Don't set encryption type if encryption is disabled

kubernetes · Aug 15, 2021 · d3447af · d3447af
1 parent d2e20e8
commit d3447af
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/pkg/model/components/cilium.go b/pkg/model/components/cilium.go
@@ -149,7 +149,7 @@ func (b *CiliumOptionsBuilder) BuildOptions(o interface{}) error {
 		c.MemoryRequest = &defaultMemoryRequest
 	}
 
-	if c.EncryptionType == "" {
+	if c.EnableEncryption && c.EncryptionType == "" {
 		c.EncryptionType = kops.CiliumEncryptionTypeIPSec
 	}