This course is currently in Beta, content may be updated as we refine the material

Cilium Certified Associate (CCA) Exam Preparation

Master eBPF-powered Kubernetes networking with Cilium and prepare for the CNCF Cilium Certified Associate (CCA) certification exam. This comprehensive course covers all eight exam domains including Cilium architecture, network policies, service mesh with Gateway API, Hubble observability, Cluster Mesh for multi-cluster connectivity, and BGP external networking. Through hands-on labs and practical exercises, you'll gain the skills needed to deploy, configure, and troubleshoot Cilium in production Kubernetes environments.

40+ hours content
Certificate included
Enroll Now - Start Learning
30-Day Money-Back Guarantee

Course Preview

40+ hours
Video Content
10
Hands-on Labs
100%
Online

Why This Course is Different

Get everything you need to master platform engineering and advance your career

Certificate of Completion

Earn a certificate while gaining real-world skills that go beyond traditional certification prep

Hands-on Labs

10 practical labs with real-world scenarios in pre-configured cloud environments

Expert-Led

Learn from Sam Gabrail, Former HashiCorp Sr. Solutions Engineer with 18+ years experience

Community Support

Join our community where members help each other and collaborate on learning

Share this Course

What You'll Master

Explain Cilium architecture and its role in Kubernetes networking

Understand eBPF technology and its advantages over iptables-based solutions

Install, configure, and manage Cilium using the Cilium CLI

Create and apply Cilium Network Policies for identity-based security

Configure service mesh capabilities including Gateway API and traffic encryption

Use Hubble for network observability and troubleshooting

Implement Cluster Mesh for multi-cluster connectivity

Configure BGP and external networking for egress connectivity

Compare different IPAM modes and select appropriate options

Understand datapath models (VXLAN, Geneve, native routing) and their trade-offs

Implement Layer 7 network policies for HTTP, gRPC, and DNS filtering

Enable and configure transparent encryption with WireGuard

Monitor and troubleshoot Cilium clusters using connectivity tests

Course Curriculum

SECTION 1ARCHITECTURE (20%)

Master Cilium's architecture, understand its role in Kubernetes networking, and learn about IPAM, component roles, and datapath models

  • Introduction to Cilium and Cloud Native Networking
  • Community
  • Cilium Architecture Deep Dive
  • Cilium Component Roles
  • IP Address Management (IPAM) with Cilium
  • Datapath Models in Cilium
  • Exploring Cilium ArchitectureLab
  • Cilium Architecture Knowledge CheckQuiz
6 lessons • 1 quizzes • 1 labs

SECTION 2NETWORK POLICY (18%)

Learn to create and interpret Cilium Network Policies, understand identity-based security, and compare with Kubernetes native policies

  • Introduction to Cilium Network Policies
  • Identity-Based Network Security Model
  • Policy Enforcement Modes
  • Policy Rule Structure
  • Kubernetes Network Policies vs Cilium Network Policies
  • Implementing Cilium Network PoliciesLab
  • Layer 7 Network PoliciesLab
  • Network Policy AssessmentQuiz
5 lessons • 1 quizzes • 2 labs

SECTION 3SERVICE MESH (16%)

Implement service mesh capabilities using Gateway API, understand traffic encryption, and compare sidecar vs sidecarless architectures

  • Service Mesh Fundamentals and Use Cases
  • Ingress Routing with Cilium
  • Gateway API for Ingress Routing
  • Benefits of Gateway API over Ingress
  • Encrypting Traffic in Transit with Cilium
  • Sidecar-based vs Sidecarless Architectures
  • Configuring Gateway API with CiliumLab
  • Enabling Transparent EncryptionLab
  • Service Mesh Knowledge CheckQuiz
6 lessons • 1 quizzes • 2 labs

SECTION 4NETWORK OBSERVABILITY (10%)

Master Hubble for network observability, enable Layer 7 visibility, and use both CLI and UI for troubleshooting

  • Hubble Observability Overview
  • Enabling Layer 7 Protocol Visibility
  • Using Hubble CLI
  • Hubble UI for Visual Observability
  • Network Observability with HubbleLab
  • Network Observability AssessmentQuiz
4 lessons • 1 quizzes • 1 labs

SECTION 5INSTALLATION AND CONFIGURATION (10%)

Install and configure Cilium using the CLI, run connectivity tests, and manage Cilium configuration

  • Cilium CLI Overview
  • Installing Cilium with the CLI
  • Querying and Modifying Configuration
  • Connectivity Tests and Health Monitoring
  • Installing and Configuring CiliumLab
  • Installation and Configuration QuizQuiz
4 lessons • 1 quizzes • 1 labs

SECTION 6CLUSTER MESH (10%)

Implement multi-cluster connectivity with Cluster Mesh for service discovery and load balancing across clusters

  • Introduction to Cluster Mesh
  • Cluster Mesh Architecture
  • Service Discovery Across Clusters
  • Load Balancing with Cluster Mesh
  • Implementing Cluster MeshLab
  • Cluster Mesh Knowledge CheckQuiz
4 lessons • 1 quizzes • 1 labs

SECTION 7EBPF (10%)

Understand eBPF technology, its role in Cilium, and how it compares to traditional iptables-based networking

  • Introduction to eBPF
  • The Role of eBPF in Cilium
  • eBPF Key Benefits
  • eBPF-based vs IPtables-based Platforms
  • Exploring eBPF in CiliumLab
  • eBPF Fundamentals QuizQuiz
4 lessons • 1 quizzes • 1 labs

SECTION 8BGP AND EXTERNAL NETWORKING (6%)

Configure egress connectivity and connect Cilium-managed clusters with external networks using BGP

  • Egress Connectivity Requirements
  • BGP with Cilium
  • Connecting to External Networks
  • Configuring Egress and BGPLab
  • External Networking QuizQuiz
3 lessons • 1 quizzes • 1 labs

Course Features

Hands-on Labs - Lots of hands-on labs to learn by doing

Hands-on Labs

Lots of hands-on labs to learn by doing

Join our Community - Community support to ask questions and collaborate

Join our Community

Community support to ask questions and collaborate

Test Your Knowledge - Quizzes to help you grasp the material well

Test Your Knowledge

Quizzes to help you grasp the material well

See what others are saying about our Courses

I like the Crossplane 101 course a lot. I think it is one of the best online courses I have taken (and I've taken a lot in the last 2 years, transitioning into DevOps). The labs are phenomenal – every task has a long tutorial with lots of explanations, gotchas, and recaps, and you always provide the reasoning for implementing a certain solution.
Maor Klir - Platform Engineer
Maor Klir
Platform Engineer
I just completed the Crossplane 101 course! Managing infrastructure as Kubernetes resources is a total game-changer. A huge thanks to TeKanAid and Sam Gabrail for the incredible training and insights.
Tiago Teixeira Santos - SRE / Platform Engineer
Tiago Teixeira Santos
SRE / Platform Engineer
Although I've worked with Crossplane in real production environments, I always felt there were gaps in my understanding. Completing this course filled those gaps perfectly. I had to unlearn and relearn quite a few things, especially around Crossplane v2.0 concepts. Well structured and thoughtfully put together. Highly recommended for building a strong, foundational understanding of Crossplane.
Vasil Shaikh - Cloud/DevSecOps Engineer
Vasil Shaikh
Cloud/DevSecOps Engineer
Dear Sam, I hope this email finds you well. If you remember before the end of last year I register for one your courses Terraform 101 – Certified Terraform Associate, I must admit that I learned a lot even though I was not patient enough for all videos to be available. All in all I enjoy the way you structured the course and how you went through it. The main reason of this email, to send you my gratitude for the content you created and to let you know that I passed my exam/test last week.
Danny Hirwa - Information Technology Support Assistant at Semalytix
Danny Hirwa
Information Technology Support Assistant at Semalytix
This course was a perfect introduction to Terraform and Infrastructure as Code. Loved the gitpod, saving me a lot of time for developer environment setup. We have a project at work where we want to go from a click-ops version of server-deploy to a more automated flow using ci/cd and terraform for deploying virtual servers.
Hanne Stroem - Infrastructure Architect
Hanne Stroem
Infrastructure Architect
I want to thank you for such wonderful courses. They are more comprehensive than other courses I have taken in the past. You take the time to explain every detail of the code and what it does exactly, further enforcing your student's understanding and confidence in what they are learning. Your methods are very effective and set you apart from other instructors.
S.A. - DevOps Engineer
S.A.
DevOps Engineer

Choose your plan

Simple, Transparent Pricing

Unlock full access to TeKanAid courses, labs, and bootcamps

Buying for a team? Private corporate training is available for up to 15 learners.View team training
MonthlyQuarterly
Try Premium free for 7 days →

Just exploring? Start free below. Want the full experience? Try Premium free for 7 days (card required, $0 today).

Pro

All courses, with lab scripts to run on your own machine

$59/month

Renews automatically. Cancel anytime.

Final price verified at checkout.

