Update custom files

This commit is contained in:
wbsong111
2025-11-24 10:46:43 +09:00
parent dd9af049d6
commit 01c572290c
3 changed files with 189 additions and 118 deletions
+36 -66
View File
@@ -1,28 +1,6 @@
global:
imageRegistry: ""
# # ingress 배포 전 인증서 secret 배포 필요(secret 이름은 platform)
# ingress:
# enabled: true
# annotations:
# kubernetes.io/ingress.class: nginx
# nginx.ingress.kubernetes.io/proxy-body-size: 200m
# hosts:
# - host: gitea.example.org
# paths:
# - path: /
# pathType: Prefix
# tls:
# - hosts:
# host: gitea.example.org
# secretName: platform
# # 사설 인증서를 사용 시 아래 내용 추가
# extraVolumes:
# - name: gitea-tls
# secret:
# secretName: platform
# ingress 배포 전 인증서 secret 배포 필요(secret 이름은 platform)
ingress:
enabled: true
@@ -54,32 +32,6 @@ extraContainerVolumeMounts:
mountPath: /etc/ssl/certs/ca.crt
subPath: ca.crt
# lifecycleHooks:
# postStart:
# exec:
# command:
# - "/bin/sh"
# - "-c"
# - |
# /bin/bash <<'EOF' > /tmp/post_start.log
# su git
# OAUTH_NAME='keycloak'
# AUTH_ID=$(gitea admin auth list --vertical-bars | grep -E "\|${OAUTH_NAME}\s+\|" | grep -iE '\|OAuth2\s+\|' | awk -F " " "{print \$1}")
# KEYCLOAK_URL="https://keycloak.example.org"
# KEYCLOAK_CLIENT_ID="keycloak"
# KEYCLOAK_SECRET=""
# REALM=paasup
# if [[ -z "${AUTH_ID}" ]]; then
# echo "No oauth configuration found with name '${OAUTH_NAME}'. Installing it now..."
# gitea admin auth add-oauth --auto-discover-url "${KEYCLOAK_URL}/auth/realms/${REALM}/.well-known/openid-configuration" --key "${KEYCLOAK_CLIENT_ID}" --name "keycloak" --provider "openidConnect" --secret "{$KEYCLOAK_SECRET}"
# echo '...installed.'
# else
# echo "Existing oauth configuration with name '${OAUTH_NAME}': '${AUTH_ID}'. Running update to sync settings..."
# gitea admin auth update-oauth --id "${AUTH_ID}" --auto-discover-url "${KEYCLOAK_URL}/auth/realms/${REALM}/.well-known/openid-configuration" --key"${KEYCLOAK_CLIENT_ID}" --name "keycloak" --provider "openidConnect" --secret "{$KEYCLOAK_SECRET}"
# echo '...sync settings done.'
# fi
# EOF
## pod 설정
replicaCount: 1
@@ -103,29 +55,47 @@ persistence:
## 같은 네임스페이스에 postgresql 배포 가정
gitea:
admin:
existingSecret: gitea-user-secret
email: "tech@paasup.io"
email: sudouser@cro.com
username: sudouser
password: password
config:
APP_NAME: paasup git
RUN_MODE: prod
server:
ROOT_URL: https://gitea.example.org
database:
DB_TYPE: postgres
# HOST: postgresql-postgresql-ha-pgpool:5432
HOST: postgresql-postgresql-ha-postgresql:5432
NAME: postgres # database name
USER: postgres # username
PASSWD: postgres # user password
CHARSET: utf8
SCHEMA: public
DB_TYPE: postgres
HOST: postgresql-postgresql-ha-postgresql:5432
NAME: gitea
USER: gitea
PASSWD: gitea
SCHEMA: gitea
SSL_MODE: disable
session:
PROVIDER: postgres
# PROVIDER_CONFIG: user=gitea password=gitea host=postgresql-postgresql-ha-pgpool port=5432 dbname=gitea_session sslmode=disable
PROVIDER_CONFIG: user=postgres password=postgres host=postgresql-postgresql-ha-postgresql port=5432 dbname=postgres sslmode=disable
COOKIE_NAME: i_hate_gitea
service:
DEFAULT_ALLOW_CREATE_ORGANIZATION: true
repository:
DEFAULT_BRANCH: master
server:
ROOT_URL: https://gitea.example.org
service:
DEFAULT_ALLOW_CREATE_ORGANIZATION: true
session:
COOKIE_NAME: i_hate_gitea
PROVIDER: postgres
PROVIDER_CONFIG: user=gitea password=gitea host=postgresql-postgresql-ha-postgresql
port=5432 dbname=gitea_session sslmode=disable
oauth:
- autoDiscoverUrl: http://keycloak/realms/paasup/.well-known/openid-configuration
key: gitea
name: Keycloak
provider: openidConnect
secret: VWIjYDNosSlPseEo5Uo8nkP3OHO4MigA
# Postgresql 비활성화
postgresql:
enabled: false
postgresql-ha:
enabled: false
# valkey 비활성화
valkey:
enabled: false
valkey-cluster:
enabled: false