k8s: cilium: turn on "enable-icmp-rules" daemon flag

cilium/cilium#17620 cilium/cilium#16516
rbkmoney · Jan 11, 2022 · 81efbde · 81efbde
1 parent 0526b6c
commit 81efbde
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/sls/k8s-master/files/cilium-config.yml b/sls/k8s-master/files/cilium-config.yml
@@ -33,5 +33,7 @@ hubble:
 # crio needs to be restarted https://docs.cilium.io/en/v1.9/concepts/kubernetes/configuration/#crio
 containerRuntime:
   integration: "crio"
+extraConfig:
+  enable-icmp-rules: "true"
 #extraArgs:
 #  tofqdns-dns-reject-response-code: "nameError"