feat(crowdses): crowdses优化
这个提交包含在:
@@ -34,6 +34,7 @@ spec:
|
||||
- namespace: infra-net
|
||||
podName: ingress-nginx-controller-*
|
||||
program: nginx
|
||||
poll_without_inotify: true
|
||||
env:
|
||||
- name: COLLECTIONS
|
||||
value: "crowdsecurity/nginx"
|
||||
|
||||
@@ -36,6 +36,8 @@ spec:
|
||||
queue:
|
||||
TYPE: redis
|
||||
CONN_STR: redis://:ribiPwYQNU6GWxCYR0Nj@redis-master.infra-data:6379/0
|
||||
repository:
|
||||
DEFAULT_REPO_UNITS: repo.code,repo.releases,repo.issues,repo.pulls
|
||||
service:
|
||||
DISABLE_REGISTRATION: true
|
||||
NO_REPLY_ADDRESS: noreply.dev.cm
|
||||
@@ -44,6 +46,8 @@ spec:
|
||||
i18n:
|
||||
LANGS: zh-CN,en-US
|
||||
NAMES: 简体中文,English
|
||||
other:
|
||||
SHOW_FOOTER_VERSION: false
|
||||
log:
|
||||
LEVEL: Info
|
||||
extraVolumes:
|
||||
|
||||
@@ -3,6 +3,8 @@ kind: Ingress
|
||||
metadata:
|
||||
name: gitea-http
|
||||
namespace: infra-devops
|
||||
annotations:
|
||||
nginx.ingress.kubernetes.io/proxy-body-size: "50m"
|
||||
spec:
|
||||
ingressClassName: nginx
|
||||
rules:
|
||||
@@ -16,7 +18,7 @@ spec:
|
||||
name: gitea-http
|
||||
port:
|
||||
number: 3000
|
||||
|
||||
---
|
||||
apiVersion: networking.k8s.io/v1
|
||||
kind: Ingress
|
||||
metadata:
|
||||
|
||||
@@ -64,13 +64,9 @@ spec:
|
||||
- name: API_URL
|
||||
value: "http://crowdsec-service.infra-monitor.svc.cluster.local:8080"
|
||||
- name: API_KEY
|
||||
value: "OKMrkF5QolkRMx0LRW1xzgy6uu+iJK+qlfJhgNyHSVg"
|
||||
value: "gISXV0a5N9oflSL4PCsfmDHjq+VNz0G6mRkMhuDZTvY"
|
||||
- name: BOUNCER_CONFIG
|
||||
value: "/crowdsec/crowdsec-bouncer.conf"
|
||||
- name: MODE
|
||||
value: "stream"
|
||||
- name: UPDATE_FREQUENCY
|
||||
value: "60"
|
||||
command: ['sh', '-c', "bash /docker_start.sh; mkdir -p /lua_plugins/crowdsec/; cp -R /crowdsec/* /lua_plugins/crowdsec/"]
|
||||
volumeMounts:
|
||||
- name: crowdsec-bouncer-plugin
|
||||
|
||||
在新议题中引用
屏蔽一个用户