267 lines
8.3 KiB
YAML
267 lines
8.3 KiB
YAML
---
|
|
# Source: gitea/charts/gitea/templates/gitea/deployment.yaml
|
|
apiVersion: apps/v1
|
|
kind: Deployment
|
|
metadata:
|
|
name: gitea
|
|
namespace: gitea
|
|
annotations:
|
|
labels:
|
|
helm.sh/chart: gitea-12.4.0
|
|
app: gitea
|
|
app.kubernetes.io/name: gitea
|
|
app.kubernetes.io/instance: gitea
|
|
app.kubernetes.io/version: "1.25.2"
|
|
version: "1.25.2"
|
|
app.kubernetes.io/managed-by: Helm
|
|
spec:
|
|
replicas: 3
|
|
strategy:
|
|
type: RollingUpdate
|
|
rollingUpdate:
|
|
maxUnavailable: 0
|
|
maxSurge: 100%
|
|
selector:
|
|
matchLabels:
|
|
app.kubernetes.io/name: gitea
|
|
app.kubernetes.io/instance: gitea
|
|
template:
|
|
metadata:
|
|
annotations:
|
|
checksum/config: 15d118267cbb18a568310f6955563c2557bca8b8e66a48075e8ebda35d1682f8
|
|
checksum/oauth_0: 03073bf48e66f48f622bd02092a5f93bfd06dbcb5fd833aded3b0d40980be93d
|
|
labels:
|
|
helm.sh/chart: gitea-12.4.0
|
|
app: gitea
|
|
app.kubernetes.io/name: gitea
|
|
app.kubernetes.io/instance: gitea
|
|
app.kubernetes.io/version: "1.25.2"
|
|
version: "1.25.2"
|
|
app.kubernetes.io/managed-by: Helm
|
|
spec:
|
|
securityContext:
|
|
fsGroup: 1000
|
|
initContainers:
|
|
- name: init-directories
|
|
image: "registry.hub.docker.com/gitea/gitea:1.25.2-rootless"
|
|
imagePullPolicy: IfNotPresent
|
|
command:
|
|
- "/usr/sbinx/init_directory_structure.sh"
|
|
env:
|
|
- name: GITEA_APP_INI
|
|
value: /data/gitea/conf/app.ini
|
|
- name: GITEA_CUSTOM
|
|
value: /data/gitea
|
|
- name: GITEA_WORK_DIR
|
|
value: /data
|
|
- name: GITEA_TEMP
|
|
value: /tmp/gitea
|
|
volumeMounts:
|
|
- name: init
|
|
mountPath: /usr/sbinx
|
|
- name: temp
|
|
mountPath: /tmp
|
|
- name: data
|
|
mountPath: /data
|
|
- mountPath: /data/gitea/public/assets/css
|
|
name: gitea-themes-storage
|
|
readOnly: false
|
|
securityContext: {}
|
|
resources:
|
|
limits: {}
|
|
requests:
|
|
cpu: 100m
|
|
memory: 128Mi
|
|
- name: init-app-ini
|
|
image: "registry.hub.docker.com/gitea/gitea:1.25.2-rootless"
|
|
imagePullPolicy: IfNotPresent
|
|
command:
|
|
- "/usr/sbinx/config_environment.sh"
|
|
env:
|
|
- name: GITEA_APP_INI
|
|
value: /data/gitea/conf/app.ini
|
|
- name: GITEA_CUSTOM
|
|
value: /data/gitea
|
|
- name: GITEA_WORK_DIR
|
|
value: /data
|
|
- name: GITEA_TEMP
|
|
value: /tmp/gitea
|
|
- name: TMP_EXISTING_ENVS_FILE
|
|
value: /tmp/existing-envs
|
|
- name: ENV_TO_INI_MOUNT_POINT
|
|
value: /env-to-ini-mounts
|
|
- name: GITEA__DATABASE__HOST
|
|
valueFrom:
|
|
secretKeyRef:
|
|
key: host
|
|
name: gitea-postgresql-17-cluster-app
|
|
- name: GITEA__DATABASE__NAME
|
|
valueFrom:
|
|
secretKeyRef:
|
|
key: dbname
|
|
name: gitea-postgresql-17-cluster-app
|
|
- name: GITEA__DATABASE__USER
|
|
valueFrom:
|
|
secretKeyRef:
|
|
key: user
|
|
name: gitea-postgresql-17-cluster-app
|
|
- name: GITEA__DATABASE__PASSWD
|
|
valueFrom:
|
|
secretKeyRef:
|
|
key: password
|
|
name: gitea-postgresql-17-cluster-app
|
|
- name: GITEA__INDEXER__ISSUE_INDEXER_CONN_STR
|
|
valueFrom:
|
|
secretKeyRef:
|
|
key: ISSUE_INDEXER_CONN_STR
|
|
name: gitea-meilisearch-master-key-secret
|
|
volumeMounts:
|
|
- name: config
|
|
mountPath: /usr/sbinx
|
|
- name: temp
|
|
mountPath: /tmp
|
|
- name: data
|
|
mountPath: /data
|
|
- name: inline-config-sources
|
|
mountPath: /env-to-ini-mounts/inlines/
|
|
