Cilium eBPF CNI Installation & NetworkPolicy

๐Ÿ’ก Cilium eBPF CNI Installation & NetworkPolicy โ€” Executive Summary

Technical architectural analysis, practical configuration manifests, and deployment instructions for Cilium eBPF CNI Installation & NetworkPolicy.

Installation
bash
# required helm
helm repo add cilium https://helm.cilium.io/
helm repo update

# Cilium CLI ์„ค์น˜
curl -L --remote-name-all https://github.com/cilium/cilium-cli/releases/latest/download/cilium-linux-amd64.tar.gz
tar xzvf cilium-linux-amd64.tar.gz
sudo mv cilium /usr/local/bin/
Troubleshooting
Problem
bash
cilium status
>>>
    /ยฏยฏ\
 /ยฏยฏ\__/ยฏยฏ\    Cilium:             2 errors, 1 warnings
 \__/ยฏยฏ\__/    Operator:           OK
 /ยฏยฏ\__/ยฏยฏ\    Envoy DaemonSet:    1 errors
 \__/ยฏยฏ\__/    Hubble Relay:       disabled
    \__/       ClusterMesh:        disabled

DaemonSet              cilium                   Desired: 1, Ready: 1/1, Available: 1/1
DaemonSet              cilium-envoy             Desired: 1, Unavailable: 1/1
Deployment             cilium-operator          Desired: 1, Ready: 1/1, Available: 1/1
Containers:            cilium                   Running: 1
                       cilium-envoy             Running: 1
                       cilium-operator          Running: 1
                       clustermesh-apiserver
                       hubble-relay
Cluster Pods:          0/21 managed by Cilium
Helm chart version:    1.18.4
Image versions         cilium             quay.io/cilium/cilium:v1.18.4@sha256:49d87af187eeeb9e9e3ec2bc6bd372261a0b5cb2d845659463ba7cc10fe9e45f: 1
                       cilium-envoy       quay.io/cilium/cilium-envoy:v1.34.10-1762597008-ff7ae7d623be00078865cff1b0672cc5d9bfc6d5@sha256:1deb6709afcb5523579bf1abbc3255adf9e354565a88c4a9162c8d9cb1d77ab5: 1
                       cilium-operator    quay.io/cilium/operator-generic:v1.18.4@sha256:1b22b9ff28affdf574378a70dade4ef835b00b080c2ee2418530809dd62c3012: 1
Errors:                cilium             cilium-8hqv8    controller endpoint-2443-regeneration-recovery is failing since 4s (4x): regeneration recovery failed
                       cilium             cilium-8hqv8    controller endpoint-1381-regeneration-recovery is failing since 3s (4x): regeneration recovery failed
                       cilium-envoy       cilium-envoy    1 pods of DaemonSet cilium-envoy are not ready
Warnings:              cilium             cilium-8hqv8    2 endpoints are not ready
Uninstallation
Preceding work
bash
# sudo -i
ip link delete cilium_host
ip link delete cilium_ne
ip link delete cilium_vxlan

iptables-save | grep -iv cilium | iptables-restore
ip6tables-save | grep -iv cilium | ip6tables-restore
bpf-clean
bash
sudo rm -rf /sys/fs/bpf/tc/globals/*

Comments

Leave a Reply

Your email address will not be published. Required fields are marked *