tigera · ctauchen · May 13, 2026 · May 12, 2026 · May 13, 2026
@@ -1,5 +1,5 @@
 ---
-description: Manage cluster storage, add new clusters, and configure alerts.
+description: Manage Calico Cloud connected clusters from the web console by adding clusters, removing managed clusters, and configuring cluster-wide alerts.
 ---
 
 # Manage clusters

@@ -1,5 +1,5 @@
 ---
-description: Add TLS certificates to secure access to the Calico Cloud API server.
+description: Provide TLS certificates that secure access to the Calico Cloud API server on a connected cluster as part of a zero-trust deployment model.
 ---
 
 # Provide TLS certificates for the API server

@@ -1,5 +1,5 @@
 ---
-description: Control the issuer of certificates used by Calico Cloud.
+description: Manage TLS certificates for Calico Cloud components on a connected cluster by controlling the certificate issuer through the Kubernetes Certificates API.
 ---
 
 # Manage TLS certificates used by Calico Cloud

@@ -1,5 +1,5 @@
 ---
-description: Add TLS certificate to secure access to compliance.
+description: Provide TLS certificates that secure access to the Calico Cloud compliance components on a connected cluster as part of a zero-trust deployment model.
 ---
 
 # Provide TLS certificates for compliance

@@ -1,5 +1,5 @@
 ---
-description: Enable TLS authentication and encryption for various Calico Cloud components.
+description: Configure TLS authentication and encryption across Calico Cloud components, the Kubernetes control plane, Typha, Node, and observability traffic on connected clusters.
 ---
 
 # Configure encryption and authentication to secure Calico Cloud components

@@ -1,5 +1,5 @@
 ---
-description: Secure communications for Calico components.
+description: Secure communications between Calico Cloud components on a connected cluster with mutual TLS, including API server, log storage, web console, and BGP endpoints.
 hide_table_of_contents: true
 ---
 

@@ -1,5 +1,5 @@
 ---
-description: Add TLS certificate to secure access to log storage.
+description: Provide TLS certificates that secure access to Calico Cloud log storage on a connected cluster as part of a zero-trust deployment model.
 ---
 
 # Provide TLS certificates for log storage

@@ -1,5 +1,5 @@
 ---
-description: Add TLS certificates to secure access to the web console user interface.
+description: Provide TLS certificates that secure browser access to the Calico Cloud web console on a connected cluster in place of the default self-signed certificate.
 ---
 
 # Provide TLS certificates for the web console

@@ -1,5 +1,5 @@
 ---
-description: Add TLS certificate to secure access to PacketCapture APIs.
+description: Provide TLS certificates that secure access to the Calico Cloud PacketCapture APIs on a connected cluster as part of a zero-trust deployment model.
 ---
 
 # Provide TLS certificates for PacketCapture APIs

@@ -1,5 +1,5 @@
 ---
-description: Configure BGP passwords to prevent attackers from injecting false routing information.
+description: Configure BGP session passwords on Calico Cloud BGP peers on a connected cluster to block attackers from injecting false routing information.
 ---
 
 # Secure BGP sessions

@@ -1,5 +1,5 @@
 ---
-description: Limit access to Calico Cloud metric endpoints using network policy.
+description: Restrict access to Calico Cloud Prometheus metric endpoints on a connected cluster with network policy so only authorized scrapers can read component telemetry.
 ---
 
 # Secure Calico Cloud Prometheus endpoints

@@ -1,5 +1,5 @@
 ---
-description: Add TLS certificates to secure communications between if you are using Typha to scale your deployment.
+description: Provide a custom CA and TLS certificates for mutual TLS authentication between Calico Cloud Node and Typha components on a connected cluster at scale.
 ---
 
 # Provide TLS certificates for Typha and Node

@@ -1,5 +1,5 @@
 ---
-description: Where to find component logs.
+description: Reference for locating and collecting Calico Cloud component logs including calico/node, Felix, Typha, and observability agents on connected clusters.
 ---
 
 # Component logs

@@ -1,5 +1,5 @@
 ---
-description: Steps to use migration script to uninstall Calico Cloud from a cluster.
+description: Disconnect a cluster from Calico Cloud with the migration script that uninstalls SaaS components and reverts the cluster to open-source Project Calico.
 ---
 
