forustandCopilot
ed1ddaad5d
Protect public Traefik routes with CrowdSec HTTP decisions and restore access logging for web traffic analysis. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
56 lines
1.2 KiB
YAML
56 lines
1.2 KiB
YAML
container_runtime: containerd
|
|
agent:
|
|
env:
|
|
- name: COLLECTIONS
|
|
value: "crowdsecurity/traefik crowdsecurity/base-http-scenarios"
|
|
- name: DISABLE_COLLECTIONS
|
|
value: "crowdsecurity/linux crowdsecurity/sshd"
|
|
|
|
acquisition:
|
|
- namespace: traefik
|
|
podName: "*traefik*"
|
|
program: traefik
|
|
poll_without_inotify: true
|
|
|
|
resources:
|
|
requests:
|
|
cpu: 50m
|
|
memory: 100Mi
|
|
limits:
|
|
cpu: 200m
|
|
memory: 500Mi
|
|
|
|
lapi:
|
|
env:
|
|
- name: COLLECTIONS
|
|
value: "crowdsecurity/traefik crowdsecurity/base-http-scenarios"
|
|
- name: DISABLE_COLLECTIONS
|
|
value: "crowdsecurity/linux crowdsecurity/sshd"
|
|
service:
|
|
type: ClusterIP
|
|
persistentVolume:
|
|
data:
|
|
enabled: true
|
|
storageClassName: local-path-retain
|
|
size: 1Gi
|
|
config:
|
|
enabled: true
|
|
storageClassName: local-path-retain
|
|
size: 100Mi
|
|
storeLAPICscliCredentialsInSecret: true
|
|
resources:
|
|
requests:
|
|
cpu: 50m
|
|
memory: 150Mi
|
|
limits:
|
|
cpu: 200m
|
|
memory: 500Mi
|
|
|
|
metrics:
|
|
enabled: true
|
|
serviceMonitor:
|
|
additionalLabels:
|
|
release: prometheus-stack
|
|
enabled: true
|
|
namespace: prometheus
|