Secure Calico component communications

Secure communications for Calico components.

Configure encryption and authentication

Enable TLS authentication and encryption for various Calico components.

Schedule Typha to well-known-nodes

Configure the Calico Typha TCP port.

Secure Calico Prometheus endpoints

Limit access to Calico metric endpoints using network policy.

Secure BGP sessions

Configure BGP passwords to prevent attackers from injecting false routing information.