encrypt crowdsec bouncer key with SOPS + variable substitution

2026-02-20 00:17:40 +00:00
parent 75f8c6d5d8
commit 5e55c0e277
3 changed files with 33 additions and 1 deletions
--- a/clusters/lab/infrastructure/traefik-crowdsec.yaml
+++ b/clusters/lab/infrastructure/traefik-crowdsec.yaml
@@ -25,5 +25,5 @@ spec:
      updateIntervalSeconds: 15
      defaultDecisionSeconds: 60
      crowdsecLapiHost: crowdsec-crowdsec-service.crowdsec.svc.cluster.local:8080
-      crowdsecLapiKey: mDDWNQz36B/PPTbsN/QlqSmylJjW+poyWWu3Ws8GVoM
+      crowdsecLapiKey: ${CROWDSEC_BOUNCER_KEY}
      crowdsecLapiScheme: http