apiVersion: helm.cattle.io/v1
kind: HelmChart
metadata:
  name: crowdsec
  namespace: infra-monitor
spec:
  repo: https://crowdsecurity.github.io/helm-charts
  chart: crowdsec
  targetNamespace: infra-monitor
  version: 0.11.0
  valuesContent: |-
    container_runtime: containerd
    image:
      tag: v1.6.1-2
    config:
      config.yaml.local: |
        db_config:
          type: postgresql
          host: cnpg-cluster-hk-rw.infra-data
          port: 5432
          db_name: crowdsec
          user: app
          password: nyrHzh9WWlDZzvVw7bDFo74gKb9zsls0Sy7OwRTDWiRTNPQQQkW85taUFAoX2AIC
          sslmode: require
    agent:
      nodeSelector:
        svccontroller.k3s.cattle.io/enablelb: "true"
        # 由于使用了loki搜集日志 此处不再需要 所以使用此标签 禁用所有的agent
        crowdsec/enabled: "true"
      acquisition:
        - namespace: infra-net
          podName: ingress-nginx-controller-*
          program: nginx
          poll_without_inotify: true
      env:
        - name: COLLECTIONS
          value: "crowdsecurity/nginx"
    lapi:
      affinity:
        nodeAffinity:
          preferredDuringSchedulingIgnoredDuringExecution:
            - preference:
                matchExpressions:
                  - key: topology.kubernetes.io/region
                    operator: In
                    values:
                      - cn-hk
              weight: 1
      resources:
        limits:
          memory: 200Mi
        requests:
          cpu: 150m
          memory: 100Mi
      persistentVolume:
        config:
          enabled: false
        data:
          enabled: false