alexlebens/infrastructure
1
0
Fork 0
Code Issues 1 Pull Requests 1 Actions Activity

Automated Manifest Update (#4477)

Browse Source 
This PR contains newly rendered Kubernetes manifests automatically generated by the CI workflow.

Reviewed-on: #4477
Co-authored-by: gitea-bot <gitea-bot@alexlebens.net>
Co-committed-by: gitea-bot <gitea-bot@alexlebens.net>
This commit was merged in pull request #4477.
This commit is contained in:
gitea-bot
2026-03-06 06:08:22 +00:00
committed by Alex Lebens
parent 0ee7a396a3
commit 7d2c0c912a
17 changed files with 205 additions and 126 deletions
Download Patch File Download Diff File Expand all files Collapse all files

37
clusters/cl01tl/manifests/gitea/ConfigMap-gitea-valkey-renovate-init-scripts.yaml → clusters/cl01tl/manifests/gitea/ConfigMap-gitea-valkey-init-scripts.yaml
View File

@@ -1,12 +1,12 @@
apiVersion: v1
kind: ConfigMap
metadata:
name: gitea-valkey-renovate-init-scripts
name: gitea-valkey-init-scripts
labels:
helm.sh/chart: valkey-renovate-0.9.3
app.kubernetes.io/name: valkey-renovate
helm.sh/chart: valkey-0.9.3
app.kubernetes.io/name: valkey
app.kubernetes.io/instance: gitea
app.kubernetes.io/version: "9.0.3-alpine"
app.kubernetes.io/version: "9.0.3"
app.kubernetes.io/managed-by: Helm
data:
init.sh: |-
@@ -46,6 +46,35 @@ data:
echo "bind * -::*"
echo "dir /data"
} >>"$VALKEY_CONFIG"
# Replica mode configuration
log "Configuring replication mode"
# Use POD_INDEX from Kubernetes metadata
POD_INDEX=${POD_INDEX:-0}
IS_MASTER=false
# Check if this is pod-0 (master)
if [ "$POD_INDEX" = "0" ]; then
IS_MASTER=true
log "This pod (index $POD_INDEX) is configured as MASTER"
else
log "This pod (index $POD_INDEX) is configured as REPLICA"
fi
# Configure replica settings
if [ "$IS_MASTER" = "false" ]; then
MASTER_HOST="gitea-valkey-0.gitea-valkey-headless.gitea.svc.cluster.local"
MASTER_PORT="6379"
log "Configuring replica to follow master at $MASTER_HOST:$MASTER_PORT"
{
echo ""
echo "# Replica Configuration"
echo "replicaof $MASTER_HOST $MASTER_PORT"
echo "replica-announce-ip gitea-valkey-$POD_INDEX.gitea-valkey-headless.gitea.svc.cluster.local"
} >>"$VALKEY_CONFIG"
fi
# Append extra configs if present
if [ -f /usr/local/etc/valkey/valkey.conf ]; then

2
clusters/cl01tl/manifests/gitea/Deployment-gitea.yaml
View File

@@ -26,7 +26,7 @@ spec:
template:
metadata:
annotations:
checksum/config: 01aade992dd1206a9a518665fb455b04e9e250255a21955363a74b6059b1e3cc
checksum/config: 0b0b1eaa93a5c1e5a70e3ea2947837cd99f038dc927b3a8619cafa6c5b2d82e2
checksum/oauth_0: 03073bf48e66f48f622bd02092a5f93bfd06dbcb5fd833aded3b0d40980be93d
labels:
helm.sh/chart: gitea-12.5.0

10
clusters/cl01tl/manifests/gitea/PodMonitor-gitea-valkey-renovate.yaml → clusters/cl01tl/manifests/gitea/PodMonitor-gitea-valkey.yaml
View File

