Calico wireguard (#7638)

* Calico: add Wireguard support

* CI: Add Calico Wireguard scenario
This commit is contained in:
Cristian Calin
2021-06-25 13:22:45 +03:00
committed by GitHub
parent 7b3bc54cc3
commit a2cf6816ce
16 changed files with 138 additions and 0 deletions

View File

@@ -330,3 +330,23 @@ tc exec bpf debug
```
Please see [Calico eBPF troubleshooting guide](https://docs.projectcalico.org/maintenance/troubleshoot/troubleshoot-ebpf#ebpf-program-debug-logs).
## Wireguard Encryption
Calico supports using Wireguard for encryption. Please see the docs on [encryptiong cluster pod traffic](https://docs.projectcalico.org/security/encrypt-cluster-pod-traffic).
To enable wireguard support:
```yaml
calico_wireguard_enabled: true
```
The following OSes will require enabling the EPEL repo in order to bring in wireguard tools:
* CentOS 7 & 8
* AlmaLinux 8
* Amazon Linux 2
```yaml
epel_enabled: true
```