Commit Graph

63 Commits

Author SHA1 Message Date
justusbunsi
6e841e6e26 Fix regression for creating repositories in root-based containers (#172)
All checks were successful
continuous-integration/drone/push Build is passing
continuous-integration/drone/tag Build is passing
Due to #160 it was no longer possible to create repositories in root-based containers. This was caused by the missing `/tmp/gitea` directory in that image. It was dynamically created by Gitea internal functionality with less privileges than necessary. Explicitly creating the directory and set proper permissions fix this. Fixes: #171 Co-authored-by: JustusBunsi <sk.bunsenbrenner@gmail.com> Reviewed-on: gitea/helm-chart#172 Reviewed-by: luhahn <luhahn@noreply.gitea.io> Reviewed-by: 6543 <6543@obermui.de> Co-authored-by: justusbunsi <justusbunsi@noreply.gitea.io> Co-committed-by: justusbunsi <justusbunsi@noreply.gitea.io>
2021-06-09 22:35:50 +08:00
luhahn
f0070ef64b Add check on chown in init container (#165)
All checks were successful
continuous-integration/drone/push Build is passing
The chown in the init container will fail in the rootles image. Checking if the image is rootless or not will prevent this error noise. Co-authored-by: Lucas Hahn <lucas.hahn@novum-rgi.de> Reviewed-on: gitea/helm-chart#165 Reviewed-by: Andrew Thornton <art27@cantab.net> Reviewed-by: Lunny Xiao <xiaolunwen@gmail.com> Co-authored-by: luhahn <luhahn@noreply.gitea.io> Co-committed-by: luhahn <luhahn@noreply.gitea.io>
2021-06-09 19:42:49 +08:00
luhahn
178bc0ab79 Improve http service and update Readme (#167)
All checks were successful
continuous-integration/drone/push Build is passing
This PR adds some options for the http service: - loadBalancerIP - nodePort - externalTrafficPolicy - externalIPs Also updated the README and values.yml with the values. Added storageClass explanation in README and empty value in values.yml Fixes: #162 Co-authored-by: Lucas Hahn <lucas.hahn@novum-rgi.de> Reviewed-on: gitea/helm-chart#167 Reviewed-by: techknowlogick <techknowlogick@gitea.io> Reviewed-by: 6543 <6543@obermui.de> Co-authored-by: luhahn <luhahn@noreply.gitea.io> Co-committed-by: luhahn <luhahn@noreply.gitea.io>
2021-06-08 01:53:01 +08:00
modzilla
441f0748e9 Fixing prometheus monitoring (#157)
All checks were successful
continuous-integration/drone/push Build is passing
At least the latest versions of prometheus watch for a label called "release" and not "prometheus" so with that change prometheus started collecting logs. If that old label is still needed, we / I could change it to add entries from "additionalLabels", so that we are quite flexible and don't have breaking changes. Co-authored-by: Justin Lamp <jlamp@vater-gruppe.de> Co-authored-by: techknowlogick <techknowlogick@gitea.io> Reviewed-on: gitea/helm-chart#157 Reviewed-by: luhahn <luhahn@noreply.gitea.io> Reviewed-by: techknowlogick <techknowlogick@gitea.io> Co-authored-by: modzilla <modzilla@noreply.gitea.io> Co-committed-by: modzilla <modzilla@noreply.gitea.io>
2021-06-07 22:28:28 +08:00
justusbunsi
5ab596937a Fix rootless image usage with enhanced security-context (#160)
All checks were successful
continuous-integration/drone/push Build is passing
I've noticed that the commented `securityContext` is not really useable with the rootless image due to different directory structure compared to the default image. Important for the `readOnlyRootFilesystem` is to declare the `TMPDIR` environment variable, so that the tmp directory (which is readonly in this case) won't be used. Instead, another writeable directory can be used. Another thing is the explicit hint that all these security options cannot be used with the default (root-based) image, because of its design. ~~Although this PR would fix the referenced issue, I am not totally happy with the current implementation. It would be more straight forward to use the same mount points for both image variants. Unfortunately, this is not possible right now due to hard coded paths in the default (root) image startup scripts.~~ ~~Anyone have suggestions on how this could be more simple?~~ ------- **Sum-up:** As mentioned in Discord, this PR tried to make too many changes. The necessary changes made in 1f331a7e6577fc798196a84a957330aca0d663cd will fix an error that occurs due to restricted access to the `/tmp` directory in a rootless image with all the `securityContext` options enabled. I also updated the default image to 1.14.2. Fixes: #158 Co-authored-by: JustusBunsi <sk.bunsenbrenner@gmail.com> Reviewed-on: gitea/helm-chart#160 Reviewed-by: luhahn <luhahn@noreply.gitea.io> Reviewed-by: 6543 <6543@obermui.de> Co-authored-by: justusbunsi <justusbunsi@noreply.gitea.io> Co-committed-by: justusbunsi <justusbunsi@noreply.gitea.io>
2021-06-07 21:27:25 +08:00
mrdima
5b5ea7173a Add value option to define schedulerName (#150)
All checks were successful
continuous-integration/drone/push Build is passing
For those who have a need to configure the schedulerName like us, make this an option just as it is for example in the postgres chart Co-authored-by: Dimitri Ars <dimitri.ars@kpn.com> Reviewed-on: gitea/helm-chart#150 Reviewed-by: luhahn <luhahn@noreply.gitea.io> Reviewed-by: Lunny Xiao <xiaolunwen@gmail.com> Co-authored-by: mrdima <mrdima@noreply.gitea.io> Co-committed-by: mrdima <mrdima@noreply.gitea.io>
2021-06-07 16:41:16 +08:00
luhahn
b88bbd6d4d gitea-1.14.x-updates (#148)
All checks were successful
continuous-integration/drone/push Build is passing
continuous-integration/drone/tag Build is passing
This PR includes the changes from: - gitea/helm-chart#129 - gitea/helm-chart#140 In addition it adds the possibility to include secrets via environment variables as mentioned in #60 Co-authored-by: Hans Kristian Flaatten <hans.flaatten@evry.com> Co-authored-by: flavio.prado <flavio.prado@noreply.gitea.io> Co-authored-by: Lucas Hahn <lucas.hahn@novum-rgi.de> Reviewed-on: gitea/helm-chart#148 Reviewed-by: techknowlogick <techknowlogick@gitea.io> Reviewed-by: Andrew Thornton <art27@cantab.net> Co-authored-by: luhahn <luhahn@noreply.gitea.io> Co-committed-by: luhahn <luhahn@noreply.gitea.io>
2021-04-29 17:12:48 +08:00
luhahn
2b01e6ece6 Fix permissions on external mounts (#144)
All checks were successful
continuous-integration/drone/push Build is passing
continuous-integration/drone/tag Build is passing
Co-authored-by: luhahn <lucas.hahn@novum-rgi.de> Reviewed-on: gitea/helm-chart#144 Reviewed-by: Lunny Xiao <xiaolunwen@gmail.com> Reviewed-by: Andrew Thornton <art27@cantab.net> Co-authored-by: luhahn <luhahn@noreply.gitea.io> Co-committed-by: luhahn <luhahn@noreply.gitea.io>
2021-04-19 20:30:02 +08:00
Nakrez
0f1e991889 Add possibiliy to define statefulset labels (#130)
All checks were successful
continuous-integration/drone/push Build is passing
This change adds a new value *statefulset.labels* to allow the user to add custom labels to the StatefulSet. An example of where this could be useful is if gitea's pvc is stored on OpenEBS. With this new option, the user can add the extra *openebs.io/sts-target-affinity* label to specify that the volume target pod should run on the same node as gitea's StatefulSet. Co-authored-by: Baptiste Covolato <b.covolato@gmail.com> Reviewed-on: gitea/helm-chart#130 Reviewed-by: luhahn <luhahn@noreply.gitea.io> Reviewed-by: lafriks <lafriks@noreply.gitea.io> Co-authored-by: Nakrez <nakrez@noreply.gitea.io> Co-committed-by: Nakrez <nakrez@noreply.gitea.io>
2021-03-17 08:07:42 +08:00
Nakrez
1eb0eee3bc Make the chart work with a sqlite3 database (#124)
All checks were successful
continuous-integration/drone/push Build is passing
continuous-integration/drone/tag Build is passing
There are currently 2 issues that prevent using this chart to deploy gitea with a SQLite3 database. 1) The value from *gitea.config.database.HOST* is used to set *db.servicename* when all the databases under *gitea.database.buildIn* are not enabled. This causes a type error during the template processing: `Error: UPGRADE FAILED: template: gitea/templates/gitea/init.yaml:24:20: executing "gitea/templates/gitea/init.yaml" at <include "db.servicename" .