@@ -1,12 +1,12 @@
apiVersion: monitoring.coreos.com/v1
kind: PodMonitor
metadata:
name: gitea-valkey-renovate
name: gitea-valkey
labels:
helm.sh/chart: valkey-renovate-0.9.3
app.kubernetes.io/name: valkey-renovate
helm.sh/chart: valkey-0.9.3
app.kubernetes.io/name: valkey
app.kubernetes.io/instance: gitea
app.kubernetes.io/version: "9.0.3-alpine"
app.kubernetes.io/version: "9.0.3"
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/part-of: valkey
app.kubernetes.io/component: podmonitor
@@ -19,5 +19,5 @@ spec:
- gitea
selector:
matchLabels:
app.kubernetes.io/name: valkey-renovate
app.kubernetes.io/name: valkey
app.kubernetes.io/instance: gitea

47
clusters/cl01tl/manifests/gitea/PrometheusRule-gitea-valkey.yaml Normal file
View File

@@ -0,0 +1,47 @@
apiVersion: monitoring.coreos.com/v1
kind: PrometheusRule
metadata:
name: gitea-valkey
labels:
helm.sh/chart: valkey-0.9.3
app.kubernetes.io/name: valkey
app.kubernetes.io/instance: gitea
app.kubernetes.io/version: "9.0.3"
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/part-of: valkey
spec:
groups:
- name: gitea-valkey
rules:
- alert: ValkeyDown
annotations:
description: Valkey instance {{ $labels.instance }} is down.
summary: Valkey instance {{ $labels.instance }} down
expr: |
redis_up{service="gitea-valkey-metrics"} == 0
for: 2m
labels:
severity: error
- alert: ValkeyMemoryHigh
annotations:
description: |
Valkey instance {{ $labels.instance }} is using {{ $value }}% of its available memory.
summary: Valkey instance {{ $labels.instance }} is using too much memory
expr: |
redis_memory_used_bytes{service="gitea-valkey-metrics"} * 100
/
redis_memory_max_bytes{service="gitea-valkey-metrics"}
> 90 <= 100
for: 2m
labels:
severity: error
- alert: ValkeyKeyEviction
annotations:
description: |
Valkey instance {{ $labels.instance }} has evicted {{ $value }} keys in the last 5 minutes.
summary: Valkey instance {{ $labels.instance }} has evicted keys
expr: |
increase(redis_evicted_keys_total{service="gitea-valkey-metrics"}[5m]) > 0
for: 1s
labels:
severity: error

44
clusters/cl01tl/manifests/gitea/RedisReplication-redis-replication-gitea.yaml
View File

@@ -1,44 +0,0 @@
apiVersion: redis.redis.opstreelabs.in/v1beta2
kind: RedisReplication
metadata:
name: redis-replication-gitea
namespace: gitea
labels:
helm.sh/chart: redis-replication-gitea-1.1.0
app.kubernetes.io/version: "1.1.0"
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: redis-replication-gitea
app.kubernetes.io/instance: gitea
app.kubernetes.io/part-of: gitea
spec:
clusterSize: 3
podSecurityContext:
fsGroup: 1000
runAsUser: 1000
kubernetesConfig:
image: "quay.io/opstree/redis:v8.4.2"
imagePullPolicy: IfNotPresent
resources:
requests:
cpu: 20m
memory: 400Mi
storage:
volumeClaimTemplate:
spec:
accessModes:
- ReadWriteOnce
resources:
requests:
storage: 10Gi
storageClassName: ceph-block
redisExporter:
enabled: true
image: "quay.io/opstree/redis-exporter:v1.81.0"
sentinel:
image: "quay.io/opstree/redis-sentinel:v8.4.2"
imagePullPolicy: IfNotPresent
resources:
requests:
cpu: 10m
memory: 32Mi
size: 3

