for the checking of things I think we should consider
kubectl exec -ti -n kube-system ds/cilium -- cilium status
tho this doesn't show tunnel mode
maybe consider custom columns instead of jq.
kubectl get nodes -o custom-columns=name:.metadata.name,node-ip:.status.addresses[].address,pod-cidr:.spec.podCIDRs[]
less dependencies and easier to read
This is a bug the final words of section 4
Well done for completing the course! You are now familiar with Cilium Host Firewall! You now understand how you can apply the same k8S networking security policies to your nodes and even to non-k8s hosts!