From c7fdede595f89e9e53289fb0217a2fbc70931f6a Mon Sep 17 00:00:00 2001
From: Nicolas Valembois <nvalembois@live.com>
Date: Sat, 13 Jun 2026 07:19:06 +0200
Subject: [PATCH 1/3] fix: #286

---
 charts/crowdsec/templates/appsec-service.yaml | 17 ++++++++++++++---
 1 file changed, 14 insertions(+), 3 deletions(-)

diff --git a/charts/crowdsec/templates/appsec-service.yaml b/charts/crowdsec/templates/appsec-service.yaml
index 557351ac..0a011f06 100644
--- a/charts/crowdsec/templates/appsec-service.yaml
+++ b/charts/crowdsec/templates/appsec-service.yaml
@@ -27,15 +27,26 @@ spec:
   {{- if or (eq .Values.appsec.service.type "LoadBalancer") (eq .Values.appsec.service.type "NodePort") }}
   externalTrafficPolicy: {{ .Values.appsec.service.externalTrafficPolicy | quote }}
   {{- end }}
+  {{- if or (len .Values.appsec.acquisitions) (.Values.appsec.metrics.enabled) }}
   ports:
+    {{- if .Values.appsec.metrics.enabled }}
     - port: 6060
       targetPort: 6060
       protocol: TCP
       name: metrics
-    - port: 7422
-      targetPort: 7422
+    {{- end }}
+    {{- range .Values.appsec.acquisitions }}
+      {{- if and (hasKey . "listen_addr") (not startsWith "127.0.0.1" .listen_addr) }}
+    {{- $listen_addr := .listen_addr | default "" }}
+    {{- $url := printf "http://%s/" .listen_addr | urlParse }}
+    {{- $port := .listen_addr | replace (printf "%s:" $url.hostname) "" }}
+    - port: {{ $port }}
+      targetPort: {{ $port }}
       protocol: TCP
-      name: appsec
+      name: appsec{{ if ne $port "7422" }}-{{ $port }}{{ end }}
+      {{- end }}
+    {{- end }}
+  {{- end }}
   selector:
     k8s-app: {{ .Release.Name }}
     type: appsec

From 2347043fc59b40c1c6aa74c84d8cee8edf72d7ac Mon Sep 17 00:00:00 2001
From: Nicolas Valembois <nvalembois@live.com>
Date: Sat, 13 Jun 2026 07:53:53 +0200
Subject: [PATCH 2/3] fix: appsec deployment

---
 charts/crowdsec/templates/appsec-deployment.yaml | 16 +++++++++++++---
 1 file changed, 13 insertions(+), 3 deletions(-)

diff --git a/charts/crowdsec/templates/appsec-deployment.yaml b/charts/crowdsec/templates/appsec-deployment.yaml
index 3c912ff4..22581f29 100644
--- a/charts/crowdsec/templates/appsec-deployment.yaml
+++ b/charts/crowdsec/templates/appsec-deployment.yaml
@@ -153,14 +153,24 @@ spec:
         {{- end }}
         resources:
           {{- toYaml .Values.appsec.resources | nindent 10 }}
+        {{- if or (len .Values.appsec.acquisitions) (.Values.appsec.metrics.enabled) }}
         ports:
-          - name: appsec
-            containerPort: 7422
-            protocol: TCP
           {{- if .Values.appsec.metrics.enabled }}
           - name: metrics
             containerPort: 6060
             protocol: TCP
+          {{- end }}
+          {{- range .Values.appsec.acquisitions }}
+            {{- if and (hasKey . "listen_addr") (not startsWith "127.0.0.1" .listen_addr) }}
+          {{- $listen_addr := .listen_addr | default "" }}
+          {{- $url := printf "http://%s/" .listen_addr | urlParse }}
+          {{- $port := .listen_addr | replace (printf "%s:" $url.hostname) "" }}
+          - name: appsec{{ if ne $port "7422" }}-{{ $port }}{{ end }}
+            containerPort: {{ $port }}
+            protocol: TCP
+            {{- end }}
+          {{- end }}
+        {{- end }}
 
         {{/* Probes depend on the metrics port, there is no other service on the log processor */}}
 

From 9ea019f5d860b326a07651266df5f48de6c65fae Mon Sep 17 00:00:00 2001
From: Nicolas Valembois <nvalembois@live.com>
Date: Sat, 13 Jun 2026 09:36:50 +0200
Subject: [PATCH 3/3] fix: wrong version

---
 charts/crowdsec/templates/appsec-deployment.yaml | 6 ++----
 charts/crowdsec/templates/appsec-service.yaml    | 3 +--
 2 files changed, 3 insertions(+), 6 deletions(-)

diff --git a/charts/crowdsec/templates/appsec-deployment.yaml b/charts/crowdsec/templates/appsec-deployment.yaml
index 22581f29..6dd1e38d 100644
--- a/charts/crowdsec/templates/appsec-deployment.yaml
+++ b/charts/crowdsec/templates/appsec-deployment.yaml
@@ -148,6 +148,7 @@ spec:
           - name: INSECURE_SKIP_VERIFY
             value: {{ quote .Values.tls.insecureSkipVerify }}
           {{- end }}
+
         {{- with .Values.appsec.env }}
           {{- toYaml . | nindent 10 }}
         {{- end }}
@@ -161,8 +162,7 @@ spec:
             protocol: TCP
           {{- end }}
           {{- range .Values.appsec.acquisitions }}
-            {{- if and (hasKey . "listen_addr") (not startsWith "127.0.0.1" .listen_addr) }}
-          {{- $listen_addr := .listen_addr | default "" }}
+            {{- if and (hasKey . "listen_addr") (not (contains "127.0.0.1:" .listen_addr)) }}
           {{- $url := printf "http://%s/" .listen_addr | urlParse }}
           {{- $port := .listen_addr | replace (printf "%s:" $url.hostname) "" }}
           - name: appsec{{ if ne $port "7422" }}-{{ $port }}{{ end }}
@@ -187,8 +187,6 @@ spec:
 {{ toYaml .Values.appsec.startupProbe | indent 10 }}
         {{ end }}
 
-        {{ end }}
-
         securityContext:
           {{- toYaml .Values.appsec.securityContext | nindent 10 }}
 
diff --git a/charts/crowdsec/templates/appsec-service.yaml b/charts/crowdsec/templates/appsec-service.yaml
index 0a011f06..63aff615 100644
--- a/charts/crowdsec/templates/appsec-service.yaml
+++ b/charts/crowdsec/templates/appsec-service.yaml
@@ -36,8 +36,7 @@ spec:
       name: metrics
     {{- end }}
     {{- range .Values.appsec.acquisitions }}
-      {{- if and (hasKey . "listen_addr") (not startsWith "127.0.0.1" .listen_addr) }}
-    {{- $listen_addr := .listen_addr | default "" }}
+      {{- if and (hasKey . "listen_addr") (not (contains "127.0.0.1:" .listen_addr)) }}
     {{- $url := printf "http://%s/" .listen_addr | urlParse }}
     {{- $port := .listen_addr | replace (printf "%s:" $url.hostname) "" }}
     - port: {{ $port }}