#
kubectl -n kube-system delete ds calico-node
kubectl -n kube-system delete deploy calico-kube-controllers
kubectl -n kube-system delete sa calico-node
kubectl -n kube-system delete sa calico-kube-controllers
kubectl -n kube-system delete cm calico-config
kubectl -n kube-system delete secret calico-config
kubectl get crd | grep calico | awk '{print $1}' | xargs kubectl delete crd
helm install cilium devops/cilium --version 1.12.3 \
--namespace kube-system\
--set hubble.metrics.enabled="{dns:query;ignoreAAAA;destinationContext=pod-short,drop:sourceContext=pod;destinationContext=pod,tcp,flow,port-distribution,icmp,http}" \
--set hubble.relay.enabled=true \
--set hubble.ui.enabled=true
[root@node1 ~]# kubectl -n kube-system get svc hubble-ui
NAME TYPE CLUSTER-IP EXTERNAL-IP PORT(S) AGE
hubble-ui ClusterIP 10.233.21.93 <none> 80/TCP 18s
[root@node1 ~]# kubectl -n kube-system patch svc hubble-ui -p '{"spec": {"type": "NodePort"}}'
service/hubble-ui patched
[root@node1 ~]# kubectl -n kube-system get svc hubble-ui
NAME TYPE CLUSTER-IP EXTERNAL-IP PORT(S) AGE
hubble-ui NodePort 10.233.21.93 <none> 80:30065/TCP 28s
https://www.cnblogs.com/dudu/p/16269093.html
查看模式
$ kubectl exec -it -n kube-system ds/cilium -- cilium status | grep KubeProxyReplacement
查看服务列表
$ kubectl exec -it -n kube-system daemonset/cilium -- cilium service list
删除iptables
$ iptables-save | grep -v KUBE | iptables-restore
$ # 首先备份 kube-system ConfigMap
$ kubectl get cm kube-proxy -n kube-system -o yaml > kube-proxy-cm.yaml
$ kubectl -n kube-system delete ds kube-proxy
$ kubectl -n kube-system delete cm kube-proxy