- mountPath: /data/gitea/public/assets/css
|
|
name: gitea-themes-storage
|
|
readOnly: false
|
|
securityContext: {}
|
|
resources:
|
|
limits: {}
|
|
requests:
|
|
cpu: 100m
|
|
memory: 128Mi
|
|
- name: configure-gitea
|
|
image: "registry.hub.docker.com/gitea/gitea:1.25.2-rootless"
|
|
command:
|
|
- "/usr/sbinx/configure_gitea.sh"
|
|
imagePullPolicy: IfNotPresent
|
|
securityContext:
|
|
runAsUser: 1000
|
|
env:
|
|
- name: GITEA_APP_INI
|
|
value: /data/gitea/conf/app.ini
|
|
- name: GITEA_CUSTOM
|
|
value: /data/gitea
|
|
- name: GITEA_WORK_DIR
|
|
value: /data
|
|
- name: GITEA_TEMP
|
|
value: /tmp/gitea
|
|
- name: HOME
|
|
value: /data/gitea/git
|
|
- name: GITEA_OAUTH_KEY_0
|
|
valueFrom:
|
|
secretKeyRef:
|
|
key: key
|
|
name: gitea-oidc-secret
|
|
- name: GITEA_OAUTH_SECRET_0
|
|
valueFrom:
|
|
secretKeyRef:
|
|
key: secret
|
|
name: gitea-oidc-secret
|
|
- name: GITEA_ADMIN_USERNAME
|
|
value: "gitea_admin"
|
|
- name: GITEA_ADMIN_PASSWORD
|
|
value: "r8sA8CPHD9!bt6d"
|
|
- name: GITEA_ADMIN_PASSWORD_MODE
|
|
value: keepUpdated
|
|
volumeMounts:
|
|
- name: init
|
|
mountPath: /usr/sbinx
|
|
- name: temp
|
|
mountPath: /tmp
|
|
- name: data
|
|
mountPath: /data
|
|
- mountPath: /data/gitea/public/assets/css
|
|
name: gitea-themes-storage
|
|
readOnly: false
|
|
resources:
|
|
limits: {}
|
|
requests:
|
|
cpu: 100m
|
|
memory: 128Mi
|
|
terminationGracePeriodSeconds: 60
|
|
containers:
|
|
- name: gitea
|
|
image: "registry.hub.docker.com/gitea/gitea:1.25.2-rootless"
|
|
imagePullPolicy: IfNotPresent
|
|
env:
|
|
# SSH Port values have to be set here as well for openssh configuration
|
|
- name: SSH_LISTEN_PORT
|
|
value: "22"
|
|
- name: SSH_PORT
|
|
value: "22"
|
|
- name: GITEA_APP_INI
|
|
value: /data/gitea/conf/app.ini
|
|
- name: GITEA_CUSTOM
|
|
value: /data/gitea
|
|
- name: GITEA_WORK_DIR
|
|
value: /data
|
|
- name: GITEA_TEMP
|
|
value: /tmp/gitea
|
|
- name: TMPDIR
|
|
value: /tmp/gitea
|
|
- name: HOME
|
|
value: /data/gitea/git
|
|
ports:
|
|
- name: ssh
|
|
containerPort: 22
|
|
- name: http
|
|
containerPort: 3000
|
|
- name: profiler
|
|
containerPort: 6060
|
|
livenessProbe:
|
|
failureThreshold: 10
|
|
initialDelaySeconds: 200
|
|
periodSeconds: 10
|
|
successThreshold: 1
|
|
tcpSocket:
|
|
port: http
|
|
timeoutSeconds: 1
|
|
readinessProbe:
|
|
failureThreshold: 3
|
|
initialDelaySeconds: 5
|
|
periodSeconds: 10
|
|
successThreshold: 1
|
|
tcpSocket:
|
|
port: http
|
|
timeoutSeconds: 1
|
|
resources: {}
|
|
securityContext: {}
|
|
volumeMounts:
|
|
- name: temp
|
|
mountPath: /tmp
|
|
- name: data
|
|
mountPath: /data
|
|
- mountPath: /opt/backup
|
|
name: gitea-nfs-storage-backup
|
|
readOnly: false
|
|
- mountPath: /data/gitea/public/assets/css
|
|
name: gitea-themes-storage
|
|
readOnly: true
|
|
volumes:
|
|
- name: init
|
|
secret:
|
|
secretName: gitea-init
|
|
defaultMode: 110
|
|
- name: config
|
|
secret:
|
|
secretName: gitea
|
|
defaultMode: 110
|
|
- name: gitea-nfs-storage-backup
|
|
persistentVolumeClaim:
|
|
claimName: gitea-nfs-storage-backup
|
|
- name: gitea-themes-storage
|
|
persistentVolumeClaim:
|
|
claimName: gitea-themes-storage
|
|
- name: inline-config-sources
|
|
secret:
|
|
secretName: gitea-inline-config
|
|
- name: temp
|
|
emptyDir: {}
|
|
- name: data
|
|
persistentVolumeClaim:
|
|
claimName: gitea-shared-storage
|