>: error calling include: template: gitea/templates/_helpers.tpl:64:31: executing "db.servicename" at <.Values.gitea.config.database.HOST>: wrong type for value; expected string; got interface {}` 2) In *init_gitea.sh*, we use the value *db.servicename* and *db.port* to ping the database. If this database responds to ping, we proceed with the init. The problem here is that *db.port* is not set when all the databases under *gitea.database.buildIn* are disabled. In turn, this raises an error from busybox's *nc*, because no parameter is passed for *PORT*. This causes the init container to go in *CrashLoopBackOff* forever. The simple fix that is proposed in this PR is to check wether or not *.Values.gitea.config.database.DB_TYPE* is set to determine the value *db.servicename*. If *DB_TYPE* is *'sqlite3'*, leave *db.servicename* empty and use that to bypass the database ping. Co-authored-by: Baptiste Covolato <b.covolato@gmail.com> Reviewed-on: gitea/helm-chart#124 Reviewed-by: Andrew Thornton <art27@cantab.net> Reviewed-by: lafriks <lafriks@noreply.gitea.io> Reviewed-by: luhahn <luhahn@noreply.gitea.io> Co-authored-by: Nakrez <nakrez@noreply.gitea.io> Co-committed-by: Nakrez <nakrez@noreply.gitea.io>
2021-03-04 16:43:52 +08:00
luhahn
9106d68cdc Fix ServiceMonitor selector labels (#125)
All checks were successful
continuous-integration/drone/push Build is passing
continuous-integration/drone/tag Build is passing
Reviewed-on: gitea/helm-chart#125 Reviewed-by: Andrew Thornton <art27@cantab.net> Reviewed-by: lafriks <lafriks@noreply.gitea.io> Co-authored-by: luhahn <luhahn@noreply.gitea.io> Co-committed-by: luhahn <luhahn@noreply.gitea.io>
2021-03-02 17:10:38 +08:00
551f4e312e Allow override kubernetes probes (#117)
All checks were successful
continuous-integration/drone/push Build is passing
continuous-integration/drone/tag Build is passing
- Allow overriding liveness and readiness probe - Add optional startup probe closes #118 Reviewed-on: gitea/helm-chart#117 Reviewed-by: luhahn <luhahn@noreply.gitea.io> Reviewed-by: lafriks <lafriks@noreply.gitea.io> Co-authored-by: Michael Kriese <michael.kriese@visualon.de> Co-committed-by: Michael Kriese <michael.kriese@visualon.de>
2021-03-01 22:46:05 +08:00
Dunky13
d1c58a2e77 OAuth2 configuration options (#123)
All checks were successful
continuous-integration/drone/push Build is passing
I opened up the OAuth2 authentication option. I needed this feature, and it is available in the gitea cli. So I opened it up for configuration through this pull request. Hope it can help others. Co-authored-by: Marc Went <marc.went+git@redkubes.com> Reviewed-on: gitea/helm-chart#123 Reviewed-by: luhahn <luhahn@noreply.gitea.io> Reviewed-by: lafriks <lafriks@noreply.gitea.io> Co-authored-by: Dunky13 <dunky13@noreply.gitea.io> Co-committed-by: Dunky13 <dunky13@noreply.gitea.io>
2021-03-01 20:24:11 +08:00
Starefossen
9213f0d1f5 Add app and version labels (#121)
All checks were successful
continuous-integration/drone/push Build is passing
This pull request adds the `app` and `version` labels that are used by Istio. > Pods with app and version labels: We recommend adding an explicit app label and version label to the specification of the pods deployed using a Kubernetes Deployment. The app and version labels add contextual information to the metrics and telemetry that Istio collects. > > * The app label: Each deployment should have a distinct app label with a meaningful value. The app label is used to add contextual information in distributed tracing. > > * The version label: This label indicates the version of the application corresponding to the particular deployment. From https://istio.io/latest/docs/ops/deployment/requirements/#pod-requirements Reviewed-on: gitea/helm-chart#121 Reviewed-by: luhahn <luhahn@noreply.gitea.io> Reviewed-by: lafriks <lafriks@noreply.gitea.io> Co-authored-by: Starefossen <starefossen@noreply.gitea.io> Co-committed-by: Starefossen <starefossen@noreply.gitea.io>
2021-03-01 20:20:55 +08:00
Starefossen
7ed82c7a63 Add ServiceMonitor Prometheus selector label (#116)
All checks were successful
continuous-integration/drone/push Build is passing
Reviewed-on: gitea/helm-chart#116 Reviewed-by: luhahn <luhahn@noreply.gitea.io> Reviewed-by: lafriks <lafriks@noreply.gitea.io> Co-authored-by: Starefossen <starefossen@noreply.gitea.io> Co-committed-by: Starefossen <starefossen@noreply.gitea.io>
2021-03-01 20:18:09 +08:00
martencassel
33903d8f6c Add support to run gitea with an optional securityContext (#115)
All checks were successful
continuous-integration/drone/push Build is passing
Reviewed-on: gitea/helm-chart#115 Reviewed-by: luhahn <luhahn@noreply.gitea.io> Reviewed-by: lafriks <lafriks@noreply.gitea.io> Co-authored-by: martencassel <martencassel@noreply.gitea.io> Co-committed-by: martencassel <martencassel@noreply.gitea.io>
