feat: add crowdsec

crowdsec/helmfile.yaml

@@ -0,0 +1,12 @@
+repositories:
+  - name: crowdsec
+    url: https://crowdsecurity.github.io/helm-charts
+
+releases:
+  - name: crowdsec
+    namespace: kube-system
+    createNamespace: false
+    chart: crowdsec/crowdsec
+    version: 0.20.0
+    values:
+      - values.yaml

crowdsec/values.yaml

@@ -0,0 +1,35 @@
+container_runtime: containerd
+
+agent:
+  enabled: true
+  acquisition:
+    - namespace: kube-system
+      podName: traefik-*
+      program: traefik
+  metrics:
+    enabled: false
+
+lapi:
+  enabled: true
+  replicas: 1
+  metrics:
+    enabled: true
+  persistentVolume:
+    data:
+      enabled: true
+      size: 1Gi
+    config:
+      enabled: true
+      size: 100Mi
+
+config:
+  config.yaml.local: |
+    api:
+      server:
+        auto_registration:
+          enabled: true
+          token: "${REGISTRATION_TOKEN}"
+          allowed_ranges:
+            - "10.0.0.0/8"
+            - "172.16.0.0/12"
+            - "192.168.0.0/16"