github-personal/Biohazard
1
0
Fork 0
mirror of https://github.com/outbackdingo/Biohazard.git synced 2026-01-27 10:18:27 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix(cilium): re-enable Envoy due to DNS netpols

Browse Source
This commit is contained in:
JJGadgets
2024-08-21 19:37:21 +08:00
parent 89c28410f7
commit 37a9d7388b
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
kube/deploy/core/_networking/cilium/app/config/biohazard/helm-values.yaml
View File

@@ -86,7 +86,7 @@ bpf:
tproxy: true # L7 netpols stuff
#mapDynamicSizeRatio: "0.005" # Increase Cilium map sizes due to amount of netpols and identities, when BPF map pressure hits 100 endpoint creation starts failing
policyMapMax: "40960" # 2.5x default, dynamic size ratio doesn't increase this
l7Proxy: false # enables L7 non-DNS netpols via proxy, e.g. Envoy
l7Proxy: true # enables L7 netpols (including DNS) via proxy, e.g. Envoy
dnsProxy:
enableTransparentMode: true
socketLB: