https://azuar4e.github.io/en/tags/c/azuar4eHugo 0.147.8 & FixIt v0.3.21-b2e6f70aenazuar4e@gmail.com (Angel Azuara Eizaguirre)azuar4e@gmail.com (Angel Azuara Eizaguirre)Thu, 29 Oct 2026 18:06:08 +0100https://azuar4e.github.io/en/posts/cilium/Thu, 29 Oct 2026 18:06:08 +0100azuar4e@gmail.com (Angel Azuara Eizaguirre)https://azuar4e.github.io/en/posts/cilium/Personal Projects<p>Building robust and secure clusters is one of the main challenges for those of us who work with cloud infrastructure. In Kubernetes-based environments, it is not enough to deploy the services: we also need to make sure they communicate securely and have a reliable observability system that lets us understand what is going on inside the cluster.</p> <p>In this article we will see how to set up Cilium in a <strong>local</strong> environment to manage the network and security of a Kubernetes cluster, including L3/L4/L7 policies with <code>CiliumNetworkPolicy</code>, encryption between nodes with WireGuard and service exposure through the Gateway API. We will also show how to program and deploy eBPF agents inside the cluster, extending what Cilium already does. Finally, we will implement a metrics system built around Hubble, which will export metrics to Prometheus so we can visualize them with Grafana.</p>