kubespray/roles/network_plugin/calico/templates/cni-calico.conf.j2

{
  "name": "calico-k8s-network",
{% if not legacy_calicoctl %}
  "hostname": "{{ ansible_hostname }}",
{% endif %}
  "type": "calico",
  "etcd_endpoints": "{{ etcd_access_endpoint }}",
  "etcd_cert_file": "{{ etcd_cert_dir }}/node-{{ inventory_hostname }}.pem",
  "etcd_key_file": "{{ etcd_cert_dir }}/node-{{ inventory_hostname }}-key.pem",
  "etcd_ca_cert_file": "{{ etcd_cert_dir }}/ca.pem",
  "log_level": "info",
  "ipam": {
    "type": "calico-ipam"
  },
{% if enable_network_policy is defined and enable_network_policy == True %}
  "policy": {
    "type": "k8s"
  },
{% endif %}
{% if calico_mtu is defined and calico_mtu is number %}
  "mtu": {{ calico_mtu }},
{% endif %}
  "kubernetes": {
    "kubeconfig": "{{ kube_config_dir }}/node-kubeconfig.yaml"
  }
}