Observability Kubernetes Integration Multi-Cluster (Cluster Mesh) Getting Help FAQ Slack GitHub Training Enterprise support Security Bugs Operations System Requirements Summary Architecture Support Linux Distribution command to validate that your cluster has proper network connectivity: $ cilium connectivity test ℹ Monitor aggregation detected, will skip some flow validation steps � [k8s-cluster] Creating namespace for command to validate that your cluster has proper network connectivity: $ cilium connectivity test ℹ Monitor aggregation detected, will skip some flow validation steps � [k8s-cluster] Creating namespace for

Observability Kubernetes Integration Multi-Cluster (Cluster Mesh) Getting Help FAQ Slack GitHub Training Enterprise support Security Bugs Operations System Requirements Summary Linux Distribution Compatibility command to validate that your cluster has proper network connectivity: $ cilium connectivity test ℹ Monitor aggregation detected, will skip some flow validation steps � [k8s-cluster] Creating namespace for command to validate that your cluster has proper network connectivity: $ cilium connectivity test ℹ Monitor aggregation detected, will skip some flow validation steps � [k8s-cluster] Creating namespace for

Observability Kubernetes Integration Multi-Cluster (Cluster Mesh) Getting Help FAQ Slack GitHub Training Enterprise support Security Bugs Operations System Requirements Summary Linux Distribution Compatibility -f https://raw.githubusercontent.com/cilium/cilium/v1.9/inst Validate the Installation You can monitor as Cilium and all required components are being installed: kubectl -n kube-system get pods --watch there are no pods to restart. You can stop this with ctrl-c. Validate the Installation You can monitor as Cilium and all required components are being installed: kubectl -n kube-system get pods --watch

-f https://raw.githubusercontent.com/cilium/cilium/v1.6/inst Validate the Installation You can monitor as Cilium and all required components are being installed: kubectl -n kube-system get pods --watch -f https://raw.githubusercontent.com/cilium/cilium/v1.6/inst Validate the Installation You can monitor as Cilium and all required components are being installed: kubectl -n kube-system get pods --watch managed=true \ > cilium.yaml kubectl create -f cilium.yaml Validate the Installation You can monitor as Cilium and all required components are being installed: kubectl -n kube-system get pods --watch

-f https://raw.githubusercontent.com/cilium/cilium/v1.7/inst Validate the Installation You can monitor as Cilium and all required components are being installed: kubectl -n kube-system get pods --watch deleted pod "metrics-server-v0.3.1-54699c9cc8-7l5w2" deleted Validate the Installation You can monitor as Cilium and all required components are being installed: kubectl -n kube-system get pods --watch hostPort.enabled=true \ --set global.pullPolicy=IfNotPresent Validate the Installation You can monitor as Cilium and all required components are being installed: kubectl -n kube-system get pods --watch

-f https://raw.githubusercontent.com/cilium/cilium/v1.5/exam Validate the Installation You can monitor as Cilium and all required components are being installed: kubectl -n kube-system get pods --watch CoreDNS if the pods are not managed by the Cilium CNI plugin. Validate the Installation You can monitor as Cilium and all required components are being installed: kubectl -n kube-system get pods --watch /bin/bash root@minikube:~# Next, start Cilium monitor, and limit the output to only “l7” type messages using the “-t” flag: root@minikube:~# cilium monitor -t l7 Listening for events on 2 CPUs with 64x4096

-f https://raw.githubusercontent.com/cilium/cilium/v1.8/inst Validate the Installation You can monitor as Cilium and all required components are being installed: kubectl -n kube-system get pods --watch there are no pods to restart. You can stop this with ctrl-c. Validate the Installation You can monitor as Cilium and all required components are being installed: kubectl -n kube-system get pods --watch global.pullPolicy=IfNotPresent \ --set config.ipam=kubernetes Validate the Installation You can monitor as Cilium and all required components are being installed: kubectl -n kube-system get pods --watch

To change picture:Right click on image > Replace image > Select file ❏ Durable log storage and enterprise Security Information and Event Management (SIEM) integration ❏ hubble observe command to help

Postmortem Iteration is key ● Built a tool to automatically reload falco on rule changes ● Rules: monitor well known IPs, binary names, forbidden k8s actions ● Action: Notify to slack for human banhammer

October 28, 2020 Hardware breakpoint Memory watchpoint Used in debuggers Elegant mechanism to monitor memory access Perf hardware breakpoint implementation: mem:[:access] [Hardware breakpoint]