jahanson/valinor
Archived
1
0
Fork 0
Code Issues 1 Pull requests Projects Releases Packages Wiki Activity Actions

Remove audit mode.

Browse source
This commit is contained in:
Joseph Hanson 2024-01-08 17:27:14 -06:00
parent f2f23345ef
commit dfaec21240
1 changed files with 9 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

10
kubernetes/apps/kube-system/cilium/app/helmrelease.yaml
View file

@ -34,10 +34,18 @@ spec:
enabled: true
ui:
enabled: true
metrics:
enabled: "{dns,drop,tcp,flow,port-distribution,icmp,httpV2:exemplars=true;labelsContext=source_ip,source_namespace,source_workload,destination_ip,destination_namespace,destination_workload,traffic_direction}"
enableOpenMetrics: true
prometheus:
enabled: true
operator:
prometheus:
enabled: true
ipam:
mode: kubernetes
policyEnforcementMode: always # enforce network policies
policyAuditMode: true # do not block traffic
# policyAuditMode: true # do not block traffic
hostFirewall:
enabled: true # enable host policies
extraConfig: