crowdsec helm

No introduction found. Create it?

Install

Install with:

helm repo add crowdsec oci://ghcr.io/crowdsecurity/helm-charts/crowdsec
helm install crowdsec crowdsec/crowdsec -f values.yaml

Examples

See examples from other people.

Top Repositories (5 out of 18)

NameRepoStarsVersionTimestamp
crowdsecpascaliske/infrastructure730.24.38 days ago
crowdsecauricom/home-ops2110.24.39 days ago
crowdsecishioni/homelab-ops1710.24.39 days ago
crowdsecToaHartor/maisonneux430.24.24 months ago
crowdsecm00nwtchr/homelab-cluster390.20.19 months ago

Values

See the most popular values for this chart:

KeyTypes
container_runtime (16)
containerd
string
lapi.metrics.serviceMonitor.enabled (16)
true
boolean
lapi.metrics.enabled (6)
true
boolean
lapi.env[].name (14)
USE_WAL
string
lapi.env[].value (13)
true
string
lapi.env[].valueFrom.secretKeyRef.key (5)
string
lapi.env[].valueFrom.secretKeyRef.name (5)
string
lapi.envFrom[].secretRef.name (12)
crowdsec-secret
string
lapi.podAnnotations."secret.reloader.stakater.com/reload" (9)
crowdsec-secret
string
lapi.resources.limits.memory (8)
512Mi
string
lapi.resources.requests.cpu (8)
50m
string
lapi.resources.requests.memory (8)
128Mi
string
lapi.persistentVolume.config.enabled (7)
false
boolean
lapi.persistentVolume.config.size (3)
string
lapi.persistentVolume.config.storageClassName (3)
string
lapi.persistentVolume.config.accessModes[] (1)
string
lapi.persistentVolume.config.existingClaim (1)
string
lapi.persistentVolume.config.subPath (1)
string
lapi.persistentVolume.data.enabled (7)
false
boolean
lapi.persistentVolume.data.storageClassName (3)
string
lapi.persistentVolume.data.size (2)
string
lapi.persistentVolume.data.accessModes[] (1)
string
lapi.persistentVolume.data.existingClaim (1)
string
lapi.podSecurityContext.seccompProfile.type (4)
RuntimeDefault
string
lapi.securityContext.capabilities.drop[] (4)
- ALL
string
lapi.securityContext.allowPrivilegeEscalation (3)
false
boolean
lapi.securityContext.privileged (2)
boolean
lapi.securityContext.runAsGroup (1)
number
lapi.securityContext.runAsUser (1)
number
lapi.securityContext.seccompProfile.type (1)
string
lapi.storeCAPICredentialsInSecret (3)
boolean
lapi.storeLAPICscliCredentialsInSecret (3)
boolean
lapi.deployAnnotations."reloader.stakater.com/auto" (2)
string
lapi.deployAnnotations."configmap.reloader.stakater.com/auto" (1)
string
lapi.deployAnnotations."secret.reloader.stakater.com/reload" (1)
string
lapi.extraVolumeMounts[].mountPath (2)
string
lapi.extraVolumeMounts[].name (2)
string
lapi.extraVolumeMounts[].readOnly (1)
boolean
lapi.extraVolumeMounts[].subPath (1)
string
lapi.extraVolumes[].name (2)
string
lapi.extraVolumes[].emptyDir.medium (1)
string
lapi.extraVolumes[].emptyDir.sizeLimit (1)
string
lapi.extraVolumes[].secret.secretName (1)
string
lapi.replicas (2)
number
lapi.strategy.type (2)
string
lapi.dashboard.enabled (1)
boolean
lapi.enabled (1)
boolean
lapi.extraInitContainers[].envFrom[].secretRef.name (1)
string
lapi.extraInitContainers[].image (1)
string
lapi.extraInitContainers[].name (1)
string
lapi.podLabels."app.kubernetes.io/name" (1)
string
lapi.priorityClassName (1)
string
lapi.service.annotations."lbipam.cilium.io/ips" (1)
string
lapi.service.externalTrafficPolicy (1)
string
lapi.service.type (1)
string
lapi.topologySpreadConstraints[].labelSelector.matchLabels.k8s-app (1)
string
lapi.topologySpreadConstraints[].labelSelector.matchLabels.type (1)
string
lapi.topologySpreadConstraints[].maxSkew (1)
number
lapi.topologySpreadConstraints[].topologyKey (1)
string
lapi.topologySpreadConstraints[].whenUnsatisfiable (1)
string
agent.env[].name (15)
COLLECTIONS
string
agent.env[].value (15)
yanis-kouidri/envoy
string
agent.metrics.serviceMonitor.enabled (14)
true
boolean
agent.metrics.enabled (4)
true
boolean
agent.additionalAcquisition[].labels.type (12)
envoy
string
agent.additionalAcquisition[].namespace (12)
network
string
agent.additionalAcquisition[].selector (12)
gateway.envoyproxy.io/owning-gateway-name=envoy-external
string
agent.additionalAcquisition[].source (12)
kubernetes
string
agent.additionalAcquisition[].listen_addr (1)
string
agent.additionalAcquisition[].listen_port (1)
number
agent.hostVarLog (11)
false
boolean
agent.isDeployment (11)
true
boolean
agent.serviceAccountName (11)
crowdsec-agent
string
agent.resources.limits.memory (6)
256Mi
string
agent.resources.requests.cpu (6)
10m
string
agent.resources.requests.memory (6)
128Mi
string
agent.acquisition[].namespace (4)
string
agent.acquisition[].podName (4)
string
agent.acquisition[].program (4)
string
