feat(gitea): add runner helm

apps/infra/net/crowdsec/helmchart.yaml

@@ -7,11 +7,11 @@ spec:
   repo: https://crowdsecurity.github.io/helm-charts
   chart: crowdsec
   targetNamespace: infra-net
-  version: 0.20.1
+  version: 0.21.1
   valuesContent: |-
     container_runtime: containerd
     image:
-      tag: v1.7.3
+      tag: v1.7.4
     agent:
       affinity:
         podAffinity:

apps/infra/net/nginx/helmchart.yaml

@@ -6,11 +6,16 @@ metadata:
 spec:
   repo: https://kubernetes.github.io/ingress-nginx
   chart: ingress-nginx
-  version: 4.11.8
+  version: 4.13.2
   targetNamespace: infra-net
   valuesContent: |-
     fullnameOverride: ingress-nginx
     controller:
+      image:
+        registry: docker.io
+        image: crowdsecurity/controller
+        tag: v1.13.2
+        digest: sha256:4575be24781cad35f8e58437db6a3f492df2a3167fed2b6759a6ff0dc3488d56
       nodeSelector:
         svccontroller.k3s.cattle.io/enablelb: "true"
       tolerations:
@@ -18,7 +23,7 @@ spec:
           operator: "Exists"
           effect: "NoSchedule"
       labels:
-        log-collecting/enabled: "true"
+        devcm-log-collecting/enabled: "true"
       kind: DaemonSet
       hostNetwork: true
       hostPort:
@@ -33,6 +38,8 @@ spec:
         enabled: false
       publishService:
         enabled: false
+      # 禁用默认的注解验证以防止冲突
+      enableAnnotationValidations: false
       config:
         use-forwarded-headers: "true"
         allow-snippet-annotations: "true"
@@ -121,13 +128,13 @@ spec:
         plugins: "crowdsec"
         lua-shared-dicts: "crowdsec_cache: 50m"
       # 启用geoip2模块
-      maxmindLicenseKey: "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"
+      maxmindLicenseKey: "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"
       extraArgs:
         default-ssl-certificate: "infra-net/dev-cm-crt"
       # crowdsec插件配置
       extraInitContainers:
         - name: init-clone-crowdsec-bouncer
-          image: crowdsecurity/lua-bouncer-plugin:v1.0.5
+          image: crowdsecurity/lua-bouncer-plugin:v1.1.2
           imagePullPolicy: IfNotPresent
           env:
             - name: SHELL