To use Airlock Microgateway in your Kubernetes cluster with Cilium, follow this guide to deploy the Airlock Microgateway Operator and its resources.
Deploy Airlock Microgateway
- Install Cilium according to the documentation (Cilium) Documentation.
- Depending on which Kubernetes distribution you are using, complete the instructions in the corresponding installation guide:
- For Kubernetes, follow this guide: Kubernetes
- For OpenShift, follow this guide: OpenShift
- Test Cilium. Use the Cilium CLI tool to verify connectivity.
- Cilium CNI forwards the traffic and is visible using Hubble, and Airlock Microgateway should be up and running.
The Helm value cni.exclusive
must be false
for the Microgateway CNI plugin to work correctly.
Currently we do not support the kube-proxy replacement.
Prerequisites
- To use Airlock Microgateway, a valid license is required. Airlock Microgateway is available in a Premium and a free Community edition. To request and configure/change a license, see the article Licensing and license-dependent behavior.
- Cilium has been deployed as described in their documentation (Cilium) Documentation.
What's next
After deploying the Airlock Microgateway Operator in your Kubernetes Cluster, finalizing steps are required.
- Configure/change the Airlock Microgateway license. See article Licensing and license-dependent behavior.
- Annotate the web application Pods to protect as explained in Labels and annotations for Airlock Microgateway.
- Create the
CustomResources
to configure the Airlock Microgateway as outlined in Configuration.