fix cilium routing and cluster dns
Kube-bench CIS scan / Scan ephemeral K3s cluster (push) Successful in 1m0s

This commit is contained in:
2026-08-16 19:41:40 -04:00
parent 88e735109f
commit 1a372b7eac
8 changed files with 250 additions and 11 deletions
@@ -21,3 +21,12 @@ bootstrap_repo_source: "{{ playbook_dir }}/.."
kubeconfig_fetch_enabled: true
kubeconfig_artifact_dir: "{{ playbook_dir }}/../artifacts"
kubeconfig_import_enabled: true
kubeconfig_default_path: "{{ lookup('env', 'HOME') }}/.kube/config"
kubeconfig_context_name: "k3d-{{ k3d_cluster_name }}"
kubeconfig_server_host: "{{ ansible_host }}"
# Optional upstream DNS servers for nested k3d hosts. Docker may expose an
# unreachable bridge resolver to CoreDNS, so provide the host's real resolvers
# when pods must resolve external Git or webhook endpoints.
k3d_dns_servers: []