Commit new Chart releases for TrueCharts
Signed-off-by: TrueCharts-Bot <bot@truecharts.org>
This commit is contained in:
TrueCharts-Bot
parent
b79c1577d9
commit
7559135e8a
|
|
@ -0,0 +1,99 @@
|
||||||
|
**Important:**
|
||||||
|
*for the complete changelog, please refer to the website*
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
## [gitea-13.0.21](https://github.com/truecharts/charts/compare/gitea-13.0.20...gitea-13.0.21) (2023-07-19)
|
||||||
|
|
||||||
|
### Chore
|
||||||
|
|
||||||
|
- update container image tccr.io/truecharts/gitea to v1.20.0 ([#10610](https://github.com/truecharts/charts/issues/10610))
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
## [gitea-13.0.20](https://github.com/truecharts/charts/compare/gitea-13.0.19...gitea-13.0.20) (2023-07-07)
|
||||||
|
|
||||||
|
### Chore
|
||||||
|
|
||||||
|
- update container image tccr.io/truecharts/gitea to v1.19.4 ([#10218](https://github.com/truecharts/charts/issues/10218))
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
## [gitea-13.0.19](https://github.com/truecharts/charts/compare/gitea-13.0.18...gitea-13.0.19) (2023-07-04)
|
||||||
|
|
||||||
|
### Chore
|
||||||
|
|
||||||
|
- update helm general non-major ([#10135](https://github.com/truecharts/charts/issues/10135))
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
## [gitea-13.0.18](https://github.com/truecharts/charts/compare/gitea-13.0.17...gitea-13.0.18) (2023-07-01)
|
||||||
|
|
||||||
|
### Chore
|
||||||
|
|
||||||
|
- update helm general non-major ([#10069](https://github.com/truecharts/charts/issues/10069))
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
## [gitea-13.0.17](https://github.com/truecharts/charts/compare/gitea-13.0.16...gitea-13.0.17) (2023-06-13)
|
||||||
|
|
||||||
|
### Chore
|
||||||
|
|
||||||
|
- update helm chart common to 12.14.2 ([#9599](https://github.com/truecharts/charts/issues/9599))
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
## [gitea-13.0.16](https://github.com/truecharts/charts/compare/gitea-13.0.15...gitea-13.0.16) (2023-06-11)
|
||||||
|
|
||||||
|
### Chore
|
||||||
|
|
||||||
|
- update helm general non-major ([#9558](https://github.com/truecharts/charts/issues/9558))
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
## [gitea-13.0.15](https://github.com/truecharts/charts/compare/gitea-13.0.14...gitea-13.0.15) (2023-06-07)
|
||||||
|
|
||||||
|
### Chore
|
||||||
|
|
||||||
|
- update helm general non-major ([#9459](https://github.com/truecharts/charts/issues/9459))
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
## [gitea-13.0.14](https://github.com/truecharts/charts/compare/gitea-13.0.13...gitea-13.0.14) (2023-06-07)
|
||||||
|
|
||||||
|
### Chore
|
||||||
|
|
||||||
|
- update helm general non-major ([#9457](https://github.com/truecharts/charts/issues/9457))
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
## [gitea-13.0.13](https://github.com/truecharts/charts/compare/gitea-13.0.12...gitea-13.0.13) (2023-06-07)
|
||||||
|
|
||||||
|
### Chore
|
||||||
|
|
||||||
|
- update helm general non-major ([#9423](https://github.com/truecharts/charts/issues/9423))
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
## [gitea-13.0.12](https://github.com/truecharts/charts/compare/gitea-13.0.11...gitea-13.0.12) (2023-06-04)
|
||||||
|
|
||||||
|
### Chore
|
||||||
|
|
||||||
|
- update helm general non-major ([#9393](https://github.com/truecharts/charts/issues/9393))
|
||||||
|
|
||||||
|
### Feat
|
||||||
|
|
||||||
|
- hide advanced ingress options behind checbox ([#9203](https://github.com/truecharts/charts/issues/9203))
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
@ -0,0 +1,37 @@
|
||||||
|
apiVersion: v2
|
||||||
|
appVersion: "1.20.0"
|
||||||
|
dependencies:
|
||||||
|
- name: common
|
||||||
|
repository: https://library-charts.truecharts.org
|
||||||
|
version: 12.14.6
|
||||||
|
- condition: memcached.enabled
|
||||||
|
name: memcached
|
||||||
|
repository: https://deps.truecharts.org/
|
||||||
|
version: 6.0.69
|
||||||
|
deprecated: false
|
||||||
|
description: Self hosted GIT repositories
|
||||||
|
home: https://truecharts.org/charts/stable/gitea
|
||||||
|
icon: https://truecharts.org/img/hotlink-ok/chart-icons/gitea.png
|
||||||
|
keywords:
|
||||||
|
- git
|
||||||
|
- issue tracker
|
||||||
|
- code review
|
||||||
|
- wiki
|
||||||
|
- gitea
|
||||||
