Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Add Kubernetes deployment files and instructions. #397

Closed
wants to merge 42 commits into from
Closed

Add Kubernetes deployment files and instructions. #397

wants to merge 42 commits into from

Commits on Mar 18, 2022

  1. Add Kubernetes deployment files and instructions.

    @Jeroen0494
    Jeroen0494 committed Mar 18, 2022
    Configuration menu
    Copy the full SHA
    94d647e View commit details
    Browse the repository at this point in the history

  2. Replace ingress with proper definition.

    @Jeroen0494
    Jeroen0494 committed Mar 18, 2022
    Configuration menu
    Copy the full SHA
    13990d3 View commit details
    Browse the repository at this point in the history

  3. Separate configuration into folders, add Fluentd and Fluent-bit confi… 

    …gurations.
    @Jeroen0494
    Jeroen0494 committed Mar 18, 2022
    Configuration menu
    Copy the full SHA
    8269d49 View commit details
    Browse the repository at this point in the history

  4. Fix fileinfo.type and alert.signature for fluentd, update resources.

    @Jeroen0494
    Jeroen0494 committed Mar 18, 2022
    Configuration menu
    Copy the full SHA
    1c1e649 View commit details
    Browse the repository at this point in the history

  5. Switch to suricata release, update permissions.

    @Jeroen0494
    Jeroen0494 committed Mar 18, 2022
    Configuration menu
    Copy the full SHA
    42a3747 View commit details
    Browse the repository at this point in the history

  6. Fix logrotate, enable chown where possible, add NET_RAW capability.

    @Jeroen0494
    Jeroen0494 committed Mar 18, 2022
    Configuration menu
    Copy the full SHA
    9fece9a View commit details
    Browse the repository at this point in the history

Commits on Mar 19, 2022

  1. Add some probes

    @Jeroen0494
    Jeroen0494 committed Mar 19, 2022
    Configuration menu
    Copy the full SHA
    4157170 View commit details
    Browse the repository at this point in the history

  2. Fix succesThreshold for evebox

    @Jeroen0494
    Jeroen0494 committed Mar 19, 2022
    Configuration menu
    Copy the full SHA
    bf826e8 View commit details
    Browse the repository at this point in the history

Commits on Mar 20, 2022

  1. Update NGINX ConfigMap logs and SSL, set NGINX probes.

    @Jeroen0494
    Jeroen0494 committed Mar 20, 2022
    Configuration menu
    Copy the full SHA
    d71bf76 View commit details
    Browse the repository at this point in the history

  2. Add example for OWASPs mod-security NGINX deployment.

    @Jeroen0494
    Jeroen0494 committed Mar 20, 2022
    Configuration menu
    Copy the full SHA
    6e6ef01 View commit details
    Browse the repository at this point in the history

  3. Add missing owasp name to NGINX.

    @Jeroen0494
    Jeroen0494 committed Mar 20, 2022
    Configuration menu
    Copy the full SHA
    2afa125 View commit details
    Browse the repository at this point in the history

  4. Add options for adding custom modsecurity rules.

    @Jeroen0494
    Jeroen0494 committed Mar 20, 2022
    Configuration menu
    Copy the full SHA
    db4313b View commit details
    Browse the repository at this point in the history

Commits on Mar 22, 2022

  1. Add missing systemd output, set proper kube logstash_prefix name.

    @Jeroen0494
    Jeroen0494 committed Mar 22, 2022
    Configuration menu
    Copy the full SHA
    55149c9 View commit details
    Browse the repository at this point in the history

Commits on Mar 23, 2022

  1. Set Suricata threads to CPU limit, clean duplicate code from entrypoint.

    @Jeroen0494
    Jeroen0494 committed Mar 23, 2022
    Configuration menu
    Copy the full SHA
    99b5e14 View commit details
    Browse the repository at this point in the history

  2. Auto create kube and systemd indices.

    @Jeroen0494
    Jeroen0494 committed Mar 23, 2022
    Configuration menu
    Copy the full SHA
    5b70774 View commit details
    Browse the repository at this point in the history

