1 changed files with 9 additions and 1 deletions
@@ -39,8 +39,16 @@ spec:
        # kubernetes/infrastructure/openbao/rotation/crowdsec-bouncer-key.yaml.
        secret.reloader.stakater.com/reload: crowdsec-bouncer-key
      persistentVolume:
+        # data holds the machine-registration DB (crowdsec.db). LAPI uses
+        # strategy: Recreate, so any pod recreation (chart bump, the
+        # Reloader restart above, etc.) previously wiped this ephemeral
+        # store and permanently invalidated every agent's registration
+        # (issue #325: all 3 crowdsec-agent daemonset pods CrashLoopBackOff
+        # with "machine not found" after a LAPI recreation, since their
+        # once-run init container can't re-register without their own
+        # pod being recreated too).
        data:
-          enabled: false
+          enabled: true
        config:
          enabled: false
      env: