crowdsec-bouncer helm

No introduction found. Create it?

Install

Install with:

helm repo add crowdsec-bouncer oci://ghcr.io/bjw-s-labs/charts/
helm install crowdsec-bouncer crowdsec-bouncer/crowdsec-bouncer -f values.yaml

Examples

See examples from other people.

Top Repositories (2 out of 10)

NameRepoStarsVersionTimestamp
crowdsec-bouncerauricom/home-ops2110.8.412 days ago
crowdsec-bouncerishioni/homelab-ops1710.8.414 days ago

Values

See the most popular values for this chart:

KeyTypes
config.bouncer.apiKeySecretRef.key (9)
BOUNCER_KEY_ENVOY
string
config.bouncer.apiKeySecretRef.name (9)
crowdsec-secret
string
config.bouncer.lapiURL (9)
http://crowdsec-service:8080
string
config.bouncer.metrics (8)
true
boolean
config.prometheus.enabled (9)
true
boolean
config.prometheus.serviceMonitor.enabled (9)
true
boolean
config.trustedProxies[] (7)
- "10.42.0.0/16"
string
config.exemptIPs[] (2)
- "10.0.0.0/8"
- "40.233.88.33/32"
string
config.trustedIPHeader (1)
X-Envoy-External-Address
string
config.waf.apiKeySecretRef.key (1)
BOUNCER_KEY_ENVOY
string
config.waf.apiKeySecretRef.name (1)
crowdsec-secret
string
config.waf.appSecURL (1)
http://crowdsec-appsec-service:7422
string
config.waf.enabled (1)
true
boolean
config.waf.failOpen (1)
true
boolean
fullnameOverride (9)
crowdsec-bouncer
string
resources.limits.memory (3)
128Mi
string
resources.requests.cpu (3)
10m
string
resources.requests.memory (3)
32Mi
string
image.repository (2)
ghcr.io/kdwils/envoy-proxy-bouncer
string
image.tag (2)
v0.8.4@sha256:3c7ff986f04c5f1739989463d2e9553f0e7163f9a55d02d240ed6e794e4078f0
string
podAnnotations."secret.reloader.stakater.com/reload" (2)
crowdsec-secret
string
replicaCount (2)
2
number
affinity.podAntiAffinity.requiredDuringSchedulingIgnoredDuringExecution[].labelSelector.matchLabels."app.kubernetes.io/instance" (1)
crowdsec-bouncer
string
affinity.podAntiAffinity.requiredDuringSchedulingIgnoredDuringExecution[].labelSelector.matchLabels."app.kubernetes.io/name" (1)
envoy-proxy-bouncer
string
affinity.podAntiAffinity.requiredDuringSchedulingIgnoredDuringExecution[].topologyKey (1)
kubernetes.io/hostname
string
controllers.crowdsec-bouncer.annotations."reloader.stakater.com/auto" (1)
true
string
controllers.crowdsec-bouncer.containers.app.args[] (1)
- serve
- --config
- /app/config/config.yaml
string
controllers.crowdsec-bouncer.containers.app.env.ENVOY_BOUNCER_BOUNCER_APIKEY.valueFrom.secretKeyRef.key (1)
BOUNCER_KEY_ENVOY
string
controllers.crowdsec-bouncer.containers.app.env.ENVOY_BOUNCER_BOUNCER_APIKEY.valueFrom.secretKeyRef.name (1)
crowdsec-secrets
string
controllers.crowdsec-bouncer.containers.app.env.ENVOY_BOUNCER_WAF_APIKEY.valueFrom.secretKeyRef.key (1)
BOUNCER_KEY_ENVOY
string
controllers.crowdsec-bouncer.containers.app.env.ENVOY_BOUNCER_WAF_APIKEY.valueFrom.secretKeyRef.name (1)
crowdsec-secrets
string
controllers.crowdsec-bouncer.containers.app.image.repository (1)
ghcr.io/kdwils/envoy-proxy-bouncer
string
controllers.crowdsec-bouncer.containers.app.image.tag (1)
v0.8.4@sha256:3c7ff986f04c5f1739989463d2e9553f0e7163f9a55d02d240ed6e794e4078f0
string
