5e0cfed9be
Fix ssh port settings Remove blank line from LICENSE file add check for admin user set PROTOCOL default to http Add Konrad Lother as Maintainer Update readme with generic values make app.ini generic - app.ini is now configurable via dictionary in values.yaml - database and server configuration is autogenerated if not defined - http and ssh services now use gitea config settings for targetPort - add default security value INSTALL_LOCK = true - clean up builtin cache settings bump gitea version Add values and Remove vscode TOC comments - values enablePushCreateOrg and enablePushCreateUser have been added to repository settings fix naming order of license and maintainers Multiple improvements for the chart: - add terminationGracePeriodSeconds to shutdown the statefulset gracefully on error - add guard for loadbalancer settings in ssh service - use mysql from bitnami, since they update the version much more frequent (old mysql only uses mysql ~6) - init container now also provisions mysql and external database correctly Fix PVC mounting issues for longhorn storageClass Add examples to readme Fix port setting for ssh Fix and operator for newer helm versions update values to support most configuration gitea offers Replace Readme update license file Update helpers with dependencies, update NOTES.txt update Chart.yaml with dependencies Requirements.yaml removed, since this is deprecated and moved to Chart.yaml Remove now unused dependencies and deployments - init is no longer used since databases are initialized on original charts and managed with dependency - ingress.yaml moved to templates/gitea - deployment.yaml no longer used and replaced with templates/gitea/statefulset.yaml - memcached also handled with helm dependency and initialized in original chart Add initial test for gitea helm chart Rework templates for helm chart. - app.ini configurable via config - admin user and ldap settings configurable via config - using statefulset to handle pvc - update helpers for new dependencies remove helm build artifacts since they are not needed in this repository Co-authored-by: Lucas Hahn <lucas.hahn@novum-rgi.de> Co-authored-by: Konrad Lother <konrad.lother@novum-rgi.de> Reviewed-on: https://gitea.com/gitea/helm-chart/pulls/7 Reviewed-by: Lunny Xiao <xiaolunwen@gmail.com> Reviewed-by: Andrew Thornton <art27@cantab.net> Reviewed-by: techknowlogick <techknowlogick@gitea.io>
152 lines
6.4 KiB
YAML
152 lines
6.4 KiB
YAML
apiVersion: apps/v1
|
|
kind: StatefulSet
|
|
metadata:
|
|
name: {{ include "gitea.fullname" . }}
|
|
labels:
|
|
{{- include "gitea.labels" . | nindent 4 }}
|
|
spec:
|
|
replicas: {{ .Values.replicaCount }}
|
|
selector:
|
|
matchLabels:
|
|
{{- include "gitea.selectorLabels" . | nindent 6 }}
|
|
serviceName: {{ include "gitea.fullname" . }}
|
|
template:
|
|
metadata:
|
|
annotations:
|
|
checksum/config: {{ include (print $.Template.BasePath "/gitea/config.yaml") . | sha256sum }}
|
|
labels:
|
|
{{- include "gitea.selectorLabels" . | nindent 8 }}
|
|
spec:
|
|
securityContext:
|
|
fsGroup: 1000
|
|
initContainers:
|
|
- name: init
|
|
image: "{{ .Values.image.repository }}:{{ .Values.image.version }}"
|
|
env:
|
|
- name: SCRIPT
|
|
value: &script |-
|
|
mkdir -p /data/gitea/conf
|
|
cp /etc/gitea/conf/app.ini /data/gitea/conf/app.ini
|
|
chmod a+rwx /data/gitea/conf/app.ini
|
|
nc -v -w2 -z {{ include "db.servicename" . }} {{ include "db.port" . }} && \
|
|
su git -c ' \
|
|
set -x; \
|
|
gitea migrate; \
|
|
{{- if and .Values.gitea.admin.username .Values.gitea.admin.password }}
|
|
gitea admin create-user --username {{ .Values.gitea.admin.username }} --password '{{ .Values.gitea.admin.password }}' --email {{ .Values.gitea.admin.email }} --admin \
|
|
|| \
|
|
gitea admin change-password --username {{ .Values.gitea.admin.username }} --password '{{ .Values.gitea.admin.password }}'; \
|
|
{{- end }}
|
|
{{- if .Values.gitea.ldap.enabled }}
|
|
gitea admin auth add-ldap \
|
|
--name {{ .Values.gitea.ldap.name | quote }} \
|
