diff --git a/cluster/apps/falco-system/falco-exporter/helm-release.yaml b/cluster/apps/falco-system/falco-exporter/helm-release.yaml deleted file mode 100644 index 63b46aee0..000000000 --- a/cluster/apps/falco-system/falco-exporter/helm-release.yaml +++ /dev/null @@ -1,27 +0,0 @@ ---- -apiVersion: helm.toolkit.fluxcd.io/v2beta1 -kind: HelmRelease -metadata: - name: falco-exporter - namespace: falco-system -spec: - interval: 5m - chart: - spec: - # renovate: registryUrl=https://falcosecurity.github.io/charts - chart: falco-exporter - version: 0.5.1 - sourceRef: - kind: HelmRepository - name: falco-security-charts - namespace: flux-system - interval: 5m - values: - serviceMonitor: - enabled: true - grafanaDashboard: - enabled: true - namespace: falco-system - tolerations: - - effect: NoSchedule - operator: Exists diff --git a/cluster/apps/falco-system/falco-exporter/kustomization.yaml b/cluster/apps/falco-system/falco-exporter/kustomization.yaml deleted file mode 100644 index db69d0013..000000000 --- a/cluster/apps/falco-system/falco-exporter/kustomization.yaml +++ /dev/null @@ -1,4 +0,0 @@ -apiVersion: kustomize.config.k8s.io/v1beta1 -kind: Kustomization -resources: -- helm-release.yaml \ No newline at end of file diff --git a/cluster/apps/falco-system/falco/helm-release.yaml b/cluster/apps/falco-system/falco/helm-release.yaml deleted file mode 100644 index b6fb35977..000000000 --- a/cluster/apps/falco-system/falco/helm-release.yaml +++ /dev/null @@ -1,76 +0,0 @@ ---- -apiVersion: helm.toolkit.fluxcd.io/v2beta1 -kind: HelmRelease -metadata: - name: falco - namespace: falco-system -spec: - interval: 5m - chart: - spec: - # renovate: registryUrl=https://falcosecurity.github.io/charts - chart: falco - version: 1.13.0 - sourceRef: - kind: HelmRepository - name: falco-security-charts - namespace: flux-system - interval: 5m - values: - timezone: "Europe/Paris" - containerd: - enabled: true - socket: /var/run/k3s/containerd/containerd.sock - docker: - enabled: false - ebpf: - enabled: true - settings: - hostNetwork: true - falco: - grpc: - enabled: true - grpcOutput: - enabled: true - tolerations: - - effect: NoSchedule - operator: Exists - # https://securityhub.dev/ - customRules: - rules-admin-activities.yaml: |- - - rule: Detect su or sudo - desc: detect sudo activities - condition: - spawned_process and proc.name in (sudo, su) - output: > - Detected sudo or su privilege escalation activity (user=%user.name command=%proc.cmdline) - priority: WARNING - tags: [process] - - rule: Package Management Launched - desc: detect package management launched - condition: > - spawned_process and user.name != "_apt" and package_mgmt_procs and not package_mgmt_ancestor_procs - output: > - Package management process launched in container (user=%user.name - command=%proc.cmdline container_id=%container.id container_name=%container.name image=%container.image.repository:%container.image.tag) - priority: ERROR - tags: [process] - rules-ssh-connections.yaml: |- - - rule: Inbound SSH Connection - desc: Detect Inbound SSH Connection - condition: > - ((evt.type in (accept,listen) and evt.dir=<) or - (evt.type in (recvfrom,recvmsg))) and ssh_port - output: > - Inbound SSH connection (user=%user.name client_ip=%fd.cip client_port=%fd.cport server_ip=%fd.sip) - priority: WARNING - tags: [network] - - rule: Outbound SSH Connection - desc: Detect Outbound SSH Connection - condition: > - ((evt.type = connect and evt.dir=<) or - (evt.type in (sendto,sendmsg))) and ssh_port - output: > - Outbound SSH connection (user=%user.name server_ip=%fd.sip