controllers.crowdsec-bouncer.containers.app.probes.liveness.custom (1)
true
boolean
controllers.crowdsec-bouncer.containers.app.probes.liveness.enabled (1)
true
boolean
controllers.crowdsec-bouncer.containers.app.probes.liveness.spec.grpc.port (1)
8080
number
controllers.crowdsec-bouncer.containers.app.probes.liveness.spec.grpc.service (1)
liveness
string
controllers.crowdsec-bouncer.containers.app.probes.readiness.custom (1)
true
boolean
controllers.crowdsec-bouncer.containers.app.probes.readiness.enabled (1)
true
boolean
controllers.crowdsec-bouncer.containers.app.probes.readiness.spec.grpc.port (1)
8080
number
controllers.crowdsec-bouncer.containers.app.probes.readiness.spec.grpc.service (1)
readiness
string
controllers.crowdsec-bouncer.containers.app.resources.limits.memory (1)
512Mi
string
controllers.crowdsec-bouncer.containers.app.resources.requests.cpu (1)
25m
string
controllers.crowdsec-bouncer.containers.app.resources.requests.memory (1)
128Mi
string
controllers.crowdsec-bouncer.containers.app.securityContext.allowPrivilegeEscalation (1)
false
boolean
controllers.crowdsec-bouncer.containers.app.securityContext.capabilities.drop[] (1)
- ALL
string
controllers.crowdsec-bouncer.containers.app.securityContext.readOnlyRootFilesystem (1)
true
boolean
controllers.crowdsec-bouncer.pod.securityContext.runAsGroup (1)
1000
number
controllers.crowdsec-bouncer.pod.securityContext.runAsNonRoot (1)
true
boolean
controllers.crowdsec-bouncer.pod.securityContext.runAsUser (1)
1000
number
controllers.crowdsec-bouncer.pod.securityContext.seccompProfile.type (1)
RuntimeDefault
string
controllers.crowdsec-bouncer.pod.topologySpreadConstraints[].labelSelector.matchLabels."app.kubernetes.io/name" (1)
crowdsec-bouncer
string
controllers.crowdsec-bouncer.pod.topologySpreadConstraints[].maxSkew (1)
1
number
controllers.crowdsec-bouncer.pod.topologySpreadConstraints[].topologyKey (1)
kubernetes.io/hostname
string
controllers.crowdsec-bouncer.pod.topologySpreadConstraints[].whenUnsatisfiable (1)
DoNotSchedule
string
controllers.crowdsec-bouncer.replicas (1)
2
number
controllers.crowdsec-bouncer.strategy (1)
RollingUpdate
string
grafana.dashboard.enabled (1)
true
boolean
persistence.config.globalMounts[].path (1)
/app/config/config.yaml
string
persistence.config.globalMounts[].readOnly (1)
true
boolean
persistence.config.globalMounts[].subPath (1)
config.yaml
string
persistence.config.name (1)
crowdsec-bouncer-config
string
persistence.config.type (1)
configMap
string
podSecurityContext.seccompProfile.type (1)
RuntimeDefault
string
referenceGrant.create (1)
true
boolean
referenceGrant.fromNamespaces[] (1)
- network
string
securityContext.allowPrivilegeEscalation (1)
false
boolean
securityContext.capabilities.drop[] (1)
- ALL
string
securityContext.readOnlyRootFilesystem (1)
true
boolean
securityContext.runAsGroup (1)
65532
number
securityContext.runAsNonRoot (1)
true
boolean
securityContext.runAsUser (1)
65532
number
service.app.ports.grpc.appProtocol (1)
kubernetes.io/h2c
string
service.app.ports.grpc.port (1)
8080
number
service.app.ports.metrics.port (1)
9090
number
serviceMonitor.app.endpoints[].port (1)
metrics
string