|
- gogs
|
||||||
|
kubeVersion: ">=1.16.0-0"
|
||||||
|
maintainers:
|
||||||
|
- email: info@truecharts.org
|
||||||
|
name: TrueCharts
|
||||||
|
url: https://truecharts.org
|
||||||
|
name: gitea
|
||||||
|
sources:
|
||||||
|
- https://github.com/truecharts/charts/tree/master/charts/stable/gitea
|
||||||
|
- https://gitea.com/gitea/helm-chart
|
||||||
|
- https://github.com/go-gitea/gitea
|
||||||
|
type: application
|
||||||
|
version: 13.0.21
|
||||||
|
annotations:
|
||||||
|
truecharts.org/catagories: |
|
||||||
|
- GIT
|
||||||
|
truecharts.org/SCALE-support: "true"
|
||||||
|
|
@ -0,0 +1,106 @@
|
||||||
|
Business Source License 1.1
|
||||||
|
|
||||||
|
Parameters
|
||||||
|
|
||||||
|
Licensor: The TrueCharts Project, it's owner and it's contributors
|
||||||
|
Licensed Work: The TrueCharts "Blocky" Helm Chart
|
||||||
|
Additional Use Grant: You may use the licensed work in production, as long
|
||||||
|
as it is directly sourced from a TrueCharts provided
|
||||||
|
official repository, catalog or source. You may also make private
|
||||||
|
modification to the directly sourced licenced work,
|
||||||
|
when used in production.
|
||||||
|
|
||||||
|
The following cases are, due to their nature, also
|
||||||
|
defined as 'production use' and explicitly prohibited:
|
||||||
|
- Bundling, including or displaying the licensed work
|
||||||
|
with(in) another work intended for production use,
|
||||||
|
with the apparent intend of facilitating and/or
|
||||||
|
promoting production use by third parties in
|
||||||
|
violation of this license.
|
||||||
|
|
||||||
|
Change Date: 2050-01-01
|
||||||
|
|
||||||
|
Change License: 3-clause BSD license
|
||||||
|
|
||||||
|
For information about alternative licensing arrangements for the Software,
|
||||||
|
please contact: legal@truecharts.org
|
||||||
|
|
||||||
|
Notice
|
||||||
|
|
||||||
|
The Business Source License (this document, or the “License”) is not an Open
|
||||||
|
Source license. However, the Licensed Work will eventually be made available
|
||||||
|
under an Open Source License, as stated in this License.
|
||||||
|
|
||||||
|
License text copyright (c) 2017 MariaDB Corporation Ab, All Rights Reserved.
|
||||||
|
“Business Source License” is a trademark of MariaDB Corporation Ab.
|
||||||
|
|
||||||
|
-----------------------------------------------------------------------------
|
||||||
|
|
||||||
|
Business Source License 1.1
|
||||||
|
|
||||||
|
Terms
|
||||||
|
|
||||||
|
The Licensor hereby grants you the right to copy, modify, create derivative
|
||||||
|
works, redistribute, and make non-production use of the Licensed Work. The
|
||||||
|
Licensor may make an Additional Use Grant, above, permitting limited
|
||||||
|
production use.
|
||||||
|
|
||||||
|
Effective on the Change Date, or the fourth anniversary of the first publicly
|
||||||
|
available distribution of a specific version of the Licensed Work under this
|
||||||
|
License, whichever comes first, the Licensor hereby grants you rights under
|
||||||
|
the terms of the Change License, and the rights granted in the paragraph
|
||||||
|
above terminate.
|
||||||
|
|
||||||
|
If your use of the Licensed Work does not comply with the requirements
|
||||||
|
currently in effect as described in this License, you must purchase a
|
||||||
|
commercial license from the Licensor, its affiliated entities, or authorized
|
||||||
|
resellers, or you must refrain from using the Licensed Work.
|
||||||
|
|
||||||
|
All copies of the original and modified Licensed Work, and derivative works
|
||||||
|
of the Licensed Work, are subject to this License. This License applies
|
||||||
|
separately for each version of the Licensed Work and the Change Date may vary
|
||||||
|
for each version of the Licensed Work released by Licensor.
|
||||||
|
|
||||||
|
You must conspicuously display this License on each original or modified copy
|
||||||
|
of the Licensed Work. If you receive the Licensed Work in original or
|
||||||
|
modified form from a third party, the terms and conditions set forth in this
|
||||||
|
License apply to your use of that work.
|
||||||
|
|
||||||
|
Any use of the Licensed Work in violation of this License will automatically
|
||||||
|
terminate your rights under this License for the current and all other
|
||||||
|
versions of the Licensed Work.
