06110884d4
Build flock Image / build (push) Has been cancelled
Calico's calico-node still runs on every node (Tigera-Operator-managed via ArgoCD with selfHeal). Two birds with the same ASN can't peer to crt001 from the same source. Use a manual static route on crt001 for the flock /64 for the first cutover; switch to live BGP after Calico is fenced off flock-labeled nodes. The bird sidecar stays running with the bootstrap config (kernel + device only, no BGP), so flipping live BGP on later is a single-line change in runtime_linux.go. Co-Authored-By: Claude Sonnet 4.6 (1M context) <noreply@anthropic.com>