calico

Deploy, configure, and troubleshoot Calico for Kubernetes cluster networking.

Updated Apr 3, 2026
One-click install
npx skills add https://github.com/kettleofketchup/KettleOfSkills --skill calico
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: calico
Source: https://github.com/kettleofketchup/KettleOfSkills/tree/main/plugins/calico/skills/calico
Command: npx skills add https://github.com/kettleofketchup/KettleOfSkills --skill calico

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill eliminates the complexity of deploying, configuring, and troubleshooting Calico, the Kubernetes CNI and network policy engine, removing guesswork from cluster networking, policy enforcement, and pod connectivity issues.

Core Features & Use Cases

  • Full Lifecycle Management: Deploy Calico via Tigera Operator, configure IP pools and encapsulation modes (VXLAN, IPIP, BGP), and manage upgrades across standard Kubernetes, K3s, RKE2, and Rancher clusters.
  • Policy & Routing Configuration: Author Calico NetworkPolicy and GlobalNetworkPolicy rules, set up BGP peering, route reflectors, and tune the Felix agent for optimal performance.
  • Troubleshooting & Optimization: Diagnose common and edge-case issues including node NotReady states, cross-node pod failures, DNS resolution problems, and airgapped deployment errors. Use case example: If your Kubernetes pods cannot communicate across nodes after a Calico upgrade, use this Skill to identify misconfigured IP pools, blocked tunnel ports, or BGP session failures and resolve the issue quickly.

Quick Start

Use the calico skill to deploy Calico to your Kubernetes cluster with a VXLAN IP pool and default deny network policy, then verify cross-node pod connectivity.

Frequently Asked Questions about calico

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I troubleshoot Kubernetes pods failing to communicate across nodes after a Calico upgrade?

To troubleshoot cross-node pod connectivity after a Calico upgrade, identify misconfigured IP pools, blocked tunnel ports, or BGP session failures. Diagnose whether the Felix agent or encapsulation mode requires tuning to restore consistent pod networking.

What is the best way to deploy Calico and configure VXLAN encapsulation in a K3s cluster?

The best way to deploy Calico in a K3s cluster is using the Tigera Operator. Configure a VXLAN IP pool during deployment to manage encapsulation, ensuring reliable pod connectivity and high-performance networking across the K3s environment.

How do I set up BGP peering and route reflectors for Kubernetes network policy routing?

Set up BGP peering and route reflectors by configuring the Calico routing engine to exchange network routes. This enables granular network policy enforcement and high-performance pod networking without relying on IPIP or VXLAN encapsulation overlays.

Does Calico support airgapped Kubernetes deployments and how do I resolve node NotReady errors?

Calico supports airgapped Kubernetes deployments but requires specific image pre-loading configurations. Resolve node NotReady errors by diagnosing Felix agent failures, checking CNI plugin installation, and verifying Tigera Operator pod status.

Why are my Kubernetes DNS resolution problems persisting with Calico network policies?

Kubernetes DNS resolution problems persist with Calico network policies when GlobalNetworkPolicy rules block DNS traffic. Author Calico NetworkPolicy rules to explicitly allow DNS egress traffic and verify Felix agent configuration for proper policy enforcement.