|
||||||
|
|
||||||
|
This License does not grant you any right in any trademark or logo of
|
||||||
|
Licensor or its affiliates (provided that you may use a trademark or logo of
|
||||||
|
Licensor as expressly required by this License).
|
||||||
|
|
||||||
|
TO THE EXTENT PERMITTED BY APPLICABLE LAW, THE LICENSED WORK IS PROVIDED ON
|
||||||
|
AN “AS IS” BASIS. LICENSOR HEREBY DISCLAIMS ALL WARRANTIES AND CONDITIONS,
|
||||||
|
EXPRESS OR IMPLIED, INCLUDING (WITHOUT LIMITATION) WARRANTIES OF
|
||||||
|
MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, NON-INFRINGEMENT, AND
|
||||||
|
TITLE.
|
||||||
|
|
||||||
|
MariaDB hereby grants you permission to use this License’s text to license
|
||||||
|
your works, and to refer to it using the trademark “Business Source License”,
|
||||||
|
as long as you comply with the Covenants of Licensor below.
|
||||||
|
|
||||||
|
Covenants of Licensor
|
||||||
|
|
||||||
|
In consideration of the right to use this License’s text and the “Business
|
||||||
|
Source License” name and trademark, Licensor covenants to MariaDB, and to all
|
||||||
|
other recipients of the licensed work to be provided by Licensor:
|
||||||
|
|
||||||
|
1. To specify as the Change License the GPL Version 2.0 or any later version,
|
||||||
|
or a license that is compatible with GPL Version 2.0 or a later version,
|
||||||
|
where “compatible” means that software provided under the Change License can
|
||||||
|
be included in a program with software provided under GPL Version 2.0 or a
|
||||||
|
later version. Licensor may specify additional Change Licenses without
|
||||||
|
limitation.
|
||||||
|
|
||||||
|
2. To either: (a) specify an additional grant of rights to use that does not
|
||||||
|
impose any additional restriction on the right granted in this License, as
|
||||||
|
the Additional Use Grant; or (b) insert the text “None”.
|
||||||
|
|
||||||
|
3. To specify a Change Date.
|
||||||
|
|
||||||
|
4. Not to modify this License in any other way.
|
||||||
|
|
@ -0,0 +1,27 @@
|
||||||
|
# README
|
||||||
|
|
||||||
|
## General Info
|
||||||
|
|
||||||
|
TrueCharts can be installed as both *normal* Helm Charts or as Apps on TrueNAS SCALE.
|
||||||
|
However only installations using the TrueNAS SCALE Apps system are supported.
|
||||||
|
|
||||||
|
For more information about this App, please check the docs on the TrueCharts [website](https://truecharts.org/charts/stable/)
|
||||||
|
|
||||||
|
**This chart is not maintained by the upstream project and any issues with the chart should be raised [here](https://github.com/truecharts/charts/issues/new/choose)**
|
||||||
|
|
||||||
|
|
||||||
|
## Support
|
||||||
|
|
||||||
|
- Please check our [quick-start guides for TrueNAS SCALE](https://truecharts.org/manual/SCALE/guides/scale-intro).
|
||||||
|
- See the [Website](https://truecharts.org)
|
||||||
|
- Check our [Discord](https://discord.gg/tVsPTHWTtr)
|
||||||
|
- Open a [issue](https://github.com/truecharts/charts/issues/new/choose)
|
||||||
|
|
||||||
|
---
|
||||||
|
|
||||||
|
## Sponsor TrueCharts
|
||||||
|
|
||||||
|
TrueCharts can only exist due to the incredible effort of our staff.
|
||||||
|
Please consider making a [donation](https://truecharts.org/sponsor) or contributing back to the project any way you can!
|
||||||
|
|
||||||
|
*All Rights Reserved - The TrueCharts Project*
|
||||||
|
|
@ -0,0 +1,9 @@
|
||||||
|
|
||||||
|
|
||||||
|
## [gitea-13.0.21](https://github.com/truecharts/charts/compare/gitea-13.0.20...gitea-13.0.21) (2023-07-19)
|
||||||
|
|
||||||
|
### Chore
|
||||||
|
|
||||||
|
- update container image tccr.io/truecharts/gitea to v1.20.0 ([#10610](https://github.com/truecharts/charts/issues/10610))
|
||||||
|
|
||||||
|
|
||||||
|
|
@ -0,0 +1,8 @@
|
||||||
|
Self hosted GIT repositories
|
||||||
|
|
||||||
|
This App is supplied by TrueCharts, for more information visit the manual: [https://truecharts.org/charts/stable/gitea](https://truecharts.org/charts/stable/gitea)
|
||||||
|
|
||||||
|
---
|
||||||
|
|
||||||
|
TrueCharts can only exist due to the incredible effort of our staff.
|
||||||
|
Please consider making a [donation](https://truecharts.org/sponsor) or contributing back to the project any way you can!
|
||||||
Binary file not shown.
