{
  cluster-testing.modules = [
    #   ({
    #      networking.firewall = {
    #       allowedTCPPorts = [
    #         2379 # embedded etcd clients
    #         2380 # idem         peers
    #         4240 # cilium health checks
    #         6443 # k3s server
    #
    #         10250 # kumetrics server
    #       ];
    #       allowedUDPPorts = [
    #         8472 # cilium vxlan
    #       ];
    #    };
    #   })
  ];
}