  3. Fetch all json files for suricata, needed for appended nodeName.

    @Jeroen0494
    Jeroen0494 committed Mar 23, 2022
    Configuration menu
    Copy the full SHA
    c3f81ce View commit details
    Browse the repository at this point in the history

Commits on Mar 25, 2022

  1. Add monitor for k3s, increase buffer to prevent freeze on long lines.

    @Jeroen0494
    Jeroen0494 committed Mar 25, 2022
    Configuration menu
    Copy the full SHA
    f059bb6 View commit details
    Browse the repository at this point in the history

Commits on Mar 26, 2022

  1. Send all logging to fluentd for processing.

    @Jeroen0494
    Jeroen0494 committed Mar 26, 2022
    Configuration menu
    Copy the full SHA
    ce4b42e View commit details
    Browse the repository at this point in the history

  2. Fix installation dependencies

    @Jeroen0494
    Jeroen0494 committed Mar 26, 2022
    Configuration menu
    Copy the full SHA
    46c9bac View commit details
    Browse the repository at this point in the history

Commits on Apr 3, 2022

  1. Fix NGINX OWASP for Kibana by disabling OWASP for cluster connections.

    @Jeroen0494
    Jeroen0494 committed Apr 3, 2022
    Configuration menu
    Copy the full SHA
    278b2e9 View commit details
    Browse the repository at this point in the history

  2. Fix Kibana warnings, reduce logging and exclude from fluentbit.

    @Jeroen0494
    Jeroen0494 committed Apr 3, 2022
    Configuration menu
    Copy the full SHA
    84c2fe2 View commit details
    Browse the repository at this point in the history

  3. Increase EVE JSON buffer size.

    @Jeroen0494
    Jeroen0494 committed Apr 3, 2022
    Configuration menu
    Copy the full SHA
    dd24713 View commit details
    Browse the repository at this point in the history

Commits on Apr 5, 2022

  1. Add preliminary network policy

    @Jeroen0494
    Jeroen0494 committed Apr 5, 2022
    Configuration menu
    Copy the full SHA
    db27c69 View commit details
    Browse the repository at this point in the history

Commits on Jun 10, 2022

  1. Add basic security settings

    @Jeroen0494
    Jeroen0494 committed Jun 10, 2022
    Configuration menu
    Copy the full SHA
    c7c6244 View commit details
    Browse the repository at this point in the history

  2. Allow DNS and fix syntax.

    @Jeroen0494
    Jeroen0494 committed Jun 10, 2022
    Configuration menu
    Copy the full SHA
    2dce3da View commit details
    Browse the repository at this point in the history

  3. Merge branch 'master' of github.com:StamusNetworks/SELKS into feat/ku… 

    …bernetes
    @Jeroen0494
    Jeroen0494 committed Jun 10, 2022
    Configuration menu
    Copy the full SHA
    4756661 View commit details
    Browse the repository at this point in the history

Commits on Mar 15, 2023

  1. Some more security updates 

    Signed-off-by: Jeroen Rijken <jeroen.rijken@xs4all.nl>
    @Jeroen0494
    Jeroen0494 committed Mar 15, 2023
    Configuration menu
    Copy the full SHA
    e00eb4a View commit details
    Browse the repository at this point in the history

Commits on Mar 16, 2023

  1. Update securityContext 

    Signed-off-by: Jeroen Rijken <jeroen.rijken@xs4all.nl>
    @Jeroen0494
    Jeroen0494 committed Mar 16, 2023
    Configuration menu
    Copy the full SHA
    1a30699 View commit details
    Browse the repository at this point in the history

  2. Update image versions 

    Signed-off-by: Jeroen Rijken <jeroen.rijken@xs4all.nl>
    @Jeroen0494
    Jeroen0494 committed Mar 16, 2023
    Configuration menu
    Copy the full SHA
    13297cc View commit details
    Browse the repository at this point in the history

