DevOps/ansible-role-gitea
2
0
Fork 0
Code Issues 2 Pull Requests Actions Packages Projects Releases Wiki Activity
11 Commits 1 Branch 0 Tags
b81a2d64d0c01c569c9d6b18433d75b963814b5c
Commit Graph
11 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
ClaudeandClaude Opus 5.5 b81a2d64d0 Pin valkey/postgresql resources; harden runner token step 
The live valkey and postgresql StatefulSets had memory limits raised by
hand (8Gi and 2Gi). A helm upgrade reverts those to the bitnami 192Mi
preset, and valkey then OOMs loading its ~3.3GB dataset. Move the limits
into role defaults so upgrades keep them.

Generate the runner token with kubectl exec against the deployment after
waiting for its rollout, with retries, instead of kubernetes.core.k8s_exec
(the control plane's kubernetes python client is too old for it).

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
 2026-11-06 13:05:10 -05:00
ClaudeandClaude Opus 5.5 0f1ed99dfc Log real client IPs and enable Gitea Actions with a runner
Demo / hello (push) Successful in 18s
Details 
- Trust X-Forwarded-For from the pod network (10.244.0.0/16) via
  security.REVERSE_PROXY_TRUSTED_PROXIES / REVERSE_PROXY_LIMIT so Gitea
  logs the external client address instead of the ingress-nginx pod IP.
- Set actions.ENABLED explicitly and deploy an instance-wide runner via
  the gitea/actions chart (release "gitea-actions", pinned to 0.1.2).
  The registration token is generated in-cluster and stored in a Secret
  on first run, so no token lives in git or the vault.
- Fix the old actions.yaml, which reused the "gitea" release name and
  would have clobbered the main Gitea release.
- Add a demo workflow (.gitea/workflows/demo.yaml).

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
 2026-11-06 12:56:58 -05:00
eric 9f46e92cd7 Catppuccin 2026-10-26 18:55:54 -04:00
eric a87baf2325 Update 2026-10-23 11:23:04 -04:00
eric 14c6c5685b Valkey single instance 2026-08-02 20:52:07 -04:00
eric 990ccfef17 Increase max upload size 2026-06-17 14:59:56 -04:00
eric 64ce43ecfb Removed server snippet 2026-05-28 15:07:46 -04:00
eric 04d64be9a3 Allow only external registration; closes DevOps/ansible-role-gitea#2 2026-05-20 11:40:39 -04:00
eric 8de7e69a12 Combating spam 2026-04-12 19:09:32 -04:00
eric 3f2ba175e4 mcp 2026-03-02 11:36:38 -05:00
eric b9f615dcb3 Initial commit 2026-02-27 17:30:50 -05:00