From e903515763fdb744b0a7a507354be8db20ca40c1 Mon Sep 17 00:00:00 2001
From: Tom Alexander <tom@fizz.buzz>
Date: Mon, 16 Mar 2026 19:04:56 -0400
Subject: [PATCH] Enforce cilium network policies.

---
 nix/kubernetes/keys/scope.nix | 2 --
 1 file changed, 2 deletions(-)

diff --git a/nix/kubernetes/keys/scope.nix b/nix/kubernetes/keys/scope.nix
index 09af1be4..f1f87b36 100644
--- a/nix/kubernetes/keys/scope.nix
+++ b/nix/kubernetes/keys/scope.nix
@@ -288,8 +288,6 @@ makeScope newScope (
               };
             };
 
-            "policyEnforcementMode" = "never"; # This is temporary for debugging
-
             # TODO: Read and maybe apply https://docs.cilium.io/en/stable/operations/performance/tuning/
 
             # --set hostFirewall.enabled=true