Hubble can answer questions such as: Service dependencies & communication map What services are communicating with each other? How frequently? What does the service dependency graph look like? What HTTP HTTP calls are being made? What Kafka topics does a service consume from or produce to? Network monitoring & alerting Is any network communication failing? Why is communication failing? Is it DNS? Is it requests? Application monitoring What is the rate of 5xx or 4xx HTTP response codes for a particular service or across all clusters? What is the 95th and 99th percentile latency between HTTP requests and responses

Hubble can answer questions such as: Service dependencies & communication map What services are communicating with each other? How frequently? What does the service dependency graph look like? What HTTP HTTP calls are being made? What Kafka topics does a service consume from or produce to? Network monitoring & alerting Is any network communication failing? Why is communication failing? Is it DNS? Is it requests? Application monitoring What is the rate of 5xx or 4xx HTTP response codes for a particular service or across all clusters? What is the 95th and 99th percentile latency between HTTP requests and responses

container configura�on. Why Cilium? The development of modern datacenter applica�ons has shi�ed to a service- oriented architecture o�en referred to as microservices, wherein a large applica�on is split into to transparently insert security visibility + enforcement, but does so in a way that is based on service / pod / container iden�ty (in contrast to IP address iden�fica�on in tradi�onal systems) and can requests with method GET and path /public/.* . Deny all other requests. Allow service1 to produce on Ka�a topic topic1 and service2 to consume on topic1 . Reject all other Ka�a messages. Require the HTTP

Hubble can answer questions such as: Service dependencies & communication map What services are communicating with each other? How frequently? What does the service dependency graph look like? What HTTP HTTP calls are being made? What Kafka topics does a service consume from or produce to? Network monitoring & alerting Is any network communication failing? Why is communication failing? Is it DNS? Is it requests? Application monitoring What is the rate of 5xx or 4xx HTTP response codes for a particular service or across all clusters? What is the 95th and 99th percentile latency between HTTP requests and responses

configuration. Why Cilium? The development of modern datacenter applications has shifted to a service-oriented architecture often referred to as microservices, wherein a large application is split into to transparently insert security visibility + enforcement, but does so in a way that is based on service / pod / container identity (in contrast to IP address identification in traditional systems) and requests with method GET and path /public/.*. Deny all other requests. Allow service1 to produce on Kafka topic topic1 and service2 to consume on topic1. Reject all other Kafka messages. Require the HTTP header

Hubble can answer questions such as: Service dependencies & communication map What services are communicating with each other? How frequently? What does the service dependency graph look like? What HTTP HTTP calls are being made? What Kafka topics does a service consume from or produce to? Network monitoring & alerting Is any network communication failing? Why is communication failing? Is it DNS? Is it requests? Application monitoring What is the rate of 5xx or 4xx HTTP response codes for a particular service or across all clusters? What is the 95th and 99th percentile latency between HTTP requests and responses

configuration. Why Cilium? The development of modern datacenter applications has shifted to a service-oriented architecture often referred to as microservices, wherein a large application is split into to transparently insert security visibility + enforcement, but does so in a way that is based on service / pod / container identity (in contrast to IP address identification in traditional systems) and requests with method GET and path /public/.*. Deny all other requests. Allow service1 to produce on Kafka topic topic1 and service2 to consume on topic1. Reject all other Kafka messages. Require the HTTP header

YARN [https://hadoop.apache.org/docs/current/hadoop-yarn/hadoop-yarn-site/YARN.html], Kubernetes (K8s) [https://kubernetes.io/] to create the Spark application; 2) a user account can only access data and Deploying Kyuubi Basics Configurations Engines Security Authentication Authorization Kinit Auxiliary Service Hadoop Credentials Manager Monitoring 1. Monitoring Kyuubi - Logging System 2. Monitoring Kyuubi Hive Metasto re Optional referenced by Spark Hive Metastore for Spark SQL to connect Zookeeper Service Discove ry Optional Any zookeeper ensemble compatible with curator(2.1 2.0) By default, Kyuubi

YARN [https://hadoop.apache.org/docs/current/hadoop-yarn/hadoop-yarn-site/YARN.html], Kubernetes (K8s) [https://kubernetes.io/] to create the Spark application; 2) a user account can only access data and Deploying Kyuubi Basics Configurations Engines Security Authentication Authorization Kinit Auxiliary Service Hadoop Credentials Manager Monitoring 1. Monitoring Kyuubi - Logging System 2. Monitoring Kyuubi Hive Metasto re Optional referenced by Spark Hive Metastore for Spark SQL to connect Zookeeper Service Discove ry Optional Any zookeeper ensemble compatible with curator(2.1 2.0) By default, Kyuubi

Defaults Deploying Kyuubi Basics Engines Security Authentication Authorization Kinit Auxiliary Service Hadoop Credentials Manager Monitoring 1. Monitoring Kyuubi - Logging System 2. Monitoring Kyuubi ├── kyuubi-configmap.yaml │ ├── kyuubi-deployment.yaml │ ├── kyuubi-pod.yaml │ └── kyuubi-service.yaml ├── externals │ └── engines ├── jars ├── licenses ├── logs ├── pid └── work From top to bottom To access kyuubi-thrift-binary service within the cluster, use the following URL: kyuubi-thrift-binary.kyuubi.svc.cluster.local - To access kyuubi-thrift-binary service from outside the cluster for