diff --git a/crowdsec-docs/unversioned/bouncers/ingress-nginx.mdx b/crowdsec-docs/unversioned/bouncers/ingress-nginx.mdx index 3e24670ad..51129e9e3 100644 --- a/crowdsec-docs/unversioned/bouncers/ingress-nginx.mdx +++ b/crowdsec-docs/unversioned/bouncers/ingress-nginx.mdx @@ -30,10 +30,6 @@ import RemediationSupportBadges from '@site/src/components/remediation-support-b A lua Remediation Component for Ingress Nginx Controller. -:::warning -Ingress Nginx Version **1.12** or higher currently is not supported due to removal of Lua plugins support see [this issue](https://github.com/crowdsecurity/cs-openresty-bouncer/issues/60) for latest news. -::: - ## How does it work ? This component leverages OpenResty lua's API, used the ingress nginx controller as a [plugin](https://github.com/kubernetes/ingress-nginx/blob/main/rootfs/etc/nginx/lua/plugins/README.md). @@ -57,10 +53,23 @@ The Ingress nginx controller should be installed using the [official helm chart] ### Using Helm -First you need to create new ingress-nginx chart values file (`crowdsec-ingress-bouncer.yaml`) to upgrade the ingress controller with the crowdsec plugin. +First you need to create new ingress-nginx chart values file (`crowdsec-ingress-values.yaml`) to upgrade the ingress controller with the crowdsec plugin. + +:::warning + +Lua support has been removed from mainline ingress nginx in version 1.12. As +CrowdSec remediation relies on lua, you need to use our controller image as +shown in the following values.yaml. +::: + ```yaml controller: + image: + PullPolicy: IfNotPresent + image: crowdsecurity/controller + # Crowdsec Remediation with Ingress Nginx requires to use our controller image + tag: latest extraVolumes: - name: crowdsec-bouncer-plugin emptyDir: {} @@ -115,14 +124,34 @@ controller: resolver local=on ipv6=off; ``` -This values upgrade your ingress deployment to add crowdsec lua lib as a plugin and run with the ingress controller. -It used [this docker image](https://hub.docker.com/r/crowdsecurity/lua-bouncer-plugin) to copy the crowdsec lua library. +
+ You already have a deployed ingress nginx + +This values.yaml upgrade your ingress deployment to add crowdsec lua lib as a +plugin and run with the crowdsec maintained nginx ingress controller with lua +support. It uses [this docker +image](https://hub.docker.com/r/crowdsecurity/lua-bouncer-plugin) to copy the +crowdsec lua library. You can upgrade the ingress-nginx using this `crowdsec-ingress-values.yaml` + +```bash +helm -n ingress-nginx upgrade -f ingress-nginx-values.yaml -f crowdsec-ingress-values.yaml ingress-nginx/ingress-nginx +``` + +
+ +
+ You don't have a deployed ingress nginx -Once you have this patch we can upgrade the ingress-nginx chart. +This values.yaml install your ingress deployment to add crowdsec lua lib as a +plugin and run with the crowdsec maintained nginx ingress controller with lua +support. It uses [this docker +image](https://hub.docker.com/r/crowdsecurity/lua-bouncer-plugin) to copy the +crowdsec lua library. You can install the ingress-nginx using this `crowdsec-ingress-values.yaml` ```bash -helm -n ingress-nginx upgrade -f ingress-nginx-values.yaml -f crowdsec-ingress-bouncer.yaml ingress-nginx ingress-nginx +helm -n ingress-nginx install -f crowdsec-ingress-values.yaml ingress-nginx ingress-nginx/ingress-nginx ``` +
And then check if the ingress controller is running well.