$ 0 码力 |
740 页 |
12.52 MB
| 1 年前 3 ntegrations
• Kubernetes
Introduction
Concepts
Requirements
o Configuration
o Network Policy.
o Endpoint CRD
o Kubernetes Compatibility.
o Troubleshooting
• Istio
Getting Started Using Istio Modes
Rule Basics
Layer 3 Examples
Layer 4 Examples
o Layer 7 Examples
o Kubernetes
o Endpoint Lifecycle
o Troubleshooting
• Monitoring & Metrics
○ Installation
o cilium-agent
• cilium-operator global.etcd.enabled=true \
--set global.etcd.endpoints[0]=http://etcd-endpoint1:2379 \
--set global.etcd.endpoints[1]=http://etcd-endpoint2:2379 \
> cilium.yaml
## Optional: Configure the SSL certificates 0 码力 |
734 页 |
11.45 MB
| 1 年前 3 Security Bugs
Integrations
Kubernetes
Introduction
Concepts
Requirements
Configuration
Network Policy
Endpoint CRD
Kubernetes Compatibility
Cilium CRD schema validation
Troubleshooting
Istio
Getting Started Policy Enforcement Modes
Rule Basics
Layer 3 Examples
Layer 4 Examples
Layer 7 Examples
Kubernetes
Endpoint Lifecycle
Troubleshooting
L7 Protocol Visibility
API Rate Limiting
Default Rate Limits
Configuration etcd.enabled=true \
--set global.etcd.endpoints[0]=http://etcd-endpoint1:2379 \
--set global.etcd.endpoints[1]=http://etcd-endpoint2:2379
Optional: Configure the SSL certificates
Create a Kubernetes 0 码力 |
885 页 |
12.41 MB
| 1 年前 3 Layer 7 Examples
Host Policies
Layer 7 Protocol Visibility
Using Kubernetes constructs in policy
Endpoint Lifecycle
Troubleshooting
Monitoring & Metrics
Cilium Metrics
Hubble Metrics
Example Prometheus "global.etcd.endpoints[0]=http://etcd-endpoint1:2379" \
--set "global.etcd.endpoints[1]=http://etcd-endpoint2:2379" \
--set "global.etcd.endpoints[2]=http://etcd-endpoint3:2379"
Optional: Configure the Adjust the helm template generation to enable SSL for etcd and use https instead of
http for the etcd endpoint URLs:
helm install cilium cilium/cilium --version 1.8.13 \
--namespace kube-system \
--set 0 码力 |
1124 页 |
21.33 MB
| 1 年前 3
Deny Policies
Host Policies
Layer 7 Protocol Visibility
Using Kubernetes constructs in policy
Endpoint Lifecycle
Troubleshooting
Monitoring & Metrics
Cilium Metrics
Hubble Metrics
Example Prometheus --set "etcd.endpoints[0]=http://etcd-endpoint1:2379" \
--set "etcd.endpoints[1]=http://etcd-endpoint2:2379" \
--set "etcd.endpoints[2]=http://etcd-endpoint3:2379"
If you do not want Cilium to store Adjust the helm template generation to enable SSL for etcd and use https instead of
http for the etcd endpoint URLs:
helm install cilium cilium/cilium --version 1.9.18 \
--namespace kube-system \
--set 0 码力 |
1263 页 |
18.62 MB
| 1 年前 3 Examples
Deny Policies
Host Policies
Layer 7 Protocol Visibility
Using Kubernetes constructs in policy
Endpoint Lifecycle
Troubleshooting
Monitoring & Metrics
Cilium Metrics
Hubble Metrics
Example Prometheus --set "etcd.endpoints[0]=http://etcd-endpoint1:2379" \
--set "etcd.endpoints[1]=http://etcd-endpoint2:2379" \
--set "etcd.endpoints[2]=http://etcd-endpoint3:2379"
If you do not want Cilium to store Adjust the helm template generation to enable SSL for etcd and use https instead of
http for the etcd endpoint URLs:
helm install cilium cilium/cilium --version 1.11.20 \
--namespace kube-system \
--set 0 码力 |
1373 页 |
19.37 MB
| 1 年前 3
o Host Policies
o Layer 7 Protocol Visibility
o Using Kubernetes constructs in policy.
o Endpoint Lifecycle
o Troubleshooting
• Monitoring & Metrics
• Cilium Metrics
• Hubble "etcd.endpoints[0]=http://etcd-endpoint1:2379" \
--set "etcd.endpoints[1]=http://etcd-endpoint2:2379" \
--set "etcd.endpoints[2]=http://etcd-endpoint3:2379"
If you do not want Cilium etcd endpoint URLs:
helm install cilium cilium/cilium --version 1.10.20 \
--namespace kube-system \
--set etcd.enabled=true \
--set etcd.ssl=true \
--set "etcd.endpoints[0]=https://etcd-endpoint1:2379" 0 码力 |
1307 页 |
19.26 MB
| 1 年前 3 Monitoring and management over HTTP
Accessing sensitive endpoints
Customizing the management endpoint paths
Customizing the management server port
Configuring management-specific SSL
Customizing the management server address
Disabling HTTP endpoints
HTTP health endpoint format and access restrictions
49. Monitoring and management over JMX
Customizing MBean names
persistence.xml
Use Spring Data JPA and MongoDB repositories
Expose Spring Data repositories as REST endpoint
Configure a component that is used by JPA
78. Database initialization
Initialize a database 0 码力 |
604 页 |
532.58 KB
| 2 年前 3 Endpoints
Actuator Web Endpoint Paths
CORS Support
Implementing Custom Endpoints
Receiving Input
Input type conversion
Custom Web Endpoints
Web Endpoint Request Predicates
HTTP method
Consumes
Produces
Web Endpoint Response Status
Web Endpoint Range Requests
Web Endpoint Security
Servlet endpoints
Controller endpoints
Custom InfoContributors
53. Monitoring and Management over HTTP
Customizing the Management Endpoint Paths
Customizing the Management Server Port
Configuring Management-specific SSL
0 码力 |
668 页 |
634.21 KB
| 2 年前 3
|