This repository contains the Calico Kubernetes policy controller, which implements the Kubernetes network policy API. The controller uses the Kubernetes v1beta1 network policy API to configure Calico network policy. The policy controller addon is deployed on top of Kubernetes as a set of replicated pods, and can also be installed as a static pod.

Calico can enforce NetworkPolicy on top of:

• Calico BGP networking
• Flannel networking
• GCE native cloud-provider networking

See the documentation on network policy in Kubernetes for more information on how to use NetworkPolicy.

Calico also supports an experimental mode which uses the Kubernetes API directly without the need for its own etcd cluster. When running in this mode, the policy controller is not required.

• Configuration guide