Cilium in Action: Kubernetes Security & Insight (LFWS315)
Strengthen your Kubernetes expertise with a hands-on Cilium workshop—perfect for DevOps, SREs, and cloud engineers looking to level up in networking, observability, and security.
Description
Strengthen your Kubernetes expertise with a hands-on Cilium workshop—perfect for DevOps, SREs, and cloud engineers looking to level up in networking, observability, and security.
Summary
Strengthen your Kubernetes expertise with a hands-on Cilium workshop—perfect for DevOps, SREs, and cloud engineers looking to level up in networking, observability, and security.
What You'll Learn
- Gain hands-on experience with Cilium's advanced features, including using Hubble to visualize the network, eBPF for traffic control, transparent encryption, network policies, service mesh capabilities, and more.
Prerequisites
- Students should have an understanding of Linux administration skills and be comfortable using the command line.
- They must be able to edit files using a command-line text editor.
- Kubernetes administration skills are required.
- CKA/CKAD certifications or equivalent professional experience are recommended.
Outline
- The Linux Foundation®
- The Linux Foundation® Training
- The Linux Foundation® Certifications
- The Linux Foundation® Digital Badges
- Laboratory Exercises, Solutions and Resources
- Things Change in Linux and Open Source Projects
- Platform Details
- Kubernetes Architecture
- Control Plane
- Data Plane
- API Objects
- Labs
- Network Functions
- Pod Network
- Why CNI
- CNI Features
- Install CNI
- Pod IP Address
- IP Transience
- Labs
- Cilium Overview
- eBPF
- Component Overview
- Labs
- Need for Observability
- Hubble
- Why Hubble
- Architecture
- Components
- Labs
- Network Policies
- Cilium Network Policy
- Kubernetes Network Policy vs Cilium Network Policy
- Labs
- Kubernetes Services Limitations
- Ingress
- Cilium Service Mesh
- Gateway API
- Cilium Gateway API
- Labs
- Mutual Authentication
- Mutual Authentication in Cilium
- Identity Management
- SPIFFE Benefits
- Labs
- Need for Encryption
- Cilium Encryption
- IPsec Encryption
- WireGuard
- Labs
- Why Cluster Mesh
- Fault Resilience
- Cluster Mesh Architecture
- Requirements
- Global Services