitive data.
This article explains Kubernetes NetworkPolicy, covering its purpose, how pod and namespace selectors work, required fields, policy types, and detailed YAML examples, followed by practical scenarios and step‑by‑step commands for deploying and testing network policies in a cluster.
This article explains how Kubernetes hierarchical namespaces (HNC) enable secure multi‑tenant clusters by extending basic namespace capabilities with ownership, policy inheritance, and delegated creation rights, and demonstrates usage through kubectl commands and NetworkPolicy examples.
This article provides a comprehensive guide to Calico as a Kubernetes CNI, covering its BGP‑based three‑layer architecture, deployment steps, configuration of etcd certificates, management tools, BGP route‑reflector mode, IPIP tunneling, and network policy implementation for cloud‑native clusters.
This article explains Kubernetes native NetworkPolicy, covering its purpose, supported CNI plugins, detailed field definitions, default behaviors, example policies, and historical changes, providing a comprehensive guide for configuring pod communication rules in a cloud‑native environment.
This article explains how Kubernetes NetworkPolicy works with Calico, detailing the policy creation process, configuration templates, component versions, deployment steps, Calico‑felix packet handling, and a practical “deny all traffic” test case, concluding with operational considerations and reference links.
This article explains how Kubernetes NetworkPolicy provides namespace‑ and pod‑level network isolation, how Calico translates policies into iptables rules, and walks through configuration templates, test setups, runtime details, packet‑flow analysis, and practical considerations for production use.