Revision - c464e66 - helm: mount kvstoremesh-specific certificate into cilium agents

Revision c464e66620a45f56f207d923f7d8f843e59b813e authored by Marco Iorio on 11 June 2024, 08:48:55 UTC, committed by André Martins on 13 June 2024, 13:01:41 UTC

helm: mount kvstoremesh-specific certificate into cilium agents

Let's additionally mount the kvstoremesh-specific certificate into
cilium agents, so that it can be used to authenticate against the
local etcd instance storing the cached data. The secret entry is
always configured (although marked as optional), regardless of
whether KVStoreMesh is actually enabled or not, so that it can be
automatically mounted in case it gets subsequently enabled, without
requiring a restart of the agents.

Signed-off-by: Marco Iorio <marco.iorio@isovalent.com>

1 parent 9ffeba1

Files
Changes

Permalinks

FURTHER_READINGS.rst

Further Reading
===============

.. further-reading-begin

Related Material
----------------

* `BPF for security—and chaos—in Kubernetes <https://lwn.net/Articles/790684/>`_
* `k8s-snowflake: Configs and scripts for bootstrapping an opinionated
  Kubernetes cluster anywhere using Cilium plugin
  <https://github.com/jessfraz/k8s-snowflake>`_
* `Using Cilium for NetworkPolicy: Kubernetes documentation on how to use Cilium
  to implement NetworkPolicy
  <https://kubernetes.io/docs/tasks/administer-cluster/cilium-network-policy/>`_

