Kubernetes部署Cilium网络插件命令 - wanghongwei

kubeadm init跳过kube-proxy

kubeadm init \--control-plane-endpoint "kubeapi.cluster.local:6443" \--pod-network-cidr=10.244.0.0/16 \--service-cidr=10.96.0.0/12 \--kubernetes-version=v1.35.0 \--cri-socket=unix:///run/containerd/containerd.sock \--upload-certs \--skip-phases=addon/kube-proxy \--image-repository=registry.aliyuncs.com/google_containers

下载cilium-cli工具

curl -LO https://github.com/cilium/cilium-cli/releases/download/v0.19.0/cilium-linux-amd64.tar.gz
tar xzvfC cilium-linux-amd64.tar.gz /usr/local/bin

原生路由模式

cilium install \--version v1.18.5 \--namespace kube-system \--set ipam.mode=kubernetes \--set kubeProxyReplacement=true \--set ipam.operator.clusterPoolIPv4PodCIDRList=10.244.0.0/16 \--set ipam.operator.clusterPoolIPv4MaskSize=24 \--set ipv4NativeRoutingCIDR=10.244.0.0/16 \--set routingMode=native \--set autoDirectNodeRoutes=true \--set ingressController.enabled=true \--set ingressController.loadbalancerMode=shared \--set hubble.enabled=true \--set hubble.listenAddress=:4244 \--set hubble.relay.enabled=true \--set hubble.ui.enabled=true

vxlan隧道模式

cilium install \--version v1.18.5 \--namespace kube-system \--set ipam.mode=kubernetes \--set kubeProxyReplacement=true \--set ipam.operator.clusterPoolIPv4PodCIDRList=10.244.0.0/16 \--set ipam.operator.clusterPoolIPv4MaskSize=24 \--set routingMode=tunnel \--set encryption.enabled=true \--set encryption.type=vxlan \--set ingressController.enabled=true \--set ingressController.loadbalancerMode=shared \--set hubble.enabled=true \--set hubble.listenAddress=:4244 \--set hubble.relay.enabled=true \--set hubble.ui.enabled=true