Skip to main content

15 posts tagged with "Cilium"

Cilium provides eBPF-based networking, security, and observability for cloud-native environments like Kubernetes, offering advanced traffic management and policy enforcement.

View All Tags

Dual-Stack: Cilium Complementary Features

· 12 min read
Eleni Grosdouli
DevOps Consulting Engineer at Cisco Solutions GmbH

Introduction

Welcome to part 4 of the dual-stack series! In parts 1, 2, and 3, we walked through how to set up dual-stack networking on a Proxmox server using our Internet provider. We also showed you how to deploy RKE2 Kubernetes clusters and share both IPv4 and IPv6 services across them. Now, in the final part of the series, we are diving into some of the most commonly used features of Cilium for a home lab setup! Let’s get started!

title image reading "Proxmox Rancher and Cilium"

CAPI, Sveltos, Cyclops: Automated Dev Environments

· 11 min read
Eleni Grosdouli
DevOps Consulting Engineer at Cisco Solutions GmbH

Introduction

Are you ready to simplify how your Platform team spins up and down development environments while improving DevX? In this post, we show how Cluster API(CAPI), Sveltos, and Cyclops work together. They automatically create Kubernetes environments. This setup lets developers easily interact with and manage their applications. It is not magic, it is the power of Sveltos combined with the right tooling!

title image reading "Sveltos, CAPI, Cyclops Examaple"

Dual-Stack: Global Service Sharing RKE2/Cilium Proxmox

· 9 min read
Eleni Grosdouli
DevOps Consulting Engineer at Cisco Solutions GmbH

Introduction

Welcome to part 3 of the dual-stack series! In part 1 and part 2, we discovered how to enable dual-stack on a Proxmox server using our Internet provider and deploy RKE2 clusters. In today's post, we continue our journey and enable a Cilium Cluster Mesh between two RKE2 clusters. The goal is to share IPv4 and IPv6 services between the different clusters effortlessly. Let’s dive in!

title image reading "What gives people joy?"

Dual-Stack: Rancher RKE2 With Cilium on Proxmox

· 10 min read
Eleni Grosdouli
DevOps Consulting Engineer at Cisco Solutions GmbH

Introduction

Welcome to part 2 of the dual-stack series! In part 1, we covered how to enable IPv6 Prefix allocation using pfsense on Proxmox with Fritz!Box as a home router. The setup allows virtual machines in a dedicated interface to receive an IPv4 and an IPv6 address. If you have completed part 1, you can continue with the dual-stack RKE2 setup powered by Cilium.

title image reading "What gives people joy?"

Talos, Proxmox, OpenTofu: Beginner's Guide Pt.3

· 6 min read
Eleni Grosdouli
DevOps Consulting Engineer at Cisco Solutions GmbH

Introduction

Welcome to part 3 of the Talos Linux Kubernetes cluster bootstrap of the Proxmox series. In today's post, we will perform changes to make the code reusable and extensible. Users can follow a GitOps approach towards Talos deployments.

We assume you already have the basic project structure. To follow along, check out the part 1 and part 2 posts.

title image reading "Talos Cluster on Proxmox with OpenTofu and Cilium"

Talos, Proxmox, OpenTofu: Beginner's Guide Pt.2

· 10 min read
Eleni Grosdouli
DevOps Consulting Engineer at Cisco Solutions GmbH

Introduction

Welcome to part 2 of the Talos Linux Kubernetes cluster bootstrap on the Proxmox series.

We will enable Cilium as our CNI (Container Network Interface), use KubeProxy replacement, and set up Cilium Hubble for network observability. We will outline basic kubectl commands to evaluate the Cilium setup alongside network tests.

We assume you already have the basic project structurefrom part 1, as we will extend the configuration for Cilium. To follow along, check out the part 1 post.

title image reading "Talos Cluster on Proxmox with OpenTofu and Cilium"

Sveltos: Optimise Day-2 Ops, Cilium & Tetragon

· 9 min read
Eleni Grosdouli
DevOps Consulting Engineer at Cisco Solutions GmbH

Introduction

How easy is it to handle Day-2 operations with existing CI/CD tooling? Sveltos provides the ability to perform not only Day-1 operations but also helps platform administrators, tenant administrators and other operators with Day-2 operations. For example, we can use the HealthCheck and the ClusterHealthCheck features to not only watch the health of a cluster but also collect information from the managed clusters and display them in the management cluster.

