Skip to content

Commit 131182b

Browse files
authored
self-linking for underlining appsec (#1044)
* self-linking for underlining appsec * hop
1 parent b233934 commit 131182b

1 file changed

Lines changed: 23 additions & 14 deletions

File tree

crowdsec-docs/unversioned/getting_started/installation/kubernetes.mdx

Lines changed: 23 additions & 14 deletions
Original file line numberDiff line numberDiff line change
@@ -5,10 +5,9 @@ pagination_prev: getting_started/intro
55
pagination_next: getting_started/health_check
66
---
77

8-
import Tabs from '@theme/Tabs';
9-
import TabItem from '@theme/TabItem';
10-
import CodeBlock from '@theme/CodeBlock';
11-
8+
import Tabs from "@theme/Tabs";
9+
import TabItem from "@theme/TabItem";
10+
import CodeBlock from "@theme/CodeBlock";
1211

1312
# Install on Kubernetes
1413

@@ -107,6 +106,7 @@ In standard standalone setups, documentation states that the labels should be
107106
name `type` with the type being the parsed log program (eg nginx, traefik). A
108107
transformation from `type` to `program` is done by the first stage parser
109108
`crowdsecurity/syslog-logs` which is not relevant in a Kubernetes context.
109+
110110
</details>
111111

112112
<details>
@@ -117,6 +117,7 @@ own. You choose which pods to read, and you tag those logs with a program (like
117117
nginx or traefik). When the tag matches what a collection expects, its rules
118118
run; if it doesn’t, they stay idle. One log stream can match several collections
119119
if the tags fit.
120+
120121
</details>
121122

122123
For full configuration options, see the default
@@ -136,6 +137,7 @@ helm install crowdsec crowdsec/crowdsec -n crowdsec -f crowdsec-values.yaml
136137
```
137138

138139
Check the installation status:
140+
139141
```bash
140142
kubectl -n crowdsec get pods
141143
```
@@ -163,8 +165,8 @@ component. In Kubernetes, remediation is currently done at the ingress level.
163165

164166
For now, we support:
165167

166-
* [Ingress Nginx](/bouncers/ingress-nginx.mdx)
167-
* [Traefik Ingress](/bouncers/traefik.mdx)
168+
- [Ingress Nginx](/bouncers/ingress-nginx.mdx)
169+
- [Traefik Ingress](/bouncers/traefik.mdx)
168170

169171
Please note that the [Traefik Kubernetes Ingress (third-party
170172
development)](https://plugins.traefik.io/plugins/6335346ca4caa9ddeffda116/crowdsec-bouncer-traefik-plugin))
@@ -178,7 +180,9 @@ lapi:
178180
- name: BOUNCER_KEY_<name>
179181
value: "<bouncer-key>"
180182
```
183+
181184
example:
185+
182186
```yaml
183187
lapi:
184188
env:
@@ -187,6 +191,7 @@ lapi:
187191
```
188192

189193
To avoid having secrets stored in you `values.yaml` you can use secrets:
194+
190195
```bash
191196
kubectl create secret generic crowdsec-keys \
192197
--from-literal=ENROLL_KEY=<enroll_key> \
@@ -195,7 +200,8 @@ kubectl create secret generic crowdsec-keys \
195200
```
196201

197202
And use this in the values.yaml:
198-
```yaml
203+
204+
````yaml
199205
lapi:
200206
env:
201207
- name: ENROLL_KEY
@@ -210,7 +216,7 @@ lapi:
210216
name: crowdsec-keys
211217
key: BOUNCER_KEY_traefik
212218
value: "<bouncer_key>"```
213-
```
219+
````
214220
215221
### A word about databases
216222
@@ -221,14 +227,16 @@ replicated.
221227
For production deployments on Kubernetes, we recommend using a database engine
222228
that can be deployed in a replicated or highly available way, such as MariaDB or
223229
PostgreSQL. You can leverage existing operators to manage these databases:
224-
* [mariadb operator](https://mariadb.com/resources/blog/get-started-with-mariadb-in-kubernetes-and-mariadb-operator/)
225-
* [postgresql operator](https://github.com/cloudnative-pg/cloudnative-pg)
230+
231+
- [mariadb operator](https://mariadb.com/resources/blog/get-started-with-mariadb-in-kubernetes-and-mariadb-operator/)
232+
- [postgresql operator](https://github.com/cloudnative-pg/cloudnative-pg)
226233
227234
Crowdsec in kubernetes configuration for this database is made with the
228235
[config.config.yaml.local value in
229236
`values.yaml`](/docs/next/configuration/values_parameters).
230237

231238
Configuration of those databases is out of scope of this documentation.
239+
232240
<!-- We want to create blogpost where we do it -->
233241

234242
:::warning
@@ -243,7 +251,8 @@ replication, SQLite can also become a performance bottleneck under heavy load.
243251

244252
Great, you now have CrowdSec installed on your system!
245253

246-
- Look at the [post
247-
installation steps](/getting_started/next_steps.mdx) to find the next
248-
steps to configure and optimize your installation.
249-
- Look at the [values.yaml](/docs/next/configuration/values_parameters) for available configuration parameters.
254+
- Look at the [post
255+
installation steps](/getting_started/next_steps.mdx) to find the next
256+
steps to configure and optimize your installation.
257+
- Look at the [values.yaml](/docs/next/configuration/values_parameters) for available configuration parameters.
258+
- Look at the [ingress nginx](/docs/next/appsec/quickstart/nginx-ingress) and [traefik](/docs/next/appsec/quickstart/traefik) for AppSec (Web Application Firewall) configuration

0 commit comments

Comments
 (0)