@@ -5,10 +5,9 @@ pagination_prev: getting_started/intro
55pagination_next : getting_started/health_check
66---
77
8- import Tabs from ' @theme/Tabs' ;
9- import TabItem from ' @theme/TabItem' ;
10- import CodeBlock from ' @theme/CodeBlock' ;
11-
8+ import Tabs from " @theme/Tabs" ;
9+ import TabItem from " @theme/TabItem" ;
10+ import CodeBlock from " @theme/CodeBlock" ;
1211
1312# Install on Kubernetes
1413
@@ -107,6 +106,7 @@ In standard standalone setups, documentation states that the labels should be
107106name `type` with the type being the parsed log program (eg nginx, traefik). A
108107transformation from `type` to `program` is done by the first stage parser
109108` crowdsecurity/syslog-logs` which is not relevant in a Kubernetes context.
109+
110110</details>
111111
112112<details>
@@ -117,6 +117,7 @@ own. You choose which pods to read, and you tag those logs with a program (like
117117nginx or traefik). When the tag matches what a collection expects, its rules
118118run; if it doesn’t, they stay idle. One log stream can match several collections
119119if the tags fit.
120+
120121</details>
121122
122123For full configuration options, see the default
@@ -136,6 +137,7 @@ helm install crowdsec crowdsec/crowdsec -n crowdsec -f crowdsec-values.yaml
136137` ` `
137138
138139Check the installation status :
140+
139141` ` ` bash
140142kubectl -n crowdsec get pods
141143` ` `
@@ -163,8 +165,8 @@ component. In Kubernetes, remediation is currently done at the ingress level.
163165
164166For now, we support :
165167
166- * [Ingress Nginx](/bouncers/ingress-nginx.mdx)
167- * [Traefik Ingress](/bouncers/traefik.mdx)
168+ - [Ingress Nginx](/bouncers/ingress-nginx.mdx)
169+ - [Traefik Ingress](/bouncers/traefik.mdx)
168170
169171Please note that the [Traefik Kubernetes Ingress (third-party
170172development)](https://plugins.traefik.io/plugins/6335346ca4caa9ddeffda116/crowdsec-bouncer-traefik-plugin))
@@ -178,7 +180,9 @@ lapi:
178180 - name: BOUNCER_KEY_<name>
179181 value: "<bouncer-key>"
180182` ` `
183+
181184example :
185+
182186` ` ` yaml
183187lapi:
184188 env:
@@ -187,6 +191,7 @@ lapi:
187191` ` `
188192
189193To avoid having secrets stored in you `values.yaml` you can use secrets :
194+
190195` ` ` bash
191196kubectl create secret generic crowdsec-keys \
192197 --from-literal=ENROLL_KEY=<enroll_key> \
@@ -195,7 +200,8 @@ kubectl create secret generic crowdsec-keys \
195200` ` `
196201
197202And use this in the values.yaml :
198- ` ` ` yaml
203+
204+ ` ` ` ` yaml
199205lapi :
200206 env :
201207 - name : ENROLL_KEY
@@ -210,7 +216,7 @@ lapi:
210216 name : crowdsec-keys
211217 key : BOUNCER_KEY_traefik
212218 value : " <bouncer_key>" ` ` `
213- ```
219+ ` ` ` `
214220
215221### A word about databases
216222
@@ -221,14 +227,16 @@ replicated.
221227For production deployments on Kubernetes, we recommend using a database engine
222228that can be deployed in a replicated or highly available way, such as MariaDB or
223229PostgreSQL. You can leverage existing operators to manage these databases:
224- * [ mariadb operator] ( https://mariadb.com/resources/blog/get-started-with-mariadb-in-kubernetes-and-mariadb-operator/ )
225- * [ postgresql operator] ( https://github.com/cloudnative-pg/cloudnative-pg )
230+
231+ - [mariadb operator](https://mariadb.com/resources/blog/get-started-with-mariadb-in-kubernetes-and-mariadb-operator/)
232+ - [postgresql operator](https://github.com/cloudnative-pg/cloudnative-pg)
226233
227234Crowdsec in kubernetes configuration for this database is made with the
228235[config.config.yaml.local value in
229236` values.yaml`](/docs/next/configuration/values_parameters).
230237
231238Configuration of those databases is out of scope of this documentation.
239+
232240<!-- We want to create blogpost where we do it -->
233241
234242:::warning
@@ -243,7 +251,8 @@ replication, SQLite can also become a performance bottleneck under heavy load.
243251
244252Great, you now have CrowdSec installed on your system!
245253
246- - Look at the [post
247- installation steps](/getting_started/next_steps.mdx) to find the next
248- steps to configure and optimize your installation.
249- - Look at the [values.yaml](/docs/next/configuration/values_parameters) for available configuration parameters.
254+ - Look at the [post
255+ installation steps](/getting_started/next_steps.mdx) to find the next
256+ steps to configure and optimize your installation.
257+ - Look at the [values.yaml](/docs/next/configuration/values_parameters) for available configuration parameters.
258+ - Look at the [ingress nginx](/docs/next/appsec/quickstart/nginx-ingress) and [traefik](/docs/next/appsec/quickstart/traefik) for AppSec (Web Application Firewall) configuration
0 commit comments