Enable the firewall.

Now that we have networking working, I can enable the firewall and confirm nothing breaks.
2026-01-01 10:21:36 -05:00
parent e26c83e2ad
commit a8f1f69570
4 changed files with 28 additions and 4 deletions
--- a/nix/kubernetes/keys/scope.nix
+++ b/nix/kubernetes/keys/scope.nix
@@ -246,6 +246,8 @@ makeScope newScope (
            "ipv4NativeRoutingCIDR" = "10.200.0.0/16";
            "ipv6NativeRoutingCIDR" = "2620:11f:7001:7:ffff::/80";

+            # TODO: Read and maybe apply https://docs.cilium.io/en/stable/operations/performance/tuning/
+
            # --set hostFirewall.enabled=true

            # --set 'ipam.operator.clusterPoolIPv4PodCIDRList=["10.0.0.0/8"]' \