Story Tag: calico

Stories Tag: calico

Migrating CNI plugin from kube-router to Calico on kops managed Kubernetes cluster | by Josef Janda | Wandera Engineering |...

admin 2 weeks ago in

Network model in Kubernetes The Kubernetes network model requires that all pods have been assigned their own IP addresses and can directly communicate with each other without Network Address Translation (NAT). Kubernetes itself does not provide network connectivity out of the box but it requires a third party Container Network Interface (CNI) plugin to be used. It is a Cloud Native Computing Foundation project and…

Kubernetes: EKS, Calico and custom Admission Webhooks | by Denis Silva | Oct, 2021 | Medium

admin 2 weeks ago in

When using EKS with only Calico CNI the Kubernetes API server on the control plane (managed by AWS) cannot reach webhooks that use a service pointing to pods on Calico pod network.The visible error is a timeout when you perform an operation that triggers the webhook, but it may include: The problem looks like this: Related issues: We use Calico CNI to implement an overlay…

Multipass + Kubernetes + Calico. How to create a small mono node k8s to… | by Pelud Yann-Cyril | Sep,...

admin 4 weeks ago in

OK, there is a lot of tools to create a small Kubernetes (Minikube, Docker Desktop, …) but some time you want to do it your way. During the CKS (Certified Kubernetes Security Specialist) preparation, I needed to play with the linux system underlying Kubernetes. I looked for a solution to manage the system, the components with a light environment. I have found this one that…

Linkerd Service Mesh on AKS. Securing internal traffic with Linkerd… | by Joaquín Menchaca (智裕) | Jul, 2021 | Medium

admin 3 months ago in

The two most often neglected domains of cloud operations are security and o11y (observability). This should come as no surprise because because adding security, such as encryption in transit with mutual TLS, where not only the client verifies the server, the server verifies the client as well, and monitoring the traffic of transitory short lived services increases the already complex solutions to seemingly exponential levels…

AKS with Calico Network Policies. Using Calico Network Policy with Azure… | by Joaquín Menchaca (智裕) | Jul, 2021 |...

admin 3 months ago in

Network policies in Kubernetes are essentially firewalls for pods. By default, pods are accessible from anywhere with no protections. If you like to to use network policies, you’ll need to install a network plugin that supports this feature. This article will demonstrate how to use this feature with Calico network plugin on AKS. The default network plugin for AKS as well as many other Kubernetes…

Getting IPv6 K8s services in your EC2 instances using Calico | by Jainam MJ | Jul, 2021 | Medium

admin 3 months ago in

Despite IPv6 protocol being around for a quarter-century, IPv4 addresses are still dominantly used. But with more address endpoints coming into existence and IPv4s getting exhausted, the internet is fast moving towards IPv6. IPv6 addresses are plenty and it would benefit the organization to have IPv6 address endpoints alongside IPv4 addresses. This article describes step-by-step how to enable IPv6 Kubernetes on AWS EC2 instances. 1….

[Kubernetes]使用Calico CNI在CentOS8上pod to pod連線問題 | by Morpheus Huang | Jul, 2021 | Medium

admin 3 months ago in

因為有需求要在CentOS上安裝Kubernetes，同事使用CentOS 8與Calico v3.10，結果出現pod to pod無法連線的問題… 實際裝了一遍發現CentOS 8搭配最新版本的Calico v3.19，測起來沒啥問題，改用Calico v3.10後，確實Pod-to-Pod不通。因此，查了有問題的叢集的iptables規則，發現並沒看到應該有的cali-開頭的規則，這時候想到了之前友人安裝Kubernets時，提到RHEL 8不支援iptable-legacy導致kubernetes裝不起來的情形，又CentOS是RHEL-based，於是查了CentOS 8 iptabels版本 iptables v1.8.4 (nf_tables) ，看來問題可能在這了。知道可能的問題原因，就先…..萬事問google大神XD 從上面的issue討論，其實Calico早在v3.8.1+就有相關設定參數FELIX_IPTABLESBACKEND，可以處理這個問題，根據官方文件的解釋: This parameter controls which variant of iptables binary Felix uses. Set this to Auto for auto detection of the backend. If a specific backend is needed then use NFT for hosts using a netfilter backend or Legacy for others. [Default: Auto] 從官方文件可以知道，目前這個值預設是Auto的，那使用Calico 3.10為何會有問題，原因在於 Default: Auto 是Calico v3.18.0才改的(Default for…

CKA Exercises, Network policy, Namespace | by Igor Zhivilo | Jul, 2021 | Medium

admin 4 months ago in

I am a DevOps/Software engineer (at Cloudify.co), and I started preparation for the CKA Kubernetes exam. In this series, I will share some exercises I find useful during my preparation in order to help you better prepare for the CKA exam. I will gather all exercises in this GitHub account, clone this repo to get all exercises at once. CKA exercises series published posts: Let’s…

Network policy and Calico CNI to Secure a Kubernetes cluster | by Igor Zhivilo | Jun, 2021 | Medium

admin 4 months ago in

As a DevOps engineer at Cloudify.co, I am working on the migration of the CaaS (Cloudify as a Service) solution to Kubernetes (EKS), previously it was running directly on AWS’s EC2 instances and my main goal was to migrate it to Kubernetes, which includes: https://cloudify.co/download The main purpose of this post is to share my knowledge related to Calico CNI installation to the already existing…

Become certified calico operator: L1 | by Rishi Jain | Jun, 2021 | Medium

admin 4 months ago in

In this article, I will share my experience with Calico Operator certification course. What do you learn in this course? This free and self-paced course will arm you with the knowledge you need to understand how Kubernetes networking works, how to configure and manage a Calico network, and how to secure your cluster following today’s best practices, with the confidence you need to run mission-critical…