2026-06-27 11:02:11 +00:00
1 changed files with 8 additions and 5 deletions
@@ -48,15 +48,18 @@ spec:
              key: key

    agent:
+      # The agent parses the ingress controller's access logs (read from
+      # the pod's stdout) to detect attacks. Repointed from the retired
+      # ingress-nginx (decommissioned 2026-05-17) to Traefik. The
+      # crowdsecurity/traefik collection bundles the matching log parser,
+      # so no separate PARSERS entry is needed.
      acquisition:
        - namespace: ingress
-          podName: ingress-nginx-controller-*
-          program: nginx
+          podName: traefik-*
+          program: traefik
      env:
        - name: COLLECTIONS
-          value: "crowdsecurity/nginx crowdsecurity/http-cve crowdsecurity/appsec-virtual-patching crowdsecurity/appsec-generic-rules"
-        - name: PARSERS
-          value: "crowdsecurity/nginx-logs"
+          value: "crowdsecurity/traefik crowdsecurity/http-cve crowdsecurity/appsec-virtual-patching crowdsecurity/appsec-generic-rules"

    config:
      parsers: