K8s crowdsec http-probing while scenario is not installed

crowdsec
1

Hi,

I’m having crowdsec running on k8s and I get a http-probing descision when I use one of our websites. I would like to disable http-probing scenario but it isn’t in the list. there are only 3 ssh scenarios. How come the http-probing scenario is triggered and how can I disable it?

Thanks,

Bram

2

Most likely you are checking the lapi pods which doesnt install the scenarios, you need to check the agent pods.

You can disable a scenario by passing an environment variable to the agents such as:

agent:
  env:
     - name: "DISABLE_SCENARIOS"
       value: "crowdsecurity/http-probing"

Then recreate the agent pods.

docker hub for supported environment variables (scroll to bottom of page)

3

Hi,

works great thanks a lot