---
title: "Discussion on \"Locking Down Your Cluster: Rolling Out Cilium Network Policies Without Breaking Everything\" | Hashnode"
description: "Discussion on \"Locking Down Your Cluster: Rolling Out Cilium Network Policies Without Breaking Everything\". Rolling out CiliumNetworkPolicies without breaking traffic: audit mode with Hubble, then default-deny, and the gotchas on the way."
url: "https://hashnode.com/posts/locking-down-your-cluster-rolling-out-cilium-network-policies-without-breaking-everything/6ad202a73f0875d54e95214d"
---

[Feed](https://hashnode.com/feed) /

Discussion

# [Locking Down Your Cluster: Rolling Out Cilium Network Policies Without Breaking Everything](https://mortennordbye.hashnode.dev/locking-down-your-cluster-rolling-out-cilium-network-policies-without-breaking-everything?utm_source=hashnode&utm_medium=feed)

Rolling out CiliumNetworkPolicies without breaking traffic: audit mode with Hubble, then default-deny, and the gotchas on the way.

Oct 16 · 16 min read · mortennordbye.hashnode.dev  
Read the article

-   [#kubernetes](https://hashnode.com/tag/kubernetes)
-   [#cilium](https://hashnode.com/tag/cilium)
-   [#security](https://hashnode.com/tag/security)

## Written by

[Morten Victor Nordbye](https://hashnode.com/@mortennordbye)

@mortennordbye · Norway

  
[View profile](https://hashnode.com/@mortennordbye)

Senior Platform Engineer

Senior Platform Engineer. I run a Talos Kubernetes homelab on Proxmox, managed with Terraform and Argo CD. Blog: https://blog.nordbye.it. Docs: https://docs.nordbye.it. The whole setup is open at https://github.com/mortennordbye/Homelab

## Responses

Markdown supported · ⌘↵ to post

No responses yet.