Update traefik deployment + add crowdsec bouncer
All checks were successful
continuous-integration/drone/push Build is passing
All checks were successful
continuous-integration/drone/push Build is passing
This commit is contained in:
parent
736ac64ff0
commit
6def4562ad
4 changed files with 46 additions and 10 deletions
|
|
@ -45,6 +45,31 @@
|
|||
when:
|
||||
- traefik_node_selector is defined
|
||||
|
||||
- name: Deploy latest version of CrowdSec Traefik bouncer
|
||||
kubernetes.core.helm:
|
||||
context: "{{ my_context }}"
|
||||
name: crowdsec-traefik-bouncer
|
||||
release_namespace: "{{ traefik_namespace }}"
|
||||
create_namespace: yes
|
||||
chart_ref: crowdsec/crowdsec-traefik-bouncer
|
||||
chart_version: "{{ crowdsec_traefik_bouncer_chart_version }}"
|
||||
values:
|
||||
bouncer:
|
||||
crowdsec_bouncer_api_key: "{{ traefik_crowdsec_bouncer_apikey }}"
|
||||
crowdsec_agent_host: "crowdsec-service.{{ crowdsec_namespace }}.svc.cluster.local:8080"
|
||||
replicaCount: 1
|
||||
podSecurityContext:
|
||||
fsGroup: 2000
|
||||
securityContext:
|
||||
capabilities:
|
||||
drop:
|
||||
- ALL
|
||||
readOnlyRootFilesystem: true
|
||||
runAsNonRoot: true
|
||||
runAsUser: 1000
|
||||
when:
|
||||
- traefik_crowdsec_bouncer_apikey is defined
|
||||
|
||||
# - name: Get Deployment information object
|
||||
# k8s_info:
|
||||
# context: "{{ my_context }}"
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue