operator

module

v1.42.0 Latest Latest Go to latest Published: Apr 30, 2026 License: Apache-2.0

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/tigera/operator

Links

Open Source Insights

README ¶

Calico Operator

This repository contains a Kubernetes operator which manages the lifecycle of a Calico or Calico Enterprise installation on Kubernetes or OpenShift. Its goal is to make installation, upgrades, and ongoing lifecycle management of Calico and Calico Enterprise as simple and reliable as possible.

This operator is built using the operator-sdk, so you should be familiar with how that works before getting started.

Getting Started Running Calico

There are many avenues to get started running Calico depending on your situation.

Trying out Kubernetes on a single host or on your own hardware? The quick start guide will have you up and running in about fifteen minutes.
Running a managed public cloud? Use our guides for enabling Calico network policies.
Want to go deeper? Visit https://docs.tigera.io/ for full documentation.

Get Started Developing

See the developer guidelines for more information on designing, coding, and testing changes.

Directories ¶

Path	Synopsis
api module
cmd
hack
gen-versions command
release command
internal
controller
pkg
active
apigroup Package apigroup tracks which Calico API group the operator should configure on the workloads it manages.	Package apigroup tracks which Calico API group the operator should configure on the workloads it manages.
apis
awssgsetup
common GetWindowsNodes returns Windows nodes, optionally filtering the list of nodes with the given filter functions.	GetWindowsNodes returns Windows nodes, optionally filtering the list of nodes with the given filter functions.
common/k8svalidation
common/k8svalidation/helper
common/k8svalidation/v1helper
common/validation
common/validation/apiserver
common/validation/calico-node
common/validation/csi-node-driver
common/validation/kube-controllers
common/validation/typha
common/validation/webhooks
components Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License.	Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License.
controller/apiserver
controller/applicationlayer
controller/authentication
controller/certificatemanager
controller/clusterconnection
controller/compliance
controller/csr
controller/egressgateway
controller/gatewayapi
controller/goldmane
controller/installation
controller/intrusiondetection
controller/ippool
controller/istio
controller/k8sapi
controller/kubeproxy
controller/logcollector
controller/logstorage/common
controller/logstorage/dashboards
controller/logstorage/elastic
controller/logstorage/esmetrics
controller/logstorage/initializer
controller/logstorage/kubecontrollers
controller/logstorage/linseed
controller/logstorage/managedcluster
controller/logstorage/secrets
controller/logstorage/users
controller/manager
controller/migration
controller/migration/cni
controller/migration/convert Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License.	Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License.
controller/migration/datastoremigration Package datastoremigration provides utilities for checking DatastoreMigration CR state from the operator's controllers.	Package datastoremigration provides utilities for checking DatastoreMigration CR state from the operator's controllers.
controller/monitor
controller/nonclusterhost
controller/options
controller/packetcapture
controller/policyrecommendation
controller/secrets
controller/status Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License.	Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License.
controller/tenancy
controller/tiers
controller/utils This file contains functions common to the controllers to help them interact with elasticsearch.	This file contains functions common to the controllers to help them interact with elasticsearch.
controller/utils/imageset
controller/whisker
crypto
ctrlruntime
ctrlruntime/client
ctrlruntime/client/fake
dns
imports/admission
imports/crds
ptr
render This renderer is responsible for all resources related to a Guardian Deployment in a multicluster setup.	This renderer is responsible for all resources related to a Guardian Deployment in a multicluster setup.
render/applicationlayer
render/applicationlayer/ruleset
render/certificatemanagement
render/common/authentication
render/common/authentication/tigera/key_validator_config
render/common/components
render/common/configmap
render/common/elasticsearch
render/common/kibana
render/common/meta
render/common/networkpolicy
render/common/podaffinity
render/common/resourcequota
render/common/secret
render/common/securitycontext
render/common/securitycontextconstraints
render/common/selector
render/common/test
render/egressgateway
render/gatewayapi
render/goldmane
render/intrusiondetection/dpi
render/istio
render/kubecontrollers
render/logstorage
render/logstorage/dashboards
render/logstorage/eck
render/logstorage/esgateway
render/logstorage/esmetrics
render/logstorage/externalelasticsearch
render/logstorage/kibana
render/logstorage/linseed
render/manager
render/monitor
render/nonclusterhost
render/testutils
render/tiers
render/webhooks
render/whisker
tls
tls/certificatemanagement
tls/certkeyusage
url
test Add dependencies used by the build but not by the code to this file.	Add dependencies used by the build but not by the code to this file.
version

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL