Installation Quick Installation Installation using Helm Advanced Installation Considerations on node pool taints and unmanaged pods Observability Setting up Hubble Observability Inspecting Network Flows how to install gcloud and prepare your account. export NAME="$(whoami)-$RANDOM" # Create the node pool with the following taint to guarantee that # Pods are only scheduled/executed in the node when Cilium perform the following steps: Default Configuration: Datapath IPAM Datastore Encapsulation Cluster Pool Kubernetes CRD Note BYOCNI is the preferred way to run Cilium on AKS, however integration with the

Installation Quick Installation Installation using Helm Advanced Installation Considerations on node pool taints and unmanaged pods Observability Setting up Hubble Observability Inspecting Network Flows how to install gcloud and prepare your account. export NAME="$(whoami)-$RANDOM" # Create the node pool with the following taint to guarantee that # Pods are only scheduled/executed in the node when Cilium perform the following steps: Default Configuration: Datapath IPAM Datastore Encapsulation Cluster Pool Kubernetes CRD Note BYOCNI is the preferred way to run Cilium on AKS, however integration with the

helm template cilium/cilium --version 1.9.18 \ --namespace cilium \ --set ipam.mode=cluster-pool \ --set cni.binPath=/var/lib/cni/bin \ --set cni.confPath=/var/run/multus/cni/net.d \ --set STATUS ROLES AGE VERSION gke-cluster1-default-pool-a63a765c-flr2 Ready 6m v1.14.10-gke.36 gke-cluster1-default-pool-a63a765c-z73c Ready 6m v1.14.10-gke.36 loy#run-a-sample-workload]. Configuring IPAM modes CRD-backed IPAM CRD-backed by Cilium cluster-pool IPAM CRD-backed IPAM This is a quick tutorial walking through how to enable CRD-backed IPAM. The

nodeResourceGroup)" Note AZURE_NODE_RESOURCE_GROUP must be set to the resource group of the node pool, not the resource group of the AKS cluster. Retrieve Credentials to access cluster az aks get-credentials template cilium/cilium \ --version 1.8.5 \ --namespace cilium \ --set config.ipam=cluster-pool \ --set global.cni.binPath=/var/lib/cni/bin \ --set global.cni.confPath=/var/run/multus/cni/net STATUS ROLES AGE VERSION gke-cluster1-default-pool-a63a765c-flr2 Ready 6m v1.14.10-gke.36 gke-cluster1-default-pool-a63a765c-z73c Ready 6m v1.14.10-gke.36

STATUS ROLES AGE VERSION gke-cluster1-default-pool-a63a765c-flr2 Ready 6m v1.11.7-gke.4 gke-cluster1-default-pool-a63a765c-z73c Ready 6m v1.11.7-gke.4 Deploy OK NodeMonitor: Disabled Cilium health daemon: Ok IPv4 address pool: 3/65535 allocated IPv6 address pool: 2/65535 allocated Controller Status: 10/10 healthy Proxy Status: is managed by the agent in a shared pool between all plugins which means that the Docker and CNI network plugin can run side by side allocating a single address pool. Combines its knowledge about container

STATUS ROLES AGE VERSION gke-cluster1-default-pool-a63a765c-flr2 Ready 6m v1.11.7-gke.4 gke-cluster1-default-pool-a63a765c-z73c Ready 6m v1.11.7-gke.4 Create OK NodeMonitor: Disabled Cilium health daemon: Ok IPv4 address pool: 3/65535 allocated IPv6 address pool: 2/65535 allocated Controller Status: 10/10 healthy Proxy Status: is managed by the agent in a shared pool between all plugins which means that the Docker and CNI network plugin can run side by side allocating a single address pool. Combines its knowledge about container

STATUS ROLES AGE VERSION gke-cluster1-default-pool-a63a765c-flr2 Ready 6m v1.11.7-g gke-cluster1-default-pool-a63a765c-z73c Ready 6m v1.11.7-g Create a OK NodeMonitor: Disabled Cilium health daemon: Ok IPv4 address pool: 3/65535 allocated IPv6 address pool: 2/65535 allocated Controller Status: 10/10 healthy Proxy Status: is managed by the agent in a shared pool between all plugins which means that the Docker and CNI network plugin can run side by side alloca�ng a single address pool. Combines its knowledge about container