Lab

Getting Started with Cilium

Install Cilium, protect and publish a workload, verify WireGuard encryption, and repair a Gateway API route.

Install Cilium on Kubernetes, use Hubble to inspect traffic, and secure the Death Star from L3 to L7. Then publish it with Gateway API, enable WireGuard encryption, and repair a broken route from live Kubernetes evidence.

• ⬢ Install Cilium

  Give a network-less cluster its datapath. Install Cilium with Hubble and Gateway API for the rest of the track.

• 🚀 Deploy a workload

  Bring the Death Star landing API online and watch every ship reach it before any policy exists.

• 🛡️ Progress from L3 to L7

  Let a trusted ship exploit the Death Star, then close the exhaust port with an HTTP-aware policy.

• 🛣️ Expose with Cilium Gateway API

  Publish one Death Star API path without installing a separate Gateway or Ingress controller.

• 🔐 Enable WireGuard encryption

  Turn on WireGuard and prove a cross-node request no longer appears as unencrypted traffic.

• 🏆 Exam: Repair a route from evidence

  Diagnose an accepted HTTPRoute that does not match the public landing request, then repair its path.