configure crowdsec captcha with cloudflare turnstile

2025-12-03 16:45:25 +01:00
parent 17a0f23bbb
commit f4cb04c9c9
7 changed files with 261 additions and 74 deletions
@@ -5,77 +5,6 @@
  # debugger: on_failed

  tasks:
-    - name: Récupérer le nom du pod CrowdSec LAPI
-      kubernetes.core.k8s_info:
-        kind: Pod
-        namespace: tools
-        label_selectors:
-          - k8s-app = crowdsec
-          - type = lapi
-      register: crowdsec_lapi_pods
-
-    - name: Vérifier qu'un pod a été trouvé
-      assert:
-        that: crowdsec_lapi_pods.resources | length > 0
-        fail_msg: "Aucun pod CrowdSec LAPI trouvé dans le namespace 'tools' avec les labels 'k8s-app=crowdsec, type=lapi'."
-
-    - name: Définir le nom du pod CrowdSec LAPI
-      set_fact:
-        crowdsec_lapi_pod_name: "{{ crowdsec_lapi_pods.resources[0].metadata.name }}"
-
-    - name: Récupérer la clé API du bouncer CrowdSec
-      kubernetes.core.k8s_exec:
-        namespace: tools
-        pod: "{{ crowdsec_lapi_pod_name }}"
-        container: crowdsec-lapi
-        command: >
-          cscli bouncers add traefik-plugin
-      register: bouncer_key_result
-      ignore_errors: yes
-
-    - name: Supprimer le bouncer existant en cas d'échec
-      kubernetes.core.k8s_exec:
-        namespace: tools
-        pod: "{{ crowdsec_lapi_pod_name }}"
-        container: crowdsec-lapi
-        command: >
-          cscli bouncers delete traefik-plugin
-      when: bouncer_key_result.failed
-
-    - name: Réessayer de récupérer la clé API
-      kubernetes.core.k8s_exec:
-        namespace: tools
-        pod: "{{ crowdsec_lapi_pod_name }}"
-        container: crowdsec-lapi
-        command: >
-          cscli bouncers add traefik-plugin
-      register: bouncer_key_result
-      when: bouncer_key_result.failed
-
-    - name: Créer le Middleware Traefik pour CrowdSec
-      kubernetes.core.k8s:
-        state: present
-        definition:
-          apiVersion: traefik.io/v1alpha1
-          kind: Middleware
-          metadata:
-            name: crowdsec
-            namespace: kube-system
-          spec:
-            plugin:
-              crowdsec-bouncer:
-                enabled: true
-                crowdsecMode: stream
-                crowdsecLapiScheme: http
-                crowdsecLapiHost: crowdsec-service.tools.svc.cluster.local:8080
-                crowdsecLapiKey: "{{ bouncer_key_result.stdout_lines[2].strip() }}"
-                htttTimeoutSeconds: 60
-                crowdsecAppsecEnabled: false
-                crowdsecAppsecHost: crowdsec:7422
-                crowdsecAppsecFailureBlock: true
-                crowdsecAppsecUnreachableBlock: true
-                forwardedHeadersTrustedIPs:
-                - 10.0.10.23/32
-                - 10.0.20.0/24
-                clientTrustedIPs:
-                - 192.168.1.0/24
+  - name: Setup crowdsec middleware for traefik
+    include_role:
+      name: crowdsec