6
clusters/cl01tl/manifests/gitea/Secret-gitea-inline-config.yaml
View File

@@ -18,7 +18,7 @@ stringData:
cache: |-
ADAPTER=redis
ENABLED=true
HOST=redis://redis-replication-gitea-master.gitea:6379
HOST=redis://gitea-valkey.gitea:6379
database: |-
DB_TYPE=postgres
SCHEMA=public
@@ -31,7 +31,7 @@ stringData:
mirror: DEFAULT_INTERVAL=10m
oauth2_client: ENABLE_AUTO_REGISTRATION=true
queue: |-
CONN_STR=redis://redis-replication-gitea-master.gitea:6379
CONN_STR=redis://gitea-valkey.gitea:6379
TYPE=redis
repo-archive: ENABLED=false
repository: ROOT=/data/git/gitea-repositories
@@ -55,7 +55,7 @@ stringData:
SHOW_REGISTRATION_BUTTON=false
session: |-
PROVIDER=redis
PROVIDER_CONFIG=redis://redis-replication-gitea-master.gitea:6379
PROVIDER_CONFIG=redis://gitea-valkey.gitea:6379
ui: |-
DEFAULT_THEME=gitea-auto
THEMES=gitea-light,gitea-dark,gitea-auto,catppuccin-rosewater-auto,catppuccin-flamingo-auto,catppuccin-pink-auto,catppuccin-mauve-auto,catppuccin-red-auto,catppuccin-maroon-auto,catppuccin-peach-auto,catppuccin-yellow-auto,catppuccin-green-auto,catppuccin-teal-auto,catppuccin-sky-auto,catppuccin-sapphire-auto,catppuccin-blue-auto,catppuccin-lavender-auto,catppuccin-latte-rosewater,catppuccin-latte-flamingo,catppuccin-latte-pink,catppuccin-latte-mauve,catppuccin-latte-red,catppuccin-latte-maroon,catppuccin-latte-peach,catppuccin-latte-yellow,catppuccin-latte-green,catppuccin-latte-teal,catppuccin-latte-sky,catppuccin-latte-sapphire,catppuccin-latte-blue,catppuccin-latte-lavender,catppuccin-frappe-rosewater,catppuccin-frappe-flamingo,catppuccin-frappe-pink,catppuccin-frappe-mauve,catppuccin-frappe-red,catppuccin-frappe-maroon,catppuccin-frappe-peach,catppuccin-frappe-yellow,catppuccin-frappe-green,catppuccin-frappe-teal,catppuccin-frappe-sky,catppuccin-frappe-sapphire,catppuccin-frappe-blue,catppuccin-frappe-lavender,catppuccin-macchiato-rosewater,catppuccin-macchiato-flamingo,catppuccin-macchiato-pink,catppuccin-macchiato-mauve,catppuccin-macchiato-red,catppuccin-macchiato-maroon,catppuccin-macchiato-peach,catppuccin-macchiato-yellow,catppuccin-macchiato-green,catppuccin-macchiato-teal,catppuccin-macchiato-sky,catppuccin-macchiato-sapphire,catppuccin-macchiato-blue,catppuccin-macchiato-lavender,catppuccin-mocha-rosewater,catppuccin-mocha-flamingo,catppuccin-mocha-pink,catppuccin-mocha-mauve,catppuccin-mocha-red,catppuccin-mocha-maroon,catppuccin-mocha-peach,catppuccin-mocha-yellow,catppuccin-mocha-green,catppuccin-mocha-teal,catppuccin-mocha-sky,catppuccin-mocha-sapphire,catppuccin-mocha-blue,catppuccin-mocha-lavender

23
clusters/cl01tl/manifests/gitea/Service-gitea-valkey-headless.yaml Normal file
View File

@@ -0,0 +1,23 @@
apiVersion: v1
kind: Service
metadata:
name: gitea-valkey-headless
labels:
helm.sh/chart: valkey-0.9.3
app.kubernetes.io/name: valkey
app.kubernetes.io/instance: gitea
app.kubernetes.io/version: "9.0.3"
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/component: headless
spec:
type: ClusterIP
clusterIP: None
publishNotReadyAddresses: true
ports:
- name: tcp
port: 6379
targetPort: tcp
protocol: TCP
selector:
app.kubernetes.io/name: valkey
app.kubernetes.io/instance: gitea

