Cilium

變數

export CLUSTER_NAME=cluster-2
export CLUSTER_ZONE=asia-east1-a
NATIVE_CIDR="$(gcloud container clusters describe "${CLUSTER_NAME}" --zone "${CLUSTER_ZONE}" --format 'value(clusterIpv4Cidr)')"

安裝GatewayApi CRD

kubectl apply -f <https://github.com/kubernetes-sigs/gateway-api/releases/download/v1.1.0/standard-install.yaml>
kubectl apply -f <https://raw.githubusercontent.com/kubernetes-sigs/gateway-api/v1.1.0/config/crd/experimental/gateway.networking.k8s.io_tlsroutes.yaml>

install Cilium GatewayApi

helm repo add cilium <https://helm.cilium.io/>

helm install cilium cilium --version 1.16.0 \\
  --namespace kube-system \\
  --set nodeinit.enabled=true \\
  --set nodeinit.reconfigureKubelet=true \\
  --set nodeinit.removeCbrBridge=true \\
  --set cni.binPath=/home/kubernetes/bin \\
  --set gke.enabled=true \\
  --set ipam.mode=kubernetes \\
  --set ipv4NativeRoutingCIDR=${NATIVE_CIDR} \\
  --set kubeProxyReplacement=true \\
  --set gatewayAPI.enabled=true \\
  --set hubble.enabled=true \\
  --set hubble.relay.enabled=true \\
  --set hubble.ui.enabled=true \\
  --set loadBalancer.l7.backend=envoy \\
  --set ingressController.enabled=true \\
  --set ingressController.loadbalancerMode=dedicated

檢查狀態

cilium status --wait
cilium connectivity test

Jaeger

安裝 Cert Manager CRD

kubectl apply -f <https://github.com/cert-manager/cert-manager/releases/download/v1.11.0/cert-manager.crds.yaml>

部署 Cert Manager

kubectl apply -f <https://github.com/cert-manager/cert-manager/releases/download/v1.11.0/cert-manager.yaml>

Jaeger Operator Install

kubectl create namespace observability
kubectl apply -f <https://github.com/jaegertracing/jaeger-operator/releases/download/v1.41.0/jaeger-operator.yaml> -n observability

Jaeger AllinOne (測試環境)

kubectl apply -n observability -f opentelemetry-operator/jaeger.yaml

OpenTelemetry

安装OpenTelemetry operator

kubectl apply -f <https://github.com/open-telemetry/opentelemetry-operator/releases/download/v0.75.0/opentelemetry-operator.yaml>

配置Hubble receiver 和 Jaeger exporter

kubectl apply -f opentelemetry-operator/otelcol.yaml

部署nignx应用

kubectl apply -f nginx/.

配置cilium可视化策略

kubectl apply -f opentelemetry-operator/visibility-policies-http.yaml

配置OpenTelemetry sidecar

kubectl apply -f opentelemetry-operator/otelcol_http.yaml

# simplest-query 開LoadBalancer IP可查看ui

部署websocket应用做測試

kubectl apply -f websocket/.