|
--security-protocol {{ .Values.gitea.ldap.securityProtocol | quote }} \
|
|
--host {{ .Values.gitea.ldap.host | quote }} \
|
|
--port {{ .Values.gitea.ldap.port | int}} \
|
|
--user-search-base {{ .Values.gitea.ldap.userSearchBase | quote }} \
|
|
--user-filter {{ .Values.gitea.ldap.userFilter | quote }} \
|
|
--admin-filter {{ .Values.gitea.ldap.adminFilter | quote }} \
|
|
--email-attribute {{ .Values.gitea.ldap.emailAttribute | quote }} \
|
|
--bind-dn {{ .Values.gitea.ldap.bindDn | quote }} \
|
|
--bind-password {{ .Values.gitea.ldap.bindPassword | quote }} \
|
|
--synchronize-users \
|
|
--username-attribute {{ .Values.gitea.ldap.usernameAttribute | quote }} \
|
|
|| \
|
|
( \
|
|
export GITEA_AUTH_ID=$(gitea admin auth list | grep {{ .Values.gitea.ldap.name | quote }} | awk -F " " "{print \$1}"); \
|
|
gitea admin auth update-ldap --id ${GITEA_AUTH_ID} \
|
|
--name {{ .Values.gitea.ldap.name | quote }} \
|
|
--security-protocol {{ .Values.gitea.ldap.securityProtocol | quote }} \
|
|
--host {{ .Values.gitea.ldap.host | quote }} \
|
|
--port {{ .Values.gitea.ldap.port | int}} \
|
|
--user-search-base {{ .Values.gitea.ldap.userSearchBase | quote }} \
|
|
--user-filter {{ .Values.gitea.ldap.userFilter | quote }} \
|
|
--admin-filter {{ .Values.gitea.ldap.adminFilter | quote }} \
|
|
--email-attribute {{ .Values.gitea.ldap.emailAttribute | quote }} \
|
|
--bind-dn {{ .Values.gitea.ldap.bindDn | quote }} \
|
|
--bind-password {{ .Values.gitea.ldap.bindPassword | quote }} \
|
|
--synchronize-users \
|
|
--username-attribute {{ .Values.gitea.ldap.usernameAttribute | quote }} \
|
|
) \
|
|
{{- end }}
|
|
'
|
|
command: ["/bin/sh",'-c', *script]
|
|
volumeMounts:
|
|
- name: config
|
|
mountPath: /etc/gitea/conf
|
|
- name: data
|
|
mountPath: /data
|
|
terminationGracePeriodSeconds: {{ .Values.statefulset.terminationGracePeriodSeconds }}
|
|
containers:
|
|
- name: {{ .Chart.Name }}
|
|
image: "{{ .Values.image.repository }}:{{ .Values.image.version }}"
|
|
imagePullPolicy: {{ .Values.image.pullPolicy }}
|
|
env:
|
|
# SSH Port values have to be set here as well for openssh configuration
|
|
- name: SSH_LISTEN_PORT
|
|
value: {{ .Values.gitea.config.server.SSH_LISTEN_PORT | quote }}
|
|
- name: SSH_PORT
|
|
value: {{ .Values.gitea.config.server.SSH_PORT | quote }}
|
|
ports:
|
|
- name: ssh
|
|
containerPort: {{ .Values.gitea.config.server.SSH_LISTEN_PORT }}
|
|
- name: http
|
|
containerPort: {{ .Values.gitea.config.server.HTTP_PORT }}
|
|
livenessProbe:
|
|
tcpSocket:
|
|
port: http
|
|
initialDelaySeconds: 200
|
|
timeoutSeconds: 1
|
|
periodSeconds: 10
|
|
successThreshold: 1
|
|
failureThreshold: 10
|
|
readinessProbe:
|
|
tcpSocket:
|
|
port: http
|
|
initialDelaySeconds: 5
|
|
periodSeconds: 10
|
|
successThreshold: 1
|
|
failureThreshold: 3
|
|
resources:
|
|
{{- toYaml .Values.resources | nindent 12 }}
|
|
volumeMounts:
|
|
- name: data
|
|
mountPath: /data
|
|
{{- with .Values.nodeSelector }}
|
|
nodeSelector:
|
|
{{- toYaml . | nindent 8 }}
|
|
{{- end }}
|
|
{{- with .Values.affinity }}
|
|
affinity:
|
|
{{- toYaml . | nindent 8 }}
|
|
{{- end }}
|
|
{{- with .Values.tolerations }}
|
|
tolerations:
|
|
{{- toYaml . | nindent 8 }}
|
|
{{- end }}
|
|
volumes:
|
|
- name: config
|
|
configMap:
|
|
name: {{ include "gitea.fullname" . }}
|
|
{{- if and .Values.persistence.enabled .Values.persistence.existingClaim }}
|
|
- name: data
|
|
persistentVolumeClaim:
|
|
claimName: {{ .Values.persistence.existingClaim }}
|
|
{{- else if not .Values.persistence.enabled }}
|
|
- name: data
|
|
emptyDir: {}
|
|
{{- else if and .Values.persistence.enabled (not .Values.persistence.existingClaim) }}
|
|
volumeClaimTemplates:
|
|
- metadata:
|
|
name: data
|
|
spec:
|
|
accessModes:
|
|
{{- range .Values.persistence.accessModes }}
|
|
- {{ . | quote }}
|
|
{{- end }}
|
|
storageClassName: {{ .Values.persistence.storageClass | default "standard" | quote }}
|
|
resources:
|
|
requests:
|
|
storage: {{ .Values.persistence.size | quote }}
|
|
{{- end }}
|