Cilium
Hard
Architecture
Which of these is required to connect two clusters with Cilium ClusterMesh?
Select your answer:
Show answer and explanation
Answer: Unique cluster names and IDs, distinct pod CIDRs, node-to-node reachability
Explanation
Pods talk across clusters with their real IPs, so pod CIDRs must not overlap and nodes have to reach each other. Each cluster needs a unique cluster.name and cluster.id, which Cilium uses to keep identities apart. Each cluster runs its own clustermesh-apiserver, and the Kubernetes control planes share nothing.
More hard Cilium questions
- How do you make a Service load-balance across all clusters in a Cilium ClusterMesh?
- How does Cilium's Bandwidth Manager enforce the kubernetes.io/egress-bandwidth annotation on a pod?
- Which Cilium resource defines the IP ranges that Cilium hands out to Services of type LoadBalancer?
- You install Cilium with kubeProxyReplacement=true on a cluster without kube-proxy. Why do you have to set k8sServiceHost and k8sServicePort?
- In Cilium's default cluster-pool IPAM mode, what assigns each node its pod CIDR?
- What is the purpose of Cilium's egress gateway feature?