forust
10e26cda72
- moved bouncer tokens to secrets - experimental host ssh log parsing - moved crowdsec to it's own directory
58 lines
1.2 KiB
YAML
58 lines
1.2 KiB
YAML
container_runtime: containerd
|
|
agent:
|
|
env:
|
|
- name: COLLECTIONS
|
|
value: "crowdsecurity/traefik crowdsecurity/base-http-scenarios crowdsecurity/sshd"
|
|
extraVolumes:
|
|
- name: journal-dir
|
|
hostPath:
|
|
path: /var/log/journal
|
|
type: DirectoryOrCreate
|
|
- name: run-journal-dir
|
|
hostPath:
|
|
path: /run/log/journal
|
|
type: DirectoryOrCreate
|
|
extraVolumeMounts:
|
|
- name: journal-dir
|
|
mountPath: /var/log/journal
|
|
readOnly: true
|
|
- name: run-journal-dir
|
|
mountPath: /run/log/journal
|
|
readOnly: true
|
|
|
|
acquisition:
|
|
- namespace: traefik
|
|
podName: "*traefik*"
|
|
program: traefik
|
|
poll_without_inotify: true
|
|
|
|
acquisitionCustom: |
|
|
- source: journalctl
|
|
journalctl_filter:
|
|
- _SYSTEMD_UNIT=sshd.service
|
|
labels:
|
|
type: syslog
|
|
|
|
resources:
|
|
requests:
|
|
cpu: 50m
|
|
memory: 100Mi
|
|
limits:
|
|
cpu: 200m
|
|
memory: 500Mi
|
|
|
|
lapi:
|
|
env:
|
|
- name: COLLECTIONS
|
|
value: "crowdsecurity/traefik crowdsecurity/base-http-scenarios crowdsecurity/sshd"
|
|
service:
|
|
type: NodePort
|
|
nodePort: 30011
|
|
resources:
|
|
requests:
|
|
cpu: 50m
|
|
memory: 150Mi
|
|
limits:
|
|
cpu: 200m
|
|
memory: 500Mi
|