# CrowdSec

Helm values, dashboards, network policy, and a maintenance CronJob.

Install CrowdSec separately using `k8s/crowdsec-values.yaml`; the deploy
workflow does not have a CrowdSec Helm release entry. There is no `k8s/active`
marker in this directory.

The LAPI policy and janitor run in `crowdsec`. The dashboard ConfigMaps are in
`prometheus` for Grafana's sidecar. The janitor has its own ServiceAccount and
namespace Role. Review its script and schedule before enabling cleanup.

Traefik's values state that enforcement moved to a host firewall bouncer. This
repository does not install that host component.

## Inspect

From the repository root:

```sh
kubectl get pods,svc,pvc -n crowdsec
kubectl get events -n crowdsec --sort-by=.metadata.creationTimestamp
```

See the [repository README](../README.md) for deployment selection.