Cilium Installation on AWS Marketplace

Cilium is open source software for providing and transparently securing network connectivity and loadbalancing between application workloads such as application containers or processes. Cilium is deployed as a daemonset on all worker nodes. Cilium works with both AWS EKS and self-hosted Kubernetes clusters on AWS.

Open SourcePowered by eBPF
Cilium Installation on AWS Marketplace

Pre-Requisites:

Subscribe to Cilium on AWS Marketplace

Helm 3 must be installed

A Kubernetes cluster running on Amazon Elastic Container Service (ECS) or Elastic Kubernetes Service (EKS)

Cilium Installation

Setup the Cilium Helm repository:

helm repo add cilium https://helm.cilium.io
helm repo update

Install the core Cilium components:

helm install --namespace kube-system cilium cilium/cilium \
--version 1.8.4 \
--set agent.image=117940112483.dkr.ecr.us-east-1.amazonaws.com/8274d5b9-1d8a-4d60-bb66-d12590d116d2/cg-3845337479/cilium/cilium:1.8.4-latest \
--set nodeinit.image=117940112483.dkr.ecr.us-east-1.amazonaws.com/8274d5b9-1d8a-4d60-bb66-d12590d116d2/cg-3845337479/cilium/startup-script \
--set nodeinit.tag=1.8.4-latest \
--set operator.image=117940112483.dkr.ecr.us-east-1.amazonaws.com/8274d5b9-1d8a-4d60-bb66-d12590d116d2/cg-3845337479/cilium/operator-aws:1.8.4-latest \
--set global.eni=true \
--set config.ipam=eni \
--set global.egressMasqueradeInterfaces=eth0 \
--set global.tunnel=disabled \
--set global.nodeinit.enabled=true \

Additional configuration to enable Hubble:

--set global.hubble.enabled=true \
--set global.hubble.metrics.enabled="{dns:query;ignoreAAAA,drop,tcp,flow,icmp,http}" \

Additional configuration to enable Hubble Relay:

--set global.hubble.relay.enabled=true \
--set global.hubble.listenAddress=":4244" \
--set hubble-relay.image.repository=117940112483.dkr.ecr.us-east-1.amazonaws.com/8274d5b9-1d8a-4d60-bb66-d12590d116d2/cg-3845337479/cilium/hubble-relay:1.8.4-latest \

Additional configuration to enable Hubble UI (Beta Release):

--set global.hubble.ui.enabled=true \
--set hubble-ui.image.repository=117940112483.dkr.ecr.us-east-1.amazonaws.com/8274d5b9-1d8a-4d60-bb66-d12590d116d2/cg-3845337479/quay.io/cilium/hubble-ui \
--set hubble-ui.image.tag=1.8.4-latest

For more information refer to the Official Cilium Documentation.