feat(helm): update Gitea configuration and add certificates for alpha and production environments
Signed-off-by: zhenyus <zhenyus@mathmast.com>
This commit is contained in:
parent
484eb526bd
commit
d3e63f2fc0
13
freeleaps/helm-pkg/3rd/gitea/patch/certificate-prod.yaml
Normal file
13
freeleaps/helm-pkg/3rd/gitea/patch/certificate-prod.yaml
Normal file
@ -0,0 +1,13 @@
|
|||||||
|
apiVersion: cert-manager.io/v1
|
||||||
|
kind: Certificate
|
||||||
|
metadata:
|
||||||
|
name: gitea.freeleaps.mathmast.com-cert
|
||||||
|
namespace: freeleaps-prod
|
||||||
|
spec:
|
||||||
|
commonName: gitea.freeleaps.mathmast.com
|
||||||
|
dnsNames:
|
||||||
|
- gitea.freeleaps.mathmast.com
|
||||||
|
issuerRef:
|
||||||
|
name: mathmast-dot-com
|
||||||
|
kind: ClusterIssuer
|
||||||
|
secretName: gitea.freeleaps.mathmast.com-cert
|
||||||
@ -14,7 +14,7 @@ global:
|
|||||||
## - myRegistryKeySecretName
|
## - myRegistryKeySecretName
|
||||||
##
|
##
|
||||||
imagePullSecrets: []
|
imagePullSecrets: []
|
||||||
storageClass: ""
|
storageClass: "azure-disk-std-lrs"
|
||||||
hostAliases: []
|
hostAliases: []
|
||||||
# - ip: 192.168.137.2
|
# - ip: 192.168.137.2
|
||||||
# hostnames:
|
# hostnames:
|
||||||
@ -176,7 +176,10 @@ ingress:
|
|||||||
paths:
|
paths:
|
||||||
- path: /
|
- path: /
|
||||||
pathType: Prefix
|
pathType: Prefix
|
||||||
tls: []
|
tls:
|
||||||
|
- secretName: gitea.freeleaps.mathmast.com-cert
|
||||||
|
hosts:
|
||||||
|
- gitea.freeleaps.mathmast.com
|
||||||
# - secretName: chart-example-tls
|
# - secretName: chart-example-tls
|
||||||
# hosts:
|
# hosts:
|
||||||
# - git.example.com
|
# - git.example.com
|
||||||
@ -272,11 +275,11 @@ persistence:
|
|||||||
create: true
|
create: true
|
||||||
mount: true
|
mount: true
|
||||||
claimName: gitea-shared-storage
|
claimName: gitea-shared-storage
|
||||||
size: 10Gi
|
size: 15Gi
|
||||||
accessModes:
|
accessModes:
|
||||||
- ReadWriteOnce
|
- ReadWriteOnce
|
||||||
labels: {}
|
labels: {}
|
||||||
storageClass:
|
storageClass: azure-disk-std-lrs
|
||||||
subPath:
|
subPath:
|
||||||
volumeName: ""
|
volumeName: ""
|
||||||
annotations:
|
annotations:
|
||||||
@ -456,7 +459,7 @@ gitea:
|
|||||||
existingSecret:
|
existingSecret:
|
||||||
username: gitea_admin
|
username: gitea_admin
|
||||||
password: r8sA8CPHD9!bt6d
|
password: r8sA8CPHD9!bt6d
|
||||||
email: "gitea@local.domain"
|
email: "helpdesk@freeleaps.com"
|
||||||
passwordMode: keepUpdated
|
passwordMode: keepUpdated
|
||||||
|
|
||||||
## @param gitea.metrics.enabled Enable Gitea metrics
|
## @param gitea.metrics.enabled Enable Gitea metrics
|
||||||
@ -467,10 +470,11 @@ gitea:
|
|||||||
## @param gitea.metrics.serviceMonitor.scrapeTimeout Timeout after which the scrape is ended. If not specified, global Prometheus scrape timeout is used.
|
## @param gitea.metrics.serviceMonitor.scrapeTimeout Timeout after which the scrape is ended. If not specified, global Prometheus scrape timeout is used.
|
||||||
## @param gitea.metrics.serviceMonitor.tlsConfig TLS configuration to use when scraping the metric endpoint by Prometheus.
|
## @param gitea.metrics.serviceMonitor.tlsConfig TLS configuration to use when scraping the metric endpoint by Prometheus.
