Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

docs: Policy Audit Mode improvements #23591

Commits on Feb 7, 2023

  1. docs: Policy Audit Mode improvements

    * Scale down the deathstar Deployment to one so that it's easier to
      observe ingoing flows (as there is only one backend to the service and
      thus one node to observe from) and enable Policy Audit Mode for a
      specific endpoint.
    * Check that Policy Audit Mode is enabled/disabled using `cilium
      endpoint get`.
    * Use Hubble to observe instead of cilium monitor, and check the verdict
      once Policy Audit Mode is disabled.
    * Add the empire-default-deny CNP to the cleanup section.
    * Misc improvements / rewording on the way.
    
    Signed-off-by: Alexandre Perrin <alex@isovalent.com>
    kaworu committed Feb 7, 2023
    Configuration menu
    Copy the full SHA
    47f454a View commit details
    Browse the repository at this point in the history