Skip to content

I cannot enable calico networkpolicy  #214

Open
@abarqawi

Description

@abarqawi

Describe the bug

Steps To Reproduce

i am trying to enable calico networkpolicy as per documentation below is the kubernetes-azurestack.json

{
"apiVersion": "vlabs",
"location": "",
"properties": {
"orchestratorProfile": {
"orchestratorRelease": "1.26",
"orchestratorVersion": "1.26.9",
"kubernetesConfig": {
"cloudProviderBackoff": true,
"cloudProviderBackoffRetries": 1,
"cloudProviderBackoffDuration": 30,
"cloudProviderRateLimit": true,
"cloudProviderRateLimitQPS": 100,
"cloudProviderRateLimitBucket": 150,
"cloudProviderRateLimitQPSWrite": 25,
"cloudProviderRateLimitBucketWrite": 30,
"useCloudControllerManager": true,
"useInstanceMetadata": false,
"networkPlugin": "azure",
"networkPolicy": "calico",
"kubeletConfig": {
"--node-status-update-frequency": "1m"
},
"controllerManagerConfig": {
"--node-monitor-grace-period": "5m",
"--pod-eviction-timeout": "5m",
"--route-reconciliation-period": "1m"
},
"addons": [
{
"name": "calico-daemonset",
"enabled": true
}
]
}
},
"customCloudProfile": {
"portalURL": "",
"identitySystem": ""
},
"featureFlags": {
"enableTelemetry": true
},
"masterProfile": {
"dnsPrefix": "",
"distro": "aks-ubuntu-20.04",
"count": 3,
"vmSize": "Standard_DS2_v2"
},
"agentPoolProfiles": [
{
"name": "linuxpool",
"count": 3,
"vmSize": "Standard_D2_v2",
"distro": "aks-ubuntu-20.04",
"availabilityProfile": "AvailabilitySet",
"AcceleratedNetworkingEnabled": false
}
],
"linuxProfile": {
"adminUsername": "azureuser",
"ssh": {
"publicKeys": [
{
"keyData": "ssh-rsa "
}
]
},
"enableUnattendedUpgrades": false,
"runUnattendedUpgradesOnBootstrap": false
},
"servicePrincipalProfile": {
"clientId": "",
"secret": ""
}
}
}

Expected behavior
to see the calico pods or daemon-set and to able to use the networkpolicy

AKS Engine version
Version: v0.79.0

Kubernetes version
1.26

Additional context

below is kubectl get pods -A

image

i followed this template

https://github.com/Azure/aks-engine-azurestack/blob/master/docs/topics/clusterdefinitions.md#calico
and tried with/without enabling add-on but i dont see the calico pods created in kube-system
"kubernetesConfig": {
"addons": [
...
{
"name": "calico-daemonset",
"enabled": true,
"config": {
"logSeverityScreen": "error"
}
}
...
]
}

not sure if i miss something

i created multiple times and deleted the deployment from azure portal should i do something else to re-create ?

aks-engine-azurestack deploy --azure-env AzureStackCloud --location --resource-group AKS --api-model kubernetes-azurestack.json --output-directory kube-out --client-id --client-secret --subscription-id --force-overwrite

using this command

Metadata

Metadata

Assignees

No one assigned

    Labels

    bugSomething isn't working

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions