From e352ec1494be1dd775f7a497a923f53622da0925 Mon Sep 17 00:00:00 2001 From: Joseph Hanson Date: Tue, 10 Oct 2023 16:19:50 -0500 Subject: [PATCH] bouncer key --- kubernetes/apps/network/ingress-nginx/app/helmrelease.yaml | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/kubernetes/apps/network/ingress-nginx/app/helmrelease.yaml b/kubernetes/apps/network/ingress-nginx/app/helmrelease.yaml index cc0e98c..60c4754 100644 --- a/kubernetes/apps/network/ingress-nginx/app/helmrelease.yaml +++ b/kubernetes/apps/network/ingress-nginx/app/helmrelease.yaml @@ -105,7 +105,10 @@ spec: - name: API_URL value: "http://crowdsec-service.security.svc.cluster.local:8080" # crowdsec lapi service-name - name: API_KEY - value: "" # generated with `cscli bouncers add -n + valueFrom: + secretKeyRef: + name: nginx-ingress-secrets + key: nginx-ingress-bouncer-apikey - name: BOUNCER_CONFIG value: "/crowdsec/crowdsec-bouncer.conf" - name: BAN_TEMPLATE_PATH