feat(crowdsec): crowdsec升级 & dns问题修复

这个提交包含在:
2025-03-27 16:28:32 +08:00 未验证
父节点 28175b9695
当前提交 210e29b469
修改 4 个文件,包含 8 行新增17 行删除
+3 -8
查看文件
@@ -7,21 +7,16 @@ spec:
repo: https://crowdsecurity.github.io/helm-charts
chart: crowdsec
targetNamespace: infra-net
version: 0.15.0
version: 0.19.1
valuesContent: |-
container_runtime: containerd
image:
tag: v1.6.4
tag: v1.6.8
agent:
# 由于dataScope为loki,所以此处强制要求部署在loki所在的节点 以节省网络资源
nodeSelector:
kubernetes.io/hostname: alihka
# 此处无实际作用 只是为了过helmChart的校验
acquisition:
- namespace: infra-net
podName: ingress-nginx-controller-*
program: nginx
poll_without_inotify: true
isDeployment: true
additionalAcquisition:
- source: loki
log_level: info
+2 -2
查看文件
@@ -106,7 +106,7 @@ spec:
plugins: "crowdsec"
lua-shared-dicts: "crowdsec_cache: 50m"
# 启用geoip2模块
maxmindLicenseKey: "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"
maxmindLicenseKey: "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"
extraArgs:
default-ssl-certificate: "infra-net/dev-cm-crt"
# crowdsec插件配置
@@ -118,7 +118,7 @@ spec:
- name: API_URL
value: "http://crowdsec-service.infra-net.svc.cluster.local:8080"
- name: API_KEY
value: "rgILO2mh/t+30LMvzyyMXbfHRmDfBkDDkhEflzHaoQ0"
value: "CLeXxBJSTL+Az1w64S91APOyuNdc0nKgG4swNLvL0os"
- name: BOUNCER_CONFIG
value: "/crowdsec/crowdsec-bouncer.conf"
- name: MODE