Add Flatcar and Cilium kube-proxy-free architecture

2026-08-10 17:19:18 -04:00
parent 8934ea95a4
commit fc786ec63c
10 changed files with 194 additions and 51 deletions
@@ -0,0 +1,32 @@
+apiVersion: k3d.io/v1alpha5
+kind: Simple
+metadata:
+  name: security-baseline-cilium
+
+# This is an advanced local profile. The standard k3d profile remains the
+# lowest-friction quick start and keeps Flannel enabled.
+servers: 1
+agents: 2
+
+options:
+  k3s:
+    extraArgs:
+      - arg: --flannel-backend=none
+        nodeFilters:
+          - server:*
+      - arg: --disable-network-policy
+        nodeFilters:
+          - server:*
+      - arg: --disable-kube-proxy
+        nodeFilters:
+          - server:*
+      - arg: --disable=traefik
+        nodeFilters:
+          - server:*
+  k3d:
+    wait: true
+    timeout: 180s
+  kubeconfig:
+    updateDefaultKubeconfig: true
+    switchCurrentContext: true
+