10
clusters/cl01tl/manifests/gitea/Service-gitea-valkey-renovate-metrics.yaml → clusters/cl01tl/manifests/gitea/Service-gitea-valkey-metrics.yaml
View File

@@ -1,12 +1,12 @@
apiVersion: v1
kind: Service
metadata:
name: gitea-valkey-renovate-metrics
name: gitea-valkey-metrics
labels:
helm.sh/chart: valkey-renovate-0.9.3
app.kubernetes.io/name: valkey-renovate
helm.sh/chart: valkey-0.9.3
app.kubernetes.io/name: valkey
app.kubernetes.io/instance: gitea
app.kubernetes.io/version: "9.0.3-alpine"
app.kubernetes.io/version: "9.0.3"
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/component: metrics
app.kubernetes.io/part-of: valkey
@@ -19,5 +19,5 @@ spec:
protocol: TCP
targetPort: metrics
selector:
app.kubernetes.io/name: valkey-renovate
app.kubernetes.io/name: valkey
app.kubernetes.io/instance: gitea

21
clusters/cl01tl/manifests/gitea/Service-gitea-valkey-read.yaml Normal file
View File

@@ -0,0 +1,21 @@
apiVersion: v1
kind: Service
metadata:
name: gitea-valkey-read
labels:
helm.sh/chart: valkey-0.9.3
app.kubernetes.io/name: valkey
app.kubernetes.io/instance: gitea
app.kubernetes.io/version: "9.0.3"
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/component: read
spec:
type: ClusterIP
ports:
- name: tcp
port: 6379
targetPort: tcp
protocol: TCP
selector:
app.kubernetes.io/name: valkey
app.kubernetes.io/instance: gitea

11
clusters/cl01tl/manifests/gitea/Service-gitea-valkey-renovate.yaml → clusters/cl01tl/manifests/gitea/Service-gitea-valkey.yaml
View File

@@ -1,12 +1,12 @@
apiVersion: v1
kind: Service
metadata:
name: gitea-valkey-renovate
name: gitea-valkey
labels:
helm.sh/chart: valkey-renovate-0.9.3
app.kubernetes.io/name: valkey-renovate
helm.sh/chart: valkey-0.9.3
app.kubernetes.io/name: valkey
app.kubernetes.io/instance: gitea
app.kubernetes.io/version: "9.0.3-alpine"
app.kubernetes.io/version: "9.0.3"
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/component: primary
spec:
@@ -17,5 +17,6 @@ spec:
protocol: TCP
name: tcp
selector:
app.kubernetes.io/name: valkey-renovate
app.kubernetes.io/name: valkey
app.kubernetes.io/instance: gitea
statefulset.kubernetes.io/pod-name: gitea-valkey-0

8
clusters/cl01tl/manifests/gitea/ServiceAccount-gitea-valkey-renovate.yaml → clusters/cl01tl/manifests/gitea/ServiceAccount-gitea-valkey.yaml
View File

@@ -1,11 +1,11 @@
apiVersion: v1
kind: ServiceAccount
metadata:
name: gitea-valkey-renovate
name: gitea-valkey
labels:
helm.sh/chart: valkey-renovate-0.9.3
app.kubernetes.io/name: valkey-renovate
helm.sh/chart: valkey-0.9.3
app.kubernetes.io/name: valkey
app.kubernetes.io/instance: gitea
app.kubernetes.io/version: "9.0.3-alpine"
app.kubernetes.io/version: "9.0.3"
app.kubernetes.io/managed-by: Helm
automountServiceAccountToken: false

10
clusters/cl01tl/manifests/gitea/ServiceMonitor-gitea-valkey-renovate.yaml → clusters/cl01tl/manifests/gitea/ServiceMonitor-gitea-valkey.yaml
View File

