CCE Calico Felix Description
Updated at:2025-10-27
Component introduction
The CCE Calico Felix component offers NetworkPolicy capabilities for CCE clusters.
Component function
NetworkPolicy is a Kubernetes resource used to define network isolation policies between Pods. It determines whether one group of Pods can communicate with other Pod groups or endpoints.
Felix, as a component of Calico—an open-source container networking solution—functions on each node to configure data such as routes and ACLs.
The CCE Calico Felix component handles the implementation of NetworkPolicy in CCE clusters.
Application scenarios
Leverage the Network Policy feature in your CCE clusters.
Limitations
- The CCE Calico Felix component can only be used with the veth network mode (for details, refer to the "VPC Network" mode advanced options)
Install component
- Sign in to the Baidu AI Cloud official website and enter the management console.
- Select Product Services - Cloud Native - Cloud Container Engine (CCE) to enter the CCE management console.
- Click Cluster Management - Cluster List in the left navigation bar.
- Click on the target cluster name in the Cluster List page to navigate to the cluster management page.
- On the Cluster Management page, click Component Management.
- In the component management list, select the CCE Calico Felix component and click Install.
- Click the OK button to complete the component installation.
Deployment status
When the CCE NPU Manager component is installed, the following objects will be deployed in the Kubernetes cluster:
| Object name | Belonging to namespace | Resource usage | Types |
|---|---|---|---|
| cce-calico-felix | kube-system | - | ServiceAccount |
| cce-calico-felix | kube-system | - | ClusterRole |
| cce-calico-felix | kube-system | - | ClusterRoleBinding |
| cce-calico-felix | kube-system | cpu: 250m | DaemonSet |
| FelixConfiguration | - | - | CustomResourceDefinition |
| BGPConfiguration | - | - | CustomResourceDefinition |
| IPPool | - | - | CustomResourceDefinition |
| HostEndpoint | - | - | CustomResourceDefinition |
| ClusterInformation | - | - | CustomResourceDefinition |
| GlobalNetworkPolicy | - | - | CustomResourceDefinition |
| GlobalNetworkSet | - | - | CustomResourceDefinition |
| NetworkPolicy | - | - | CustomResourceDefinition |