 # Uninstall Calico Cloud from a cluster

@@ -1,5 +1,5 @@
 ---
-description: Steps to enable the eBPF data plane on an existing cluster.
+description: Switch a Calico Cloud connected cluster to the eBPF data plane on an existing installation as an alternative to the iptables data plane.
 ---
 
 # Enable eBPF on an existing cluster

@@ -1,5 +1,5 @@
 ---
-description: Documentation for eBPF data plane mode, including how to enable eBPF data plane mode.
+description: Reference index for the Calico Cloud eBPF data plane on connected clusters covering installation, runtime switching, troubleshooting, and use-case selection.
 hide_table_of_contents: true
 ---
 

@@ -1,5 +1,5 @@
 ---
-description: How to troubleshoot when running in eBPF mode.
+description: Troubleshooting guide for the Calico Cloud eBPF data plane on a connected cluster covering verification logs, service connectivity, BPF map inspection, and failure modes.
 ---
 
 # Troubleshoot eBPF mode

@@ -1,5 +1,5 @@
 ---
-description: Learn when to use eBPF, and when not to.
+description: Guidance on when the Calico Cloud eBPF data plane on a connected cluster fits a workload compared to the standard iptables data plane, with trade-offs.
 ---
 
 # eBPF use cases

@@ -1,5 +1,5 @@
 ---
-description: Manage clusters and add new users.
+description: Day-2 operations for Calico Cloud connected clusters covering cluster management, secure component communications, monitoring, eBPF, and disconnection.
 ---
 
 import { DocCardLink, DocCardLinkLayout } from '/src/___new___/components';

@@ -1,5 +1,5 @@
 ---
-description: Tools for scraping useful metrics.
+description: Reference index for monitoring Calico Cloud connected clusters with Prometheus metrics covering BGP, policy, log collection, and component health.
 hide_table_of_contents: true
 ---
 

@@ -1,5 +1,5 @@
 ---
-description: Monitor BGP peering and route exchange in your cluster and get alerts by defining rules and thresholds.
+description: Monitor BGP peering and route exchange in Calico Cloud connected clusters by defining Prometheus rules and thresholds for peer health and route counts.
 ---
 
 # BGP metrics

@@ -1,5 +1,5 @@
 ---
-description: Monitor Fluentd metrics and get alerts on log storage or collection issues.
+description: Track Calico Cloud Fluentd metrics in Prometheus to alert on flow, DNS, and audit log collection disruptions on connected clusters.
 ---
 
 # Fluentd metrics

@@ -1,5 +1,5 @@
 ---
-description: Configure Prometheus metrics.
+description: Reference index for Calico Cloud Prometheus metrics on connected clusters covering BGP, policy, log collection, and recommended dashboards.
 hide_table_of_contents: true
 ---
 

@@ -1,5 +1,5 @@
 ---
-description: Monitor the effects of policy in your cluster and received alerts by defining rules and thresholds.
+description: Monitor the runtime effect of policies on Calico Cloud connected clusters by defining Prometheus rules and thresholds that fire alerts on policy hits.
 ---
 
 # Policy metrics

@@ -1,5 +1,5 @@
 ---
-description: Recommended Prometheus metrics for monitoring Calico Enterprise components.
+description: Recommended Prometheus metrics for Calico Cloud Typha, Felix, and policy components on connected clusters, covering the signals most critical to cluster health.
 ---
 
 # Recommended Prometheus metrics

@@ -1,5 +1,5 @@
 ---
-description: Configure Alertmanager, a Prometheus feature that routes alerts.
+description: Configure Alertmanager in a Calico Cloud connected cluster to route Prometheus alerts to operators with deduplication, grouping, silencing, and inhibition rules.
 ---
 
 # Configure Alertmanager

@@ -1,5 +1,5 @@
 ---
-description: Steps to get Calico Cloud metrics using your own Prometheus.
+description: Scrape Calico Cloud component metrics from an existing bring-your-own Prometheus deployment instead of the bundled operator-managed Prometheus on connected clusters.
 ---
 
 # Bring your own Prometheus

@@ -1,5 +1,5 @@
 ---
-description: Configure rules for alerts and denied packets, for persistent storage.
+description: Configure Calico Cloud Prometheus rules for denied-packet alerts and persistent storage on connected clusters by editing PrometheusRule and StorageClass resources.
 ---
 