Binary file not shown.
|
|
@ -0,0 +1,131 @@
|
||||||
|
image:
|
||||||
|
repository: tccr.io/truecharts/gitea
|
||||||
|
tag: v1.20.0@sha256:b56f3bfa71224262662a7b83d255fd1b9c2ef4b26afd150ef6d36ef9da019db7
|
||||||
|
pullPolicy: IfNotPresent
|
||||||
|
service:
|
||||||
|
main:
|
||||||
|
ports:
|
||||||
|
main:
|
||||||
|
port: 10037
|
||||||
|
targetPort: 3000
|
||||||
|
ssh:
|
||||||
|
enabled: true
|
||||||
|
ports:
|
||||||
|
ssh:
|
||||||
|
enabled: true
|
||||||
|
port: 2222
|
||||||
|
targetPort: 2222
|
||||||
|
|
||||||
|
persistence:
|
||||||
|
data:
|
||||||
|
enabled: true
|
||||||
|
mountPath: "/data"
|
||||||
|
targetSelectAll: true
|
||||||
|
varlib:
|
||||||
|
enabled: true
|
||||||
|
mountPath: "/var/lib/gitea"
|
||||||
|
type: emptyDir
|
||||||
|
# Configure commit/action signing prerequisites
|
||||||
|
signing:
|
||||||
|
enabled: true
|
||||||
|
gpgHome: /data/git/.gnupg
|
||||||
|
admin:
|
||||||
|
username: giteaadmin
|
||||||
|
password: r8sA8CPHD9!bt6d
|
||||||
|
email: "gitea@local.domain"
|
||||||
|
metrics:
|
||||||
|
main:
|
||||||
|
enabled: true
|
||||||
|
type: "servicemonitor"
|
||||||
|
ldap:
|
||||||
|
enabled: false
|
||||||
|
# name:
|
||||||
|
# securityProtocol:
|
||||||
|
# host:
|
||||||
|
# port:
|
||||||
|
# userSearchBase:
|
||||||
|
# userFilter:
|
||||||
|
# adminFilter:
|
||||||
|
# emailAttribute:
|
||||||
|
# bindDn:
|
||||||
|
# bindPassword:
|
||||||
|
# usernameAttribute:
|
||||||
|
# sshPublicKeyAttribute:
|
||||||
|
oauth:
|
||||||
|
enabled: false
|
||||||
|
# name:
|
||||||
|
# provider:
|
||||||
|
# key:
|
||||||
|
# secret:
|
||||||
|
# autoDiscoverUrl:
|
||||||
|
# useCustomUrls:
|
||||||
|
# customAuthUrl:
|
||||||
|
# customTokenUrl:
|
||||||
|
# customProfileUrl:
|
||||||
|
# customEmailUrl:
|
||||||
|
config:
|
||||||
|
APP_NAME: "Gitea: Git with a cup of tea"
|
||||||
|
RUN_MODE: dev
|
||||||
|
ALLOWED_HOST_LIST: "127.0.0.1"
|
||||||
|
nodeIP: 127.0.0.1
|
||||||
|
customConfig: []
|
||||||
|
# - name: test
|
||||||
|
# keys:
|
||||||
|
# - name: testkey
|
||||||
|
# value: testvalue
|
||||||
|
|
||||||
|
# Enabled postgres
|
||||||
|
cnpg:
|
||||||
|
main:
|
||||||
|
enabled: true
|
||||||
|
|
||||||
|
user: gitea
|
||||||
|
database: gitea
|
||||||
|
# -- memcached dependency settings
|
||||||
|
memcached:
|
||||||
|
enabled: true
|
||||||
|
portal:
|
||||||
|
open:
|
||||||
|
enabled: true
|
||||||
|
securityContext:
|
||||||
|
container:
|
||||||
|
runAsUser: 1000
|
||||||
|
runAsGroup: 1000
|
||||||
|
fsGroup: 1000
|
||||||
|
workload:
|
||||||
|
main:
|
||||||
|
podSpec:
|
||||||
|
initContainers:
|
||||||
|
1-init-directories:
|
||||||
|
enabled: true
|
||||||
|
imageSelector: image
|
||||||
|
type: init
|
||||||
|
command:
|
||||||
|
- "/usr/sbin/init_directory_structure.sh"
|
||||||
|
securityContext:
|
||||||
|
runAsUser: 0
|
||||||
|
runAsNonRoot: false
|
||||||
|
envFrom:
|
||||||
|
- configMapRef:
|
||||||
|
name: gitea-env
|
||||||
|
2-configure-gitea:
|
||||||
|
enabled: true
|
||||||
|
imageSelector: image
|
||||||
|
type: init
|
||||||
|
command:
|
||||||
|
- "/usr/sbin/configure_gitea.sh"
|
||||||
|
envFrom:
|
||||||
|
- configMapRef:
|
||||||
|
name: gitea-env
|
||||||
|
containers:
|
||||||
|
main:
|
||||||
|
probes:
|
||||||
|
liveness:
|
||||||
|
type: tcp
|
||||||
|
readiness:
|
||||||
|
type: tcp
|
||||||
|
startup:
|
||||||
|
type: tcp
|
||||||
|
envFrom:
|
||||||
|
- configMapRef:
|
||||||
|
name: gitea-env
|
||||||
File diff suppressed because it is too large
Load Diff
|
|
@ -0,0 +1 @@
|
||||||
|
{{- include "tc.v1.common.lib.chart.notes" $ -}}
|
||||||
|
|
@ -0,0 +1,15 @@
|
||||||
|
{{/* Define the configmap */}}
|
||||||
|
{{- define "gitea.configmap" -}}
|
||||||
|
enabled: true
|
||||||
|
data:
|
||||||
|
GITEA_APP_INI: "/data/gitea/conf/app.ini"
|
||||||
|
GITEA_CUSTOM: "/data/gitea"
|
||||||
|
GITEA_WORK_DIR: "/data"
|
||||||
|
GITEA_TEMP: "/tmp/gitea"
|
||||||
|
GITEA_ADMIN_USERNAME: {{ .Values.admin.username | quote }}
|
||||||
|
GITEA_ADMIN_PASSWORD: {{ .Values.admin.password | quote }}
|
||||||
|
SSH_PORT: {{ .Values.service.ssh.ports.ssh.port | quote }}
|
||||||
|
SSH_LISTEN_PORT: {{ .Values.service.ssh.ports.ssh.targetPort | quote }}
|
||||||
|
TMPDIR: "/tmp/gitea"
|
||||||
|
GNUPGHOME: "/data/git/.gnupg"
|
||||||
|
{{- end -}}
|
||||||
|
|
@ -0,0 +1,233 @@
|
||||||
|
{{/* Define the secrets */}}
|
||||||
|
{{- define "gitea.secrets" -}}
|
||||||
|
|
||||||
|
{{ $DOMAIN := .Values.config.nodeIP | quote -}}
|
||||||
|
{{ $URL := (printf "http://%s/" .Values.config.nodeIP) }}
|
||||||
|
{{- $pgHost := printf "%v-cnpg-main-rw" (include "tc.v1.common.lib.chart.names.fullname" $) -}}
|
||||||
|
|
||||||
|
{{- if and (.Values.ingress.main.enabled) (gt (len .Values.ingress.main.hosts) 0) -}}
|
||||||
|
{{- $DOMAIN = (index .Values.ingress.main.hosts 0).host -}}
|
||||||
|
{{- $URL = (printf "https://%s/" (index .Values.ingress.main.hosts 0).host) -}}
|
||||||
|
{{- end -}}
|
||||||
|
|
||||||
|
secret:
|
||||||
|
enabled: true
|
||||||
|
data:
|
||||||
|
app.ini: |-
|
||||||
|
APP_NAME = {{ .Values.config.APP_NAME }}
|
||||||
|
RUN_MODE = {{ .Values.config.RUN_MODE }}
|
||||||
|
|
||||||
|
[cache]
|
||||||
|
ADAPTER = memcache
|
||||||
|
ENABLED = true
|
||||||
|
HOST = {{ printf "%v-%v:%v" .Release.Name "memcached" "11211" }}
|
||||||
|
{{- range $catindex, $catvalue := .Values.customConfig }}
|
||||||
|
{{- if eq $catvalue.name "cache" }}
|
||||||
|
{{- range $index, $value := $catvalue.keys }}
|
||||||
|
{{ $value.name }} = {{ $value.value }}
|
||||||
|
{{- end }}
|
||||||
|
{{- end }}
|
||||||
|
{{- end }}
|
||||||
|
|
||||||
|
[database]
|
||||||
|
DB_TYPE = postgres
|
||||||
|
HOST = {{ printf "%v:5432" $pgHost }}
|
||||||
|
NAME = {{ .Values.cnpg.main.database }}
|
||||||
|
PASSWD = {{ .Values.cnpg.main.creds.password }}
|
||||||
|
USER = {{ .Values.cnpg.main.user }}
|
||||||
|
{{- range $catindex, $catvalue := .Values.customConfig }}
|
||||||
|
{{- if eq $catvalue.name "database" }}
|
||||||
|
{{- range $index, $value := $catvalue.keys }}
|
||||||
|
{{ $value.name }} = {{ $value.value }}
|
||||||
|
{{- end }}
|
||||||
|
{{- end }}
|
||||||
|
{{- end }}
|
||||||
|
|
||||||
|
[metrics]
|
||||||
|
ENABLED = {{ .Values.metrics.enabled }}
|
||||||
|
{{- range $catindex, $catvalue := .Values.customConfig }}
|
||||||
|
{{- if eq $catvalue.name "metrics" }}
|
||||||
|