Presentations
-------------

* Kubernetes on Edge Day, Europe 2022 - Connecting Klusters on the Edge with Deep Dive into Cilium Cluster Mesh:
  `Video <https://www.youtube.com/watch?v=UcsEVnFtrLY>`__
* Cloud Native Telco Day, Europe 2022 - Leveraging Cilium and SRv6 for Telco Networking:
  `Video <https://www.youtube.com/watch?v=vJaOKGWiyvU>`__
* KubeCon, Europe 2022 - A Guided Tour of Cilium Service Mesh:
  `Video <https://www.youtube.com/watch?v=e10kDBEsZw4>`__
* eBPF Day, Europe, 2022 - IKEA Private Cloud, eBPF Based Networking, Load Balancing, and Observability with Cilium:
  `Video <https://www.youtube.com/watch?v=sg-F_R-ZVNc>`__
* KubeCon, North America 2021 - Beyond printf & tcpdump: Debugging Kubernetes Networking with eBPF:
  `Video <https://www.youtube.com/watch?v=vqx-hLYfCYE>`__
* eBPF Summit, Virtual 2020 - Our eBPF Journey at Datadog:
  `Video <https://www.youtube.com/watch?v=6mTVuZUHLBg>`__
* eBPF Summit, Virtual 2020 - Building a Secure and Maintainable PaaS Leveraging Cilium:
  `Video <https://www.youtube.com/watch?v=hwOpCKBaJ-w>`__
* eBPF Summit, Virtual 2020 - The Past, Present and Future of Cilium and Hubble at Palantir:
  `Video <https://www.youtube.com/watch?v=3K5WJ_h5PhI>`__
* KubeCon, Europe 2020 - Hubble - eBPF Based Observability for Kubernetes:
  `Video <https://www.youtube.com/watch?v=8WCbGSCyDSo>`__
* Fosdem, Brussels, 2020 - BPF as a revolutionary technology for the container landscape:
  `Slides <https://docs.google.com/presentation/d/1VOUcoIxgM_c6M_zAV1dLlRCjyYCMdR3tJv6CEdfLMh8/edit#slide=id.g7055f48ba8_0_0>`__, `Video <https://fosdem.org/2020/schedule/event/containers_bpf/>`__
* KubeCon, North America 2019 - Understanding and Troubleshooting the eBPF Datapath in Cilium:
  `Video <https://www.youtube.com/watch?v=Kmm8Hl57WDU>`__
* KubeCon, North America 2019 - Liberating Kubernetes from kube-proxy and iptables:
  `Slides <https://docs.google.com/presentation/d/1cZJ-pcwB9WG88wzhDm2jxQY4Sh8adYg0-N3qWQ8593I/edit#slide=id.g7055f48ba8_0_0>`__, `Video <https://www.youtube.com/watch?v=bIRwSIwNHC0>`__
* KubeCon, Europe 2019 - Using eBPF to Bring Kubernetes-Aware Security to the Linux Kernel:
  `Video <https://www.youtube.com/watch?v=7PXQB-1U380>`__
* KubeCon, Europe 2019 - Transparent Chaos Testing with Envoy , Cilium and BPF:
  `Slides <https://static.sched.com/hosted_files/kccnceu19/54/Chaos%20Testing%20with%20Envoy%2C%20Cilium%20and%20eBPF.pdf>`__, `Video <https://www.youtube.com/watch?v=gPvl2NDIWzY>`__
* All Systems Go!, Berlin, Sept 2018 - Cilium - Bringing the BPF Revolution to Kubernetes Networking and Security
  `Slides <https://www.slideshare.net/ThomasGraf5/cilium-bringing-the-bpf-revolution-to-kubernetes-networking-and-security>`__, `Video <https://www.youtube.com/watch?v=QmmId1QEE5k>`__
* QCon, San Francisco 2018 - How to Make Linux Microservice-Aware with Cilium and eBPF:
  `Slides <https://www.slideshare.net/InfoQ/how-to-make-linux-microserviceaware-with-cilium-and-ebpf>`__, `Video <https://www.youtube.com/watch?v=_Iq1xxNZOAo>`__  
* KubeCon, North America 2018 - Connecting Kubernetes Clusters Across Cloud Providers:
  `Slides <https://static.sched.com/hosted_files/kccna18/68/Connecting%20Multiple%20Kubernetes%20Clusters%20Across%20Cloud%20Providers.pdf>`__, `Video <https://www.youtube.com/watch?v=U34lQ8KbQow>`__
* KubeCon, North America 2018 - Implementing Least Privilege Security and Networking with BPF on Kubernetes:
  `Slides <https://www.slideshare.net/ThomasGraf5/accelerating-envoy-and-istio-with-cilium-and-the-linux-kernel>`__, `Video <https://www.youtube.com/watch?v=3F_XNbhjgxY>`__
* KubeCon, Europe 2018 - Accelerating Envoy with the Linux Kernel:
  `Video <https://www.youtube.com/watch?v=ER9eIXL2_14>`__
* Open Source Summit, North America - Cilium: Networking and security for containers with BPF and XDP:
  `Video <https://www.youtube.com/watch?v=CcGtDMm1SJA>`__
* DockerCon, Austin TX, Apr 2017 - Cilium - Network and Application Security with BPF and XDP: `Slides
  <https://www.slideshare.net/ThomasGraf5/dockercon-2017-cilium-network-and-application-security-with-bpf-and-xdp>`__, `Video <https://www.youtube.com/watch?v=ilKlmTDdFgk>`__
* CNCF/KubeCon Meetup, Berlin, Mar 2017 - Linux Native, HTTP Aware Network Security:
  `Slides <https://www.slideshare.net/ThomasGraf5/linux-native-http-aware-network-security>`__, `Video <https://www.youtube.com/watch?v=Yf_INdTWIHI>`__
* Docker Distributed Systems Summit, Berlin, Oct 2016:
  `Slides <http://www.slideshare.net/Docker/cilium-bpf-xdp-for-containers-66969823>`__, `Video <https://www.youtube.com/watch?v=TnJF7ht3ZYc&list=PLkA60AVN3hh8oPas3cq2VA9xB7WazcIgs&index=7>`__
* NetDev1.2, Tokyo, Sep 2016 - cls_bpf/eBPF updates since netdev 1.1:
  `Slides <http://borkmann.ch/talks/2016_tcws.pdf>`__, `Video <https://youtu.be/gwzaKXWIelc?t=12m55s>`__
* NetDev1.2, Tokyo, Sep 2016 - Advanced programmability and recent updates with tc’s cls_bpf:
  `Slides <http://borkmann.ch/talks/2016_netdev2.pdf>`__, `Video <https://www.youtube.com/watch?v=GwT9hRiqdUo>`__
* ContainerCon NA, Toronto, Aug 2016 - Fast IPv6 container networking with BPF & XDP:
  `Slides <http://www.slideshare.net/ThomasGraf5/cilium-fast-ipv6-container-networking-with-bpf-and-xdp>`__

Podcasts
--------

* Software Gone Wild by Ivan Pepelnjak, Oct 2016: `Blog <http://blog.ipspace.net/2016/10/fast-linux-packet-forwarding-with.html>`__, `MP3 <http://media.blubrry.com/ipspace/stream.ipspace.net/nuggets/podcast/Show_64-Cilium_with_Thomas_Graf.mp3>`__
* OVS Orbit by Ben Pfaff, May 2016: `Blog <https://ovsorbit.benpfaff.org/#e4>`__, `MP3 <https://ovsorbit.benpfaff.org/episode-4.mp3>`__

Community blog posts
--------------------

* `Cilium for Network and Application Security with BPF and XDP, Apr 2017
  <https://blog.scottlowe.org/2017/04/18/black-belt-cilium/>`_
* `Cilium, BPF and XDP, Google Open Source Blog, Nov 2016
  <https://opensource.googleblog.com/2016/11/cilium-networking-and-security.html>`_

.. further-reading-end

Showing with 0 additions and 0 deletions (0 / 0 diffs computed)

Computing file changes ...