dip-values add

2026-06-09 11:51:43 +09:00
parent 162d9b2c2a
commit e64f933901
33 changed files with 2202 additions and 0 deletions
@@ -0,0 +1,106 @@
+global:
+  imageRegistry: ""
+
+ingress:
+  enabled: true
+  className: apisix
+  annotations:
+    k8s.apisix.apache.org/plugin-config-name: https-redirect
+    cert-manager.io/cluster-issuer: "root-ca-issuer" 
+    cert-manager.io/duration: 8760h  
+    cert-manager.io/renew-before: 720h
+  hosts:
+    - host: "{{ .Name }}.{{ .Domain }}"
+      paths:
+        - path: /
+          pathType: Prefix
+  tls:
+    - hosts:
+        host: "{{ .Name }}.{{ .Domain }}"
+      secretName: "{{ .Name }}-tls-secret"
+
+extraVolumes:
+ - name: keycloak-tls
+   secret:
+     secretName: keycloak-tls
+
+
+extraContainerVolumeMounts:
+  - name: keycloak-tls
+    mountPath: /etc/ssl/certs/ca.crt
+    subPath: ca.crt
+
+extraInitVolumeMounts:
+  - name: keycloak-tls
+    mountPath: /etc/ssl/certs/ca.crt
+    subPath: ca.crt    
+
+replicaCount: 1
+
+resources:
+  requests:
+    cpu: 100m
+    memory: 300Mi
+  limits:
+    cpu: 300m
+    memory: 500Mi
+
+persistence:
+  enabled: true
+  size: 10Gi
+  storageClass: "longhorn"
+
+gitea:
+  admin:   
+    username: sudouser
+    password: ""
+    email: "gitea@local.domain"
+    existingSecret: "$INFISICAL_SECRET"
+  config:
+    APP_NAME: paasup git
+    RUN_MODE: prod
+    server:
+      ROOT_URL: "https://{{ .Name }}.{{ .Domain }}"
+    database:
+      DB_TYPE: postgres
+      HOST: "{{ .Name }}-postgresql:5432"
+      NAME: gitea
+      USER: gitea
+      PASSWD: gitea
+      CHARSET: utf8
+      SSL_MODE: disable
+    session:
+      PROVIDER: postgres
+      PROVIDER_CONFIG: user=gitea password=gitea host={{ .Name }}-postgresql port=5432 dbname=gitea sslmode=disable
+      COOKIE_NAME: i_hate_gitea  
+    service:
+      DEFAULT_ALLOW_CREATE_ORGANIZATION: true
+    repository:
+      DEFAULT_BRANCH: master
+  oauth:
+    - name: keycloak
+      provider: "openidConnect"
+      key: "$KEYCLOAK_CLIENT_ID" 
+      secret: "$KEYCLOAK_CLIENT_SECRET"
+      autoDiscoverUrl: "$KEYCLOAK_URL/realms/$KEYCLOAK_REALM/.well-known/openid-configuration"      
+
+postgresql-ha:
+  enabled: false
+valkey:
+  enabled: false
+valkey-cluster:
+  enabled: false
+postgresql:
+  enabled: true
+  global:
+    postgresql:
+      auth:
+        password: gitea
+        database: gitea
+        username: gitea
+      service:
+        ports:
+          postgresql: 5432
+  primary:
+    persistence:
+      size: 10Gi