feat: add crowdsec (#10)
Some checks failed
Deploy / check-changes (push) Successful in 5s
Deploy / deploy-node-labels (push) Has been skipped
Deploy / deploy-coredns (push) Has been skipped
Deploy / deploy-crowdsec (push) Successful in 13s
Deploy / deploy-traefik (push) Failing after 11m12s

Reviewed-on: #10
Co-authored-by: Timo Behrendt <t.behrendt@t00n.de>
Co-committed-by: Timo Behrendt <t.behrendt@t00n.de>
This commit was merged in pull request #10.
This commit is contained in:
2025-12-28 09:51:45 +01:00
committed by t.behrendt
parent 1c33567e17
commit cd201803a1
5 changed files with 265 additions and 0 deletions

12
crowdsec/helmfile.yaml Normal file
View File

@@ -0,0 +1,12 @@
repositories:
- name: crowdsec
url: https://crowdsecurity.github.io/helm-charts
releases:
- name: crowdsec
namespace: kube-system
createNamespace: false
chart: crowdsec/crowdsec
version: 0.20.0
values:
- values.yaml

35
crowdsec/values.yaml Normal file
View File

@@ -0,0 +1,35 @@
container_runtime: containerd
agent:
enabled: true
acquisition:
- namespace: kube-system
podName: traefik-*
program: traefik
metrics:
enabled: false
lapi:
enabled: true
replicas: 1
metrics:
enabled: true
persistentVolume:
data:
enabled: true
size: 1Gi
config:
enabled: true
size: 100Mi
config:
config.yaml.local: |
api:
server:
auto_registration:
enabled: true
token: "${REGISTRATION_TOKEN}"
allowed_ranges:
- "10.0.0.0/8"
- "172.16.0.0/12"
- "192.168.0.0/16"