  • Full access to all courses
  • Lab scripts to download and run on your own machine (hosted labs not included)
  • Progress tracking
  • Certificate of completion
  • Community access
  • Bootcamp participation
  • New content access
Recommended

Premium

Full access, including unlimited hosted labs

$99/month

Renews automatically. Cancel anytime.

Final price verified at checkout.

  • Everything in Pro
  • Unlimited hands-on labs, fully hosted on TeKanAid Academy (nothing to set up)
  • Lab AI Assistant
  • Accelerator bootcamps with live office hours
  • Priority support

Prefer just this course?

Purchase Cilium Certified Associate (CCA) Exam Preparation for a one-time fee of $79. Full access to course content, quizzes, certificates, and community features, lab access is not included.

Buy this course for $79

Just exploring? Start free, no account needed

Three free ways to start. All bridge into the paid Premium catalog when you're ready.

Not ready to commit? The crash course is email-only. No academy account required.

Hi there, I'm Sam

I'm a husband and father of two wonderful boys. I'm also very passionate 🔥 about all things technology. From when I was 10, I had a dream to become a computer 💻 engineer one day. Here I am today living the dream!

Thanks for visiting TeKanAid Academy. My goal is to teach you all things DevOps. Below are some of the things I've done over the years. I'm confident that I can help you achieve your dreams too.

  • 18+ years of experience in various Information Technology fields from Telecommunications, Computer Networks, Digital Transformation, DevOps, Cybersecurity, and IoT
  • President of TeKanAid Solutions Inc. building online content in the DevOps space
  • Previous – Sr. Solutions Engineer at HashiCorp
Read More
Sam Gabrail - Platform Engineering Educator and HashiCorp Authorized Instructor

View my Certifications

Terraform: Authorized HashiCorp Instructor - HashiCorp Partner Network (HPN) Certification Badge

Terraform: Authorized HashiCorp Instructor

Verify my certificate

HashiCorp Authorized Instructors are experienced DevOps professionals who deliver official HashiCorp training courses in person and virtually.

Issued by HashiCorp Partner Network (HPN)

Vault: Authorized HashiCorp Instructor - HashiCorp Partner Network (HPN) Certification Badge

Vault: Authorized HashiCorp Instructor

Verify my certificate

HashiCorp Authorized Instructors are experienced DevOps professionals who deliver official HashiCorp training courses in person and virtually.

Issued by HashiCorp Partner Network (HPN)

HashiCorp Certified: Terraform Associate (002) - HashiCorp Certification Badge

HashiCorp Certified: Terraform Associate (002)

Verify my certificate

Earners of the HashiCorp Certified: Terraform Associate certification know the basic concepts, skills, and use cases associated with open source HashiCorp Terraform.

Issued by HashiCorp

HashiCorp Certified: Vault Associate (002) - HashiCorp Certification Badge

HashiCorp Certified: Vault Associate (002)

Verify my certificate

Earners of the HashiCorp Certified: Vault Associate certification know the basic concepts, skills, and use cases associated with open source HashiCorp Vault.

Issued by HashiCorp

Featured Products

Week 4: AI Agents and Agentic Workflows - Platform Engineering Course

Week 4: AI Agents and Agentic Workflows

Part of the AI Platform Engineering Bootcamp. Week 4 of 8. The bootcamp follows an 8-week arc that culminates in a capstone Platform Assistant: a production-ready AI system you build by combining the LLM, RAG, agent, MLOps, model serving, and observability layers introduced across each week.

Learn More →
Week 1: AI Foundations for Infrastructure Engineers - Platform Engineering Course

Week 1: AI Foundations for Infrastructure Engineers

Part of the AI Platform Engineering Bootcamp. Week 1 of 8. The bootcamp follows an 8-week arc that culminates in a capstone Platform Assistant: a production-ready AI system you build by combining the LLM, RAG, agent, MLOps, model serving, and observability layers introduced across each week.

Learn More →
Week 7: AI Observability and LLMOps - Platform Engineering Course

Week 7: AI Observability and LLMOps

Part of the AI Platform Engineering Bootcamp. Week 7 of 8. The bootcamp follows an 8-week arc that culminates in a capstone Platform Assistant: a production-ready AI system you build by combining the LLM, RAG, agent, MLOps, model serving, and observability layers introduced across each week.

Learn More →
Money Back Guarantee

30-Day Money-Back Guarantee

Try it risk-free

I'm confident you'll get everything you need from this course and be 100% satisfied. But in the unlikely event you decide it's not for you just ask for a refund any time during the first 30 days and you'll get your money back with no questions asked.