Services (beta) Kubernetes NodePort (beta) Kubernetes without kube-proxy (beta) Kata with Cilium on Google GCE Configuring IPAM modes Operations Running Prometheus & Grafana Limiting Identity-Relevant Labels etcd has a good chance of working out of the box as well. Installation on AWS EKS Installation on Google GKE Installation on Azure AKS Installation on AWS EKS Create an EKS Cluster The first step is Running 0 75s Installation on Google GKE GKE Requirements 1. Install the Google Cloud SDK (gcloud) see [Installing Google Cloud SDK] (https://cloud.google.com/sdk/install) 2. Create a project

nodeport-7cb9c6cb8b-ksm4h 1/1 Running 0 4m49s pod-to-external-fqdn-allow-google-cnp-b7b6bcdcb-tg9dh 1/1 Running 0 4m48s Specify Environment Variables Specify the nodeport-7cb9c6cb8b-ksm4h 1/1 Running 0 4m49s pod-to-external-fqdn-allow-google-cnp-b7b6bcdcb-tg9dh 1/1 Running 0 4m48s Specify Environment Variables Specify the nodeport-7cb9c6cb8b-ksm4h 1/1 Running 0 4m49s pod-to-external-fqdn-allow-google-cnp-b7b6bcdcb-tg9dh 1/1 Running 0 4m48s Specify Environment Variables Specify the

operational complexity Scalability Availability Observability Security Reliability Messaging Analytics Multi-tenancy caveats ● Single underlying infrastructure ● Reduce operational complexity ○ Infrastructure

pod-to-external-1111-7489c7c46d-jhtkr 1/1 Running 0 68s pod-to-external-fqdn-allow-google-cnp-b7b6bcdcb-97p75 1/1 Running 0 68s Note If you deploy the connectivity check pod-to-external-1111-7489c7c46d-jhtkr 1/1 Running 0 68s pod-to-external-fqdn-allow-google-cnp-b7b6bcdcb-97p75 1/1 Running 0 68s Note If you deploy the connectivity check pod-to-external-1111-7489c7c46d-jhtkr 1/1 Running 0 68s pod-to-external-fqdn-allow-google-cnp-b7b6bcdcb-97p75 1/1 Running 0 68s Note If you deploy the connectivity check

d56f47579-d79dz 1/1 Running 0 66s pod-to-external-fqdn-allow-google-cnp-78986f4bcf-btjn7 1/1 Running 0 66s Note If you deploy the connectivity check 56f47579-d79dz 1/1 Running 0 66s pod-to-external-fqdn-allow-google-cnp-78986f4bcf-btjn7 1/1 Running 0 66s Note If you deploy the connectivity check d56f47579-d79dz 1/1 Running 0 66s pod-to-external-fqdn-allow-google-cnp-78986f4bcf-btjn7 1/1 Running 0 66s Note If you deploy the connectivity check

command creates a Kubernetes cluster using Google Kubernetes Engine [https://cloud.google.com/kubernetes-engine]. See Installing Google Cloud SDK [https://cloud.google.com/sdk/install] for instructions on how by your current kubectl context: cilium install GKE To install Cilium on Google Kubernetes Engine (GKE) [https://cloud.google.com/kubernetes- engine], perform the following steps: Default Configuration: cilium/cilium --version 1.10.20 \ --namespace kube-system GKE To install Cilium on Google Kubernetes Engine (GKE) [https://cloud.google.com/kubernetes- engine], perform the following steps: Default Configuration:

commands create a Kubernetes cluster using Google Kubernetes Engine [https://cloud.google.com/kubernetes-engine]. See Installing Google Cloud SDK [https://cloud.google.com/sdk/install] for instructions on how kubectl context: cilium install --version 1.11.20 GKE To install Cilium on Google Kubernetes Engine (GKE) [https://cloud.google.com/kubernetes- engine], perform the following steps: Default Configuration: cilium/cilium --version 1.11.20 \ --namespace kube-system GKE To install Cilium on Google Kubernetes Engine (GKE) [https://cloud.google.com/kubernetes- engine], perform the following steps: Default Configuration:

Installa�on has a good chance of working out of the box as well. Installa�on on AWS EKS Installa�on on Google GKE Installation on AWS EKS Create an EKS Cluster The first step is to create an EKS cluster. Running 0 6m Installation on Google GKE GKE Requirements Install the Google Cloud SDK ( gcloud ) see [Installing Google Cloud SDK] (h�ps://cloud.google.com/sdk/install) Create a project or can apply any method to create a GKE cluster. The example given here is using the Google Cloud SDK [h�ps://cloud.google.com/sdk/]. This guide will create a cluster on zone europe-west4-a ; feel free to

io/how-ebpf-turns-linux-into-a-programmable-kernel/ https://www.infoq.com/presentations/facebook-google-bpf-linux-kernel/

containers ● a part of the bigger TW system, see the TW paper in OSDI'20 [0] [0] https://sites.google.com/site/tangchq/papers/Twine-OSDI20.pdf twagent Container (aka “task”): ● namespaces: cgroup