Stop setting *Policies.remove=true in cilium-app (#223)

giantswarm · Jun 24, 2024 · 3bca124 · 3bca124
1 parent ae43a6e
commit 3bca124
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 16 deletions.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -7,6 +7,11 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+### Removed
+
+- Stop setting `defaultPolicies.enabled=true` in `cilium-app` when `internal.ciliumNetworkPolicy.enabled=true` after all clusters are migrated.
+- Stop setting `extraPolicies.remove=true` in `cilium-app` after all clusters are migrated.
+
 ## [0.53.1] - 2024-06-09
 
 ### Fixed

diff --git a/helm/cluster-vsphere/templates/helmreleases/cilium-helmrelease.yaml b/helm/cluster-vsphere/templates/helmreleases/cilium-helmrelease.yaml
@@ -66,19 +66,3 @@ spec:
             effect: "NoSchedule"
             operator: "Equal"
             value: "true"
-{{- if not .Values.internal.ciliumNetworkPolicy.enabled }}
-    defaultPolicies:
-      enabled: true
-      tolerations:
-        - effect: NoSchedule
-          operator: Exists
-        - effect: NoExecute
-          operator: Exists
-        - key: CriticalAddonsOnly
-          operator: Exists
-{{- end }}
-    extraPolicies:
-      remove: true
-      allowEgressToCoreDNS:
-        enabled: false
-