Skip to content

Commit 37bf120

Browse files
committed
add some information in namespace
1 parent ff9af68 commit 37bf120

1 file changed

Lines changed: 17 additions & 4 deletions

File tree

crowdsec-docs/docs/appsec/quickstart/traefik.mdx

Lines changed: 17 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -487,12 +487,25 @@ spec:
487487
- 192.168.0.0/16
488488
- 134.209.137.94
489489
- 2a03:b0c0:2:f0::f557:a001
490-
crowdsecAppsecEnabled: false
491-
crowdsecAppsecHost: crowdsec:7422
490+
crowdsecAppsecEnabled: true
491+
crowdsecAppsecHost: crowdsec-appsec-service.crowdsec.svc.cluster.local:7422
492492
crowdsecAppsecFailureBlock: true
493493
crowdsecAppsecUnreachableBlock: true
494494
```
495495

496+
<details>
497+
<summary>How is the AppSec hostname derived?</summary>
498+
499+
The Helm chart creates a Service named `<release>-appsec-service` in the namespace where CrowdSec is installed. With the default release name `crowdsec` in namespace `crowdsec`, the in-cluster DNS name is:
500+
501+
```
502+
crowdsec-appsec-service.crowdsec.svc.cluster.local:7422
503+
```
504+
505+
If you used a different release name or namespace, adjust accordingly: `<release>-appsec-service.<namespace>.svc.cluster.local:7422`.
506+
507+
</details>
508+
496509
<details>
497510
<summary>Less secure alternative: define the Traefik bouncer key inline with <code>crowdsecLapiKey</code> instead of mounting <code>crowdsecLapiKeyFile</code></summary>
498511

@@ -516,8 +529,8 @@ spec:
516529
- 192.168.0.0/16
517530
- 134.209.137.94
518531
- 2a03:b0c0:2:f0::f557:a001
519-
crowdsecAppsecEnabled: false
520-
crowdsecAppsecHost: crowdsec:7422
532+
crowdsecAppsecEnabled: true
533+
crowdsecAppsecHost: crowdsec-appsec-service.crowdsec.svc.cluster.local:7422
521534
crowdsecAppsecFailureBlock: true
522535
crowdsecAppsecUnreachableBlock: true
523536
```

0 commit comments

Comments
 (0)