wbsong111
115 lines
3.3 KiB
YAML
115 lines
3.3 KiB
YAML
global:
|
|
imageRegistry: ""
|
|
|
|
# ingress 배포 전 인증서 secret 배포 필요(secret 이름은 platform)
|
|
ingress:
|
|
enabled: true
|
|
annotations:
|
|
kubernetes.io/ingress.class: nginx
|
|
nginx.ingress.kubernetes.io/proxy-body-size: 200m
|
|
hosts:
|
|
- host: gitea.example.org
|
|
paths:
|
|
- path: /
|
|
pathType: Prefix
|
|
tls:
|
|
- hosts:
|
|
host: gitea.example.org
|
|
secretName: platform
|
|
|
|
# 사설 인증서를 사용 시 아래 내용 추가
|
|
extraVolumes:
|
|
- name: gitea-tls
|
|
secret:
|
|
secretName: platform
|
|
|
|
extraContainerVolumeMounts:
|
|
- name: gitea-tls
|
|
mountPath: /data/gitea/https
|
|
|
|
lifecycleHooks:
|
|
postStart:
|
|
exec:
|
|
command: ["/bin/sh", "-c", "cp /data/gitea/https/tls.crt /usr/local/share/ca-certificates/; update-ca-certificates"]
|
|
# command:
|
|
# - "/bin/sh"
|
|
# - "-c"
|
|
# - |
|
|
# /bin/bash <<'EOF' > /tmp/post_start.log
|
|
# cp /data/gitea/https/tls.crt /usr/local/share/ca-certificates/
|
|
# update-ca-certificates
|
|
# su git
|
|
# OAUTH_NAME='keycloak'
|
|
# AUTH_ID=$(gitea admin auth list --vertical-bars | grep -E "\|${OAUTH_NAME}\s+\|" | grep -iE '\|OAuth2\s+\|' | awk -F " " "{print \$1}")
|
|
# KEYCLOAK_URL="https://keycloak.example.org"
|
|
# REALM=paasup
|
|
# if [[ -z "${AUTH_ID}" ]]; then
|
|
# echo "No oauth configuration found with name '${OAUTH_NAME}'. Installing it now..."
|
|
# gitea admin auth add-oauth --auto-discover-url "${KEYCLOAK_URL}/auth/realms/${REALM}/.well-known/openid-configuration" --key "gitea" --name "keycloak" --provider "openidConnect" --secret ""
|
|
# echo '...installed.'
|
|
# else
|
|
# echo "Existing oauth configuration with name '${OAUTH_NAME}': '${AUTH_ID}'. Running update to sync settings..."
|
|
# gitea admin auth update-oauth --id "${AUTH_ID}" --auto-discover-url "${KEYCLOAK_URL}/auth/realms/${REALM}/.well-known/openid-configuration" --key "gitea" --name "keycloak" --provider "openidConnect" --secret ""
|
|
# echo '...sync settings done.'
|
|
# fi
|
|
# EOF
|
|
|
|
|
|
|
|
## pod 설정
|
|
replicaCount: 1
|
|
|
|
tolerations: []
|
|
|
|
nodeSelector: {}
|
|
|
|
resources:
|
|
requests:
|
|
cpu: 100m
|
|
memory: 300Mi
|
|
limits:
|
|
cpu: 300m
|
|
memory: 500Mi
|
|
|
|
persistence:
|
|
enabled: true
|
|
size: 1Gi
|
|
accessModes:
|
|
- ReadWriteOnce
|
|
storageClass: ""
|
|
|
|
# oauth setting
|
|
|
|
|
|
## 같은 네임스페이스에 postgresql 배포 가정
|
|
gitea:
|
|
admin:
|
|
username: sudouser
|
|
password: password
|
|
email: "sudouser@cro.com"
|
|
config:
|
|
APP_NAME: paasup git
|
|
RUN_MODE: prod
|
|
server:
|
|
ROOT_URL: https://gitea.example.org
|
|
database:
|
|
DB_TYPE: postgres
|
|
# HOST: postgresql-postgresql-ha-pgpool:5432
|
|
HOST: postgresql-postgresql-ha-postgresql:5432
|
|
NAME: postgres # database name
|
|
USER: postgres # username
|
|
PASSWD: postgres # user password
|
|
CHARSET: utf8
|
|
SCHEMA: public
|
|
SSL_MODE: disable
|
|
session:
|
|
PROVIDER: postgres
|
|
# PROVIDER_CONFIG: user=gitea password=gitea host=postgresql-postgresql-ha-pgpool port=5432 dbname=gitea_session sslmode=disable
|
|
PROVIDER_CONFIG: user=postgres password=postgres host=postgresql-postgresql-ha-postgresql port=5432 dbname=postgres sslmode=disable
|
|
COOKIE_NAME: i_hate_gitea
|
|
service:
|
|
DEFAULT_ALLOW_CREATE_ORGANIZATION: true
|
|
repository:
|
|
DEFAULT_BRANCH: master
|
|
|