.gitea/workflows/deploy.yaml

@@ -13,7 +13,6 @@ jobs:
       node-labels: ${{ steps.filter.outputs.node-labels }}
       coredns: ${{ steps.filter.outputs.coredns }}
       traefik: ${{ steps.filter.outputs.traefik }}
-      crowdsec: ${{ steps.filter.outputs.crowdsec }}
     steps:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
@@ -28,8 +27,6 @@ jobs:
               - 'coredns/**'
             traefik:
               - 'traefik/**'
-            crowdsec:
-              - 'crowdsec/**'
 
   deploy-node-labels:
     runs-on: ubuntu-latest
@@ -95,16 +92,6 @@ jobs:
             {
               "auth": "${{ secrets.ADMIN_BASIC_AUTH_CREDENTIALS }}"
             }
-      - name: Set crowdsec bouncer api key
-        uses: azure/k8s-create-secret@6e0ba8047235646753f2a3a3b359b4d0006ff218 # v5.0.1
-        with:
-          namespace: kube-system
-          secret-name: crowdsec-bouncer-api-key
-          secret-type: generic
-          data: |
-            {
-              "api-key": "${{ secrets.CROWDSEC_BOUNCER_API_KEY }}"
-            }
       - name: Deploy
         uses: azure/k8s-deploy@c8cfec839dc09896b3b8cc40cd13d04792680771 # v5.1.0
         with:
@@ -113,30 +100,6 @@ jobs:
           strategy: basic
           namespace: kube-system
 
-  deploy-crowdsec:
-    runs-on: ubuntu-latest
-    needs: check-changes
-    if: ${{ needs.check-changes.outputs.crowdsec == 'true' || github.event_name == 'workflow_dispatch' }}
-    steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
-      - uses: https://gitea.t000-n.de/t.behrendt/k_deploy_workflows/.gitea/actions/extract-namespace-from-repo-name@c373c34c836716e663e2d6379e686997bfd7746c # 0.0.6
-        id: namespace
-        with:
-          repo: ${{ github.repository }}
-      - uses: azure/setup-kubectl@15650b3ad78fff148532a140b8a4c821796b2d7b # v5.0.0
-      - uses: azure/setup-helm@dda3372f752e03dde6b3237bc9431cdc2f7a02a2 # v5
-        with:
-          version: "3.15.0"
-      - uses: azure/k8s-set-context@ae59a723ba9abe7a9655538854a025448dbab4aa # v4.0.2
-        with:
-          method: kubeconfig
-          kubeconfig: ${{ secrets.KUBECONFIG }}
-      - name: Deploy helm
-        uses: helmfile/helmfile-action@d9fefe29b0d07e9ab187ecfe1d63eff91e0a070c # v2.4.1
-        with:
-          helmfile-args: apply
-          helmfile-workdirectory: "crowdsec"
-
   deploy-docker-registry-secret:
     runs-on: ubuntu-latest
     needs: check-changes

.gitea/workflows/validate.yaml

@@ -47,23 +47,3 @@ jobs:
           namespace: kube-system
           lintType: dryrun
           manifests: "traefik/"
-
-  validate-crowdsec:
-    runs-on:
-      - ubuntu-latest
-      - linux_amd64
-    steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
-      - uses: azure/setup-kubectl@15650b3ad78fff148532a140b8a4c821796b2d7b # v5.0.0
-      - uses: azure/setup-helm@dda3372f752e03dde6b3237bc9431cdc2f7a02a2 # v5
-        with:
-          version: "3.15.0"
-      - uses: azure/k8s-set-context@ae59a723ba9abe7a9655538854a025448dbab4aa # v4.0.2
-        with:
-          method: kubeconfig
-          kubeconfig: ${{ secrets.KUBECONFIG }}
-      - name: Validate Helm
-        uses: helmfile/helmfile-action@d9fefe29b0d07e9ab187ecfe1d63eff91e0a070c # v2.4.1
-        with:
-          helmfile-args: diff
-          helmfile-workdirectory: "crowdsec"

crowdsec/helmfile.yaml

@@ -1,12 +0,0 @@
-repositories:
-  - name: crowdsec
-    url: https://crowdsecurity.github.io/helm-charts
-
-releases:
-  - name: crowdsec
-    namespace: kube-system
-    createNamespace: false
-    chart: crowdsec/crowdsec
-    version: 0.20.0
-    values:
-      - values.yaml

crowdsec/values.yaml

@@ -1,35 +0,0 @@
-container_runtime: containerd
-
-agent:
-  enabled: true
-  acquisition:
-    - namespace: kube-system
-      podName: traefik-*
-      program: traefik
-  metrics:
-    enabled: false
-
-lapi:
-  enabled: true
-  replicas: 1
-  metrics:
-    enabled: true
-  persistentVolume:
-    data:
-      enabled: true
-      size: 1Gi
-    config:
-      enabled: true
-      size: 100Mi
-
-config:
-  config.yaml.local: |
-    api:
-      server:
-        auto_registration:
-          enabled: true
-          token: "${REGISTRATION_TOKEN}"
-          allowed_ranges:
-            - "10.0.0.0/8"
-            - "172.16.0.0/12"
-            - "192.168.0.0/16"