{{- range $index, $value := $catvalue.keys }}
|
||||||
|
{{ $value.name }} = {{ $value.value }}
|
||||||
|
{{- end }}
|
||||||
|
{{- end }}
|
||||||
|
{{- end }}
|
||||||
|
|
||||||
|
[repository]
|
||||||
|
ROOT = /data/git/gitea-repositories
|
||||||
|
{{- range $catindex, $catvalue := .Values.customConfig }}
|
||||||
|
{{- if eq $catvalue.name "repository" }}
|
||||||
|
{{- range $index, $value := $catvalue.keys }}
|
||||||
|
{{ $value.name }} = {{ $value.value }}
|
||||||
|
{{- end }}
|
||||||
|
{{- end }}
|
||||||
|
{{- end }}
|
||||||
|
|
||||||
|
|
||||||
|
[security]
|
||||||
|
INSTALL_LOCK = true
|
||||||
|
{{- range $catindex, $catvalue := .Values.customConfig }}
|
||||||
|
{{- if eq $catvalue.name "security" }}
|
||||||
|
{{- range $index, $value := $catvalue.keys }}
|
||||||
|
{{ $value.name }} = {{ $value.value }}
|
||||||
|
{{- end }}
|
||||||
|
{{- end }}
|
||||||
|
{{- end }}
|
||||||
|
|
||||||
|
[webhook]
|
||||||
|
ALLOWED_HOST_LIST = {{ .Values.config.ALLOWED_HOST_LIST }}
|
||||||
|
|
||||||
|
[server]
|
||||||
|
APP_DATA_PATH = /data
|
||||||
|
DOMAIN = {{ $DOMAIN }}
|
||||||
|
ENABLE_PPROF = false
|
||||||
|
HTTP_PORT = {{ .Values.service.main.ports.main.targetPort }}
|
||||||
|
PROTOCOL = http
|
||||||
|
ROOT_URL = {{ $URL }}
|
||||||
|
SSH_DOMAIN = {{ $DOMAIN }}
|
||||||
|
SSH_LISTEN_PORT = {{ .Values.service.ssh.ports.ssh.targetPort }}
|
||||||
|
SSH_PORT = {{ .Values.service.ssh.ports.ssh.port }}
|
||||||
|
START_SSH_SERVER = true
|
||||||
|
{{- range $catindex, $catvalue := .Values.customConfig }}
|
||||||
|
{{- if eq $catvalue.name "server" }}
|
||||||
|
{{- range $index, $value := $catvalue.keys }}
|
||||||
|
{{ $value.name }} = {{ $value.value }}
|
||||||
|
{{- end }}
|
||||||
|
{{- end }}
|
||||||
|
{{- end }}
|
||||||
|
|
||||||
|
{{- range $catindex, $catvalue := .Values.customConfig }}
|
||||||
|
{{- if not ( or ( eq $catvalue.name "server" ) ( eq $catvalue.name "server" ) ( eq $catvalue.name "security" ) ( eq $catvalue.name "repository" ) ( eq $catvalue.name "metrics" ) ( eq $catvalue.name "database" ) ( eq $catvalue.name "cache" ) ) }}
|
||||||
|
[{{ $catvalue.name }}]
|
||||||
|
{{- range $index, $value := $catvalue.keys }}
|
||||||
|
{{ $value.name }} = {{ $value.value }}
|
||||||
|
{{- end }}
|
||||||
|
{{- end }}
|
||||||
|
{{- end }}
|
||||||
|
|
||||||
|
init:
|
||||||
|
enabled: true
|
||||||
|
data:
|
||||||
|
init_directory_structure.sh: |-
|
||||||
|
#!/usr/bin/env bash
|
||||||
|
|
||||||
|
set -euo pipefail
|
||||||
|
|
||||||
|
{{- if .Values.initPreScript }}
|
||||||
|
# BEGIN: initPreScript
|
||||||
|
{{- with .Values.initPreScript -}}
|
||||||
|
{{ . | nindent 4}}
|
||||||
|
{{- end -}}
|
||||||
|
# END: initPreScript
|
||||||
|
{{- end }}
|
||||||
|
|
||||||
|
set -x
|
||||||
|
|
||||||
|
mkdir -p /data/git/.ssh
|
||||||
|
chmod -R 700 /data/git/.ssh
|
||||||
|
[ ! -d /data/gitea ] && mkdir -p /data/gitea/conf
|
||||||
|
|
||||||
|
# prepare temp directory structure
|
||||||
|
mkdir -p "${GITEA_TEMP}"
|
||||||
|
chown -Rf {{ .Values.securityContext.container.runAsUser }}:{{ .Values.securityContext.pod.fsGroup }} "${GITEA_TEMP}"
|
||||||
|
chmod ug+rwx "${GITEA_TEMP}"
|
||||||
|
|
||||||
|
# Copy config file to writable volume
|
||||||
|
cp /etc/gitea/conf/app.ini /data/gitea/conf/app.ini
|
||||||
|
chown -Rf {{ .Values.securityContext.container.runAsUser }}:{{ .Values.securityContext.pod.fsGroup }} "/data"
|
||||||
|
chmod a+rwx /data/gitea/conf/app.ini
|
||||||
|
|
||||||
|
# Patch dockercontainer for dynamic users
|
||||||
|
chown -Rf {{ .Values.securityContext.container.runAsUser }}:{{ .Values.securityContext.pod.fsGroup }} "/var/lib/gitea"
|
||||||
|
|
||||||
|
configure_gitea.sh: |-
|
||||||
|
#!/usr/bin/env bash
|
||||||
|
|
||||||
|
set -euo pipefail
|
||||||
|
|
||||||
|
|
||||||
|
# Connection retry inspired by https://gist.github.com/dublx/e99ea94858c07d2ca6de
|
||||||
|
function test_db_connection() {
|
||||||
|
local RETRY=0
|
||||||
|
local MAX=30
|
||||||
|
|
||||||
|
echo 'Wait for database to become avialable...'
|
||||||
|
until [ "${RETRY}" -ge "${MAX}" ]; do
|
||||||
|
nc -vz -w2 {{ $pgHost }} 5432 && break
|
||||||
|
RETRY=$[${RETRY}+1]
|
||||||
|
echo "...not ready yet (${RETRY}/${MAX})"
|
||||||
|
done
|
||||||
|
|
||||||
|
if [ "${RETRY}" -ge "${MAX}" ]; then
|
||||||
|
echo "Database not reachable after '${MAX}' attempts!"
|
||||||
|
exit 1
|
||||||
|
fi
|
||||||
|
}
|
||||||
|
|
||||||
|
test_db_connection
|
||||||
|
|
||||||
|
|
||||||
|
echo '==== BEGIN GITEA MIGRATION ===='
|
||||||
|
|
||||||
|
gitea migrate
|
||||||
|
|
||||||
|
echo '==== BEGIN GITEA CONFIGURATION ===='
|
||||||
|
|
||||||
|
{{- if or .Values.admin.existingSecret (and .Values.admin.username .Values.admin.password) }}
|
||||||
|
function configure_admin_user() {
|
||||||
|
local ACCOUNT_ID=$(gitea admin user list --admin | grep -e "\s\+${GITEA_ADMIN_USERNAME}\|{{ .Values.admin.email }}\s\+" | awk -F " " "{printf \$1}")
|
||||||
|
if [[ -z "${ACCOUNT_ID}" ]]; then
|
||||||
|
echo "No admin user '${GITEA_ADMIN_USERNAME}' found, neither email '{{ .Values.admin.email }}' is assigned to an admin. Creating now..."
|
||||||
|
gitea admin user create --admin --username "${GITEA_ADMIN_USERNAME}" --password "${GITEA_ADMIN_PASSWORD}" --email {{ .Values.admin.email | quote }} --must-change-password=false
|
||||||
|
echo '...created.'
|
||||||
|
else
|
||||||
|
echo "Admin account '${GITEA_ADMIN_USERNAME}' or email {{ .Values.admin.email }} already exist. Running update to sync password..."
|
||||||
|
gitea admin user change-password --username "${GITEA_ADMIN_USERNAME}" --password "${GITEA_ADMIN_PASSWORD}"
|
||||||
|
echo '...password sync done.'
|
||||||
|
fi
|
||||||
|
}
|
||||||
|
|
||||||
|
configure_admin_user
|
||||||
|
{{- end }}
|
||||||
|
|
||||||
|
{{- if .Values.ldap.enabled }}
|
||||||
|
function configure_ldap() {
|
||||||
|
local LDAP_NAME={{ (printf "%s" .Values.ldap.name) | squote }}
|
||||||
|
local GITEA_AUTH_ID=$(gitea admin auth list --vertical-bars | grep -E "\|${LDAP_NAME}\s+\|" | grep -iE '\|LDAP \(via BindDN\)\s+\|' | awk -F " " "{print \$1}")
|
||||||
|
|
||||||
|
if [[ -z "${GITEA_AUTH_ID}" ]]; then
|
||||||
|
echo "No ldap configuration found with name '${LDAP_NAME}'. Installing it now..."
|
||||||
|
gitea admin auth add-ldap {{- include "gitea.ldap_settings" . | indent 1 }}
|
||||||
|
echo '...installed.'
