Skip to content

Commit 2021db7

Browse files
committed
add a small warning
1 parent 7291e14 commit 2021db7

2 files changed

Lines changed: 30 additions & 0 deletions

File tree

crowdsec-docs/docs/appsec/quickstart/nginx-ingress.mdx

Lines changed: 15 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -105,6 +105,21 @@ lapi:
105105
key: BOUNCER_KEY_nginx_ingress_waf
106106
```
107107
108+
:::warning
109+
The Helm chart still enables the CrowdSec agent by default. If you do not want
110+
the agent, disable it explicitly.
111+
:::
112+
113+
<details>
114+
<summary>Snippet to disable the agent</summary>
115+
116+
```yaml title="values.yaml"
117+
agent:
118+
enabled: false
119+
```
120+
121+
</details>
122+
108123
:::note
109124
Although this is the same bouncer key value, you need two `Secret` objects here:
110125
one in `crowdsec` and one in `ingress-nginx`. Kubernetes secrets are

crowdsec-docs/versioned_docs/version-v1.7/appsec/quickstart/nginx-ingress.mdx

Lines changed: 15 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -105,6 +105,21 @@ lapi:
105105
key: BOUNCER_KEY_nginx_ingress_waf
106106
```
107107
108+
:::warning
109+
The Helm chart still enables the CrowdSec agent by default. If you do not want
110+
the agent, disable it explicitly.
111+
:::
112+
113+
<details>
114+
<summary>Snippet to disable the agent</summary>
115+
116+
```yaml title="values.yaml"
117+
agent:
118+
enabled: false
119+
```
120+
121+
</details>
122+
108123
This YAML configuration snippet exposes the important configuration items:
109124
* `listen_addr: 0.0.0.0:7422` exposes the AppSec API inside the cluster.
110125
* `appsec_configs` loads the [AppSec configuration(s)](/appsec/configuration.md) that define which rules are evaluated (in-band vs out-of-band).

0 commit comments

Comments
 (0)