add crowdsec module [ci skip]
This commit is contained in:
parent
57ce7d3b10
commit
e236a65c52
4 changed files with 204 additions and 1 deletions
49
modules/kubernetes/crowdsec/values.yaml
Normal file
49
modules/kubernetes/crowdsec/values.yaml
Normal file
|
|
@ -0,0 +1,49 @@
|
|||
container_runtime: containerd
|
||||
|
||||
agent:
|
||||
# To specify each pod you want to process it logs (pods present in the node)
|
||||
acquisition:
|
||||
# The namespace where the pod is located
|
||||
- namespace: ingress-nginx
|
||||
# The pod name
|
||||
podName: ingress-nginx-controller-*
|
||||
# as in crowdsec configuration, we need to specify the program name so the parser will match and parse logs
|
||||
program: nginx
|
||||
# Those are ENV variables
|
||||
env:
|
||||
# As it's a test, we don't want to share signals with CrowdSec so disable the Online API.
|
||||
- name: DISABLE_ONLINE_API
|
||||
value: "true"
|
||||
# As we are running Nginx, we want to install the Nginx collection
|
||||
- name: COLLECTIONS
|
||||
value: "crowdsecurity/nginx"
|
||||
lapi:
|
||||
env:
|
||||
# As it's a test, we don't want to share signals with CrowdSec, so disable the Online API.
|
||||
- name: DISABLE_ONLINE_API
|
||||
value: "true"
|
||||
ingress:
|
||||
enabled: true
|
||||
annotations:
|
||||
# we only want http to the backend so we need this annotation
|
||||
nginx.ingress.kubernetes.io/backend-protocol: "HTTP"
|
||||
# labels: {}
|
||||
ingressClassName: "nginx"
|
||||
host: "crowdsec.viktorbarzin.me" # crowdsec-api.example.com
|
||||
tls:
|
||||
- hosts:
|
||||
- crowdsec.viktorbarzin.me
|
||||
secretName: "tls-secret"
|
||||
dashboard:
|
||||
# -- Enable Metabase Dashboard (by default disabled)
|
||||
enabled: true
|
||||
annotations:
|
||||
# metabase only supports http so we need this annotation
|
||||
nginx.ingress.kubernetes.io/backend-protocol: "HTTP"
|
||||
# labels: {}
|
||||
ingressClassName: "nginx" # nginx
|
||||
host: "crowdsec.viktorbarzin.me" # crowdsec-api.example.com
|
||||
tls:
|
||||
- hosts:
|
||||
- crowdsec.viktorbarzin.me
|
||||
secretName: "tls-secret"
|
||||
Loading…
Add table
Add a link
Reference in a new issue