k8s-cilium

Diagnose Kubernetes networking issues using Cilium and Hubble eBPF inspection.

Updated Aug 23, 2026
One-click install
npx skills add https://github.com/spigell/my-agents --skill k8s-cilium-spigell
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: k8s-cilium
Source: https://github.com/spigell/my-agents/tree/main/agents/shared/src/tools/ask_kubernetes_expert/skills/k8s-cilium
Command: npx skills add https://github.com/spigell/my-agents --skill k8s-cilium-spigell

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Cilium & Hubble troubleshooting often gets stuck at guesswork: users need a reliable way to verify installation, inspect policy configuration, and trace traffic flows (including drops) when connectivity issues or security regressions occur.

Core Features & Use Cases

  • Cilium installation & health checks: Verify Cilium is installed and that the relevant agents are healthy before making policy changes.
  • Network policy inspection: List policies and retrieve specific policy details to confirm what rules are actually in effect.
  • Traffic observability with Hubble: Query flows to understand how traffic is behaving in real time, including identifying dropped packets and L7 behavior.

Quick Start

Ask the AI to detect Cilium, confirm agent health, then query Hubble for the last 5 minutes of dropped traffic in the namespace you specify.

Frequently Asked Questions about k8s-cilium

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I troubleshoot dropped Kubernetes network traffic using Hubble?

To troubleshoot dropped Kubernetes network traffic using Hubble, query Hubble flows by namespace, time range, and a dropped verdict to inspect eBPF-based behavior and identify packet loss sources.

How can I verify Cilium agent health before applying network policies?

Verify Cilium agent health by running Cilium status and detect tools to confirm the agents are installed and healthy. This ensures the eBPF datapath is ready before making network policy changes.

What is the best way to inspect L7 traffic behavior in a Kubernetes cluster?

Inspect L7 traffic behavior by querying Hubble flows and filtering for specific traffic types. This allows you to observe how Cilium policies handle layer 7 requests and identify filtering issues in real time.

How do I check which Cilium network policies are actually in effect?

Check effective Cilium network policies by listing deployed policies and retrieving specific policy details. This confirms exactly what rules are applied to endpoints and identities within your Kubernetes environment.

Can I trace connectivity problems involving specific pods in Kubernetes with Cilium?

Yes, you can trace pod connectivity problems by querying Hubble flows using parameters like namespace, pod name, and last time range. This isolates traffic behavior and drops for the specific workload.