New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Add Ascend.io to USERS.md #24775
Add Ascend.io to USERS.md #24775
Conversation
cc @xmulligan Signed-off-by: Joe Stevens <joe@ascend.io>
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Thanks for adding yourself to the list! 🙏
@@ -83,6 +83,12 @@ Users (Alphabetically) | |||
L: https://cloud.arangodb.com | |||
Q: @ewoutp @Robert-Stam | |||
|
|||
* N: Ascend.io | |||
D: Ascend.io is using Cilium as a consistent CNI for our Data Automation Platform on GKE, EKS, and AKS. | |||
U: Transparent Encryption, Overlay Networking, Cluster Mesh, Egress Gateway, Network Policy, Hubble |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I'm guessing Transparent Encryption is with WireGuard, right?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
We actually initially implemented with IPSec, but it looks like we're likely to transition to wireguard soon since the clouds all bumped their kernels to 5.10 with k8s 1.24 (partially because of incompatibility between ip-sec and some other features, I forget if it was cluster mesh or egress gateway that was the forcing function)
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Thanks for the answer!
partially because of incompatibility between ip-sec and some other features, I forget if it was cluster mesh or egress gateway that was the forcing function
Probably egress gateway because IPsec is incompatible with KPR and egress gateway requires KPR. We're working on removing that limitation for IPsec.
Thanks for adding! |
Following up on adding Ascend.io as a user following the case study
cc @xmulligan
Please ensure your pull request adheres to the following guidelines:
description and a
Fixes: #XXX
line if the commit addresses a particularGitHub issue.