talexander/machine_setup
1
0
Fork 0
Code Issues Pull Requests Releases Activity

Enforce cilium network policies.

Browse Source
This commit is contained in:
Tom Alexander
2026-03-16 19:04:56 -04:00
parent bd4e26dde5
commit 4abd80ac98
1 changed files with 0 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
nix/kubernetes/keys/scope.nix
View File

@@ -288,8 +288,6 @@ makeScope newScope (
}; };
}; };
"policyEnforcementMode" = "never"; # This is temporary for debugging
# TODO: Read and maybe apply https://docs.cilium.io/en/stable/operations/performance/tuning/ # TODO: Read and maybe apply https://docs.cilium.io/en/stable/operations/performance/tuning/
# --set hostFirewall.enabled=true # --set hostFirewall.enabled=true