ctauchen · Nov 4, 2026 · Nov 4, 2026
@@ -1,5 +1,6 @@
 ---
 description: Side-by-side comparison of Calico Cloud against Calico Open Source and Calico Enterprise across SaaS management, networking, security, and observability features.
+content_type: unclassified
 ---
 
 import { CheckIcon } from '@chakra-ui/icons';

@@ -1,5 +1,6 @@
 ---
 description: Overview of Calico Cloud, the Tigera-hosted managed SaaS for Kubernetes networking, network security, and observability across connected clusters.
+content_type: unclassified
 ---
 
 import { DocCardLink, DocCardLinkLayout, PaidProductDocCardLink } from '/src/___new___/components';

@@ -1,5 +1,6 @@
 ---
 description: Route outbound container traffic through an HTTP proxy on clusters connected to Calico Cloud by configuring the Installation custom resource via the Tigera Operator.
+content_type: unclassified
 ---
 
 # Configure an outbound HTTP proxy

@@ -1,5 +1,6 @@
 ---
 description: Turn on WireGuard for clusters connected to Calico Cloud to encrypt inter-node pod and host-network traffic, with IPv4 and IPv6 support via FelixConfiguration.
+content_type: unclassified
 ---
 
 # Encrypt data in transit

@@ -1,6 +1,7 @@
 ---
 description: Encrypt in-cluster traffic with WireGuard and configure security options for clusters connected to Calico Cloud.
 hide_table_of_contents: true
+content_type: unclassified
 ---
 
 import { DocCardLink, DocCardLinkLayout } from '/src/___new___/components';

@@ -1,5 +1,6 @@
 ---
 description: Overview of the bundled Istio Ambient Mode service mesh for clusters connected to Calico Cloud, with node-level zTunnel proxies and mTLS managed by the Tigera Operator.
+content_type: unclassified
 ---
 
 # Istio Ambient Mode

@@ -1,5 +1,6 @@
 ---
 description: Deploy the bundled Istio Ambient Mode service mesh on clusters connected to Calico Cloud by applying the Istio custom resource, with prerequisites and limitations.
+content_type: unclassified
 ---
 
 # Deploy Istio Ambient Mode on your cluster

@@ -1,6 +1,7 @@
 ---
 description: Connect a Kubernetes cluster to Calico Cloud Free Tier so it reports network observability data to a Tigera-managed dashboard.
 title: Connect a cluster
+content_type: unclassified
 ---
 
 # Connect a cluster to Calico Cloud Free Tier

@@ -1,6 +1,7 @@
 ---
 description: Disconnect a Kubernetes cluster from Calico Cloud Free Tier and remove the Calico Cloud components it installed.
 title: Remove a cluster
+content_type: unclassified
 ---
 
 # Remove a cluster from Calico Cloud Free Tier

@@ -1,5 +1,6 @@
 ---
 description: Connect a Kubernetes cluster to Calico Cloud Free Tier — a no-cost path to centralized network observability without a paid Calico Cloud subscription.
+content_type: unclassified
 ---
 
 import { DocCardLink, DocCardLinkLayout } from '/src/___new___/components';

@@ -1,6 +1,7 @@
 ---
 description: What Calico Cloud Free Tier includes and excludes versus paid Calico Cloud — limits, supported platforms, and the upgrade path to a paid subscription.
 title: Overview
+content_type: unclassified
 ---
 
 import Screenshot from '/src/___new___/components/Screenshot';

@@ -1,6 +1,7 @@
 ---
 description: Quickstart that connects a Kubernetes cluster to Calico Cloud Free Tier for centralized network observability — no payment or trial required.
 title: Quickstart
+content_type: unclassified
 ---
 
 import Screenshot from '/src/___new___/components/Screenshot';

@@ -1,5 +1,6 @@
 ---
 description: Support and feedback channels for Calico Cloud users, including the Tigera support portal, in-console help, status page, and the Calico Cloud support policy.
+content_type: unclassified
 ---
 
 import IconUser from '/img/icons/user-icon.svg';

@@ -1,5 +1,6 @@
 ---
 description: Architecture overview of Calico Cloud — components that run in the connected cluster and the SaaS-side services they communicate with.
+content_type: unclassified
 ---
 
 # Calico Cloud architecture

@@ -1,5 +1,6 @@
 ---
 description: Gather information and run pre-flight checks before opening a Calico Cloud support ticket so triage moves quickly.
+content_type: unclassified
 ---
 
 # Troubleshooting checklist

@@ -1,5 +1,6 @@
 ---
 description: What happens when you connect a Kubernetes cluster to Calico Cloud — what is installed, what data leaves the cluster, and what changes in the cluster.
+content_type: unclassified
 ---
 
 # What happens when you connect a cluster to Calico Cloud

@@ -1,6 +1,7 @@
 ---
 description: Connect Kubernetes clusters to Calico Cloud and upgrade them — the entry point for the Calico Cloud onboarding flow.
 hide_table_of_contents: true
+content_type: unclassified
 ---
 
 import { DocCardLink, DocCardLinkLayout } from '/src/___new___/components';

