Can a Specific Subnet be Excluded From Calico IPPools?
Problem
How to exclude subnet(s) from existing cluster CIDR which is managed by Calico?
Is it possible to remove specific subnet(s) from
IPPoolsmanaged by Calico?
Environment
Platform9 Edge Cloud
Self Managed Cloud Platform
Platform9 Managed Kubernetes
Resolution
In order to restrict specific subnets from IPPools, use calicoctl utility to manage the IPPools directly.
calicoctl binary is shipped by default as /opt/pf9/pf9-kube/bin/calicoctl
Platform9 does not support modifying IPPools via the UI or Qbert API. All the changes made by calicoctl needs to be performed at the Customer end.
The changes made by calicoctl will be persisted post cluster upgrades.
Additional Information
Official Calico Documentation that can be referred to create and manage IPPools:
https://docs.tigera.io/calico/latest/reference/resources/ippool
