Files
swaphb 6c79340d9a
Kube-bench CIS scan / Scan ephemeral K3s cluster (push) Successful in 1m3s
add environment-specific cilium profiles
2026-08-16 20:04:14 -04:00

15 lines
527 B
YAML

# Dedicated VM profile.
# Geneve tunneling is the portable default when the VM network does not have
# explicit routes for the Kubernetes pod CIDR between nodes.
routingMode: tunnel
tunnelProtocol: geneve
# Dedicated VMs do not need the nested-container socket-LB workaround.
socketLB:
hostNamespaceOnly: false
# Set these for an ArgoCD-managed installation, or override them through
# Ansible when the control-plane address is environment-specific.
k8sServiceHost: "REPLACE_WITH_CONTROL_PLANE_API_IP"
k8sServicePort: 6443