Calico iptablesbackend change

[snickeratme]

Using calico cni with rke2. Deployed using tigera operator. How to best change iptablesbackend ENV to NFT instead of auto? Reason for this change is seeing timeout issues with pods initiating communication out. Coredns pods are experiencing timeout for dns requests.

[snickeratme]

Ok. Since deploying using helm to deploy, it seems it's now possible to point to a custom Felixonconfig using values.yaml documented Here.
If using <=calico 3.27, you adjust the Felixconfig after the helm deploy.

You should in the meantime be able to create a default FC with calicoctl. e.g.,

kubectl create -f tigera-operator.yaml
calicoctl create -f fc.yaml
kubectl create -f custom-resources.yaml
This series allows you to set the default prior to the operator creating it.

Referencing this Github Issue
Will check my coredns pods when I get a chance