Can a Specific Subnet be Excluded From Calico IPPools?

Problem

• How to exclude subnet(s) from existing cluster CIDR which is managed by Calico?
• Is it possible to remove specific subnet(s) from IPPools managed by Calico?

Environment

• Platform9 Edge Cloud
• Self Managed Cloud Platform
• Platform9 Managed Kubernetes

Resolution

• In order to restrict specific subnets from IPPools, use calicoctl utility to manage the IPPools directly.
• calicoctl binary is shipped by default as /opt/pf9/pf9-kube/bin/calicoctl
• Platform9 does not support modifying IPPools via the UI or Qbert API. All the changes made by calicoctl needs to be performed at the Customer end.
• The changes made by calicoctl will be persisted post cluster upgrades.

Additional Information

Official Calico Documentation that can be referred to create and manage IPPools:

https://docs.tigera.io/calico/latest/reference/resources/ippool