  3. Remove Kubernetes monitoring from Filebeat 

    Signed-off-by: Jeroen Rijken <jeroen.rijken@xs4all.nl>
    @Jeroen0494
    Jeroen0494 committed Mar 16, 2023
    Configuration menu
    Copy the full SHA
    5d7017e View commit details
    Browse the repository at this point in the history

  4. Update securityContext 

    Signed-off-by: Jeroen Rijken <jeroen.rijken@xs4all.nl>
    @Jeroen0494
    Jeroen0494 committed Mar 16, 2023
    Configuration menu
    Copy the full SHA
    677958b View commit details
    Browse the repository at this point in the history

  5. Switch to Job 

    Signed-off-by: Jeroen Rijken <jeroen.rijken@xs4all.nl>
    @Jeroen0494
    Jeroen0494 committed Mar 16, 2023
    Configuration menu
    Copy the full SHA
    612e4d3 View commit details
    Browse the repository at this point in the history

  6. Kibana job securityContext 

    Signed-off-by: Jeroen Rijken <jeroen.rijken@xs4all.nl>
    @Jeroen0494
    Jeroen0494 committed Mar 16, 2023
    Configuration menu
    Copy the full SHA
    7642465 View commit details
    Browse the repository at this point in the history

Commits on Mar 18, 2023

  1. Update cronjobs 

    Signed-off-by: Jeroen Rijken <jeroen.rijken@xs4all.nl>
    @Jeroen0494
    Jeroen0494 committed Mar 18, 2023
    Configuration menu
    Copy the full SHA
    92bd0e7 View commit details
    Browse the repository at this point in the history

  2. Fix NGINX ConfigMap typos 

    Signed-off-by: Jeroen Rijken <jeroen.rijken@xs4all.nl>
    @Jeroen0494
    Jeroen0494 committed Mar 18, 2023
    Configuration menu
    Copy the full SHA
    432c8fd View commit details
    Browse the repository at this point in the history

  3. Update Kibana dashboad job name, update readme 

    Signed-off-by: Jeroen Rijken <jeroen.rijken@xs4all.nl>
    @Jeroen0494
    Jeroen0494 committed Mar 18, 2023
    Configuration menu
    Copy the full SHA
    bd6270b View commit details
    Browse the repository at this point in the history

  4. Update readme 

    Signed-off-by: Jeroen Rijken <jeroen.rijken@xs4all.nl>
    @Jeroen0494
    Jeroen0494 committed Mar 18, 2023
    Configuration menu
    Copy the full SHA
    663fde4 View commit details
    Browse the repository at this point in the history

  5. Fix NGINX pid file location 

    Signed-off-by: Jeroen Rijken <jeroen.rijken@xs4all.nl>
    @Jeroen0494
    Jeroen0494 committed Mar 18, 2023
    Configuration menu
    Copy the full SHA
    651bb7e View commit details
    Browse the repository at this point in the history

  6. Update CronJob securityContext 

    Signed-off-by: Jeroen Rijken <jeroen.rijken@xs4all.nl>
    @Jeroen0494
    Jeroen0494 committed Mar 18, 2023
    Configuration menu
    Copy the full SHA
    4c3e93d View commit details
    Browse the repository at this point in the history

  7. Add probes to Suricata daemonSet. 

    Signed-off-by: Jeroen Rijken <jeroen.rijken@xs4all.nl>
    @Jeroen0494
    Jeroen0494 committed Mar 18, 2023
    Configuration menu
    Copy the full SHA
    a2a6930 View commit details
    Browse the repository at this point in the history

  8. Need to run as root to install git and cURL 

    Signed-off-by: Jeroen Rijken <jeroen.rijken@xs4all.nl>
    @Jeroen0494
    Jeroen0494 committed Mar 18, 2023
    Configuration menu
    Copy the full SHA
    ba01ff2 View commit details
    Browse the repository at this point in the history

Commits on Mar 23, 2023

  1. Update readme 

    Signed-off-by: Jeroen Rijken <jeroen.rijken@xs4all.nl>
    @Jeroen0494
    Jeroen0494 committed Mar 23, 2023
    Configuration menu
    Copy the full SHA
    1201cbc View commit details
    Browse the repository at this point in the history