update gitea-infisical

charts/gitea/custom-values.yaml

@@ -45,9 +45,9 @@ ingress:
 
 # 사설 인증서를 사용 시 아래 내용 추가
 extraVolumes:
- - name: gitea-tls
-   secret:
-     secretName: gitea-tls-secret
+  - name: gitea-tls
+    secret:
+      secretName: gitea-tls-secret
 
 extraContainerVolumeMounts:
   - name: gitea-tls
@@ -80,7 +80,6 @@ extraContainerVolumeMounts:
 #         fi
 #         EOF
 
-
 ## pod 설정
 replicaCount: 1
 
@@ -104,9 +103,8 @@ persistence:
 ## 같은 네임스페이스에 postgresql 배포 가정
 gitea:
   admin:
-    username: sudouser
-    password: password
-    email: "sudouser@cro.com"
+    existingSecret: gitea-user-secret
+    email: "tech@paasup.io"
   config:
     APP_NAME: paasup git
     RUN_MODE: prod
@@ -131,4 +129,3 @@ gitea:
       DEFAULT_ALLOW_CREATE_ORGANIZATION: true
     repository:
       DEFAULT_BRANCH: master
-

charts/gitea/infisical-secret.yaml

@@ -0,0 +1,28 @@
+---
+apiVersion: secrets.infisical.com/v1alpha1
+kind: InfisicalSecret
+metadata:
+  name: infisicalsecret-git
+  namespace: infisical
+  labels:
+    label-to-be-passed-to-managed-secret: test-git-secret
+  annotations:
+    example.com/annotation-to-be-passed-to-managed-secret: "test-git-secret"
+spec:
+  hostAPI: http://infisical-infisical-standalone-infisical.infisical.svc.cluster.local:8080/api
+  resyncInterval: 10
+  authentication:
+    kubernetesAuth:
+      identityId: 5ffaf885-7df2-4c75-a3a5-292a996aa3d7
+      serviceAccountRef:
+        name: infisical-auth
+        namespace: infisical
+      secretsScope:
+        projectSlug: project1-9j-pp
+        envSlug: dev
+        secretsPath: "/system/gitea"
+        recursive: true
+  managedSecretReference:
+    secretName: test-git-secret
+    secretNamespace: test-git
+    creationPolicy: "Orphan" ## Owner | Orphan