feat(helm): update Gitea configuration and add certificates for alpha and production environments

Signed-off-by: zhenyus <zhenyus@mathmast.com>
This commit is contained in:
zhenyus 2025-03-07 03:25:26 +08:00
parent 484eb526bd
commit d3e63f2fc0
4 changed files with 92 additions and 14 deletions

View File

@ -0,0 +1,13 @@
apiVersion: cert-manager.io/v1
kind: Certificate
metadata:
name: gitea.freeleaps.mathmast.com-cert
namespace: freeleaps-prod
spec:
commonName: gitea.freeleaps.mathmast.com
dnsNames:
- gitea.freeleaps.mathmast.com
issuerRef:
name: mathmast-dot-com
kind: ClusterIssuer
secretName: gitea.freeleaps.mathmast.com-cert

View File

@ -14,7 +14,7 @@ global:
## - myRegistryKeySecretName ## - myRegistryKeySecretName
## ##
imagePullSecrets: [] imagePullSecrets: []
storageClass: "" storageClass: "azure-disk-std-lrs"
hostAliases: [] hostAliases: []
# - ip: 192.168.137.2 # - ip: 192.168.137.2
# hostnames: # hostnames:
@ -176,7 +176,10 @@ ingress:
paths: paths:
- path: / - path: /
pathType: Prefix pathType: Prefix
tls: [] tls:
- secretName: gitea.freeleaps.mathmast.com-cert
hosts:
- gitea.freeleaps.mathmast.com
# - secretName: chart-example-tls # - secretName: chart-example-tls
# hosts: # hosts:
# - git.example.com # - git.example.com
@ -272,11 +275,11 @@ persistence:
create: true create: true
mount: true mount: true
claimName: gitea-shared-storage claimName: gitea-shared-storage
size: 10Gi size: 15Gi
accessModes: accessModes:
- ReadWriteOnce - ReadWriteOnce
labels: {} labels: {}
storageClass: storageClass: azure-disk-std-lrs
subPath: subPath:
volumeName: "" volumeName: ""
annotations: annotations:
@ -456,7 +459,7 @@ gitea:
existingSecret: existingSecret:
username: gitea_admin username: gitea_admin
password: r8sA8CPHD9!bt6d password: r8sA8CPHD9!bt6d
email: "gitea@local.domain" email: "helpdesk@freeleaps.com"
passwordMode: keepUpdated passwordMode: keepUpdated
## @param gitea.metrics.enabled Enable Gitea metrics ## @param gitea.metrics.enabled Enable Gitea metrics
@ -467,10 +470,11 @@ gitea:
## @param gitea.metrics.serviceMonitor.scrapeTimeout Timeout after which the scrape is ended. If not specified, global Prometheus scrape timeout is used. ## @param gitea.metrics.serviceMonitor.scrapeTimeout Timeout after which the scrape is ended. If not specified, global Prometheus scrape timeout is used.
## @param gitea.metrics.serviceMonitor.tlsConfig TLS configuration to use when scraping the metric endpoint by Prometheus. ## @param gitea.metrics.serviceMonitor.tlsConfig TLS configuration to use when scraping the metric endpoint by Prometheus.
metrics: metrics:
enabled: false enabled: true
serviceMonitor: serviceMonitor:
enabled: false enabled: true
# additionalLabels: additionalLabels:
release: kube-prometheus-stack
# prometheus-release: prom1 # prometheus-release: prom1
interval: "" interval: ""
relabelings: [] relabelings: []
@ -514,6 +518,7 @@ gitea:
## @param gitea.config.server.SSH_PORT SSH port for rootlful Gitea image ## @param gitea.config.server.SSH_PORT SSH port for rootlful Gitea image
## @param gitea.config.server.SSH_LISTEN_PORT SSH port for rootless Gitea image ## @param gitea.config.server.SSH_LISTEN_PORT SSH port for rootless Gitea image
config: config:
APP_NAME: "Freeleaps Codebase Service"
# APP_NAME: "Gitea: Git with a cup of tea" # APP_NAME: "Gitea: Git with a cup of tea"
# RUN_MODE: dev # RUN_MODE: dev
server: server:
@ -652,20 +657,20 @@ postgresql-ha:
global: global:
postgresql: postgresql:
database: gitea database: gitea
password: gitea password: HFf#Xo4QtfK^CW?@
username: gitea username: gitea
enabled: true enabled: true
postgresql: postgresql:
repmgrPassword: changeme2 repmgrPassword: WGZ47gbUTLvo
postgresPassword: changeme1 postgresPassword: X9H2*9M2ZWYmuZ
password: changeme4 password: bhYmZ3ivfD@udWc@8jrB4@
pgpool: pgpool:
adminPassword: changeme3 adminPassword: Rk(*4vc%wFVu5>C|
service: service:
ports: ports:
postgresql: 5432 postgresql: 5432
persistence: persistence:
size: 10Gi size: 25Gi
## @section PostgreSQL ## @section PostgreSQL
# #

View File

@ -0,0 +1,60 @@
global:
registry: docker.io
repository: freeleaps
nodeSelector: {}
devsvc:
replicas: 1
image:
registry: docker.io
repository: null
name: devsvc
tag: snapshot-ab89bd4
imagePullPolicy: IfNotPresent
ports:
- name: http
containerPort: 8007
protocol: TCP
resources:
requests:
cpu: '100m'
memory: 128Mi
limits:
cpu: '200m'
memory: 256Mi
probes: {}
services:
- name: devsvc-service
type: ClusterIP
port: 8007
targetPort: 8007
ingresses:
- name: devsvc-ingress
host: alpha.devsvc.freeleaps.mathmast.com
class: nginx
rules:
- path: /
pathType: Prefix
backend:
service:
name: devsvc-service
port:
number: 8007
tls:
exists: false
issuerRef:
name: mathmast-dot-com
kind: ClusterIssuer
name: alpha.devsvc.freeleaps.mathmast.com-cert
configs:
tz: UTC
appName: devsvc
serviceApiAccessHost: 0.0.0.0
serviceApiAccessPort: 8007
mongodbName: freeleaps2
mongodbUri: mongodb://freeleaps-alpha-mongo-mongodb.freeleaps-alpha.svc.freeleaps.cluster:27017/
giteaToken: 1d90e6eba4dbe8979878d2f55d9c7a0c2ab782df
giteaUrl: http://freeleaps-alpha-gitea-http.freeleaps-alpha.svc.freeleaps.cluster:3000
giteaDepotOrganization: products
codeDepotHttpPort: 443
codeDepotSshPort: 22
codeDepotDomainName: 'https://alpha.freeleaps.mathmast.com'