From d628dd2c6736d2abc6f84e5539c9ad9393a6c69f Mon Sep 17 00:00:00 2001
From: Davide Piu <davide@davidepiu.xyz>
Date: Thu, 19 Feb 2026 23:49:57 +0000
Subject: [PATCH] fix: allow CrowdSec intra-namespace traffic (agent -> LAPI)

---
 clusters/lab/security/crowdsec.yaml | 7 ++++---
 1 file changed, 4 insertions(+), 3 deletions(-)

diff --git a/clusters/lab/security/crowdsec.yaml b/clusters/lab/security/crowdsec.yaml
index 893e92c..a7d7571 100644
--- a/clusters/lab/security/crowdsec.yaml
+++ b/clusters/lab/security/crowdsec.yaml
@@ -35,9 +35,6 @@ spec:
     lapi:
       enabled: true
       replicas: 1
-      env:
-      - name: ENROLL_KEY
-        value: ""
       resources:
         requests:
           cpu: 50m
@@ -83,3 +80,7 @@ spec:
     - namespaceSelector:
         matchLabels:
           kubernetes.io/metadata.name: kube-system
+  - from:
+    - namespaceSelector:
+        matchLabels:
+          kubernetes.io/metadata.name: crowdsec