diff --git a/apps/base/crowdsec/release.yaml b/apps/base/crowdsec/release.yaml index cdfee964017007817e3a28007df35ac8b19319b7..c34ce0ae0da489f5923ba1d37a71803dcaca90d5 100644 --- a/apps/base/crowdsec/release.yaml +++ b/apps/base/crowdsec/release.yaml @@ -33,18 +33,25 @@ spec: optional: true postRenderers: - kustomize: - patchesJson6902: - - target: - version: apps/v1 - kind: DaemonSet + patchesStrategicMerge: + - kind: DaemonSet + apiVersion: apps/v1 + metadata: name: crowdsec-agent - patch: - - op: "add" - path: /spec/template/spec/initContainers/0/resources/limits/cpu - value: "100m" - - op: "replace" - path: /spec/template/spec/containers/0/securityContext/privileged - value: true + spec: + template: + spec: + initContainers: + - name: wait-for-lapi + resources: + limits: + cpu: "1" + containers: + - name: crowdsec-agent + # Required in order to run as Super-Privileged-Container and therefore accessing host resources + securityContext: + privileged: true + allowPrivilegeEscalation: true --- apiVersion: v1 kind: ConfigMap