2021-03-01 20:16:49 +08:00
viceice
4682597b04 fix: quote admin password (#111)
All checks were successful
continuous-integration/drone/push Build is passing
closes #110 Co-authored-by: Lunny Xiao <xiaolunwen@gmail.com> Reviewed-on: gitea/helm-chart#111 Reviewed-by: luhahn <luhahn@noreply.gitea.io> Reviewed-by: Lunny Xiao <xiaolunwen@gmail.com> Co-authored-by: viceice <viceice@noreply.gitea.io> Co-committed-by: viceice <viceice@noreply.gitea.io>
2021-02-17 17:45:18 +08:00
JosefWN
790d0405c2 Fix typo enabling pprof (#114)
All checks were successful
continuous-integration/drone/push Build is passing
Nothing critical, but had a typo in the naming of the config entry to enable `pprof`. Co-authored-by: josef <josef.nilsen@outlook.com> Reviewed-on: gitea/helm-chart#114 Reviewed-by: luhahn <luhahn@noreply.gitea.io> Reviewed-by: Lunny Xiao <xiaolunwen@gmail.com> Co-authored-by: JosefWN <josefwn@noreply.gitea.io> Co-committed-by: JosefWN <josefwn@noreply.gitea.io>
2021-02-17 17:44:40 +08:00
JPRbrs
28e94f96e3 Add loadbalancersourceranges to ssh service (#105)
All checks were successful
continuous-integration/drone/push Build is passing
continuous-integration/drone/tag Build is passing
SSH service might want to limit the a range of source IPs. LoadBalancerSourceRanges enables to limit them just passing a list of CIDR addresses to whitelist Co-authored-by: javier <perezrubio.javier@gmail.com> Co-authored-by: techknowlogick <techknowlogick@gitea.io> Reviewed-on: gitea/helm-chart#105 Reviewed-by: luhahn <luhahn@noreply.gitea.io> Reviewed-by: techknowlogick <techknowlogick@gitea.io> Co-authored-by: JPRbrs <jprbrs@noreply.gitea.io> Co-committed-by: JPRbrs <jprbrs@noreply.gitea.io>
2021-02-05 04:42:42 +08:00
sanigo
4ad5cf1d19 Add sshPublicKeyAttribute attribute setting for ldap auth,and Allow setting labels and annotations for gitea pvc. (#76)
All checks were successful
continuous-integration/drone/push Build is passing
continuous-integration/drone/tag Build is passing
1. sshPublicKeyAttribute is useful to sync ssh public keys from ldap. 2. It would be easier to set pvc annotations/labels for those who are using storage services from cloud providers. Co-authored-by: 钱卫春 <qianwch@chinasofti.com> Reviewed-on: gitea/helm-chart#76 Reviewed-by: techknowlogick <techknowlogick@gitea.io> Reviewed-by: luhahn <luhahn@noreply.gitea.io> Co-authored-by: sanigo <sanigo@noreply.gitea.io> Co-committed-by: sanigo <sanigo@noreply.gitea.io>
2021-01-22 16:24:37 +08:00
JosefWN
7f828e87f6 Add support for metrics and pprof (#100)
All checks were successful
continuous-integration/drone/push Build is passing
continuous-integration/drone/tag Build is passing
Adds support for toggling support for `pprof` and metrics: ```yaml gitea: pprofEnabled: true metrics: enabled: true serviceMonitor: enabled: true ``` Co-authored-by: josef <josef.nilsen@outlook.com> Reviewed-on: gitea/helm-chart#100 Reviewed-by: luhahn <luhahn@noreply.gitea.io> Reviewed-by: techknowlogick <techknowlogick@gitea.io> Co-authored-by: JosefWN <josefwn@noreply.gitea.io> Co-committed-by: JosefWN <josefwn@noreply.gitea.io>
2021-01-21 23:45:26 +08:00
petergardfjall
57479bdf37 enhancements to support postgres client-cert authentication (#47)
All checks were successful
continuous-integration/drone/push Build is passing
continuous-integration/drone/tag Build is passing
This PR adds a few new chart features which adds to the flexibility of the chart. - allow extra volumes to be mounted (such as secrets): 2f862c5a48 - pass environment variables also to the init-container: 7044049478 - allow a preparation script to be "injected" into the init-container: 6125a69345 As a concrete example of how this can be used, I use is to configure Gitea to use client certificate authentication against an external Postgres database. That could be accomplished by having a `gitea-postgres-ssl` secret: ``` apiVersion: v1 kind: Secret type: Opaque metadata: name: gitea-postgres-ssl data: postgresql.crt: <base64...> postgresql.key: <base64...> root.crt: <base64...> ``` and then mounting this as a volume in Gitea using: ``` extraVolumes: - name: postgres-ssl-vol secret: secretName: gitea-postgres-ssl extraVolumeMounts: - name: postgres-ssl-vol readOnly: true mountPath: "/pg-ssl" ``` To get the right permissions on the credentials, we'd use the `initPreScript`: ``` initPreScript: | # copy postgres client and CA cert from mount and # give proper permissions mkdir -p /data/git/.postgresql cp /pg-ssl/* /data/git/.postgresql/ chown -R git:git /data/git/.postgresql/ chmod 400 /data/git/.postgresql/postgresql.key ``` and to make sure that Gitea uses the certificate we need to pass the proper postgres environment variables (both to the init container and the "main" container): ``` statefulset: env: - name: "PGSSLCERT" value: "/data/git/.postgresql/postgresql.crt" - name: "PGSSLKEY" value: "/data/git/.postgresql/postgresql.key" - name: "PGSSLROOTCERT" value: "/data/git/.postgresql/root.crt" ``` Co-authored-by: Peter Gardfjäll <peter.gardfjall.work@gmail.com> Reviewed-on: gitea/helm-chart#47 Reviewed-by: luhahn <luhahn@noreply.gitea.io> Reviewed-by: 6543 <6543@obermui.de> Co-authored-by: petergardfjall <petergardfjall@noreply.gitea.io> Co-committed-by: petergardfjall <petergardfjall@noreply.gitea.io>
2021-01-20 19:28:39 +08:00
luhahn
0c8f226f1f Add ldap checksum (#101)
All checks were successful
continuous-integration/drone/push Build is passing
continuous-integration/drone/tag Build is passing
Fixed an error in ldap port setting. Added ldap checksum to deployment so chart will actually update on ldap changes. Fixes: #99 Co-authored-by: Lucas Hahn <lucas.hahn@novum-rgi.de> Co-authored-by: Lunny Xiao <xiaolunwen@gmail.com> Reviewed-on: gitea/helm-chart#101 Reviewed-by: lafriks <lafriks@noreply.gitea.io> Reviewed-by: Lunny Xiao <xiaolunwen@gmail.com> Co-authored-by: luhahn <luhahn@noreply.gitea.io> Co-committed-by: luhahn <luhahn@noreply.gitea.io>
2021-01-14 15:13:49 +08:00
lafriks
2c066d7c9e Use image tag instead of image version in values (#91)
All checks were successful
continuous-integration/drone/push Build is passing
Use image tag instead of image version in values Change to tenary function instead of if Update description and add link to tag list Fixup readme Co-authored-by: Lauris BH <lauris@nix.lv> Reviewed-on: gitea/helm-chart#91 Reviewed-by: luhahn <luhahn@noreply.gitea.io> Reviewed-by: techknowlogick <techknowlogick@gitea.io> Co-Authored-By: lafriks <lafriks@noreply.gitea.io> Co-Committed-By: lafriks <lafriks@noreply.gitea.io>
2020-12-21 06:53:45 +08:00
luhahn
2826258cfc Several Improvements to Helm Chart (#87)
All checks were successful
continuous-integration/drone/push Build is passing
continuous-integration/drone/tag Build is passing
Improve ldap settings with helper function Allow clusterIP for http service to be set, default to None Use imagePullSecrets in statefulset now Update default values Update README Bump Chart version Co-authored-by: luhahn <lucas.hahn@novum-rgi.de> Reviewed-on: gitea/helm-chart#87 Reviewed-by: lafriks <lafriks@noreply.gitea.io> Reviewed-by: Lunny Xiao <xiaolunwen@gmail.com> Co-Authored-By: luhahn <luhahn@noreply.gitea.io> Co-Committed-By: luhahn <luhahn@noreply.gitea.io>
2020-12-16 20:37:47 +08:00
luhahn
943eda6d5f Fix Ingress for Kubernetes 1.16 (#83)
All checks were successful
continuous-integration/drone/push Build is passing
continuous-integration/drone/tag Build is passing
Fix ingress path type for 1.16 Bump chart version Co-authored-by: Lucas Hahn <lucas.hahn@novum-rgi.de> Reviewed-on: gitea/helm-chart#83 Reviewed-by: 6543 <6543@obermui.de> Reviewed-by: Lunny Xiao <xiaolunwen@gmail.com> Co-Authored-By: luhahn <luhahn@noreply.gitea.io> Co-Committed-By: luhahn <luhahn@noreply.gitea.io>
2020-12-15 21:34:46 +08:00
luhahn
5311243a6e Fix admin user creation for gitea 1.13.0, chart version 2.1.0 (#80)
All checks were successful
continuous-integration/drone/push Build is passing
continuous-integration/drone/tag Build is passing
Fix admin user creation for gitea 1.13.0 Add load balancer hint for ssh in README Merge branch 'master' into fix-admin-user-creation Co-authored-by: Lucas Hahn <lucas.hahn@novum-rgi.de> Reviewed-on: gitea/helm-chart#80 Reviewed-by: Andrew Thornton <art27@cantab.net> Reviewed-by: Lunny Xiao <xiaolunwen@gmail.com> Co-Authored-By: luhahn <luhahn@noreply.gitea.io> Co-Committed-By: luhahn <luhahn@noreply.gitea.io>
2020-12-10 17:16:13 +08:00
skuethe
1b21ce2810 Fix capabilities query for Ingress on 1.18 and older (#78)
All checks were successful
continuous-integration/drone/push Build is passing
Co-authored-by: Sebastian Kuethe <sebastian.kuethe@she.net> Co-authored-by: techknowlogick <techknowlogick@gitea.io> Reviewed-on: gitea/helm-chart#78 Reviewed-by: luhahn <luhahn@noreply.gitea.io> Reviewed-by: lafriks <lafriks@noreply.gitea.io> Co-Authored-By: skuethe <skuethe@noreply.gitea.io> Co-Committed-By: skuethe <skuethe@noreply.gitea.io>
2020-12-08 20:57:52 +08:00
luhahn
63bc10e393 Fix Ingress (#70)
All checks were successful
continuous-integration/drone/push Build is passing
continuous-integration/drone/tag Build is passing
Bump chart version to 2.0.7 Fix Ingress - Ingress uses now .Capabilities.APIVersions.Has to compare the api version available - Added pathType since it is required in v1 and optional in v1beta1 Co-authored-by: Lucas Hahn <lucas.hahn@novum-rgi.de> Reviewed-on: gitea/helm-chart#70 Reviewed-by: Andrew Thornton <art27@cantab.net> Reviewed-by: Lunny Xiao <xiaolunwen@gmail.com> Co-Authored-By: luhahn <luhahn@noreply.gitea.io> Co-Committed-By: luhahn <luhahn@noreply.gitea.io>
2020-11-26 17:01:16 +08:00
joelgallant
33ee018b52 Fixes access of Capabilities variable (#67)
All checks were successful
continuous-integration/drone/push Build is passing
Fixes access of Capabilities variable Co-authored-by: Joel Gallant <joel@joelgallant.me> Reviewed-on: gitea/helm-chart#67 Reviewed-by: techknowlogick <techknowlogick@gitea.io> Reviewed-by: luhahn <luhahn@noreply.gitea.io> Co-Authored-By: joelgallant <joelgallant@noreply.gitea.io> Co-Committed-By: joelgallant <joelgallant@noreply.gitea.io>
2020-11-26 01:20:12 +08:00
joelgallant
a26b4e10d1 Fixes networking.k8s.io/v1 Ingress fields (#65)
All checks were successful
continuous-integration/drone/push Build is passing
Fixes ingress by using new {service: {name, port}} structure Co-authored-by: Joel Gallant <joel@joelgallant.me> Reviewed-on: gitea/helm-chart#65 Reviewed-by: luhahn <luhahn@noreply.gitea.io> Reviewed-by: techknowlogick <techknowlogick@gitea.io> Co-Authored-By: joelgallant <joelgallant@noreply.gitea.io> Co-Committed-By: joelgallant <joelgallant@noreply.gitea.io>
2020-11-25 23:28:53 +08:00
joelgallant
bf1f5601be Use apiVersion v1 for Ingress in 1.19+ (#63)
All checks were successful
continuous-integration/drone/push Build is passing
Use apiVersion v1 for Ingress in 1.19+ Currently, a warning is shown in newer versions of kubernetes: ``` W1120 10:04:16.194312 8003 warnings.go:67] networking.k8s.io/v1beta1 Ingress is deprecated in v1.19+, unavailable in v1.22+; use networking.k8s.io/v1 Ingress ``` Co-authored-by: Joel Gallant <joel@joelgallant.me> Reviewed-on: gitea/helm-chart#63 Reviewed-by: techknowlogick <techknowlogick@gitea.io> Reviewed-by: Andrew Thornton <art27@cantab.net> Co-Authored-By: joelgallant <joelgallant@noreply.gitea.io> Co-Committed-By: joelgallant <joelgallant@noreply.gitea.io>
2020-11-25 06:55:49 +08:00
JPRbrs
729a412803 Allow templated annotations for http-service (#62)
All checks were successful
continuous-integration/drone/push Build is passing
Get http annotations from the right place Allow templated annotations for http-service When deploying this to cloud Kubernetes, annotations are useful to add features to the http-service Co-authored-by: javier <perezrubio.javier@gmail.com> Reviewed-on: gitea/helm-chart#62 Reviewed-by: luhahn <luhahn@noreply.gitea.io> Reviewed-by: Lunny Xiao <xiaolunwen@gmail.com> Co-Authored-By: JPRbrs <jprbrs@noreply.gitea.io> Co-Committed-By: JPRbrs <jprbrs@noreply.gitea.io>
2020-11-20 16:08:26 +08:00
JPRbrs
5398b99514 fix-test-pod (#56)
All checks were successful
continuous-integration/drone/push Build is passing
fix-test-pod service name and port was wrong and was preventing the helm chart deployment Co-authored-by: javier <perezrubio.javier@gmail.com> Reviewed-on: gitea/helm-chart#56 Reviewed-by: techknowlogick <techknowlogick@gitea.io> Reviewed-by: luhahn <luhahn@noreply.gitea.io> Co-Authored-By: JPRbrs <jprbrs@noreply.gitea.io> Co-Committed-By: JPRbrs <jprbrs@noreply.gitea.io>
2020-11-17 15:35:07 +08:00
luhahn
f62b82e956 Let storageClass be set automatically (#45)
All checks were successful
continuous-integration/drone/push Build is passing
continuous-integration/drone/tag Build is passing