@@ -1,12 +1,12 @@
apiVersion: monitoring.coreos.com/v1
kind: ServiceMonitor
metadata:
name: gitea-valkey-renovate
name: gitea-valkey
labels:
helm.sh/chart: valkey-renovate-0.9.3
app.kubernetes.io/name: valkey-renovate
helm.sh/chart: valkey-0.9.3
app.kubernetes.io/name: valkey
app.kubernetes.io/instance: gitea
app.kubernetes.io/version: "9.0.3-alpine"
app.kubernetes.io/version: "9.0.3"
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/part-of: valkey
app.kubernetes.io/component: service-monitor
@@ -19,6 +19,6 @@ spec:
- gitea
selector:
matchLabels:
app.kubernetes.io/name: valkey-renovate
app.kubernetes.io/name: valkey
app.kubernetes.io/instance: gitea
app.kubernetes.io/component: metrics

22
clusters/cl01tl/manifests/gitea/ServiceMonitor-redis-replication-gitea.yaml
View File

@@ -1,22 +0,0 @@
apiVersion: monitoring.coreos.com/v1
kind: ServiceMonitor
metadata:
name: redis-replication-gitea
namespace: gitea
labels:
helm.sh/chart: redis-replication-gitea-1.1.0
app.kubernetes.io/version: "1.1.0"
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: redis-replication-gitea
app.kubernetes.io/instance: gitea
app.kubernetes.io/part-of: gitea
spec:
selector:
matchLabels:
app: redis-replication-gitea
redis_setup_type: replication
role: replication
endpoints:
- port: redis-exporter
interval: 30s
scrapeTimeout: 10s

65
clusters/cl01tl/manifests/gitea/Deployment-gitea-valkey-renovate.yaml → clusters/cl01tl/manifests/gitea/StatefulSet-gitea-valkey.yaml
View File

@@ -1,38 +1,48 @@
apiVersion: apps/v1
kind: Deployment
kind: StatefulSet
metadata:
name: gitea-valkey-renovate
name: gitea-valkey
labels:
helm.sh/chart: valkey-renovate-0.9.3
app.kubernetes.io/name: valkey-renovate
helm.sh/chart: valkey-0.9.3
app.kubernetes.io/name: valkey
app.kubernetes.io/instance: gitea
app.kubernetes.io/version: "9.0.3-alpine"
app.kubernetes.io/version: "9.0.3"
app.kubernetes.io/managed-by: Helm
spec:
replicas: 1
strategy:
type: RollingUpdate
serviceName: gitea-valkey-headless
replicas: 3
podManagementPolicy: OrderedReady
selector:
matchLabels:
app.kubernetes.io/name: valkey-renovate
app.kubernetes.io/name: valkey
app.kubernetes.io/instance: gitea
volumeClaimTemplates:
- metadata:
name: valkey-data
spec:
accessModes:
- ReadWriteOnce
storageClassName: "ceph-block"
resources:
requests:
storage: "1Gi"
template:
metadata:
labels:
app.kubernetes.io/name: valkey-renovate
app.kubernetes.io/name: valkey
app.kubernetes.io/instance: gitea
annotations:
checksum/initconfig: 8b38dbae3567c0ddb2f926ca49682b35
checksum/initconfig: "b82939dee80151a39606083af0d5422a"
spec:
automountServiceAccountToken: false
serviceAccountName: gitea-valkey-renovate
serviceAccountName: gitea-valkey
securityContext:
fsGroup: 1000
runAsGroup: 1000
runAsUser: 1000
initContainers:
- name: gitea-valkey-renovate-init
image: ghcr.io/valkey-io/valkey:9.0.3-alpine
- name: gitea-valkey-init
image: docker.io/valkey/valkey:9.0.3
imagePullPolicy: IfNotPresent
securityContext:
capabilities:
@@ -42,14 +52,19 @@ spec:
runAsNonRoot: true
runAsUser: 1000
command: ["/scripts/init.sh"]
env:
- name: POD_INDEX
valueFrom:
fieldRef:
fieldPath: metadata.labels['apps.kubernetes.io/pod-index']
volumeMounts:
- name: valkey-data
mountPath: /data
- name: scripts
mountPath: /scripts
containers:
- name: gitea-valkey-renovate
image: ghcr.io/valkey-io/valkey:9.0.3-alpine
- name: gitea-valkey
image: docker.io/valkey/valkey:9.0.3
imagePullPolicy: IfNotPresent
command: ["valkey-server"]
args: ["/data/conf/valkey.conf"]
@@ -61,6 +76,10 @@ spec:
runAsNonRoot: true
runAsUser: 1000
env:
- name: POD_INDEX
valueFrom:
fieldRef:
fieldPath: metadata.labels['apps.kubernetes.io/pod-index']
- name: VALKEY_LOGLEVEL
value: "notice"
ports:
@@ -76,12 +95,12 @@ spec:
resources:
requests:
cpu: 10m
memory: 32Mi
memory: 128Mi
volumeMounts:
- name: valkey-data
mountPath: /data
- name: metrics
image: ghcr.io/oliver006/redis_exporter:v1.79.0
image: ghcr.io/oliver006/redis_exporter:v1.81.0
imagePullPolicy: "IfNotPresent"
ports:
- name: metrics
@@ -96,13 +115,15 @@ spec:
httpGet:
path: /
port: metrics
resources:
requests:
cpu: 10m
memory: 64M
env:
- name: REDIS_ALIAS
value: gitea-valkey-renovate
value: gitea-valkey
volumes:
- name: scripts
configMap:
name: gitea-valkey-renovate-init-scripts
name: gitea-valkey-init-scripts
defaultMode: 0555
- name: valkey-data
emptyDir: {}

