swaphb/kubernetes-security-baseline-lab
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

add environment-specific cilium profiles
Kube-bench CIS scan / Scan ephemeral K3s cluster (push) Successful in 1m3s
Details

Browse Source
This commit is contained in:
swaphb
2026-08-16 20:04:14 -04:00
parent 1a372b7eac
commit 6c79340d9a
14 changed files with 188 additions and 56 deletions
Download Patch File Download Diff File Expand all files Collapse all files
ansible/roles/cilium_bootstrap/defaults/main.yml
+3 -1
View File
@@ -2,7 +2,9 @@
cilium_enabled: false
cilium_namespace: kube-system
cilium_chart_version: 1.20.0
cilium_values_file: "{{ k3d_workspace }}/deployments/cilium/cilium-values.yaml"
cilium_profile: k3d
cilium_common_values_file: "{{ k3d_workspace }}/deployments/cilium/values/common.yaml"
cilium_profile_values_file: "{{ k3d_workspace }}/deployments/cilium/values/profiles/{{ cilium_profile }}.yaml"
cilium_k8s_service_host: ""
# k3d publishes the API on a dynamically allocated host port. A value of zero
# makes the role derive that port from the kubeconfig created by k3d.