Kubernetes Without Kube-proxy

Описание к видео Kubernetes Without Kube-proxy

Kube-proxy provide network function to Kubernetes using iptables which is decade old kernel technology, the new cool kernel eBPF feature that Cilium project uses not only provide network but also observability and security to Kubernetes network. In this demo, I am able to bring up a three node Kubernetes cluster without Kube-proxy and with Cilium in just a few steps to demonstrate the new advanced kernel eBPF network feature to Kubernetes.

ref: https://docs.cilium.io/en/v1.9/gettin...
ref: https://docs.cilium.io/en/v1.9/gettin...
1 kubeadm init --v=5 --skip-phases=addon/kube-proxy

mkdir -p $HOME/.kube
sudo cp -i /etc/kubernetes/admin.conf $HOME/.kube/config
sudo chown $(id -u):$(id -g) $HOME/.kube/config


2 helm template cilium cilium/cilium --version 1.9.6 \
--namespace kube-system \
--set kubeProxyReplacement=strict \
--set k8sServiceHost=10.3.72.9 \
--set k8sServicePort=6443 right angle cilium-template.yaml

kubectl apply -f cilium-template.yaml

kubeadm join --v=5 10.3.72.9:6443 --token your-token-string\
--discovery-token-ca-cert-hash your-hash-string

4
kubectl create ns test-ns
kubectl apply -f connectivity-check.yaml -n test-ns

Комментарии

Информация по комментариям в разработке