LionelJouin

Kubernetes Multi-Network

Implementation

• Kubernetes: https://github.com/LionelJouin/kubernetes/tree/multi-network
  • API
    • Based On: https://github.com/kubernetes/enhancements/blob/78f7523bcbcd2caaea16111efb605227a2286ba4/keps/sig-network/3698-multi-network/README.md
  • registry, printers and validation
    • From: https://github.com/plwhite/kubernetes/tree/multi-network
• Set all fields as immutable except enable in PodNetwork Spec

LionelJouin

apiVersion: operator.tigera.io/v1
kind: Installation
metadata:
  name: default
spec:
  calicoNetwork:
    nodeAddressAutodetectionV4:
      cidrs:
        - '10.254.0.0/24'
    ipPools:

LionelJouin

---
apiVersion: v1
kind: Pod
metadata:
  name: nc-client
  labels:
    app: nc-client
spec:
  containers:
    - name: nc-client

LionelJouin

Observability with OpenTelemetry/Prometheus/Grafana

Installation

Install Prometheus and Grafana

helm repo add prometheus-community https://prometheus-community.github.io/helm-charts
helm repo update
helm install prometheus prometheus-community/kube-prometheus-stack

LionelJouin

nft add table inet meridio-nfqlb
nft add set inet meridio-nfqlb flow-a-saddrs-v4 { type ipv4_addr\; flags interval \; }
nft add set inet meridio-nfqlb flow-a-daddrs-v4 { type ipv4_addr\; flags interval \; }
nft add set inet meridio-nfqlb flow-a-saddrs-v6 { type ipv6_addr\; flags interval \; }
nft add set inet meridio-nfqlb flow-a-daddrs-v6 { type ipv6_addr\; flags interval \; }
nft add set inet meridio-nfqlb flow-a-sports { type inet_service\; flags interval \; }
nft add set inet meridio-nfqlb flow-a-dports { type inet_service\; flags interval \; }
nft add set inet meridio-nfqlb flow-a-protocols { type inet_proto\; flags interval \; }
nft add element inet meridio-nfqlb flow-a-saddrs-v4 { 179.10.10.0/24, 180.10.10.0/24 }
nft add element inet meridio-nfqlb flow-a-daddrs-v4 { 20.0.0.1/32, 40.0.0.0/24 }

LionelJouin

/*
Copyright (c) 2021 Nordix Foundation

Licensed under the Apache License, Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at

    http://www.apache.org/licenses/LICENSE-2.0

Unless required by applicable law or agreed to in writing, software

LionelJouin

---
apiVersion: apiextensions.k8s.io/v1
kind: CustomResourceDefinition
metadata:
  name: network-attachment-definitions.k8s.cni.cncf.io
spec:
  group: k8s.cni.cncf.io
  scope: Namespaced
  names:
    plural: network-attachment-definitions

LionelJouin

---
# Source: calico/templates/calico-config.yaml
# This ConfigMap is used to configure a self-hosted Calico installation.
kind: ConfigMap
apiVersion: v1
metadata:
  name: calico-config
  namespace: kube-system
data:
  # Typha is disabled.

LionelJouin

---
apiVersion: policy/v1beta1
kind: PodSecurityPolicy
metadata:
  name: psp.flannel.unprivileged
  annotations:
    seccomp.security.alpha.kubernetes.io/allowedProfileNames: docker/default
    seccomp.security.alpha.kubernetes.io/defaultProfileName: docker/default
    apparmor.security.beta.kubernetes.io/allowedProfileNames: runtime/default
    apparmor.security.beta.kubernetes.io/defaultProfileName: runtime/default

LionelJouin

'use strict';

module.exports = function (app) {

    var Station = app.models.Station;
    var Sensor = app.models.Sensor;
    var Sensors = [];

    Sensor.create([
        { name: "Temperature", unit: "°C" },