๐ก Cilium eBPF CNI Installation & NetworkPolicy โ Executive Summary
Technical architectural analysis, practical configuration manifests, and deployment instructions for Cilium eBPF CNI Installation & NetworkPolicy.
Installation
bash
# required helm
helm repo add cilium https://helm.cilium.io/
helm repo update
# Cilium CLI ์ค์น
curl -L --remote-name-all https://github.com/cilium/cilium-cli/releases/latest/download/cilium-linux-amd64.tar.gz
tar xzvf cilium-linux-amd64.tar.gz
sudo mv cilium /usr/local/bin/
Troubleshooting
Problem
bash
cilium status
>>>
/ยฏยฏ\
/ยฏยฏ\__/ยฏยฏ\ Cilium: 2 errors, 1 warnings
\__/ยฏยฏ\__/ Operator: OK
/ยฏยฏ\__/ยฏยฏ\ Envoy DaemonSet: 1 errors
\__/ยฏยฏ\__/ Hubble Relay: disabled
\__/ ClusterMesh: disabled
DaemonSet cilium Desired: 1, Ready: 1/1, Available: 1/1
DaemonSet cilium-envoy Desired: 1, Unavailable: 1/1
Deployment cilium-operator Desired: 1, Ready: 1/1, Available: 1/1
Containers: cilium Running: 1
cilium-envoy Running: 1
cilium-operator Running: 1
clustermesh-apiserver
hubble-relay
Cluster Pods: 0/21 managed by Cilium
Helm chart version: 1.18.4
Image versions cilium quay.io/cilium/cilium:v1.18.4@sha256:49d87af187eeeb9e9e3ec2bc6bd372261a0b5cb2d845659463ba7cc10fe9e45f: 1
cilium-envoy quay.io/cilium/cilium-envoy:v1.34.10-1762597008-ff7ae7d623be00078865cff1b0672cc5d9bfc6d5@sha256:1deb6709afcb5523579bf1abbc3255adf9e354565a88c4a9162c8d9cb1d77ab5: 1
cilium-operator quay.io/cilium/operator-generic:v1.18.4@sha256:1b22b9ff28affdf574378a70dade4ef835b00b080c2ee2418530809dd62c3012: 1
Errors: cilium cilium-8hqv8 controller endpoint-2443-regeneration-recovery is failing since 4s (4x): regeneration recovery failed
cilium cilium-8hqv8 controller endpoint-1381-regeneration-recovery is failing since 3s (4x): regeneration recovery failed
cilium-envoy cilium-envoy 1 pods of DaemonSet cilium-envoy are not ready
Warnings: cilium cilium-8hqv8 2 endpoints are not ready
Uninstallation
Preceding work
bash
# sudo -i
ip link delete cilium_host
ip link delete cilium_ne
ip link delete cilium_vxlan
iptables-save | grep -iv cilium | iptables-restore
ip6tables-save | grep -iv cilium | ip6tables-restore
bpf-clean
bash
sudo rm -rf /sys/fs/bpf/tc/globals/*




Leave a Reply