server_port=%fd.sport client_ip=%fd.cip) - priority: WARNING - tags: [network] diff --git a/cluster/apps/falco-system/falco/kustomization.yaml b/cluster/apps/falco-system/falco/kustomization.yaml deleted file mode 100644 index db69d0013..000000000 --- a/cluster/apps/falco-system/falco/kustomization.yaml +++ /dev/null @@ -1,4 +0,0 @@ -apiVersion: kustomize.config.k8s.io/v1beta1 -kind: Kustomization -resources: -- helm-release.yaml \ No newline at end of file diff --git a/cluster/apps/falco-system/kustomization.yaml b/cluster/apps/falco-system/kustomization.yaml deleted file mode 100644 index 33c239819..000000000 --- a/cluster/apps/falco-system/kustomization.yaml +++ /dev/null @@ -1,5 +0,0 @@ -apiVersion: kustomize.config.k8s.io/v1beta1 -kind: Kustomization -resources: -- falco -- falco-exporter \ No newline at end of file diff --git a/cluster/apps/kustomization.yaml b/cluster/apps/kustomization.yaml index 05e765206..8a880cd9d 100644 --- a/cluster/apps/kustomization.yaml +++ b/cluster/apps/kustomization.yaml @@ -3,7 +3,6 @@ kind: Kustomization resources: - data - development - - falco-system - home - kasten-io - media diff --git a/cluster/apps/media/flaresolverr/helm-release.yaml b/cluster/apps/media/flaresolverr/helm-release.yaml deleted file mode 100644 index 4ff919c19..000000000 --- a/cluster/apps/media/flaresolverr/helm-release.yaml +++ /dev/null @@ -1,29 +0,0 @@ ---- -apiVersion: helm.toolkit.fluxcd.io/v2beta1 -kind: HelmRelease -metadata: - name: flaresolverr - namespace: media -spec: - interval: 5m - chart: - spec: - # renovate: registryUrl=https://k8s-at-home.com/charts/ - chart: flaresolverr - version: 3.4.0 - sourceRef: - kind: HelmRepository - name: k8s-at-home-charts - namespace: flux-system - interval: 5m - values: - image: - repository: flaresolverr/flaresolverr - tag: v1.2.8 - env: - TZ: "Europe/Paris" - LOG_LEVEL: "info" - resources: - requests: - memory: 100Mi - cpu: 100m diff --git a/cluster/apps/media/flaresolverr/kustomization.yaml b/cluster/apps/media/flaresolverr/kustomization.yaml deleted file mode 100644 index 34a8531ce..000000000 --- a/cluster/apps/media/flaresolverr/kustomization.yaml +++ /dev/null @@ -1,4 +0,0 @@ -apiVersion: kustomize.config.k8s.io/v1beta1 -kind: Kustomization -resources: - - helm-release.yaml diff --git a/cluster/apps/media/kustomization.yaml b/cluster/apps/media/kustomization.yaml index c4ed55c42..a6069826a 100644 --- a/cluster/apps/media/kustomization.yaml +++ b/cluster/apps/media/kustomization.yaml @@ -2,7 +2,6 @@ apiVersion: kustomize.config.k8s.io/v1beta1 kind: Kustomization resources: - bazarr - - flaresolverr - flood - jackett - jellyfin diff --git a/cluster/base-custom/charts/falco-security-charts.yaml b/cluster/base-custom/charts/falco-security-charts.yaml deleted file mode 100644 index c2ae59570..000000000 --- a/cluster/base-custom/charts/falco-security-charts.yaml +++ /dev/null @@ -1,10 +0,0 @@ ---- -apiVersion: source.toolkit.fluxcd.io/v1beta1 -kind: HelmRepository -metadata: - name: falco-security-charts - namespace: flux-system -spec: - interval: 10m - url: https://falcosecurity.github.io/charts - timeout: 3m diff --git a/cluster/base-custom/charts/kustomization.yaml b/cluster/base-custom/charts/kustomization.yaml index 3f69a009f..c08979765 100644 --- a/cluster/base-custom/charts/kustomization.yaml +++ b/cluster/base-custom/charts/kustomization.yaml @@ -7,7 +7,6 @@ resources: - cert-manager-webhook-ovh.yaml - coredns-charts.yaml - drone-charts.yaml - - falco-security-charts.yaml - gitea-charts.yaml - grafana-loki-charts.yaml - influxdata-charts.yaml