Fix CrowdSec firewall-bouncer tar + CF WAF ruleset import #3

Merged

viktor merged 1 commit from wizard/crowdsec-fixes into master

2026-06-20 19:06:15 +00:00

viktor commented

2026-06-20 19:05:13 +00:00

Owner

Follow-up fixes to PR #2: busybox tar extraction + import the existing per-zone WAF ruleset instead of creating a second one.

viktor added 1 commit 2026-06-20 19:05:14 +00:00

crowdsec+rybbit: fix firewall-bouncer tar extraction (busybox) + import existing CF WAF ruleset a351a66843

- initContainer used GNU tar --wildcards which fails on the busybox curl image (pod Init:Error); switch to extract-all + cp via shell glob.
- cloudflare_ruleset hit the per-zone singleton conflict; import the existing 'default' http_request_firewall_custom ruleset and manage all rules — CrowdSec ban/captcha first, the pre-existing disabled skip rule preserved verbatim.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>