@@ -1,5 +1,6 @@
 ---
 description: Connect a Kubernetes cluster to Calico Cloud as part of an automated CI or provisioning workflow rather than the interactive UI flow.
+content_type: unclassified
 ---
 
 import Tabs from '@theme/Tabs';

@@ -1,6 +1,7 @@
 ---
 description: Connect a Kubernetes cluster to Calico Cloud using the standard install command from the management UI.
 title: Install Calico Cloud
+content_type: unclassified
 ---
 
 # Connect a cluster to Calico Cloud

@@ -1,6 +1,7 @@
 ---
 description: Connect a Kubernetes cluster to Calico Cloud when its container images must be pulled from a private registry.
 title: Install using a private registry
+content_type: unclassified
 ---
 
 # Connect a cluster to Calico Cloud using a private registry

@@ -1,5 +1,6 @@
 ---
 description: Troubleshoot the Tigera Operator on Calico Cloud connected clusters when the standard support checklist is not enough.
+content_type: unclassified
 ---
 
 # Tigera Operator troubleshooting checklist

@@ -1,5 +1,6 @@
 ---
 description: Prepare a Kubernetes cluster for connection to Calico Cloud — pre-flight checks, RBAC, and image-pull configuration.
+content_type: unclassified
 ---
 
 # Prepare your cluster for Calico Cloud

@@ -1,5 +1,6 @@
 ---
 description: Mirror Calico Cloud container images into a private registry so air-gapped clusters can install without reaching the public registry.
+content_type: unclassified
 ---
 
 # Set up a private registry

@@ -1,5 +1,6 @@
 ---
 description: Cluster, platform, and version requirements a Kubernetes cluster must meet before it can connect to Calico Cloud.
+content_type: unclassified
 ---
 
 # System requirements

@@ -1,5 +1,6 @@
 ---
 description: Upgrade a connected Calico Cloud cluster to the latest released version of the in-cluster components.
+content_type: unclassified
 ---
 
 # Upgrade Calico Cloud

@@ -1,5 +1,6 @@
 ---
 description: Known limitations for Calico Cloud on Windows worker nodes that you should review before planning a connection.
+content_type: unclassified
 ---
 
 # Limitations and known issues for Windows nodes

@@ -1,5 +1,6 @@
 ---
 description: Sample Calico Cloud cluster mesh configuration that peers an on-premises cluster with an AWS VPC cluster using BGP, NLB, and the Federated Services Controller.
+content_type: unclassified
 ---
 
 # Cluster mesh example for clusters in AWS

@@ -1,6 +1,7 @@
 ---
 description: Form a Calico Cloud cluster mesh across clusters connected to the SaaS management plane with identity-aware policy and cross-cluster service discovery.
 hide_table_of_contents: true
+content_type: unclassified
 ---
 
 import { DocCardLink, DocCardLinkLayout } from '/src/___new___/components';

@@ -1,5 +1,6 @@
 ---
 description: Connect Calico Cloud connected clusters into a cluster mesh by generating per-cluster kubeconfig credentials and RemoteClusterConfiguration with VXLAN or WireGuard.
+content_type: unclassified
 ---
 
 import Tabs from '@theme/Tabs';

@@ -1,5 +1,6 @@
 ---
 description: Calico Cloud cluster mesh concepts for connected clusters including pod IP routability, federated endpoint identity, federated services, and overlay networking.
+content_type: unclassified
 ---
 
 # Overview

@@ -1,5 +1,6 @@
 ---
 description: Configure a Calico Cloud federated service with the Tigera Federated Services Controller to surface endpoints from connected clusters in the SaaS plane.
+content_type: unclassified
 ---
 
 # Configure federated services

@@ -1,5 +1,6 @@
 ---
 description: Step-by-step tutorial for applying Calico Cloud application-layer policy to workloads in a connected cluster — control ingress traffic by HTTP attributes.
+content_type: unclassified
 ---
 
 # Application layer policy tutorial

@@ -1,5 +1,6 @@
 ---
 description: Configure access controls based on Layer-7 attributes by enforcing Calico Cloud application-layer policy in connected clusters.
+content_type: unclassified
 ---
 
 # Enable and enforce application layer policies

@@ -1,6 +1,7 @@
 ---
 description: Restrict ingress traffic to Calico Cloud workloads by HTTP method, path, or other Layer-7 attributes using application-layer policy.
 hide_table_of_contents: true
+content_type: unclassified
 ---
 
 # Application layer policies to control ingress traffic

@@ -1,5 +1,6 @@
 ---
 description: Reference list of automatic labels Calico Cloud attaches to resources, useful as selectors in policy rules.
+content_type: unclassified
 ---
 
 # Calico Cloud automatic labels

@@ -1,5 +1,6 @@
 ---
 description: Write your first Calico Cloud NetworkPolicy — sample policies that exercise the rich rule features beyond Kubernetes NetworkPolicy.
+content_type: unclassified
 ---
 
