add environment-specific cilium profiles
Kube-bench CIS scan / Scan ephemeral K3s cluster (push) Successful in 1m3s

This commit is contained in:
2026-08-16 20:04:14 -04:00
parent 1a372b7eac
commit 6c79340d9a
14 changed files with 188 additions and 56 deletions
@@ -8,6 +8,7 @@ all:
ansible_ssh_private_key_file: ~/.ssh/REPLACE_WITH_KEY
ansible_become_method: sudo
cilium_enabled: false
cilium_profile: k3d
cilium_k8s_service_host: REPLACE_WITH_REACHABLE_API_IP
# Set to zero for k3d so Ansible derives the published API port from
# the kubeconfig created during cluster bootstrap.