agent.acquisition[].poll_without_inotify (1)
boolean
agent.podSecurityContext.seccompProfile.type (3)
RuntimeDefault
string
agent.securityContext.capabilities.drop[] (3)
- ALL
string
agent.securityContext.allowPrivilegeEscalation (2)
boolean
agent.securityContext.privileged (2)
boolean
agent.securityContext.runAsGroup (1)
number
agent.securityContext.runAsUser (1)
number
agent.securityContext.seccompProfile.type (1)
string
agent.wait_for_lapi.securityContext.capabilities.drop[] (2)
string
agent.wait_for_lapi.securityContext.allowPrivilegeEscalation (1)
boolean
agent.wait_for_lapi.securityContext.privileged (1)
boolean
agent.wait_for_lapi.securityContext.runAsGroup (1)
number
agent.wait_for_lapi.securityContext.runAsUser (1)
number
agent.deploymentAnnotations."reloader.stakater.com/auto" (1)
string
agent.enabled (1)
boolean
agent.extraVolumeMounts[].mountPath (1)
string
agent.extraVolumeMounts[].name (1)
string
agent.extraVolumes[].name (1)
string
agent.persistentVolume.config.enabled (1)
boolean
agent.podAnnotations."secret.reloader.stakater.com/reload" (1)
string
agent.podLabels."egress.cilium.io/kube-apiserver" (1)
string
agent.priorityClassName (1)
string
agent.replicas (1)
number
agent.service.annotations."lbipam.cilium.io/ips" (1)
string
agent.service.ports[].name (1)
string
agent.service.ports[].port (1)
number
agent.service.ports[].protocol (1)
string
agent.service.ports[].targetPort (1)
number
agent.service.type (1)
string
agent.strategy.type (1)
string
agent.tolerations[].effect (1)
string
agent.tolerations[].key (1)
string
agent.tolerations[].operator (1)
string
image.repository (13)
mirror.gcr.io/crowdsecurity/crowdsec
string
image.tag (4)
v1.8.2@sha256:65b74942f7e7ed5c60fde4ac15fc4ba715904c398c8b16dd451f4907d90347d4
string
image.kubectl.repository (1)
string
image.kubectl.tag (1)
string
image.pullPolicy (1)
string
config."config.yaml.local" (6)
string
config."console.yaml" (3)
string
config."profiles.yaml" (3)
string
config."simulation.yaml" (2)
string
config.notifications."http.yaml" (1)
string
config.notifications."wecom.yaml" (1)
string
config.parsers.s02-enrich."edge-whitelist.yaml" (1)
string
config.parsers.s02-enrich."envoy-418-whitelist.yaml" (1)
string
config.parsers.s02-enrich."wordpress-api-whitelist.yaml" (1)
string
config.postoverflows.s01-whitelist."02-whitelist-cloud.yaml" (1)
string
config.postoverflows.s01-whitelist."home-wan.yaml" (1)
string
config.postoverflows.s01-whitelist."home-whitelist.yaml" (1)
string
appsec.acquisitions[].labels.type (4)
appsec
string
appsec.acquisitions[].listen_addr (4)
0.0.0.0:7422
string
appsec.acquisitions[].path (4)
/
string
appsec.acquisitions[].source (4)
appsec
string
appsec.acquisitions[].appsec_configs[] (3)
string
appsec.acquisitions[].appsec_config (1)
string
appsec.enabled (4)
true
boolean
appsec.env[].name (4)
COLLECTIONS
string
appsec.env[].value (4)
string
appsec.resources.limits.memory (4)
string
appsec.resources.limits.cpu (1)
string
appsec.resources.requests.cpu (4)
string
appsec.resources.requests.memory (4)
string
appsec.metrics.serviceMonitor.enabled (3)
true
boolean
appsec.metrics.enabled (2)
boolean
appsec.affinity.podAntiAffinity.preferredDuringSchedulingIgnoredDuringExecution[].podAffinityTerm.labelSelector.matchLabels.k8s-app (2)
string
appsec.affinity.podAntiAffinity.preferredDuringSchedulingIgnoredDuringExecution[].podAffinityTerm.labelSelector.matchLabels.type (2)
string
appsec.affinity.podAntiAffinity.preferredDuringSchedulingIgnoredDuringExecution[].podAffinityTerm.topologyKey (2)
string
appsec.affinity.podAntiAffinity.preferredDuringSchedulingIgnoredDuringExecution[].weight (2)
number
appsec.replicas (2)
number
appsec.strategy.type (2)
string
appsec.strategy.rollingUpdate.maxSurge (1)
number
appsec.strategy.rollingUpdate.maxUnavailable (1)
number
appsec.configs."appsec-detect-only.yaml" (1)
string
appsec.configs."jellyfin-exclusions.yaml" (1)
string
appsec.deployAnnotations."reloader.stakater.com/auto" (1)
string
appsec.extraVolumeMounts[].mountPath (1)
string
appsec.extraVolumeMounts[].name (1)
string
appsec.extraVolumes[].name (1)
string
appsec.podSecurityContext.seccompProfile.type (1)
string
appsec.securityContext.capabilities.drop[] (1)
string
appsec.wait_for_lapi.securityContext.capabilities.drop[] (1)
string
secrets.externalSecret.name (4)
string
secrets.externalSecret.csLapiSecretKey (2)
string
secrets.externalSecret.registrationTokenKey (2)
string
deploymentAnnotations."configmap.reloader.stakater.com/auto" (1)
string
deploymentAnnotations."secret.reloader.stakater.com/reload" (1)
string
tls.enabled (1)
boolean