IBM Cloud Kubernetes Service (IKS)
Enable Calico in IKS managed Kubernetes service.
IKS has built-in support for Calico, providing a robust implementation of the full Kubernetes Network Policy API. IKS users wanting to go beyond Kubernetes network policy capabilities can make full use of the Calico Network Policy API. In addition to using Calico to secure Kubernetes pods, IKS also uses Calico host endpoint capabilities to provide additional security for the nodes in your cluster.
Calico networking and network policy are automatically installed and configured in your IBM Cloud Kubernetes Service. Default policies are created to protect your Kubernetes cluster, with the option to create your own policies to protect specific services.
The geeky details of what you get: