Signed-off-by: techknowlogick <techknowlogick@gitea.io>

This PR adds some options for the http service: - loadBalancerIP - nodePort - externalTrafficPolicy - externalIPs Also updated the README and values.yml with the values. Added storageClass explanation in README and empty value in values.yml Fixes: #162 Co-authored-by: Lucas Hahn <lucas.hahn@novum-rgi.de> Reviewed-on: gitea/helm-chart#167 Reviewed-by: techknowlogick <techknowlogick@gitea.io> Reviewed-by: 6543 <6543@obermui.de> Co-authored-by: luhahn <luhahn@noreply.gitea.io> Co-committed-by: luhahn <luhahn@noreply.gitea.io>

At least the latest versions of prometheus watch for a label called "release" and not "prometheus" so with that change prometheus started collecting logs. If that old label is still needed, we / I could change it to add entries from "additionalLabels", so that we are quite flexible and don't have breaking changes. Co-authored-by: Justin Lamp <jlamp@vater-gruppe.de> Co-authored-by: techknowlogick <techknowlogick@gitea.io> Reviewed-on: gitea/helm-chart#157 Reviewed-by: luhahn <luhahn@noreply.gitea.io> Reviewed-by: techknowlogick <techknowlogick@gitea.io> Co-authored-by: modzilla <modzilla@noreply.gitea.io> Co-committed-by: modzilla <modzilla@noreply.gitea.io>

I've noticed that the commented `securityContext` is not really useable with the rootless image due to different directory structure compared to the default image. Important for the `readOnlyRootFilesystem` is to declare the `TMPDIR` environment variable, so that the tmp directory (which is readonly in this case) won't be used. Instead, another writeable directory can be used. Another thing is the explicit hint that all these security options cannot be used with the default (root-based) image, because of its design. ~~Although this PR would fix the referenced issue, I am not totally happy with the current implementation. It would be more straight forward to use the same mount points for both image variants. Unfortunately, this is not possible right now due to hard coded paths in the default (root) image startup scripts.~~ ~~Anyone have suggestions on how this could be more simple?~~ ------- **Sum-up:** As mentioned in Discord, this PR tried to make too many changes. The necessary changes made in 1f331a7e6577fc798196a84a957330aca0d663cd will fix an error that occurs due to restricted access to the `/tmp` directory in a rootless image with all the `securityContext` options enabled. I also updated the default image to 1.14.2. Fixes: #158 Co-authored-by: JustusBunsi <sk.bunsenbrenner@gmail.com> Reviewed-on: gitea/helm-chart#160 Reviewed-by: luhahn <luhahn@noreply.gitea.io> Reviewed-by: 6543 <6543@obermui.de> Co-authored-by: justusbunsi <justusbunsi@noreply.gitea.io> Co-committed-by: justusbunsi <justusbunsi@noreply.gitea.io>

For those who have a need to configure the schedulerName like us, make this an option just as it is for example in the postgres chart Co-authored-by: Dimitri Ars <dimitri.ars@kpn.com> Reviewed-on: gitea/helm-chart#150 Reviewed-by: luhahn <luhahn@noreply.gitea.io> Reviewed-by: Lunny Xiao <xiaolunwen@gmail.com> Co-authored-by: mrdima <mrdima@noreply.gitea.io> Co-committed-by: mrdima <mrdima@noreply.gitea.io>

This PR includes the changes from: - gitea/helm-chart#129 - gitea/helm-chart#140 In addition it adds the possibility to include secrets via environment variables as mentioned in #60 Co-authored-by: Hans Kristian Flaatten <hans.flaatten@evry.com> Co-authored-by: flavio.prado <flavio.prado@noreply.gitea.io> Co-authored-by: Lucas Hahn <lucas.hahn@novum-rgi.de> Reviewed-on: gitea/helm-chart#148 Reviewed-by: techknowlogick <techknowlogick@gitea.io> Reviewed-by: Andrew Thornton <art27@cantab.net> Co-authored-by: luhahn <luhahn@noreply.gitea.io> Co-committed-by: luhahn <luhahn@noreply.gitea.io>

Co-authored-by: luhahn <lucas.hahn@novum-rgi.de> Reviewed-on: gitea/helm-chart#144 Reviewed-by: Lunny Xiao <xiaolunwen@gmail.com> Reviewed-by: Andrew Thornton <art27@cantab.net> Co-authored-by: luhahn <luhahn@noreply.gitea.io> Co-committed-by: luhahn <luhahn@noreply.gitea.io>

Reviewed-on: gitea/helm-chart#139 Reviewed-by: Lunny Xiao <xiaolunwen@gmail.com> Reviewed-by: luhahn <luhahn@noreply.gitea.io> Co-authored-by: techknowlogick <techknowlogick@gitea.io> Co-committed-by: techknowlogick <techknowlogick@gitea.io>

Co-authored-by: luhahn <lucas.hahn@novum-rgi.de> Reviewed-on: gitea/helm-chart#134 Reviewed-by: Andrew Thornton <art27@cantab.net> Reviewed-by: Lunny Xiao <xiaolunwen@gmail.com> Co-authored-by: luhahn <luhahn@noreply.gitea.io> Co-committed-by: luhahn <luhahn@noreply.gitea.io>

Minor changes to grammar, minor typo fixes. Signed-off-by: kaipmdh <kaipmdh@noreply.gitea.io> Co-authored-by: lafriks <lafriks@noreply.gitea.io> Reviewed-on: gitea/helm-chart#131 Reviewed-by: luhahn <luhahn@noreply.gitea.io> Reviewed-by: lafriks <lafriks@noreply.gitea.io> Co-authored-by: kaipmdh <kaipmdh@noreply.gitea.io> Co-committed-by: kaipmdh <kaipmdh@noreply.gitea.io>

This change adds a new value *statefulset.labels* to allow the user to add custom labels to the StatefulSet. An example of where this could be useful is if gitea's pvc is stored on OpenEBS. With this new option, the user can add the extra *openebs.io/sts-target-affinity* label to specify that the volume target pod should run on the same node as gitea's StatefulSet. Co-authored-by: Baptiste Covolato <b.covolato@gmail.com> Reviewed-on: gitea/helm-chart#130 Reviewed-by: luhahn <luhahn@noreply.gitea.io> Reviewed-by: lafriks <lafriks@noreply.gitea.io> Co-authored-by: Nakrez <nakrez@noreply.gitea.io> Co-committed-by: Nakrez <nakrez@noreply.gitea.io>

There are currently 2 issues that prevent using this chart to deploy gitea with a SQLite3 database. 1) The value from *gitea.config.database.HOST* is used to set *db.servicename* when all the databases under *gitea.database.buildIn* are not enabled. This causes a type error during the template processing: `Error: UPGRADE FAILED: template: gitea/templates/gitea/init.yaml:24:20: executing "gitea/templates/gitea/init.yaml" at <include "db.servicename" .>: error calling include: template: gitea/templates/_helpers.tpl:64:31: executing "db.servicename" at <.Values.gitea.config.database.HOST>: wrong type for value; expected string; got interface {}` 2) In *init_gitea.sh*, we use the value *db.servicename* and *db.port* to ping the database. If this database responds to ping, we proceed with the init. The problem here is that *db.port* is not set when all the databases under *gitea.database.buildIn* are disabled. In turn, this raises an error from busybox's *nc*, because no parameter is passed for *PORT*. This causes the init container to go in *CrashLoopBackOff* forever. The simple fix that is proposed in this PR is to check wether or not *.Values.gitea.config.database.DB_TYPE* is set to determine the value *db.servicename*. If *DB_TYPE* is *'sqlite3'*, leave *db.servicename* empty and use that to bypass the database ping. Co-authored-by: Baptiste Covolato <b.covolato@gmail.com> Reviewed-on: gitea/helm-chart#124 Reviewed-by: Andrew Thornton <art27@cantab.net> Reviewed-by: lafriks <lafriks@noreply.gitea.io> Reviewed-by: luhahn <luhahn@noreply.gitea.io> Co-authored-by: Nakrez <nakrez@noreply.gitea.io> Co-committed-by: Nakrez <nakrez@noreply.gitea.io>

Reviewed-on: gitea/helm-chart#125 Reviewed-by: Andrew Thornton <art27@cantab.net> Reviewed-by: lafriks <lafriks@noreply.gitea.io> Co-authored-by: luhahn <luhahn@noreply.gitea.io> Co-committed-by: luhahn <luhahn@noreply.gitea.io>

- Allow overriding liveness and readiness probe - Add optional startup probe closes #118 Reviewed-on: gitea/helm-chart#117 Reviewed-by: luhahn <luhahn@noreply.gitea.io> Reviewed-by: lafriks <lafriks@noreply.gitea.io> Co-authored-by: Michael Kriese <michael.kriese@visualon.de> Co-committed-by: Michael Kriese <michael.kriese@visualon.de>

I opened up the OAuth2 authentication option. I needed this feature, and it is available in the gitea cli. So I opened it up for configuration through this pull request. Hope it can help others. Co-authored-by: Marc Went <marc.went+git@redkubes.com> Reviewed-on: gitea/helm-chart#123 Reviewed-by: luhahn <luhahn@noreply.gitea.io> Reviewed-by: lafriks <lafriks@noreply.gitea.io> Co-authored-by: Dunky13 <dunky13@noreply.gitea.io> Co-committed-by: Dunky13 <dunky13@noreply.gitea.io>

This pull request adds the `app` and `version` labels that are used by Istio. > Pods with app and version labels: We recommend adding an explicit app label and version label to the specification of the pods deployed using a Kubernetes Deployment. The app and version labels add contextual information to the metrics and telemetry that Istio collects. > > * The app label: Each deployment should have a distinct app label with a meaningful value. The app label is used to add contextual information in distributed tracing. > > * The version label: This label indicates the version of the application corresponding to the particular deployment. From https://istio.io/latest/docs/ops/deployment/requirements/#pod-requirements Reviewed-on: gitea/helm-chart#121 Reviewed-by: luhahn <luhahn@noreply.gitea.io> Reviewed-by: lafriks <lafriks@noreply.gitea.io> Co-authored-by: Starefossen <starefossen@noreply.gitea.io> Co-committed-by: Starefossen <starefossen@noreply.gitea.io>

Reviewed-on: gitea/helm-chart#116 Reviewed-by: luhahn <luhahn@noreply.gitea.io> Reviewed-by: lafriks <lafriks@noreply.gitea.io> Co-authored-by: Starefossen <starefossen@noreply.gitea.io> Co-committed-by: Starefossen <starefossen@noreply.gitea.io>

Reviewed-on: gitea/helm-chart#115 Reviewed-by: luhahn <luhahn@noreply.gitea.io> Reviewed-by: lafriks <lafriks@noreply.gitea.io> Co-authored-by: martencassel <martencassel@noreply.gitea.io> Co-committed-by: martencassel <martencassel@noreply.gitea.io>

closes #110 Co-authored-by: Lunny Xiao <xiaolunwen@gmail.com> Reviewed-on: gitea/helm-chart#111 Reviewed-by: luhahn <luhahn@noreply.gitea.io> Reviewed-by: Lunny Xiao <xiaolunwen@gmail.com> Co-authored-by: viceice <viceice@noreply.gitea.io> Co-committed-by: viceice <viceice@noreply.gitea.io>

Nothing critical, but had a typo in the naming of the config entry to enable `pprof`. Co-authored-by: josef <josef.nilsen@outlook.com> Reviewed-on: gitea/helm-chart#114 Reviewed-by: luhahn <luhahn@noreply.gitea.io> Reviewed-by: Lunny Xiao <xiaolunwen@gmail.com> Co-authored-by: JosefWN <josefwn@noreply.gitea.io> Co-committed-by: JosefWN <josefwn@noreply.gitea.io>

SSH service might want to limit the a range of source IPs. LoadBalancerSourceRanges enables to limit them just passing a list of CIDR addresses to whitelist Co-authored-by: javier <perezrubio.javier@gmail.com> Co-authored-by: techknowlogick <techknowlogick@gitea.io> Reviewed-on: gitea/helm-chart#105 Reviewed-by: luhahn <luhahn@noreply.gitea.io> Reviewed-by: techknowlogick <techknowlogick@gitea.io> Co-authored-by: JPRbrs <jprbrs@noreply.gitea.io> Co-committed-by: JPRbrs <jprbrs@noreply.gitea.io>

