Security Familiar tools and Git workflows from application development teams Standard Workflow Multi-cluster consistency 7 Source Git Repository Image Registry CI The GitOps Application Delivery Kubernetes-native on-demand delivery pipelines OpenShift GitOps Declarative GitOps for multi-cluster continuous delivery Ecosystem Integrations OpenShift GitOps 11 OpenShift Builds OpenShift GitOps Declarative GitOps for multi-cluster continuous delivery 27 OpenShift GitOps Declaratively manage cluster and application configurations across multi-cluster OpenShift and Kubernetes infrastructure

integration with OpenShift ● Application sets ● Argo CD and Tekton integrations ● Dashboard for multi-cluster deployment environments ● GitOps-based project bootstrapping with Tekton, Argo CD, kustomize Learning ○ https://learn.openshift.com/introduction/ ■ Introduction to GitOps with OpenShift ■ Multi-cluster GitOps with OpenShift linkedin.com/company/red-hat youtube.com/user/RedHatVideos facebook.com/redhatinc

reviewing the underlying infrastructure provider as well as the Kubernetes cluster state. MULTI-CLUSTER CONFIGURATION MANAGEMENT Being declarative in nature, Kubernetes helps most larger and enterprise running across these clusters handle everything on your behalf, and so, it is a great fit from a multi-cluster configuration management perspective. INFRASTRUCTURE AS CODE In the Kubernetes world, GitOps

Services +3k CPU +2k Mem +5TB Nodes +300 kube-proxy replacement NetworkPolicy logging Multi-cluster DNS Aware NetworkPolicy Increased Istio security External Services TLS visibility Performance

● Configuration Drift: Monitors live state against desired state ● Enterprise Ready: SSO, multi-cluster, and audit trails ● Extensibility: Rich CLI, webhooks, events, and polished web UI @codefresh

Overview Terminology Networking Network Security eBPF Datapath Observability Kubernetes Integration Multi-Cluster (Cluster Mesh) Getting Help FAQ Slack GitHub Training Enterprise support Security Bugs Operations running on the remote. Cluster Mesh WireGuard enabled Cilium clusters can be connected via Multi-Cluster (Cluster Mesh). The clustermesh-apiserver will forward the necessary WireGuard public keys automatically the connectivity test in multi cluster mode: cilium connectivity test --context $CLUSTER1 --multi-cluster $CLUSTER2 Next Steps Logical next steps to explore from here are: Load-balancing & Service

Overview Terminology Networking Network Security eBPF Datapath Observability Kubernetes Integration Multi-Cluster (Cluster Mesh) Getting Help FAQ Slack GitHub Training Enterprise support Security Bugs Operations the connectivity test in multi cluster mode: cilium connectivity test --context $CLUSTER1 --multi-cluster $CLUSTER2 Next Steps Logical next steps to explore from here are: Load-balancing & Service Overview Terminology Networking Network Security eBPF Datapath Observability Kubernetes Integration Multi-Cluster (Cluster Mesh) Component Overview A deployment of Cilium and Hubble consists of the following

Overview Terminology Networking Network Security eBPF Datapath Observability Kubernetes Integration Multi-Cluster (Cluster Mesh) Getting Help FAQ Slack GitHub Training Enterprise support Security Bugs Operations kvstore at all, the following is a list of reasons when to use a kvstore: If you want to use the Multi-Cluster (Cluster Mesh) functionality. If you are running in an environment with more than 250 nodes, 5k Overview Terminology Networking Network Security eBPF Datapath Observability Kubernetes Integration Multi-Cluster (Cluster Mesh) Component Overview A deployment of Cilium and Hubble consists of the following

Component Overview Terminology Networking Network Security eBPF Datapath Kubernetes Integration Multi-Cluster (Cluster Mesh) Getting Help FAQ Slack GitHub Security Bugs Operations System Requirements kvstore at all, the following is a list of reasons when to use a kvstore: If you want to use the Multi-Cluster (Cluster Mesh) functionality. If you are running in an environment with more than 250 nodes, 5k Component Overview Terminology Networking Network Security eBPF Datapath Kubernetes Integration Multi-Cluster (Cluster Mesh) Component Overview A deployment of Cilium and Hubble consists of the following

"path": "/public$" } ] } }] }] }] Multi-Cluster When opera�ng mul�ple cluster with cluster mesh, the cluster name is exposed via the label io