mosiur/CKS-Lessons
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Completed upto lesson 28

Browse Source
This commit is contained in:
Mosiur Rahman
2026-08-23 15:29:06 +06:00
parent fb86f0b60a
commit 8e43c00cd6
104 changed files with 1888 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
lab/lesson-23-cilium-scenario.md Normal file
View File

@@ -0,0 +1,7 @@
# Cilium encryption rollout scenario
Cluster `prod-east` already runs Cilium 1.19.6 from the official Helm chart in namespace `kube-system`.
The security team requires transparent encryption for traffic between Cilium-managed Pods on different nodes. The team does **not** require node-to-node encryption. The worker-node firewall currently allows TCP 6443 and UDP 8472, but not WireGuard traffic.
The cluster's operating-system image has WireGuard kernel support. There is no CNI chaining.