Merge branch 'master' into master Bump chart version and add gitea/helm-chart as link for artifacthub Remove default value for storageClass Remove storageClass 'Standard' and let it be set automatically Co-authored-by: Lucas Hahn <lucas.hahn@novum-rgi.de> Reviewed-on: gitea/helm-chart#45 Reviewed-by: techknowlogick <techknowlogick@gitea.io> Reviewed-by: Andrew Thornton <art27@cantab.net> Co-Authored-By: luhahn <luhahn@noreply.gitea.io> Co-Committed-By: luhahn <luhahn@noreply.gitea.io>
2020-10-30 01:10:10 +08:00
Steffen Vogel
ed0ce3d192 Make cluster domain configurable (#51)
All checks were successful
continuous-integration/drone/push Build is passing
Merge branch 'master' into cluster-domain Make cluster domain configurable Currently the deployment fails due to a hard-coded cluster domain "cluster.local". Co-authored-by: Lunny Xiao <xiaolunwen@gmail.com> Co-authored-by: Steffen Vogel <post@steffenvogel.de> Reviewed-on: gitea/helm-chart#51 Reviewed-by: luhahn <luhahn@noreply.gitea.io> Reviewed-by: Andrew Thornton <art27@cantab.net> Co-Authored-By: Steffen Vogel <stv0g@noreply.gitea.io> Co-Committed-By: Steffen Vogel <stv0g@noreply.gitea.io>
2020-10-30 01:08:58 +08:00
Steffen Vogel
8f70a4b9a0 Fix indention of exterrnal IPs for SSH service (#52)
All checks were successful
continuous-integration/drone/push Build is passing
Fix indention of exterrnal IPs for SSH service Co-authored-by: Steffen Vogel <post@steffenvogel.de> Reviewed-on: gitea/helm-chart#52 Reviewed-by: luhahn <luhahn@noreply.gitea.io> Reviewed-by: Lunny Xiao <xiaolunwen@gmail.com> Co-Authored-By: Steffen Vogel <stv0g@noreply.gitea.io> Co-Committed-By: Steffen Vogel <stv0g@noreply.gitea.io>
2020-10-26 21:04:04 +08:00
schra
a4e5943ca5 Upgrade mariadb Helm chart to 8.0.0 (#48)
Some checks failed
continuous-integration/drone/push Build was killed
continuous-integration/drone/tag Build is passing
Upgrade mariadb Helm chart to 8.0.0 The names of the values changed in the new Helm chart, see [1]. Thus the Helm chart ships breaking changes and therefore bump the major version of this Chart.yaml (not sure if you use semver?) Furthermore, there is a bug [2] where not setting the root password results in the mariadb entering a CrashLoopBackOff when re-installing it. Thus set it (as done in the mysql values already). [1] 1206942b69 [2] https://github.com/bitnami/charts/issues/3884 Co-authored-by: Andre Schröder <andre.schroedr@gmail.com> Reviewed-on: https://gitea.com/gitea/helm-chart/pulls/48 Reviewed-by: Andrew Thornton <art27@cantab.net> Reviewed-by: luhahn <luhahn@noreply.gitea.io> Co-Authored-By: schra <schra@noreply.gitea.io> Co-Committed-By: schra <schra@noreply.gitea.io>
2020-10-22 13:13:37 +08:00
schra
fc9c49179f Re-add lost commit: Enable LoadBalancer type service of http (#42) (#49)
Enable LoadBalancer type service of http (#42) Enable LoadBalancer type service of http Signed-off-by: Martyn Ranyard <m@rtyn.berlin> Co-authored-by: Martyn Ranyard <m@rtyn.berlin> Reviewed-on: gitea/helm-chart#42 Reviewed-by: luhahn <luhahn@noreply.gitea.io> Reviewed-by: techknowlogick <techknowlogick@gitea.io> Co-Authored-By: iMartyn <imartyn@noreply.gitea.io> Co-Committed-By: iMartyn <imartyn@noreply.gitea.io> Co-authored-by: iMartyn <imartyn@noreply.gitea.io> Reviewed-on: gitea/helm-chart#49 Reviewed-by: luhahn <luhahn@noreply.gitea.io> Reviewed-by: Andrew Thornton <art27@cantab.net> Co-Authored-By: schra <schra@noreply.gitea.io> Co-Committed-By: schra <schra@noreply.gitea.io>
2020-10-21 20:38:01 +08:00
luhahn
4c17cc839e Store gitea app data in PVC (#37)
All checks were successful
continuous-integration/drone/push Build is passing
Bump Chart version Extend REAMDE - add default handling explanation - add MariaDB values Add APP_DATA_PATH default to config Co-authored-by: Lucas Hahn <lucas.hahn@novum-rgi.de> Reviewed-on: gitea/helm-chart#37 Reviewed-by: Andrew Thornton <art27@cantab.net> Reviewed-by: Lunny Xiao <xiaolunwen@gmail.com>
2020-10-06 09:03:20 +00:00
luhahn
0877cc81ca Update dependencies and add MariaDB builtIn (#33)
All checks were successful
continuous-integration/drone/push Build is passing
Update dependencies - Update Postgres version from 8.6.4 to 9.7.3 - Update Mysql version from 6.14.8 to 6.14.10 - Add MariaDB as built in dependency Co-authored-by: Lucas Hahn <lucas.hahn@novum-rgi.de> Reviewed-on: gitea/helm-chart#33 Reviewed-by: Jonas Franz <jonasfranz@noreply.gitea.io> Reviewed-by: techknowlogick <techknowlogick@gitea.io>