 # Get started with Calico network policy

@@ -1,6 +1,7 @@
 ---
 description: Beginner-friendly path for writing your first Calico Cloud network policies — a tour of the basic resource types and rule patterns.
 hide_table_of_contents: true
+content_type: unclassified
 ---
 
 # Calico Cloud network policy for beginners

@@ -1,5 +1,6 @@
 ---
 description: Apply a default-deny network policy in a Calico Cloud connected cluster so unprotected pods are denied traffic until explicit policy is written.
+content_type: unclassified
 ---
 
 # Enable a default deny policy for Kubernetes pods

@@ -1,5 +1,6 @@
 ---
 description: Restrict egress and ingress to specific IP ranges in Calico Cloud policy, either inline or via reusable network sets.
+content_type: unclassified
 ---
 
 # Use external IPs or networks rules in policy

@@ -1,5 +1,6 @@
 ---
 description: Allow or deny ICMP and ping traffic for Calico Cloud workloads and host endpoints using policy rules.
+content_type: unclassified
 ---
 
 # Use ICMP/ping rules in policy

@@ -1,6 +1,7 @@
 ---
 description: Control traffic to and from endpoints using Calico Cloud network policy rules — selectors, actions, and egress/ingress directions.
 hide_table_of_contents: true
+content_type: unclassified
 ---
 
 # Policy rules

@@ -1,5 +1,6 @@
 ---
 description: Group or separate workloads in Calico Cloud policy using namespaces and namespace selectors so policies apply only to specified namespaces.
+content_type: unclassified
 ---
 
 # Use namespace rules in policy

@@ -1,5 +1,6 @@
 ---
 description: How to write policy rules in Calico Cloud — label selectors, source and destination match criteria, and rule actions.
+content_type: unclassified
 ---
 
 # Basic rules

@@ -1,5 +1,6 @@
 ---
 description: Match on Kubernetes service accounts in Calico Cloud policy rules to validate workload identity and apply RBAC-controlled rules.
+content_type: unclassified
 ---
 
 # Use service accounts rules in policy

@@ -1,5 +1,6 @@
 ---
 description: Match on Kubernetes Service names in Calico Cloud policy rules instead of specific pod selectors.
+content_type: unclassified
 ---
 
 # Use service rules in policy

@@ -1,6 +1,7 @@
 ---
 description: Apply Calico Cloud policy to Kubernetes Services — node ports, ClusterIPs, and externally exposed services.
 hide_table_of_contents: true
+content_type: unclassified
 ---
 
 # Policy for Kubernetes services

@@ -1,5 +1,6 @@
 ---
 description: Restrict access to Kubernetes NodePort services using a Calico Cloud GlobalNetworkPolicy at the host endpoint.
+content_type: unclassified
 ---
 
 # Apply Calico Cloud policy to Kubernetes node ports

@@ -1,5 +1,6 @@
 ---
 description: Expose Kubernetes Service ClusterIPs over BGP using Calico Cloud and restrict who can reach them with network policy.
+content_type: unclassified
 ---
 
 # Apply Calico Cloud policy to services exposed externally as cluster IPs

@@ -1,5 +1,6 @@
 ---
 description: Tour of the additional features Calico Cloud adds to Kubernetes policy that make it suitable for production environments.
+content_type: unclassified
 ---
 
 # Calico Cloud for Kubernetes demo

@@ -1,5 +1,6 @@
 ---
 description: Deploy a global default-deny policy in the Calico Cloud default tier across connected clusters so unprotected workloads are blocked until policy is written.
+content_type: unclassified
 ---
 
 # Global default deny policy best practices

@@ -1,5 +1,6 @@
 ---
 description: Allow traffic to external destinations by DNS name using Calico Cloud domain-based policy rules — without maintaining static IP lists.
+content_type: unclassified
 ---
 
 # DNS policy

@@ -1,5 +1,6 @@
 ---
 description: Define DoS mitigation rules in Calico Cloud policy that drop connections at the eBPF or XDP layer, with hardware offload when available.
+content_type: unclassified
 ---
 
 # Defend against DoS attacks

@@ -1,5 +1,6 @@
 ---
 description: Bypass Linux conntrack with a Calico Cloud policy rule for workloads that handle an extreme number of concurrent connections.
+content_type: unclassified
 ---
 
 # Enable extreme high-connection workloads

@@ -1,6 +1,7 @@
 ---
 description: Apply Calico Cloud network policy early in the Linux packet-processing pipeline to handle DoS, high-connection, and other extreme traffic scenarios.
 hide_table_of_contents: true
+content_type: unclassified
 ---
 
 # Policy for extreme traffic

@@ -1,5 +1,6 @@
 ---
 description: Apply Calico Cloud network policy to traffic forwarded through hosts acting as routers or NAT gateways.
+content_type: unclassified
 ---
 
 # Apply policy to forwarded traffic