|
||||||
|
else
|
||||||
|
echo "Existing ldap configuration with name '${LDAP_NAME}': '${GITEA_AUTH_ID}'. Running update to sync settings..."
|
||||||
|
gitea admin auth update-ldap --id "${GITEA_AUTH_ID}" {{- include "gitea.ldap_settings" . | indent 1 }}
|
||||||
|
echo '...sync settings done.'
|
||||||
|
fi
|
||||||
|
}
|
||||||
|
|
||||||
|
configure_ldap
|
||||||
|
{{- end }}
|
||||||
|
|
||||||
|
{{- if .Values.oauth.enabled }}
|
||||||
|
function configure_oauth() {
|
||||||
|
local OAUTH_NAME={{ (printf "%s" .Values.oauth.name) | squote }}
|
||||||
|
local AUTH_ID=$(gitea admin auth list --vertical-bars | grep -E "\|${OAUTH_NAME}\s+\|" | grep -iE '\|OAuth2\s+\|' | awk -F " " "{print \$1}")
|
||||||
|
|
||||||
|
if [[ -z "${AUTH_ID}" ]]; then
|
||||||
|
echo "No oauth configuration found with name '${OAUTH_NAME}'. Installing it now..."
|
||||||
|
gitea admin auth add-oauth {{- include "gitea.oauth_settings" . | indent 1 }}
|
||||||
|
echo '...installed.'
|
||||||
|
else
|
||||||
|
echo "Existing oauth configuration with name '${OAUTH_NAME}': '${AUTH_ID}'. Running update to sync settings..."
|
||||||
|
gitea admin auth update-oauth --id "${AUTH_ID}" {{- include "gitea.oauth_settings" . | indent 1 }}
|
||||||
|
echo '...sync settings done.'
|
||||||
|
fi
|
||||||
|
}
|
||||||
|
|
||||||
|
configure_oauth
|
||||||
|
{{- end }}
|
||||||
|
|
||||||
|
echo '==== END GITEA CONFIGURATION ===='
|
||||||
|
|
||||||
|
{{- end -}}
|
||||||
|
|
@ -0,0 +1,52 @@
|
||||||
|
{{/* Make sure all variables are set properly */}}
|
||||||
|
{{- include "tc.v1.common.loader.init" . }}
|
||||||
|
|
||||||
|
{{/* Render secrets for gitea */}}
|
||||||
|
{{- $secrets := include "gitea.secrets" . | fromYaml -}}
|
||||||
|
{{- if $secrets -}}
|
||||||
|
{{- $_ := mustMergeOverwrite .Values.secret $secrets -}}
|
||||||
|
{{- end -}}
|
||||||
|
|
||||||
|
{{/* Render configmap for gitea */}}
|
||||||
|
{{- $configmap := include "gitea.configmap" . | fromYaml -}}
|
||||||
|
{{- if $configmap -}}
|
||||||
|
{{- $_ := set .Values.configmap "gitea-env" $configmap -}}
|
||||||
|
{{- end -}}
|
||||||
|
|
||||||
|
{{/* Append the general secret volumes to the volumes */}}
|
||||||
|
{{- define "gitea.initvolume" -}}
|
||||||
|
enabled: true
|
||||||
|
readOnly: true
|
||||||
|
type: secret
|
||||||
|
objectName: init
|
||||||
|
defaultMode: "0777"
|
||||||
|
targetSelector:
|
||||||
|
main:
|
||||||
|
main:
|
||||||
|
mountPath: /secrets/ini
|
||||||
|
1-init-directories:
|
||||||
|
mountPath: "/usr/sbin"
|
||||||
|
2-configure-gitea:
|
||||||
|
mountPath: "/usr/sbin"
|
||||||
|
{{- end -}}
|
||||||
|
|
||||||
|
{{/* Append the general secret volumes to the volumes */}}
|
||||||
|
{{- define "gitea.configvolume" -}}
|
||||||
|
enabled: true
|
||||||
|
readOnly: true
|
||||||
|
type: secret
|
||||||
|
objectName: secret
|
||||||
|
targetSelector:
|
||||||
|
main:
|
||||||
|
main:
|
||||||
|
mountPath: /secrets/config
|
||||||
|
1-init-directories:
|
||||||
|
mountPath: /etc/gitea/conf
|
||||||
|
{{- end -}}
|
||||||
|
|
||||||
|
{{- $_ := set .Values.persistence "init" (include "gitea.initvolume" . | fromYaml) -}}
|
||||||
|
{{- $_ := set .Values.persistence "config" (include "gitea.configvolume" . | fromYaml) -}}
|
||||||
|
|
||||||
|
|
||||||
|
{{/* Render the templates */}}
|
||||||
|
{{ include "tc.v1.common.loader.apply" . }}
|
||||||
Loading…
Reference in New Issue