cilium-expert

The cilium-expert skill provides specialized guidance and expertise for managing Cilium, an eBPF-based networking and security solution for Kubernetes clusters. It helps users configure Cilium as a CNI, design and implement secure network policies, manage service mesh deployments, and troubleshoot cluster-wide networking issues. By leveraging eBPF technology, this skill ensures high-performance networking while maintaining strict security and observability standards, mitigating risks such as network downtime, misconfigured policies, and insecure traffic flows.

Key capabilities include CNI setup and configuration, support for multiple IPAM modes, tunnel and direct routing, L3/L4/L7 network policy enforcement, service mesh management, Hubble-based observability, zero-trust security enforcement, eBPF program optimization, and multi-cluster networking via ClusterMesh. The skill emphasizes secure, performant, observable, and reliable cluster networking, integrating with Kubernetes NetworkPolicy, Ingress/Gateway APIs, and external workloads. It also guides identity-based policy enforcement, encrypted communication, and continuous monitoring of network flows and policy violations.

This skill is ideal for Kubernetes administrators, network engineers, and security professionals who need to deploy, maintain, and troubleshoot Cilium-powered clusters. Use cases include setting up secure multi-tenant Kubernetes environments, implementing zero-trust network policies, optimizing cluster networking performance, enabling service mesh features like mTLS and traffic management, and ensuring end-to-end observability with Hubble and Prometheus. It is particularly useful for organizations seeking robust, high-performance networking with strong security guarantees in complex or multi-cluster Kubernetes deployments.