Skip to main content
Calico Open Source 3.32 (latest) documentation

Helm installation reference

You can customize the following resources and settings during Calico Helm-based installation using the file, values.yaml.

note

If you customize Felix configuration when you install Calico, the crd.projectcalico.org/v1 API group is used. However, when you apply Felix configuration customization after installation (when the tigera-apiserver is running), use the projectcalico.org/v3 API group. When using native v3 CRDs, only the projectcalico.org/v3 API group is installed and should always be used.

Sample values.yaml

Here is a sample values.yaml file with settings for custom resources. You must enable the custom resource using enabled: true to provide custom configurations; custom resources set to false are ignored.

installation:
enabled: true
<installation resource spec fields to configure>

defaultFelixConfiguration:
enabled: false
<if enabled is true: felixConfiguration resource spec fields to configure>

Common customizations

Example of common customizations that you might want to configure in you values.yaml for your Helm-based installation:

Encryption using WireGuard

WireGuard encryption is configured in the FelixConfiguration. To set encryption for your cluster, update the values.yaml file.

defaultFelixConfiguration:
enabled: true
wireguardEnabled: true
wireguardEnabledV6: true