|
||||||
metrics:
|
metrics:
|
||||||
enabled: false
|
enabled: true
|
||||||
serviceMonitor:
|
serviceMonitor:
|
||||||
enabled: false
|
enabled: true
|
||||||
# additionalLabels:
|
additionalLabels:
|
||||||
|
release: kube-prometheus-stack
|
||||||
# prometheus-release: prom1
|
# prometheus-release: prom1
|
||||||
interval: ""
|
interval: ""
|
||||||
relabelings: []
|
relabelings: []
|
||||||
@ -514,6 +518,7 @@ gitea:
|
|||||||
## @param gitea.config.server.SSH_PORT SSH port for rootlful Gitea image
|
## @param gitea.config.server.SSH_PORT SSH port for rootlful Gitea image
|
||||||
## @param gitea.config.server.SSH_LISTEN_PORT SSH port for rootless Gitea image
|
## @param gitea.config.server.SSH_LISTEN_PORT SSH port for rootless Gitea image
|
||||||
config:
|
config:
|
||||||
|
APP_NAME: "Freeleaps Codebase Service"
|
||||||
# APP_NAME: "Gitea: Git with a cup of tea"
|
# APP_NAME: "Gitea: Git with a cup of tea"
|
||||||
# RUN_MODE: dev
|
# RUN_MODE: dev
|
||||||
server:
|
server:
|
||||||
@ -652,20 +657,20 @@ postgresql-ha:
|
|||||||
global:
|
global:
|
||||||
postgresql:
|
postgresql:
|
||||||
database: gitea
|
database: gitea
|
||||||
password: gitea
|
password: HFf#Xo4QtfK^CW?@
|
||||||
username: gitea
|
username: gitea
|
||||||
enabled: true
|
enabled: true
|
||||||
postgresql:
|
postgresql:
|
||||||
repmgrPassword: changeme2
|
repmgrPassword: WGZ47gbUTLvo
|
||||||
postgresPassword: changeme1
|
postgresPassword: X9H2*9M2ZWYmuZ
|
||||||
password: changeme4
|
password: bhYmZ3ivfD@udWc@8jrB4@
|
||||||
pgpool:
|
pgpool:
|
||||||
adminPassword: changeme3
|
adminPassword: Rk(*4vc%wFVu5>C|
|
||||||
service:
|
service:
|
||||||
ports:
|
ports:
|
||||||
postgresql: 5432
|
postgresql: 5432
|
||||||
persistence:
|
persistence:
|
||||||
size: 10Gi
|
size: 25Gi
|
||||||
|
|
||||||
## @section PostgreSQL
|
## @section PostgreSQL
|
||||||
#
|
#
|
||||||
|
|||||||
@ -0,0 +1,60 @@
|
|||||||
|
global:
|
||||||
|
registry: docker.io
|
||||||
|
repository: freeleaps
|
||||||
|
nodeSelector: {}
|
||||||
|
devsvc:
|
||||||
|
replicas: 1
|
||||||
|
image:
|
||||||
|
registry: docker.io
|
||||||
|
repository: null
|
||||||
|
name: devsvc
|
||||||
|
tag: snapshot-ab89bd4
|
||||||
|
imagePullPolicy: IfNotPresent
|
||||||
|
ports:
|
||||||
|
- name: http
|
||||||
|
containerPort: 8007
|
||||||
|
protocol: TCP
|
||||||
|
resources:
|
||||||
|
requests:
|
||||||
|
cpu: '100m'
|
||||||
|
memory: 128Mi
|
||||||
|
limits:
|
||||||
|
cpu: '200m'
|
||||||
|
memory: 256Mi
|
||||||
|
probes: {}
|
||||||
|
services:
|
||||||
|
- name: devsvc-service
|
||||||
|
type: ClusterIP
|
||||||
|
port: 8007
|
||||||
|
targetPort: 8007
|
||||||
|
ingresses:
|
||||||
|
- name: devsvc-ingress
|
||||||
|
host: alpha.devsvc.freeleaps.mathmast.com
|
||||||
|
class: nginx
|
||||||
|
rules:
|
||||||
|
- path: /
|
||||||
|
pathType: Prefix
|
||||||
|
backend:
|
||||||
|
service:
|
||||||
|
name: devsvc-service
|
||||||
|
port:
|
||||||
|
number: 8007
|
||||||
|
tls:
|
||||||
|
exists: false
|
||||||
|
issuerRef:
|
||||||
|
name: mathmast-dot-com
|
||||||
|
kind: ClusterIssuer
|
||||||
|
name: alpha.devsvc.freeleaps.mathmast.com-cert
|
||||||
|
configs:
|
||||||
|
tz: UTC
|
||||||
|
appName: devsvc
|
||||||
|
serviceApiAccessHost: 0.0.0.0
|
||||||
|
serviceApiAccessPort: 8007
|
||||||
|
mongodbName: freeleaps2
|
||||||
|
mongodbUri: mongodb://freeleaps-alpha-mongo-mongodb.freeleaps-alpha.svc.freeleaps.cluster:27017/
|
||||||
|
giteaToken: 1d90e6eba4dbe8979878d2f55d9c7a0c2ab782df
|
||||||
|
giteaUrl: http://freeleaps-alpha-gitea-http.freeleaps-alpha.svc.freeleaps.cluster:3000
|
||||||
|
giteaDepotOrganization: products
|
||||||
|
codeDepotHttpPort: 443
|
||||||
|
codeDepotSshPort: 22
|
||||||
|
codeDepotDomainName: 'https://alpha.freeleaps.mathmast.com'
|
||||||
Loading…
Reference in New Issue
Block a user