In today's blog post, we will cover a way of deploying Cilium as our CNI alongside Cilium Tetragon for observability. We will then continue with a simple TracingPolicy deployment to capture socket connections and then use Sveltos to display the tracing results back to the management cluster.

The goal of the demonstration is to showcase how Sveltos can be used for different Kubernetes cluster operations based on the use case at hand.

title image reading "Sveltos Health Check"

OpenTofu: RKE2 Cluster with Cilium on Azure

· 12 min read
Eleni Grosdouli
DevOps Consulting Engineer at Cisco Solutions GmbH

Introduction

In a previous post, we covered how to create an RKE2 cluster on Azure Cloud using the cloud-free credits from the Rancher UI. As this is a convenient approach to get started with Rancher, in today's post, we will demonstrate how to use OpenTofu to automate the deployment.

OpenTofu is a fork of Terraform. It is an open-source project, community-driven, and managed by the Linux Foundation. If you want to get familiar with what OpenTofu is and how to get started, check out the link here.

We will also show how easy it is to customise the Cilium configuration. Plus, we will enable kube-vip for LoadBalancer services using HCL (HashiCorp Configuration Language).

title image reading "OpenTofu Rancher RKE2 Cluster on Azure"

Sveltos Templating: Cilium Cluster Mesh

· 9 min read
Eleni Grosdouli
DevOps Consulting Engineer at Cisco Solutions GmbH

Introduction

Have you ever wondered how to dynamically instantiate Kubernetes resources before deploying them to a cluster? What if I tell you there is an easy way to do it? Sveltos lets you define add-ons and applications using templates. Before deploying any resource down the managed clusters, Sveltos instantiates the templates using information gathered from the management cluster.

In a previous post, we outlined a step-by-step approach to forming a Cilium cluster mesh between two clusters. In today's post, we will demonstrate how the Sveltos templating is used to deploy a Cilium cluster mesh dynamically in one go.

title image reading "Sveltos Templating Cilium"

Rancher RKE2 Cluster on Azure

· 10 min read
Eleni Grosdouli
DevOps Consulting Engineer at Cisco Solutions GmbH

Introduction

For the last couple of days, I have been working on a new use case installing RKE2 clusters powered with Cilium by Azure Cloud. The requirement at hand was to use a Rancher instance and from there start deploying RKE2 clusters. I found that the official Rancher documentation has outdated instructions for pre-configuring Azure Cloud.

In today's blog post, we will outline the steps to set up Azure cloud-free credits for deploying RKE2 clusters with Cilium. Additionally, we will cover any limitations that come with the free credit concept.

title image reading "Rancher RKE2 Cluster on Azure"

Cilium Cluster Mesh on RKE2

· 11 min read
Eleni Grosdouli
DevOps Consulting Engineer at Cisco Solutions GmbH

Introduction

Working with on-prem RKE2 clusters, I noticed many issues in forming a Cilium cluster mesh between clusters in an automated way.

In this post, I will walk through a step-by-step process to get a Cilium cluster mesh up and running. We will cover the problems I ran into along the way. The goal is to follow a GitOps-friendly approach, with no need for the Cilium CLI. We will use Helm and kubectl for the setup.

Cilium on EKS with Sveltos

· 10 min read
Eleni Grosdouli
DevOps Consulting Engineer at Cisco Solutions GmbH

Introduction

In today's blog post, we will demonstrate an easy way of deploying and controlling Cilium on an EKS cluster with Sveltos.

Most documentation shows step-by-step installation using Helm chart commands. So, we chose to show a different way: the GitOps approach. We will use the Sveltos ClusterProfile CRD (Custom Resource Definition) for this.

title image reading "Cilium on EKS with Sveltos Diagram"