feat: remove falco + flaresolverr

cluster/apps/falco-system/falco-exporter/helm-release.yaml

@@ -1,27 +0,0 @@
----
-apiVersion: helm.toolkit.fluxcd.io/v2beta1
-kind: HelmRelease
-metadata:
-  name: falco-exporter
-  namespace: falco-system
-spec:
-  interval: 5m
-  chart:
-    spec:
-      # renovate: registryUrl=https://falcosecurity.github.io/charts
-      chart: falco-exporter
-      version: 0.5.1
-      sourceRef:
-        kind: HelmRepository
-        name: falco-security-charts
-        namespace: flux-system
-      interval: 5m
-  values:
-    serviceMonitor:
-      enabled: true
-    grafanaDashboard:
-      enabled: true
-      namespace: falco-system
-    tolerations:
-    - effect: NoSchedule
-      operator: Exists

cluster/apps/falco-system/falco-exporter/kustomization.yaml

@@ -1,4 +0,0 @@
-apiVersion: kustomize.config.k8s.io/v1beta1
-kind: Kustomization
-resources:
-- helm-release.yaml

cluster/apps/falco-system/falco/helm-release.yaml

@@ -1,76 +0,0 @@
----
-apiVersion: helm.toolkit.fluxcd.io/v2beta1
-kind: HelmRelease
-metadata:
-  name: falco
-  namespace: falco-system
-spec:
-  interval: 5m
-  chart:
-    spec:
-      # renovate: registryUrl=https://falcosecurity.github.io/charts
-      chart: falco
-      version: 1.13.0
-      sourceRef:
-        kind: HelmRepository
-        name: falco-security-charts
-        namespace: flux-system
-      interval: 5m
-  values:
-    timezone: "Europe/Paris"
-    containerd:
-      enabled: true
-      socket: /var/run/k3s/containerd/containerd.sock
-    docker:
-      enabled: false
-    ebpf:
-      enabled: true
-      settings:
-        hostNetwork: true
-    falco:
-      grpc:
-        enabled: true
-      grpcOutput:
-        enabled: true
-    tolerations:
-    - effect: NoSchedule
-      operator: Exists
-    # https://securityhub.dev/
-    customRules:
-      rules-admin-activities.yaml: |-
-        - rule: Detect su or sudo
-          desc: detect sudo activities
-          condition:
-            spawned_process and proc.name in (sudo, su)
-          output: >
-            Detected sudo or su privilege escalation activity (user=%user.name command=%proc.cmdline)
-          priority: WARNING
-          tags: [process]
-        - rule: Package Management Launched
-          desc: detect package management launched
-          condition: >
-            spawned_process and user.name != "_apt" and package_mgmt_procs and not package_mgmt_ancestor_procs
-          output: >
-            Package management process launched in container (user=%user.name
-            command=%proc.cmdline container_id=%container.id container_name=%container.name image=%container.image.repository:%container.image.tag)
-          priority: ERROR
-          tags: [process]
-      rules-ssh-connections.yaml: |-
-        - rule: Inbound SSH Connection
-          desc: Detect Inbound SSH Connection
-          condition: >
-            ((evt.type in (accept,listen) and evt.dir=<) or
-              (evt.type in (recvfrom,recvmsg))) and ssh_port
-          output: >
-            Inbound SSH connection (user=%user.name client_ip=%fd.cip client_port=%fd.cport server_ip=%fd.sip)
-          priority: WARNING
-          tags: [network]
-        - rule: Outbound SSH Connection
-          desc: Detect Outbound SSH Connection
-          condition: >
-            ((evt.type = connect and evt.dir=<) or
-              (evt.type in (sendto,sendmsg))) and ssh_port
-          output: >
-            Outbound SSH connection (user=%user.name server_ip=%fd.sip server_port=%fd.sport client_ip=%fd.cip)
-          priority: WARNING
-          tags: [network]

cluster/apps/falco-system/falco/kustomization.yaml

@@ -1,4 +0,0 @@
-apiVersion: kustomize.config.k8s.io/v1beta1
-kind: Kustomization
-resources:
-- helm-release.yaml

cluster/apps/falco-system/kustomization.yaml

@@ -1,5 +0,0 @@
-apiVersion: kustomize.config.k8s.io/v1beta1
-kind: Kustomization
-resources:
-- falco
-- falco-exporter

cluster/apps/kustomization.yaml

@@ -3,7 +3,6 @@ kind: Kustomization
 resources:
   - data
   - development
-  - falco-system
   - home
   - kasten-io
   - media

cluster/apps/media/flaresolverr/helm-release.yaml

@@ -1,29 +0,0 @@
----
-apiVersion: helm.toolkit.fluxcd.io/v2beta1
-kind: HelmRelease
-metadata:
-  name: flaresolverr
-  namespace: media
-spec:
-  interval: 5m
-  chart:
-    spec:
-      # renovate: registryUrl=https://k8s-at-home.com/charts/
-      chart: flaresolverr
-      version: 3.4.0
-      sourceRef:
-        kind: HelmRepository
-        name: k8s-at-home-charts
-        namespace: flux-system
-      interval: 5m
-  values:
-    image:
-      repository: flaresolverr/flaresolverr
-      tag: v1.2.8
-    env:
-      TZ: "Europe/Paris"
-      LOG_LEVEL: "info"
-    resources:
-      requests:
-        memory: 100Mi
-        cpu: 100m

cluster/apps/media/flaresolverr/kustomization.yaml

@@ -1,4 +0,0 @@
-apiVersion: kustomize.config.k8s.io/v1beta1
-kind: Kustomization
-resources:
-  - helm-release.yaml

cluster/apps/media/kustomization.yaml

@@ -2,7 +2,6 @@ apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 resources:
   - bazarr
-  - flaresolverr
   - flood
   - jackett
   - jellyfin

cluster/base-custom/charts/falco-security-charts.yaml

@@ -1,10 +0,0 @@
----
-apiVersion: source.toolkit.fluxcd.io/v1beta1
-kind: HelmRepository
-metadata:
-  name: falco-security-charts
-  namespace: flux-system
-spec:
-  interval: 10m
-  url: https://falcosecurity.github.io/charts
-  timeout: 3m

cluster/base-custom/charts/kustomization.yaml

@@ -7,7 +7,6 @@ resources:
   - cert-manager-webhook-ovh.yaml
   - coredns-charts.yaml
   - drone-charts.yaml
-  - falco-security-charts.yaml
   - gitea-charts.yaml
   - grafana-loki-charts.yaml
   - influxdata-charts.yaml