viktor/infra
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

reenable crowdsec [ci skip]

Browse source
This commit is contained in:
Viktor Barzin 2025-08-31 15:20:57 +00:00
parent 6b316dc1c6
commit c17c1381c5
No known key found for this signature in database
GPG key ID: 4056458DBDBF8863
8 changed files with 100 additions and 106 deletions
Download patch file Download diff file Expand all files Collapse all files

85
modules/kubernetes/crowdsec/main.tf
View file

@ -1,6 +1,8 @@
variable "tls_secret_name" {}
variable "homepage_username" {}
variable "homepage_password" {}
variable "db_password" {}
variable "enroll_key" {}
module "tls_secret" {
source = "../setup_tls_secret"
@ -14,95 +16,16 @@ resource "kubernetes_namespace" "crowdsec" {
}
}
resource "kubernetes_persistent_volume" "db" {
metadata {
name = "crowdsec-db"
}
spec {
capacity = {
"storage" = "2Gi"
}
access_modes = ["ReadWriteOnce"]
persistent_volume_source {
nfs {
path = "/mnt/main/crowdsec/db"
server = "10.0.10.15"
}
}
claim_ref {
name = "crowdsec-db-pvc"
namespace = "crowdsec"
}
}
}
resource "kubernetes_persistent_volume" "config" {
metadata {
name = "crowdsec-config"
}
spec {
capacity = {
"storage" = "2Gi"
}
access_modes = ["ReadWriteOnce"]
persistent_volume_source {
nfs {
path = "/mnt/main/crowdsec/config"
server = "10.0.10.15"
}
}
claim_ref {
name = "crowdsec-config-pvc"
namespace = "crowdsec"
}
}
}
resource "helm_release" "crowdsec" {
namespace = "crowdsec"
create_namespace = true
name = "crowdsec"
atomic = true
version = "0.19.2"
version = "0.19.4"
repository = "https://crowdsecurity.github.io/helm-charts"
chart = "crowdsec"
values = [templatefile("${path.module}/values.yaml", { homepage_username = var.homepage_username, homepage_password = var.homepage_password })]
values = [templatefile("${path.module}/values.yaml", { homepage_username = var.homepage_username, homepage_password = var.homepage_password, DB_PASSWORD = var.db_password, ENROLL_KEY = var.enroll_key })]
timeout = 3600
}
# resource "kubernetes_ingress_v1" "metabase" {
# metadata {
# name = "metabase"
# namespace = "crowdsec"
# annotations = {
# "kubernetes.io/ingress.class" = "nginx"
# "nginx.ingress.kubernetes.io/auth-url" : "https://oauth2.viktorbarzin.me/oauth2/auth"
# "nginx.ingress.kubernetes.io/auth-signin" : "https://oauth2.viktorbarzin.me/oauth2/start?rd=/redirect/$http_host$escaped_request_uri"
# }
# }
# spec {
# tls {
# hosts = ["metabase.viktorbarzin.me"]
# secret_name = var.tls_secret_name
# }
# rule {
# host = "metabase.viktorbarzin.me"
# http {
# path {
# path = "/"
# backend {
# service {
# name = "crowdsec-service"
# port {
# number = 3000
# }
# }
# }
# }
# }
# }
# }
# }