From 91211e7b785f7a948c8ce5b773d42006f7e6e51c Mon Sep 17 00:00:00 2001
From: mr-forust <vzlomdsisma@gmail.com>
Date: Sun, 21 Jun 2026 23:56:39 +0200
Subject: [PATCH] fix: resolve CrowdSec Helm upgrade failure - remove duplicate
 DISABLE_ONLINE_API env and add metrics config

---
 crowdsec/k8s/crowdsec-values.yaml |  8 ++++++++
 crowdsec/k8s/post-upgrade.sh      | 10 ++++++++++
 2 files changed, 18 insertions(+)
 create mode 100755 crowdsec/k8s/post-upgrade.sh

diff --git a/crowdsec/k8s/crowdsec-values.yaml b/crowdsec/k8s/crowdsec-values.yaml
index ba3b23b..23d76c7 100644
--- a/crowdsec/k8s/crowdsec-values.yaml
+++ b/crowdsec/k8s/crowdsec-values.yaml
@@ -55,3 +55,11 @@ lapi:
     limits:
       cpu: 200m
       memory: 500Mi
+
+metrics:
+  enabled: true
+  serviceMonitor:
+    additionalLabels:
+      release: prometheus-stack
+    enabled: true
+    namespace: prometheus
diff --git a/crowdsec/k8s/post-upgrade.sh b/crowdsec/k8s/post-upgrade.sh
new file mode 100755
index 0000000..6918a7f
--- /dev/null
+++ b/crowdsec/k8s/post-upgrade.sh
@@ -0,0 +1,10 @@
+#!/bin/sh
+
+kubectl patch daemonset -n crowdsec crowdsec-agent --type='json' -p='[{
+  "op": "replace",
+  "path": "/spec/template/spec/initContainers/0/command",
+  "value": ["sh", "-c", "until nc \"$LAPI_HOST\" \"$LAPI_PORT\" -z; do echo waiting for lapi to start; sleep 5; done; ln -s /staging/etc/crowdsec /etc/crowdsec; cscli lapi register --machine \"$USERNAME\" -u \"$LAPI_URL\" --token \"$REGISTRATION_TOKEN\" 2>/dev/null || true; cp /etc/crowdsec/local_api_credentials.yaml /tmp_config/local_api_credentials.yaml 2>/dev/null || true"]
+}]' 2>&1
+
+kubectl rollout restart -n crowdsec daemonset/crowdsec-agent 2>&1
+kubectl rollout status -n crowdsec daemonset/crowdsec-agent --timeout=120s 2>&1