 # Configure Prometheus

@@ -1,5 +1,5 @@
 ---
-description: Configure open-source toolkit for systems monitoring and alerting.
+description: Configure the open-source Prometheus monitoring and alerting toolkit bundled with Calico Cloud for component metrics, alerts, and persistent storage on connected clusters.
 hide_table_of_contents: true
 ---
 

@@ -1,5 +1,5 @@
 ---
-description: Prometheus support in Calico Cloud.
+description: Reference for Prometheus support in Calico Cloud connected clusters covering the bundled operator-managed install and bring-your-own Prometheus deployment options.
 ---
 
 # Prometheus support

@@ -1,5 +1,5 @@
 ---
-description: Where to find Calico Cloud usage metrics.
+description: Reference for finding Calico Cloud Pro usage and billing metrics, calculated as vCPU hours across all connected clusters each month.
 ---
 
 import IconUser from '/img/icons/user-icon.svg';

@@ -1,5 +1,5 @@
 ---
-description: Manage cluster storage, add new clusters, and configure alerts.
+description: Manage Calico Cloud connected clusters from the web console by adding clusters, removing managed clusters, and configuring cluster-wide alerts.
 ---
 
 # Manage clusters

@@ -1,5 +1,5 @@
 ---
-description: Add TLS certificates to secure access to the Calico Cloud API server.
+description: Provide TLS certificates that secure access to the Calico Cloud API server on a connected cluster as part of a zero-trust deployment model.
 ---
 
 # Provide TLS certificates for the API server

@@ -1,5 +1,5 @@
 ---
-description: Control the issuer of certificates used by Calico Cloud.
+description: Manage TLS certificates for Calico Cloud components on a connected cluster by controlling the certificate issuer through the Kubernetes Certificates API.
 ---
 
 # Manage TLS certificates used by Calico Cloud

@@ -1,5 +1,5 @@
 ---
-description: Add TLS certificate to secure access to compliance.
+description: Provide TLS certificates that secure access to the Calico Cloud compliance components on a connected cluster as part of a zero-trust deployment model.
 ---
 
 # Provide TLS certificates for compliance

@@ -1,5 +1,5 @@
 ---
-description: Enable TLS authentication and encryption for various Calico Cloud components.
+description: Configure TLS authentication and encryption across Calico Cloud components, the Kubernetes control plane, Typha, Node, and observability traffic on connected clusters.
 ---
 
 # Configure encryption and authentication to secure Calico Cloud components

@@ -1,5 +1,5 @@
 ---
-description: Secure communications for Calico components.
+description: Secure communications between Calico Cloud components on a connected cluster with mutual TLS, including API server, log storage, web console, and BGP endpoints.
 hide_table_of_contents: true
 ---
 

@@ -1,5 +1,5 @@
 ---
-description: Add TLS certificate to secure access to log storage.
+description: Provide TLS certificates that secure access to Calico Cloud log storage on a connected cluster as part of a zero-trust deployment model.
 ---
 
 # Provide TLS certificates for log storage

@@ -1,5 +1,5 @@
 ---
-description: Add TLS certificates to secure access to the web console user interface.
+description: Provide TLS certificates that secure browser access to the Calico Cloud web console on a connected cluster in place of the default self-signed certificate.
 ---
 
 # Provide TLS certificates for the web console

@@ -1,5 +1,5 @@
 ---
-description: Add TLS certificate to secure access to PacketCapture APIs.
+description: Provide TLS certificates that secure access to the Calico Cloud PacketCapture APIs on a connected cluster as part of a zero-trust deployment model.
 ---
 
 # Provide TLS certificates for PacketCapture APIs

@@ -1,5 +1,5 @@
 ---
-description: Configure BGP passwords to prevent attackers from injecting false routing information.
+description: Configure BGP session passwords on Calico Cloud BGP peers on a connected cluster to block attackers from injecting false routing information.
 ---
 
 # Secure BGP sessions

@@ -1,5 +1,5 @@
 ---
-description: Limit access to Calico Cloud metric endpoints using network policy.
+description: Restrict access to Calico Cloud Prometheus metric endpoints on a connected cluster with network policy so only authorized scrapers can read component telemetry.
 ---
 
 # Secure Calico Cloud Prometheus endpoints

@@ -1,5 +1,5 @@
 ---
-description: Add TLS certificates to secure communications between if you are using Typha to scale your deployment.
+description: Provide a custom CA and TLS certificates for mutual TLS authentication between Calico Cloud Node and Typha components on a connected cluster at scale.
 ---
 
