v1.0.9

2024-11-29 18:37:03 -05:00
parent b599bbae3d
commit 47e4109e4d
31 changed files with 603 additions and 3087 deletions
@@ -0,0 +1,90 @@
+---
+# tasks file for gitea
+- name: Add gitea repo
+  kubernetes.core.helm_repository:
+    name: gitea
+    repo_url: https://dl.gitea.com/charts/
+  register: repo_update
+
+- name: Update Helm repos
+  command: helm repo update
+  when: repo_update.changed
+
+- name: Deploy Gitea
+  kubernetes.core.helm:
+    name: gitea
+    chart_ref: gitea/gitea
+    release_namespace: gitea
+    create_namespace: true
+    values:
+      service:
+        ssh:
+          type: LoadBalancer
+      ingress:
+        enabled: true
+        className: nginx
+        annotations:
+          cert-manager.io/cluster-issuer: ca-issuer
+        hosts:
+          - host: gitea.eom.dev
+            paths:
+              - path: /
+                pathType: Prefix
+        tls:
+          - hosts:
+            - gitea.eom.dev
+            secretName: gitea-tls
+      persistence:
+        size: 2Ti
+      actions:
+        enabled: true
+        provisioning:
+          enabled: true
+      gitea:
+        metrics:
+          enabled: true
+        admin:
+          username: gitea
+          password: "{{ gitea_admin_password }}"
+          email: gitea@postfix.eom.dev
+        ldap:
+          - name: OpenLDAP
+            securityProtocol: unencrypted
+            host: openldap.openldap.svc.cluster.local
+            port: 389
+            userSearchBase: dc=eom,dc=dev
+            userFilter: (&(objectClass=posixAccount)(uid=%s)(memberOf=cn=Gitea Users,ou=Gitea,ou=Services,dc=eom,dc=dev))
+            adminFilter: (memberOf=cn=Gitea Administrators,ou=Gitea,ou=Services,dc=eom,dc=dev)
+            emailAttribute: mail
+            bindDn: cn=readonly,dc=eom,dc=dev
+            bindPassword: "{{ openldap_readonly_password }}"
+            usernameAttribute: uid
+            publicSSHKeyAttribute: sshPublicKey
+        config:
+          APP_NAME: "Gitea"
+          service:
+            DISABLE_REGISTRATION: true
+            DEFAULT_ALLOW_CREATE_ORGANIZATION: false
+          database:
+            DB_TYPE: postgres
+            HOST: postgresql-postgresql-ha-pgpool.postgresql.svc.cluster.local
+            NAME: gitea
+            USER: gitea
+            PASSWD: "{{ gitea_admin_password }}"
+          session:
+            PROVIDER: redis
+            PROVIDER_CONFIG: "redis+cluster://:{{ redis_auth_password }}@redis-redis-cluster.redis.svc.cluster.local:6379"
+          cache:
+            ADAPTER: redis
+            HOST: "redis+cluster://:{{ redis_auth_password }}@redis-redis-cluster.redis.svc.cluster.local:6379"
+          queue:
+            TYPE: redis
+            CONN_STR: "redis+cluster://:{{ redis_auth_password }}@redis-redis-cluster.redis.svc.cluster.local:6379"
+      redis:
+        enabled: false
+      redis-cluster:
+        enabled: false
+      postgresql:
+        enabled: false
+      postgresql-ha:
+        enabled: false