diff --git a/hack/kind.yaml b/hack/kind.yaml
index 4f35cf5..8fad1fb 100644
--- a/hack/kind.yaml
+++ b/hack/kind.yaml
@@ -3,32 +3,26 @@ kind: Cluster
 name: kargo
 networking:
   ######################################################################
-  # The following is required for Cilium to work with kind
-  podSubnet: "10.242.0.0/16"
-  serviceSubnet: "10.12.0.0/16"
-  kubeProxyMode: none # disable kube-proxy
-  disableDefaultCNI: true # disable kindnet
-  apiServerPort: 16443
-# apiServerAddress: "127.0.0.1"
+  # To use Cilium CNI
+  # https://docs.cilium.io/en/v1.10/gettingstarted/kind/#using-cilium-with-kind
+  # - Set ""kubeProxyMode"" to "none"
+  # - Set "disableDefaultCNI" to true"
+  kubeProxyMode: iptables # disable kube-proxy # Accepts "ipvs", "iptables", or "none"
+  disableDefaultCNI: false # disable kindnet :: Accepts boolean
 nodes:
   - role: control-plane
-    image: kindest/node:v1.29.0
     extraMounts: # Persistent image cache
       - hostPath: /var/lib/docker/volumes/kargo-control-plane-n01/_data
         containerPath: /var/lib/containerd
-  - role: worker
-    image: kindest/node:v1.29.0
-    extraMounts: # Persistent image cache
-      - hostPath: /var/lib/docker/volumes/kargo-worker-n01/_data
-        containerPath: /var/lib/containerd
   - role: worker
     image: kindest/node:v1.29.0
     extraMounts: # Persistent image cache
       - hostPath: /var/lib/docker/volumes/kargo-worker-n02/_data
         containerPath: /var/lib/containerd
     # Expose ports on the host:
-    # - 80/tcp
-    # - 443/tcp
+    # -  [http] - 80/tcp
+    # - [https] - 443/tcp
+    # - [ssh]   - 2222/tcp
     extraPortMappings:
       - listenAddress: "0.0.0.0"
         protocol: TCP
@@ -38,6 +32,10 @@ nodes:
         protocol: TCP
         hostPort: 443
         containerPort: 443
+      - listenAddress: "0.0.0.0"
+        protocol: TCP
+        hostPort: 2222
+        containerPort: 2222
     kubeadmConfigPatches:
       - |
         # Label the worker node listening on service ports