based on the calico documentation, https://docs.projectcalico.org/security/encrypt-cluster-pod-traffic we should be able to patch felix calicoctl patch felixconfiguration default --type='merge' -p '{"spec":{"wireguardEnabled":true}}' I have a pre-6 stx aio duplex deployed, wireguard does work, i yum installed wireguard-tools, i can bring up the wg interface so two things, how can we execute calico commands ? i see 0 documentation on it and two im curious what wireguard firewall rules for calico would look like. id imagine based on the docs cat <<EOF > gnp-oam-overrides.yaml apiVersion: crd.projectcalico.org/v1 kind: GlobalNetworkPolicy metadata: name: wg-oam-overrides spec: ingress: - action: Allow destination: ports: - 51820 protocol: UDP order: 500 selector: has(iftype) && iftype == 'oam' types: - Ingress EOF when applied, i cannot connect a remote client to the OAM address, or the floating address -- Sent with Vivaldi Mail. Download Vivaldi for free at vivaldi.com