cluster

commit 35e06bd8817c8c1806ca6986299ee657545fbcb4
parent 4917bc4fcef69e535f04cf56cf7852c92aa69488
Author: MTRNord <MTRNord@users.noreply.github.com>
Date:   Fri, 20 Mar 2026 22:03:20 +0100

small fixes

Signed-off-by: MTRNord <MTRNord@users.noreply.github.com>

Diffstat:
M
infrastructure_talos/controllers/cilium.yaml
 | 
7
+++++++

1 file changed, 7 insertions(+), 0 deletions(-)
diff --git a/infrastructure_talos/controllers/cilium.yaml b/infrastructure_talos/controllers/cilium.yaml
@@ -130,6 +130,13 @@ spec:
           maxSkew: 1
           topologyKey: topology.kubernetes.io/zone
           whenUnsatisfiable: ScheduleAnyway
+    # Mutual auth is redundant with WireGuard encryption already enabled;
+    # explicitly disable to match terraform module defaults (1.19.1)
+    authentication:
+      mutual:
+        enabled: false
+    # Apply network policies to local-cluster traffic by default (1.19.1 default)
+    policyDefaultLocalCluster: true
     policyCIDRMatchMode: nodes
     prometheus:
       enabled: true