SEPTEMBER 2022 GitOps for Kubernetes Essentials to Applications Hosted in Cloud-Native Ecosystems NINAD DESAI STAFF ENGINEER, INFRACLOUD CONTENTS • About GitOps for Kubernetes • Configuration Management Management in Kubernetes • GitOps for Kubernetes Essentials • Conclusion Git is the most widely used version control system, with more than 80 percent of its market share in today’s software industry running in Kubernetes. In this Refcard, we will dive into what GitOps means in the Kubernetes world, key principles, and the advantages for cloud-native ecosystems. ABOUT GITOPS FOR KUBERNETES Thanks

North-South Load Balancing of Kubernetes Services with eBPF/XDP Martynas Pumputis (Isovalent) October 28, 2020 10.0.0.1 10.0.0.2 10.0.0.3 httpd httpd “httpd” service 10.0.0.1:30000 10.0.0.2:30000 KUBE-FORWARD -m comment --comment "kubernetes forwarding rules" -m mark --mark 0x4000/0x4000 -j ACCEPT -A KUBE-FORWARD -s 10.217.0.0/16 -m comment --comment "kubernetes forwarding conntrack pod source rule" --ctstate RELATED,ESTABLISHED -j ACCEPT -A KUBE-FORWARD -d 10.217.0.0/16 -m comment --comment "kubernetes forwarding conntrack pod destination rule" -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT

3.2. Deployment value comes from features and not Git hashes 3.3. The new Codefresh GitOps dashboard 3.4. Argo CD Integration 3.5. CI/CD pipelines with Codefresh 3.6. Getting started with GitOps was officially named as ​“GitOps” in 2017​ by Weaveworks and has since become very popular for Kubernetes deployments. The concepts behind GitOps are quite straight-forward: ● Infrastructure as perform a Git operation such as creating a commit or opening a pull request Specifically for Kubernetes, GitOps says that you must not use `kubectl` to change the cluster state in an ad hoc manner.

(new action type) • SLA - for configuring SLAs • SLA report - for SLA reports (also available as dashboard widget) 9 状态计算和传播规则 有新的状态计算规则和灵活的附加规则，用于基于直接子服务的状态和权重计算父服务的状态。现在还可以设置灵活的规则来将服务状态 传播到父服务。 服务权限 新的官方模板可用于监控： Kubernetes • 基于 HTTP 的 Kubernetes 节点 • 基于 HTTP 的 Kubernetes 集群状态 • 通过 HTTP 的 Kubernetes API 服务器 • 通过 HTTP 的 Kubernetes 控制器管理器 • 基于 HTTP 的 Kubernetes 调度程序 • 基于 HTTP 的 Kubernetes kubelet 要启用 Kubernetes 监控，您需要使用新工具 Zabbix Helm Chart，它会在 Kubernetes 集群中安装 Zabbix proxy 和 Zabbix agent。 要了解有关配置模板的更多信息，请参阅HTTP 模板操作。 Mikrotik • MikroTik SNMP - 53 新型号特定模板，用于监控各种型号的 MikroTik 以太网路由器和交换机，请参阅

Concepts Component Overview Terminology Networking Network Security eBPF Datapath Observability Kubernetes Integration Multi-Cluster (Cluster Mesh) Getting Help FAQ Slack GitHub Training Enterprise support Layer 4 Examples Layer 7 Examples Deny Policies Host Policies Layer 7 Protocol Visibility Using Kubernetes constructs in policy Endpoint Lifecycle Troubleshooting Monitoring & Metrics Cilium Metrics Hubble Local Development in Vagrant Box Making Changes Add/update a golang dependency Add/update a new Kubernetes version Optional: Docker and IPv6 Debugging Building Container Images Developer images Official

Concepts Component Overview Terminology Networking Network Security eBPF Datapath Observability Kubernetes Integration Multi-Cluster (Cluster Mesh) Getting Help FAQ Slack GitHub Training Enterprise support Layer 4 Examples Layer 7 Examples Deny Policies Host Policies Layer 7 Protocol Visibility Using Kubernetes constructs in policy Endpoint Lifecycle Troubleshooting Monitoring & Metrics Cilium Metrics Hubble Local Development in Vagrant Box Making Changes Add/update a golang dependency Add/update a new Kubernetes version Optional: Docker and IPv6 Debugging Building Container Images Developer images Official

Orchestrators Concepts Component Overview Terminology Networking Network Security eBPF Datapath Kubernetes Integration Multi-Cluster (Cluster Mesh) Getting Help FAQ Slack GitHub Security Bugs Operations Layer 3 Examples Layer 4 Examples Layer 7 Examples Host Policies Layer 7 Protocol Visibility Using Kubernetes constructs in policy Endpoint Lifecycle Troubleshooting Monitoring & Metrics Cilium Metrics Hubble server Hubble Relay Reference Command Cheatsheet Command utilities: Command examples: Kubernetes examples: Command Reference cilium-agent cilium cilium-health cilium-operator cilium-operator-aws

Concepts Component Overview Terminology Networking Network Security eBPF Datapath Observability Kubernetes Integration Multi-Cluster (Cluster Mesh) Getting Help FAQ Slack GitHub Training Enterprise support Layer 4 Examples Layer 7 Examples Deny Policies Host Policies Layer 7 Protocol Visibility Using Kubernetes constructs in policy Endpoint Lifecycle Troubleshooting Monitoring & Metrics Cilium Metrics Hubble Local Development in Vagrant Box Making Changes Add/update a golang dependency Add/update a new Kubernetes version Optional: Docker and IPv6 Debugging Building Container Images Developer images Official

custom graphs that can combine multiple items into a single view • network maps • slideshows in a dashboard-style overview • reports • high-level (business) view of monitored resources Historical data (new action type) • SLA - for configuring SLAs • SLA report - for SLA reports (also available as dashboard widget) Note that a separate section for service configuration no longer exists (previously in while the child links are not. Widgets Several dashboard widgets have been added in the new version. Top hosts A Top hosts widget has been added to dashboard widgets. This widget is designed to replace

the Cilium architecture and how these components integrate with existing architectures, such as Kubernetes. Installation : Details instructions for installing, configuring, and troubleshooting Cilium in Datapath Scale Kubernetes Integration Getting Help FAQ Slack GitHub Security Bugs Integrations Kubernetes Introduction Concepts Requirements Configuration Network Policy Endpoint CRD Kubernetes Compatibility Policy Policy Enforcement Modes Rule Basics Layer 3 Examples Layer 4 Examples Layer 7 Examples Kubernetes Endpoint Lifecycle Troubleshooting Monitoring & Metrics Installation cilium-agent cilium-operator