EKS Calico

Calico란?

Pod의 보안그룹으로 볼 수 있다.

 

Install Calico

helm repo add projectcalico https://docs.tigera.io/calico/charts
helm show values projectcalico/tigera-operator --version v3.25.2

kubectl create namespace tigera-operator
echo '{ installation: {kubernetesProvider: EKS }}' > values.yaml
helm install calico projectcalico/tigera-operator --version v3.25.2 -f values.yaml --namespace tigera-operator

 

Check

kubectl get all -n tigera-operator

kubectl get all -n calico-system

 

Down File

wget https://raw.githubusercontent.com/wngnl05/AWS/main/EKS/Calico/Network-Policy.yaml

 

Pod

kubectl exec -n wsi -it $(kubectl get pods -n wsi --no-headers -o custom-columns=":metadata.name" | grep customer | head -n 1) -- curl -X PUT "http://169.254.169.254/latest/api/token" -H "X-aws-ec2-metadata-token-ttl-seconds: 21600" --max-time 10

          resources:
            requests:
              memory: "500Mi"
              cpu: "250m"
            limits:
              memory: "500Mi"
              cpu: "250m"

kubectl describe pod -n wsi $(kubectl get pods -n wsi --no-headers -o custom-columns=":metadata.name" | grep customer | head -n 1) | grep QoS

 

 

pod=$(kubectl get pods -n wsi --no-headers \
-o custom-columns=":metadata.name" | grep customer | head -n 1)
kubectl exec -it $pod -n wsi -- curl -X GET --max-time 5 \
-w "\n%{http_code}\n" product-service.wsi.svc.cluster.local/v1/product

pod=$(kubectl get pods -n wsi --no-headers \
-o custom-columns=":metadata.name" | grep product| head -n 1)
kubectl exec -it $pod -n wsi -- curl -X GET --max-time 5 \
-w "\n%{http_code}\n" customer-service.wsi.svc.cluster.local/v1/customer