Skip to content

Enable Cilium audit mode by default

Arthur Evstifeev requested to merge aevstifeev/cluster-applications:cilium-audit-by-default into master

What does this MR do?

This MR reverses audit mode logic for Cilium: enabled by default, can be disabled via custom values.

Network Policies define list of allowed rules and all traffic that was not explicitly allowed will be dropped. audit mode will prevent unexpected blocks during the initial setup and overall a safer default.

related to gitlab-org/gitlab#220253 (closed)

Screenshots

Manual QA

Edited by Arthur Evstifeev

Merge request reports