“connectivity-check” to test connectivity between pods. It is recommended to create a separate namespace for this. kubectl create ns cilium-test Deploy the check with: kubectl apply -n cilium-test -f Variables Specify the namespace in which Cilium is installed as CILIUM_NAMESPACE environment variable. Subsequent commands reference this environment variable. export CILIUM_NAMESPACE=kube-system Enable with the following command: helm upgrade cilium cilium/cilium --version 1.9.18 \ --namespace $CILIUM_NAMESPACE \ --reuse-values \ --set hubble.listenAddress=":4244" \ --set hubble.relay.enabled=true

“connectivity-check” to test connectivity between pods. It is recommended to create a separate namespace for this. kubectl create ns cilium-test Deploy the check with: kubectl apply -n cilium-test -f NetworkPolicy applies to them: kubectl get pods --all-namespaces -o custom- columns=NAMESPACE:.metadata.namespace,NAME:.metadata.name,HOSTNETWORK:. spec.hostNetwork --no-headers=true | grep '' | “connectivity-check” to test connectivity between pods. It is recommended to create a separate namespace for this. kubectl create ns cilium-test Deploy the check with: kubectl apply -n cilium-test -f

ℹ Monitor aggregation detected, will skip some flow validation steps � [k8s-cluster] Creating namespace for connectivity check... (...) ----------------------------------------------------------------------- Cilium: Deploy Cilium release via Helm: helm install cilium cilium/cilium --version 1.10.20 \ --namespace kube-system GKE To install Cilium on Google Kubernetes Engine (GKE) [https://cloud.google.com/kubernetes- $NATIVE_CIDR Deploy Cilium release via Helm: helm install cilium cilium/cilium --version 1.10.20 \ --namespace kube-system \ --set nodeinit.enabled=true \ --set nodeinit.reconfigureKubelet=true \ --set

Variables Specify the namespace in which Cilium is installed as CILIUM_NAMESPACE environment variable. Subsequent commands reference this environment variable. export CILIUM_NAMESPACE=kube-system Install com/cilium/hubble.git --branch v0.5 cd hubble/install/kubernetes helm template hubble \ --namespace $CILIUM_NAMESPACE \ --set metrics.enabled="{dns,drop,tcp,flow,port- distribution,icmp,http}" \ --set NetworkPolicy applies to them: kubectl get pods --all-namespaces -o custom- columns=NAMESPACE:.metadata.namespace,NAME:.metadata.name,HOSTNETWORK:. spec.hostNetwork --no-headers=true | grep '' |

Monitor aggregation detected, will skip some flow validation steps � [k8s-cluster] Creating namespace for connectivity check... (...) ----------------------------------------------------------------------- Cilium: Deploy Cilium release via Helm: helm install cilium cilium/cilium --version 1.11.20 \ --namespace kube-system GKE To install Cilium on Google Kubernetes Engine (GKE) [https://cloud.google.com/kubernetes- $NATIVE_CIDR Deploy Cilium release via Helm: helm install cilium cilium/cilium --version 1.11.20 \ --namespace kube-system \ --set nodeinit.enabled=true \ --set nodeinit.reconfigureKubelet=true \ --set

the Helm templates. Generate the required YAML file and deploy it: helm template cilium \ --namespace kube-system \ --set global.etcd.enabled=true \ --set global.etcd.managed=true \ > cilium.yaml Troubleshooting Make sure that kube-dns or coredns is running and healthy in the kube- system namespace. A functioning Kubernetes DNS is strictly required in order for Cilium to resolve the ClusterIP based on the Helm templates. Change the etcd endpoints accordingly: helm template cilium \ --namespace kube-system \ --set global.etcd.enabled=true \ --set global.etcd.endpoints[0]=http://etcd-endpoint1:2379

Troubleshooting Make sure that kube-dns or coredns is running and healthy in the kube-system namespace. A func�oning Kubernetes DNS is strictly required in order for Cilium to resolve the ClusterIP of the Installation Verify that Cilium pods were started on each of your worker nodes kubectl --namespace kube-system get ds cilium NAME DESIRED CURRENT READY NODE-SELECTOR AGE cilium Enable kubelet to operate in CNI mode Install the Cilium CNI configura�on file kubectl create namespace cilium kubectl -n cilium apply -f https://raw.githubusercontent.com/cilium/cilium/ Restart kube-dns