Tigera Secure EE

Learn about configurations >

• calico-node-image | string

  Default: tigera/cnx-node:v2.3.0

  The image id to use for cnx node.

• calicoctl-image | string

  Default: tigera/calicoctl:v2.3.0

  The image id to use for calicoctl.

• enable-elasticsearch-operator | boolean

  Default: True

  Enable deployment of elasticsearch-operator into Kubernetes. This provides a monitoring and metrics solution for use with Tigera EE that is suitable for proof-of-concept purposes, but is not recommended for production use.

• ignore-loose-rpf | boolean

  Enable or disable IgnoreLooseRPF for Calico Felix. This is only used when rp_filter is set to a value of 2.

• ipip | string

  Default: Never

  IPIP mode. Must be one of "Always", "CrossSubnet", or "Never".

• license-key | string

  Tigera EE license key, base64-encoded. Example:

  juju config tigera-secure-ee license-key=$(base64 -w0 license.yaml)

• nat-outgoing | boolean

  Default: True

  NAT outgoing traffic

• registry | string

  Registry to use for images. If unspecified, defaults will be used: docker.io, quay.io, docker.elastic.co

• registry-credentials | string

  Private docker registry credentials, in the form of a base64-encoded docker config.json file. Example:

  juju config tigera-secure-ee registry-credentials=$(base64 -w0 config.json)