a3c73dccb0
The _secret/_key syntax doesn't work in Gitea Helm values. Use additionalConfigFromEnvs to inject GITEA__database__PASSWD from the sealed secret, which the chart translates into app.ini config.
81 lines
2.0 KiB
YAML
81 lines
2.0 KiB
YAML
apiVersion: argoproj.io/v1alpha1
|
|
kind: Application
|
|
metadata:
|
|
name: gitea-helm
|
|
namespace: argocd
|
|
annotations:
|
|
argocd.argoproj.io/sync-wave: "1"
|
|
spec:
|
|
project: default
|
|
source:
|
|
repoURL: https://dl.gitea.com/charts/
|
|
chart: gitea
|
|
targetRevision: 10.6.0
|
|
helm:
|
|
valuesObject:
|
|
# Disable bundled dependencies — we use external DB and Valkey
|
|
postgresql:
|
|
enabled: false
|
|
postgresql-ha:
|
|
enabled: false
|
|
redis-cluster:
|
|
enabled: false
|
|
redis:
|
|
enabled: false
|
|
|
|
gitea:
|
|
admin:
|
|
existingSecret: gitea-admin-credentials
|
|
additionalConfigFromEnvs:
|
|
- name: GITEA__database__PASSWD
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: gitea-pg-credentials
|
|
key: password
|
|
config:
|
|
database:
|
|
DB_TYPE: postgres
|
|
HOST: gitea-pg-rw.platform.svc:5432
|
|
NAME: gitea
|
|
USER: gitea
|
|
cache:
|
|
ADAPTER: redis
|
|
HOST: redis://valkey.platform.svc:6379/0
|
|
session:
|
|
PROVIDER: redis
|
|
PROVIDER_CONFIG: redis://valkey.platform.svc:6379/1
|
|
server:
|
|
DOMAIN: gitea.coreworlds.io
|
|
ROOT_URL: https://gitea.coreworlds.io
|
|
SSH_DOMAIN: gitea.coreworlds.io
|
|
SSH_PORT: 2222
|
|
SSH_LISTEN_PORT: 2222
|
|
actions:
|
|
ENABLED: true
|
|
DEFAULT_ACTIONS_URL: github
|
|
packages:
|
|
ENABLED: true
|
|
|
|
persistence:
|
|
enabled: true
|
|
storageClass: longhorn-nvme
|
|
size: 20Gi
|
|
|
|
service:
|
|
http:
|
|
type: ClusterIP
|
|
port: 3000
|
|
ssh:
|
|
type: NodePort
|
|
port: 2222
|
|
nodePort: 30022
|
|
destination:
|
|
server: https://kubernetes.default.svc
|
|
namespace: platform
|
|
syncPolicy:
|
|
automated:
|
|
prune: true
|
|
selfHeal: true
|
|
syncOptions:
|
|
- CreateNamespace=true
|