CODEWITHSUNDEEP
kubernetesgoogle-kubernetes-engine
Seiya
Seiya

Reputation: 155

Can I safely delete calico-* pods from my cluster?

After updating container cluster node version to 1.7.6 new pods called calico-* appeared on my cluster. The question is - can I safely delete them?

I'm not sure if this is a bug or not, but those node appeared on my 2 clusters:

However, when I've created new cluster with version 1.7.5 and update it to 1.7.6 those pods have not appeared.

Mentiones pods are:

edit:

disabled network policy

Upvotes: 0

Views: 4839

Answers (2)

Seiya
Seiya

Reputation: 155

It looks like Google provided a way to get rid of calico PODs via Google Cloud Console. Please see the screen below.

enter image description here

Upvotes: 0

Erik Stidham
Erik Stidham

Reputation: 201

Calico is how Kubernetes network policies are implemented in GKE. https://cloudplatform.googleblog.com/2017/09/network-policy-support-for-kubernetes-with-calico.html

I don't think it would be safe to delete them, if you did you very likely would end up with unreachable pods.

I thought it was necessary to specify --enable-network-policy when creating and even another extra step when updating a cluster. Though maybe the components are always deployed but allow all policies are created if the flags are not specified.

Edit: If you delete calico pods they will be recreated and the add-on manager ensures there is no way to remove calico.

Edit: There is a command to disable network policy in GKE and the directions can be found at https://cloud.google.com/container-engine/docs/network-policy#disabling_network_policy_enforcement.

Upvotes: 6

Related Questions