fix cilium routing and cluster dns
Kube-bench CIS scan / Scan ephemeral K3s cluster (push) Successful in 1m0s

This commit is contained in:
2026-08-16 19:41:40 -04:00
parent 88e735109f
commit 1a372b7eac
8 changed files with 250 additions and 11 deletions
+8 -1
View File
@@ -9,4 +9,11 @@ all:
ansible_become_method: sudo
cilium_enabled: false
cilium_k8s_service_host: REPLACE_WITH_REACHABLE_API_IP
cilium_k8s_service_port: 6443
# Set to zero for k3d so Ansible derives the published API port from
# the kubeconfig created during cluster bootstrap.
cilium_k8s_service_port: 0
# Optional. Use resolvers reachable from the Flatcar network when
# Docker's nested bridge resolver cannot answer external names.
# k3d_dns_servers:
# - REPLACE_WITH_PRIMARY_DNS
# - REPLACE_WITH_SECONDARY_DNS