feat(crowdses): crowdses优化
这个提交包含在:
@@ -34,6 +34,7 @@ spec:
|
|||||||
- namespace: infra-net
|
- namespace: infra-net
|
||||||
podName: ingress-nginx-controller-*
|
podName: ingress-nginx-controller-*
|
||||||
program: nginx
|
program: nginx
|
||||||
|
poll_without_inotify: true
|
||||||
env:
|
env:
|
||||||
- name: COLLECTIONS
|
- name: COLLECTIONS
|
||||||
value: "crowdsecurity/nginx"
|
value: "crowdsecurity/nginx"
|
||||||
|
|||||||
@@ -36,6 +36,8 @@ spec:
|
|||||||
queue:
|
queue:
|
||||||
TYPE: redis
|
TYPE: redis
|
||||||
CONN_STR: redis://:ribiPwYQNU6GWxCYR0Nj@redis-master.infra-data:6379/0
|
CONN_STR: redis://:ribiPwYQNU6GWxCYR0Nj@redis-master.infra-data:6379/0
|
||||||
|
repository:
|
||||||
|
DEFAULT_REPO_UNITS: repo.code,repo.releases,repo.issues,repo.pulls
|
||||||
service:
|
service:
|
||||||
DISABLE_REGISTRATION: true
|
DISABLE_REGISTRATION: true
|
||||||
NO_REPLY_ADDRESS: noreply.dev.cm
|
NO_REPLY_ADDRESS: noreply.dev.cm
|
||||||
@@ -44,6 +46,8 @@ spec:
|
|||||||
i18n:
|
i18n:
|
||||||
LANGS: zh-CN,en-US
|
LANGS: zh-CN,en-US
|
||||||
NAMES: 简体中文,English
|
NAMES: 简体中文,English
|
||||||
|
other:
|
||||||
|
SHOW_FOOTER_VERSION: false
|
||||||
log:
|
log:
|
||||||
LEVEL: Info
|
LEVEL: Info
|
||||||
extraVolumes:
|
extraVolumes:
|
||||||
|
|||||||
@@ -3,6 +3,8 @@ kind: Ingress
|
|||||||
metadata:
|
metadata:
|
||||||
name: gitea-http
|
name: gitea-http
|
||||||
namespace: infra-devops
|
namespace: infra-devops
|
||||||
|
annotations:
|
||||||
|
nginx.ingress.kubernetes.io/proxy-body-size: "50m"
|
||||||
spec:
|
spec:
|
||||||
ingressClassName: nginx
|
ingressClassName: nginx
|
||||||
rules:
|
rules:
|
||||||
@@ -16,7 +18,7 @@ spec:
|
|||||||
name: gitea-http
|
name: gitea-http
|
||||||
port:
|
port:
|
||||||
number: 3000
|
number: 3000
|
||||||
|
---
|
||||||
apiVersion: networking.k8s.io/v1
|
apiVersion: networking.k8s.io/v1
|
||||||
kind: Ingress
|
kind: Ingress
|
||||||
metadata:
|
metadata:
|
||||||
|
|||||||
@@ -64,13 +64,9 @@ spec:
|
|||||||
- name: API_URL
|
- name: API_URL
|
||||||
value: "http://crowdsec-service.infra-monitor.svc.cluster.local:8080"
|
value: "http://crowdsec-service.infra-monitor.svc.cluster.local:8080"
|
||||||
- name: API_KEY
|
- name: API_KEY
|
||||||
value: "OKMrkF5QolkRMx0LRW1xzgy6uu+iJK+qlfJhgNyHSVg"
|
value: "gISXV0a5N9oflSL4PCsfmDHjq+VNz0G6mRkMhuDZTvY"
|
||||||
- name: BOUNCER_CONFIG
|
- name: BOUNCER_CONFIG
|
||||||
value: "/crowdsec/crowdsec-bouncer.conf"
|
value: "/crowdsec/crowdsec-bouncer.conf"
|
||||||
- name: MODE
|
|
||||||
value: "stream"
|
|
||||||
- name: UPDATE_FREQUENCY
|
|
||||||
value: "60"
|
|
||||||
command: ['sh', '-c', "bash /docker_start.sh; mkdir -p /lua_plugins/crowdsec/; cp -R /crowdsec/* /lua_plugins/crowdsec/"]
|
command: ['sh', '-c', "bash /docker_start.sh; mkdir -p /lua_plugins/crowdsec/; cp -R /crowdsec/* /lua_plugins/crowdsec/"]
|
||||||
volumeMounts:
|
volumeMounts:
|
||||||
- name: crowdsec-bouncer-plugin
|
- name: crowdsec-bouncer-plugin
|
||||||
|
|||||||
在新议题中引用
屏蔽一个用户