From 5155caad8cb895272a6064e30460f4acca3e80f0 Mon Sep 17 00:00:00 2001
From: Sheogorath <sheogorath@shivering-isles.com>
Date: Thu, 28 Sep 2023 23:34:18 +0200
Subject: [PATCH] fix(crowdsec): Enforce intranet for lapi
---
apps/k8s01/crowdsec/ingress.yaml | 6 ++++--
1 file changed, 4 insertions(+), 2 deletions(-)
diff --git a/apps/k8s01/crowdsec/ingress.yaml b/apps/k8s01/crowdsec/ingress.yaml
index e3e150c85..3760f075e 100644
--- a/apps/k8s01/crowdsec/ingress.yaml
+++ b/apps/k8s01/crowdsec/ingress.yaml
@@ -3,6 +3,8 @@ kind: Ingress
metadata:
name: crowdsec
namespace: crowdsec
+ annotations:
+ nginx.ingress.kubernetes.io/whitelist-source-range: 10.0.0.0/8,172.16.0.0/12,192.168.0.0/16,100.64.0.0/24
labels:
app.kubernetes.io/name: crowdsec
spec:
@@ -27,8 +29,8 @@ sops:
azure_kv: []
hc_vault: []
age: []
- lastmodified: "2023-09-28T21:27:39Z"
- mac: ENC[AES256_GCM,data:p+fFV8mvF1bFzXzkHRLX4mVr+8vytjdhjnMY4d6j8r3WziexMcKRuAgScxzyBPCyjHXdhDBFTFMC4czb1hEkbhYkYacjqYV2rAEnhzHiQtJhUQalTUDoqUeHwgWWZoN/JRI+eTN6pO2yO6csK9nPOcCUuzwGbD8Cx7pj0+H7RH0=,iv:mmLX6cXLoVn8Z2h3DHZIijqR2U4DsGDDvHpbGVIVz+4=,tag:EVetf8A/KAKUOdfRb2XlXg==,type:str]
+ lastmodified: "2023-09-28T21:34:11Z"
+ mac: ENC[AES256_GCM,data:4sKGFwJVOIT6byesdvUdt8XLgc5I4ijvHtCh/G9iICUxBzsGl7ZoggMVqU7HzAu7j3IFEUjxGfQRhfb1Qx3Ab4j+IKKnpTdwkwiUQT/rrC21ZrMxogVgGT7xmX2qAIF8QhCGbbkoE5qo/Ti0u2BBzUTB6ODODDbnOFZ98KMN6N4=,iv:bLo/rB9qvJR29zLDsT1KyYQ/pZKhh5DCGW42ZnvaP0M=,tag:OCtRpMYbxojilB1iwUjwqw==,type:str]
pgp:
- created_at: "2022-09-13T20:16:18Z"
enc: |-
--
GitLab