 # Provide TLS certificates for Typha and Node

@@ -1,5 +1,5 @@
 ---
-description: Where to find component logs.
+description: Reference for locating and collecting Calico Cloud component logs including calico/node, Felix, Typha, and observability agents on connected clusters.
 ---
 
 # Component logs

@@ -1,5 +1,5 @@
 ---
-description: Steps to use migration script to uninstall Calico Cloud from a cluster.
+description: Disconnect a cluster from Calico Cloud with the migration script that uninstalls SaaS components and reverts the cluster to open-source Project Calico.
 ---
 
 # Uninstall Calico Cloud from a cluster

@@ -1,5 +1,5 @@
 ---
-description: Steps to enable the eBPF data plane on an existing cluster.
+description: Switch a Calico Cloud connected cluster to the eBPF data plane on an existing installation as an alternative to the iptables data plane.
 ---
 
 # Enable eBPF on an existing cluster

@@ -1,5 +1,5 @@
 ---
-description: Documentation for eBPF data plane mode, including how to enable eBPF data plane mode.
+description: Reference index for the Calico Cloud eBPF data plane on connected clusters covering installation, runtime switching, troubleshooting, and use-case selection.
 hide_table_of_contents: true
 ---
 

@@ -1,5 +1,5 @@
 ---
-description: How to troubleshoot when running in eBPF mode.
+description: Troubleshooting guide for the Calico Cloud eBPF data plane on a connected cluster covering verification logs, service connectivity, BPF map inspection, and failure modes.
 ---
 
 # Troubleshoot eBPF mode

@@ -1,5 +1,5 @@
 ---
-description: Learn when to use eBPF, and when not to.
+description: Guidance on when the Calico Cloud eBPF data plane on a connected cluster fits a workload compared to the standard iptables data plane, with trade-offs.
 ---
 
 # eBPF use cases

@@ -1,5 +1,5 @@
 ---
-description: Manage clusters and add new users.
+description: Day-2 operations for Calico Cloud connected clusters covering cluster management, secure component communications, monitoring, eBPF, and disconnection.
 ---
 
 import { DocCardLink, DocCardLinkLayout } from '/src/___new___/components';

@@ -1,5 +1,5 @@
 ---
-description: Tools for scraping useful metrics.
+description: Reference index for monitoring Calico Cloud connected clusters with Prometheus metrics covering BGP, policy, log collection, and component health.
 hide_table_of_contents: true
 ---
 

@@ -1,5 +1,5 @@
 ---
-description: Monitor BGP peering and route exchange in your cluster and get alerts by defining rules and thresholds.
+description: Monitor BGP peering and route exchange in Calico Cloud connected clusters by defining Prometheus rules and thresholds for peer health and route counts.
 ---
 
 # BGP metrics

@@ -1,5 +1,5 @@
 ---
-description: Monitor Fluentd metrics and get alerts on log storage or collection issues.
+description: Track Calico Cloud Fluentd metrics in Prometheus to alert on flow, DNS, and audit log collection disruptions on connected clusters.
 ---
 
 # Fluentd metrics

@@ -1,5 +1,5 @@
 ---
-description: Configure Prometheus metrics.
+description: Reference index for Calico Cloud Prometheus metrics on connected clusters covering BGP, policy, log collection, and recommended dashboards.
 hide_table_of_contents: true
 ---
 

@@ -1,5 +1,5 @@
 ---
-description: Monitor the effects of policy in your cluster and received alerts by defining rules and thresholds.
+description: Monitor the runtime effect of policies on Calico Cloud connected clusters by defining Prometheus rules and thresholds that fire alerts on policy hits.
 ---
 
 # Policy metrics

@@ -1,5 +1,5 @@
 ---
-description: Recommended Prometheus metrics for monitoring Calico Enterprise components.
+description: Recommended Prometheus metrics for Calico Cloud Typha, Felix, and policy components on connected clusters, covering the signals most critical to cluster health.
 ---
 
 # Recommended Prometheus metrics

@@ -1,5 +1,5 @@
 ---
-description: Configure Alertmanager, a Prometheus feature that routes alerts.
+description: Configure Alertmanager in a Calico Cloud connected cluster to route Prometheus alerts to operators with deduplication, grouping, silencing, and inhibition rules.
 ---
 
 # Configure Alertmanager