5
clusters/cl01tl/manifests/homepage/ConfigMap-homepage.yaml
View File

@@ -60,6 +60,7 @@ data:
custom.css: |
.theme-stone {
--color-200: #F8F9FA !important;
--color-800: #F8F9FA !important;
}
html {
font-size: 18px;
@@ -685,9 +686,11 @@ data:
favicon: https://web-assets-3bfcb5585cbd63dc365d32a3.nyc3.cdn.digitaloceanspaces.com/alexlebens-net/logo-new-round.svg
headerStyle: clean
hideVersion: true
cardBlur: md
cardBlur: xs
color: stone
background:
image: https://web-assets-3bfcb5585cbd63dc365d32a3.nyc3.cdn.digitaloceanspaces.com/alexlebens-net/background.jpg
theme: light
disableCollapse: true
layout:
- Media:

2
clusters/cl01tl/manifests/homepage/Deployment-homepage.yaml
View File

@@ -24,7 +24,7 @@ spec:
template:
metadata:
annotations:
checksum/configMaps: 0e1d493c43af464eca7cf552e86400807dabaa81b6cc8279aa5d49fd242e6fa9
checksum/configMaps: 84767d61c3c6401e901600c8723a59987b67a36c68473aa54a5ee5b54fa9b4c4
checksum/secrets: d3ba83f111cd32f92c909268c55ad8bbd4f9e299b74b35b33c1a011180d8b378
labels:
app.kubernetes.io/controller: main

8
clusters/cl01tl/manifests/postiz/ExternalSecret-postiz-valkey-config.yaml
View File

@@ -16,27 +16,27 @@ spec:
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /cl01tl/postiz/redis
key: /cl01tl/postiz/valkey
metadataPolicy: None
property: url
- secretKey: user
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /cl01tl/postiz/redis
key: /cl01tl/postiz/valkey
metadataPolicy: None
property: user
- secretKey: password
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /cl01tl/postiz/redis
key: /cl01tl/postiz/valkey
metadataPolicy: None
property: password
- secretKey: default
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /cl01tl/postiz/redis
key: /cl01tl/postiz/valkey
metadataPolicy: None
property: password