Cilium

To use Airlock Microgateway in your Kubernetes cluster with Cilium, follow this guide to deploy the Airlock Microgateway Operator and its resources.

1. Install Cilium according to the documentation (Cilium) Documentation.


The Helm value cni.exclusive must be false for the Microgateway CNI plugin to work correctly.



Currently we do not support the kube-proxy replacement.

2. Depending on which Kubernetes distribution you are using, complete the instructions in the corresponding installation guide:
• For Kubernetes, follow this guide: Kubernetes
• For OpenShift, follow this guide: OpenShift
3. Test Cilium. Use the Cilium CLI tool to verify connectivity.
copy



cilium connectivity test

4. Cilium CNI forwards the traffic and is visible using Hubble, and Airlock Microgateway should be up and running.

• To use Airlock Microgateway, a valid license is required. Airlock Microgateway is available in a Premium and a free Community edition. To request and configure/change a license, see the article Licensing and license-dependent behavior.
• Cilium has been deployed as described in their documentation (Cilium) Documentation.

After deploying the Airlock Microgateway Operator in your Kubernetes Cluster, finalizing steps are required.

1. Configure/change the Airlock Microgateway license. See article Licensing and license-dependent behavior.
2. Annotate the web application Pods to protect as explained in Labels and annotations for Airlock Microgateway.
3. Create the CustomResources to configure the Airlock Microgateway as outlined in Configuration.

• Internal links:
• Licensing and license-dependent behavior
• Labels and annotations for Airlock Microgateway
• Configuration

• External links:
• (Cilium) CNI Chaining