2020-09-28 23:26:06 +00:00
luhahn
4a618f245e Fix NodePort settings for ssh service (#32)
All checks were successful
continuous-integration/drone/push Build is passing
continuous-integration/drone/tag Build is passing
Fix NodePort settings for ssh service Co-authored-by: Lucas Hahn <lucas.hahn@novum-rgi.de> Reviewed-on: gitea/helm-chart#32 Reviewed-by: lafriks <lafriks@noreply.gitea.io> Reviewed-by: Andrew Thornton <art27@cantab.net>
2020-09-28 14:31:35 +00:00
luhahn
1f95ae962c Move all password related data to secrets (#28)
All checks were successful
continuous-integration/drone/push Build is passing
Bump Chart version Move all password related data to secrets Co-authored-by: Lucas Hahn <lucas.hahn@novum-rgi.de> Reviewed-on: gitea/helm-chart#28 Reviewed-by: techknowlogick <techknowlogick@gitea.io> Reviewed-by: Lunny Xiao <xiaolunwen@gmail.com>
2020-09-25 13:37:55 +00:00
mmuenster
ffd6e5f92c Ability to add pod annotation to statefulset (#24)
All checks were successful
continuous-integration/drone/push Build is passing
ability to add pod annotation Reviewed-on: gitea/helm-chart#24 Reviewed-by: luhahn <luhahn@noreply.gitea.io> Reviewed-by: techknowlogick <techknowlogick@gitea.io>
2020-09-24 16:32:11 +00:00
luhahn
068d1aafa0 Use recursive chmod for .ssh directory in init container (#26)
All checks were successful
continuous-integration/drone/push Build is passing
Use recursive chmod for .ssh directory in init container Co-authored-by: Lucas Hahn <lucas.hahn@novum-rgi.de> Reviewed-on: gitea/helm-chart#26 Reviewed-by: techknowlogick <techknowlogick@gitea.io>
2020-09-23 21:15:16 +00:00
techknowlogick
2082d67ec8 utilize service for port forwarding in instructions (#22)
All checks were successful
continuous-integration/drone/push Build is passing
Merge branch 'master' into techknowlogick-patch-1 Merge branch 'master' into techknowlogick-patch-1 utilize service for port forwarding in instructions Reviewed-on: gitea/helm-chart#22 Reviewed-by: luhahn <luhahn@noreply.gitea.io> Reviewed-by: Lunny Xiao <xiaolunwen@gmail.com>
2020-09-23 04:28:56 +00:00
luhahn
1a1a001656 Fix ssh permission denied(publickey) at reinstalling the chart without deleting pvc (#25)
All checks were successful
continuous-integration/drone/push Build is passing
Fix ssh permission denied(publickey) at reinstalling the chart without deleting pvc Co-authored-by: Lucas Hahn <lucas.hahn@novum-rgi.de> Reviewed-on: gitea/helm-chart#25 Reviewed-by: techknowlogick <techknowlogick@gitea.io> Reviewed-by: Lunny Xiao <xiaolunwen@gmail.com>
2020-09-23 03:22:20 +00:00
mmuenster
c168d47181 Prevent custom HOST name from being overwritten in mysql, postgresql, cache (#23)
All checks were successful
continuous-integration/drone/push Build is passing
Adding same changes to cache Deleted useDefaultHost value no longer needed Eliminated need for useDefaultHost value Using whether gitea.config.database.HOST exists instead in the values file. If true, don't overwrite. If false, use "mysql/postgresql.dns" Updated db host logic Config map uses "postgresql/mysql.dns" when useDefaultHost is true, and the value from gitea.config.database.HOST when useDefaultHost is false. Added useDefaultHost to built in database values. Reviewed-on: gitea/helm-chart#23 Reviewed-by: Lunny Xiao <xiaolunwen@gmail.com> Reviewed-by: techknowlogick <techknowlogick@gitea.io>
2020-09-18 03:21:29 +00:00
Jasper-Ben
8060d080db allow for additional container environment variables (#16)
All checks were successful
continuous-integration/drone/push Build is passing
Co-authored-by: Jasper Orschulko <Jasper.Orschulko@irisgmbh.de> Reviewed-on: gitea/helm-chart#16 Reviewed-by: luhahn <luhahn@noreply.gitea.io> Reviewed-by: Lunny Xiao <xiaolunwen@gmail.com>
2020-09-10 10:15:34 +00:00
luhahn
e85e1718de Fix memcached conditional and external database check in init container (#18)
All checks were successful
continuous-integration/drone/push Build is passing
Bump chart version Update README.md with example for DB Fix external host check for Databases Fix condition for memcached in Chart.yaml Co-authored-by: Lucas Hahn <lucas.hahn@novum-rgi.de> Reviewed-on: gitea/helm-chart#18 Reviewed-by: techknowlogick <techknowlogick@gitea.io> Reviewed-by: Andrew Thornton <art27@cantab.net>
2020-09-03 21:27:11 +00:00