crowdsec helm

No introduction found. Create it?

Install

Install with:

helm repo add crowdsec https://crowdsecurity.github.io/helm-charts/
helm install crowdsec crowdsec/crowdsec -f values.yaml

Examples

See examples from other people.

Top Repositories (2 out of 6)

NameRepoStarsVersionTimestamp
crowdsecxunholy/k8s-gitops6200.22.014 days ago
crowdsecpascaliske/infrastructure690.22.022 days ago

Values

See the most popular values for this chart:

KeyTypes
container_runtime (6)
containerd
string
lapi.metrics.enabled (6)
true
boolean
lapi.metrics.serviceMonitor.enabled (6)
true
boolean
lapi.dashboard.enabled (5)
false
boolean
lapi.dashboard.ingress.enabled (3)
false
boolean
lapi.dashboard.ingress.host (3)
crowdsec.${DOMAIN_0}
string
lapi.dashboard.ingress.annotations."cert-manager.io/cluster-issuer" (2)
le-prod
string
lapi.dashboard.ingress.annotations."cert-manager.io/private-key-rotation-policy" (2)
Always
string
lapi.dashboard.ingress.annotations."meta.helm.sh/release-name" (2)
traefik
string
lapi.dashboard.ingress.annotations."meta.helm.sh/release-namespace" (2)
traefik
string
lapi.dashboard.ingress.annotations."traefik.ingress.kubernetes.io/router.entrypoints" (2)
websecure
string
lapi.dashboard.ingress.annotations."traefik.ingress.kubernetes.io/router.middlewares" (2)
traefik-chain-basic@kubernetescrd,traefik-bouncer@kubernetescrd,traefik-local@kubernetescrd
string
lapi.dashboard.ingress.annotations."traefik.ingress.kubernetes.io/router.tls" (2)
true
string
lapi.dashboard.ingress.ingressClassName (1)
internal
string
lapi.dashboard.ingress.tls[].hosts[] (1)
- crowdsec-dashboard.${SECRET_DOMAIN}
string
lapi.env[].name (5)
DISABLE_ONLINE_API
ENROLL_KEY
ENROLL_INSTANCE_NAME
string
lapi.env[].value (5)
false
${CSKEY}
cluster
string
lapi.env[].valueFrom.secretKeyRef.key (2)
enroll-key
string
lapi.env[].valueFrom.secretKeyRef.name (2)
crowdsec-secret
string
lapi.persistentVolume.config.enabled (3)
true
boolean
lapi.persistentVolume.config.accessModes[] (2)
- ReadWriteOnce
string
lapi.persistentVolume.config.size (2)
100Mi
string
lapi.persistentVolume.config.existingClaim (1)
crowdsec-config-pvc
string
lapi.persistentVolume.config.storageClassName (1)
csi-rbd-sc
string
lapi.persistentVolume.data.enabled (3)
true
boolean
lapi.persistentVolume.data.accessModes[] (2)
- ReadWriteOnce
string
lapi.persistentVolume.data.size (2)
1Gi
string
lapi.persistentVolume.data.existingClaim (1)
crowdsec-db-pvc
string
lapi.persistentVolume.data.storageClassName (1)
csi-rbd-sc
string
lapi.ingress.enabled (2)
false
boolean
lapi.ingress.host (1)
crowdsec.${SECRET_DOMAIN}
string
lapi.ingress.ingressClassName (1)
internal
string
lapi.ingress.tls[].hosts[] (1)
- crowdsec.${SECRET_DOMAIN}
string
lapi.affinity.nodeAffinity.requiredDuringSchedulingIgnoredDuringExecution.nodeSelectorTerms[].matchExpressions[].key (1)
beta.kubernetes.io/arch
string
lapi.affinity.nodeAffinity.requiredDuringSchedulingIgnoredDuringExecution.nodeSelectorTerms[].matchExpressions[].operator (1)
In
string
lapi.affinity.nodeAffinity.requiredDuringSchedulingIgnoredDuringExecution.nodeSelectorTerms[].matchExpressions[].values[] (1)
