crowdsec-bouncer-traefik-plugin/tests/e2e/scenarios/appsec/acquis.yaml at 45abab69ecef28cdf795e750e9d74641dea9ce7f - crowdsec-bouncer-traefik-plugin - Pretecno Git

pretecno/crowdsec-bouncer-traefik-plugin

mirror of https://github.com/maxlerebourg/crowdsec-bouncer-traefik-plugin.git synced 2026-07-21 19:48:59 +02:00

Files

T

mhx 4c3bbf81fd ✨ tests: revert to docker provider + bump versions + add 6 scenarios

Reverts the stream-mode scenario to the Traefik docker provider (the
file provider was a workaround for a local docker daemon API version
mismatch, irrelevant in CI). Bumps Traefik to v3.7.1 and Crowdsec to
v1.7.8 across all scenarios.

Adds six new E2E scenarios:
- live-mode: short defaultDecisionSeconds, verifies cache-then-recheck
- none-mode: verifies LAPI is queried per request, no caching
- trusted-ips: clientTrustedIPs bypass even when the trusted IP is banned
- custom-ban-page: BanHTMLFilePath body + Content-Type validation
- captcha: captcha decision serves the captcha page (HTTP 200)
- appsec: SQLi probe blocked by appsec-virtual-patching

Each scenario uses an isolated compose project, mounts the repo as a
local plugin, and asserts behavior via curl. Workflow matrix and
Makefile E2E_SCENARIOS updated accordingly.

Refs #328

2026-06-06 12:03:19 +02:00

7 lines

126 B

YAML

Raw Blame History

 listen_addr: 0.0.0.0:7422
 appsec_config: crowdsecurity/virtual-patching
 name: e2eAppSec
 source: appsec
 labels:
   type: appsec