talexander/machine_setup
1
0
Fork 0
Code Issues Pull Requests Releases Activity

Enforce cilium network policies.

Browse Source
This commit is contained in:
Tom Alexander 2026-03-16 19:04:56 -04:00
parent 1e9ce1165d
commit e903515763
Signed by: talexander
GPG Key ID: 36C99E8B3C39D85F
1 changed files with 0 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
nix/kubernetes/keys/scope.nix
View File

@ -288,8 +288,6 @@ makeScope newScope (
};
};
"policyEnforcementMode" = "never"; # This is temporary for debugging
# TODO: Read and maybe apply https://docs.cilium.io/en/stable/operations/performance/tuning/
# --set hostFirewall.enabled=true