- amd64
string
lapi.extraVolumeMounts[].mountPath (1)
/etc/crowdsec_data/notifications/http.yaml
string
lapi.extraVolumeMounts[].name (1)
http-config
string
lapi.extraVolumeMounts[].readOnly (1)
true
boolean
lapi.extraVolumes[].hostPath.path (1)
/home/elraro/home-ops/volumes/crowdsec/http.yaml
string
lapi.extraVolumes[].name (1)
http-config
string
lapi.resources.limits.memory (1)
512M
string
lapi.resources.requests.cpu (1)
15m
string
lapi.resources.requests.memory (1)
184M
string
agent.acquisition[].namespace (5)
traefik
string
agent.acquisition[].podName (5)
traefik-*
string
agent.acquisition[].program (5)
traefik
string
agent.metrics.enabled (5)
true
boolean
agent.metrics.serviceMonitor.enabled (5)
true
boolean
agent.env[].name (4)
PARSERS
COLLECTIONS
DISABLE_PARSERS
string
agent.env[].value (4)
crowdsecurity/cri-logs
crowdsecurity/traefik
crowdsecurity/whitelists
string
agent.additionalAcquisition[].filenames[] (1)
- /nextcloud.log
string
agent.additionalAcquisition[].labels.type (1)
Nextcloud
string
agent.additionalAcquisition[].source (1)
file
string
agent.config.common.poll_without_inotify (1)
true
boolean
agent.enabled (1)
false
boolean
agent.extraVolumeMounts[].mountPath (1)
/nextcloud.log
/var/log/containers
/var/log/pods
string
agent.extraVolumeMounts[].name (1)
nextcloud-log
var-log-containers
var-log-pods
string
agent.extraVolumeMounts[].readOnly (1)
true
true
true
boolean
agent.extraVolumes[].hostPath.path (1)
/mnt/sdc1/nextcloud/data/nextcloud.log
/var/log/containers
/var/log/pods
string
agent.extraVolumes[].name (1)
nextcloud-log
var-log-containers
var-log-pods
string
agent.persistentVolume.config.enabled (1)
true
boolean
agent.persistentVolume.config.existingClaim (1)
crowdsec-agent-config-pvc
string
agent.tolerations[].effect (1)
NoSchedule
string
agent.tolerations[].key (1)
node-role.kubernetes.io/control-plane
string
agent.tolerations[].operator (1)
Exists
string
tls.enabled (3)
true
boolean
tls.bouncer.reflector.namespaces[] (2)
- traefik
string
image.pullPolicy (2)
IfNotPresent
string
image.repository (2)
ghcr.io/crowdsecurity/crowdsec
string
image.tag (2)
v1.7.6
string
config."config.yaml.local" (1)
api: server: auto_registration: # Activate if not using TLS for authentication enabled: true token: "${REGISTRATION_TOKEN}" # /!\ Do not modify this variable (auto-generated and handled by the chart) allowed_ranges: # /!\ Make sure to adapt to the pod IP ranges used by your cluster - "127.0.0.1/32" - "10.42.0.0/16"
string
config."profiles.yaml" (1)
name: default_ip_remediation filters: - Alert.Remediation == true && Alert.GetScope() == "Ip" decisions: - type: ban duration: 4h notifications: - http_default on_success: break
string
reflector.enabled (1)
true
boolean
reflector.env[].name (1)
OPNSENSE_URL
OPNSENSE_API_KEY
OPNSENSE_API_SECRET
string
reflector.env[].value (1)
https://opnsense.${SECRET_DOMAIN}
string
reflector.env[].valueFrom.secretKeyRef.key (1)
opnsense-api-key
opnsense-api-secret
string
reflector.env[].valueFrom.secretKeyRef.name (1)
crowdsec-secret
crowdsec-secret
string