fix(cilium): Disable encryption

2026-03-03 15:24:35 +01:00
parent 33714ec032
commit fb42e27f96
1 changed files with 5 additions and 0 deletions
@@ -1,5 +1,10 @@
 cilium:
  enabled: true
+  # WireGuard cannot be used during migration -- Flannel nodes have no WireGuard
+  # keys so encrypted traffic is unreadable by them.
+  # TODO: re-enable after migration
+  encryption:
+    enabled: false
  envoy:
    enabled: true
  # kube-proxy stays running during migration; disable replacement until done.