Fix CrowdSec firewall-bouncer tar + CF WAF ruleset import #3

Merged

viktor merged 1 commit from wizard/crowdsec-fixes into master

2026-06-20 19:06:15 +00:00

Author	SHA1	Message	Date
Viktor Barzin	a351a66843	crowdsec+rybbit: fix firewall-bouncer tar extraction (busybox) + import existing CF WAF ruleset - initContainer used GNU tar --wildcards which fails on the busybox curl image (pod Init:Error); switch to extract-all + cp via shell glob. - cloudflare_ruleset hit the per-zone singleton conflict; import the existing 'default' http_request_firewall_custom ruleset and manage all rules — CrowdSec ban/captcha first, the pre-existing disabled skip rule preserved verbatim. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>	2026-06-20 19:04:30 +00:00

Author

SHA1

Message

Date

Viktor Barzin

a351a66843

crowdsec+rybbit: fix firewall-bouncer tar extraction (busybox) + import existing CF WAF ruleset

- initContainer used GNU tar --wildcards which fails on the busybox curl image (pod Init:Error); switch to extract-all + cp via shell glob.
- cloudflare_ruleset hit the per-zone singleton conflict; import the existing 'default' http_request_firewall_custom ruleset and manage all rules — CrowdSec ban/captcha first, the pre-existing disabled skip rule preserved verbatim.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

2026-06-20 19:04:30 +00:00