Reviewed-on: gitea/helm-chart#108 Reviewed-by: Lunny Xiao <xiaolunwen@gmail.com> Reviewed-by: luhahn <luhahn@noreply.gitea.io> Co-authored-by: techknowlogick <techknowlogick@gitea.io> Co-committed-by: techknowlogick <techknowlogick@gitea.io>

1. sshPublicKeyAttribute is useful to sync ssh public keys from ldap. 2. It would be easier to set pvc annotations/labels for those who are using storage services from cloud providers. Co-authored-by: 钱卫春 <qianwch@chinasofti.com> Reviewed-on: gitea/helm-chart#76 Reviewed-by: techknowlogick <techknowlogick@gitea.io> Reviewed-by: luhahn <luhahn@noreply.gitea.io> Co-authored-by: sanigo <sanigo@noreply.gitea.io> Co-committed-by: sanigo <sanigo@noreply.gitea.io>

Adds support for toggling support for `pprof` and metrics: ```yaml gitea: pprofEnabled: true metrics: enabled: true serviceMonitor: enabled: true ``` Co-authored-by: josef <josef.nilsen@outlook.com> Reviewed-on: gitea/helm-chart#100 Reviewed-by: luhahn <luhahn@noreply.gitea.io> Reviewed-by: techknowlogick <techknowlogick@gitea.io> Co-authored-by: JosefWN <josefwn@noreply.gitea.io> Co-committed-by: JosefWN <josefwn@noreply.gitea.io>

This PR adds a few new chart features which adds to the flexibility of the chart. - allow extra volumes to be mounted (such as secrets): 2f862c5a48 - pass environment variables also to the init-container: 7044049478 - allow a preparation script to be "injected" into the init-container: 6125a69345 As a concrete example of how this can be used, I use is to configure Gitea to use client certificate authentication against an external Postgres database. That could be accomplished by having a `gitea-postgres-ssl` secret: ``` apiVersion: v1 kind: Secret type: Opaque metadata: name: gitea-postgres-ssl data: postgresql.crt: <base64...> postgresql.key: <base64...> root.crt: <base64...> ``` and then mounting this as a volume in Gitea using: ``` extraVolumes: - name: postgres-ssl-vol secret: secretName: gitea-postgres-ssl extraVolumeMounts: - name: postgres-ssl-vol readOnly: true mountPath: "/pg-ssl" ``` To get the right permissions on the credentials, we'd use the `initPreScript`: ``` initPreScript: | # copy postgres client and CA cert from mount and # give proper permissions mkdir -p /data/git/.postgresql cp /pg-ssl/* /data/git/.postgresql/ chown -R git:git /data/git/.postgresql/ chmod 400 /data/git/.postgresql/postgresql.key ``` and to make sure that Gitea uses the certificate we need to pass the proper postgres environment variables (both to the init container and the "main" container): ``` statefulset: env: - name: "PGSSLCERT" value: "/data/git/.postgresql/postgresql.crt" - name: "PGSSLKEY" value: "/data/git/.postgresql/postgresql.key" - name: "PGSSLROOTCERT" value: "/data/git/.postgresql/root.crt" ``` Co-authored-by: Peter Gardfjäll <peter.gardfjall.work@gmail.com> Reviewed-on: gitea/helm-chart#47 Reviewed-by: luhahn <luhahn@noreply.gitea.io> Reviewed-by: 6543 <6543@obermui.de> Co-authored-by: petergardfjall <petergardfjall@noreply.gitea.io> Co-committed-by: petergardfjall <petergardfjall@noreply.gitea.io>

Fixed an error in ldap port setting. Added ldap checksum to deployment so chart will actually update on ldap changes. Fixes: #99 Co-authored-by: Lucas Hahn <lucas.hahn@novum-rgi.de> Co-authored-by: Lunny Xiao <xiaolunwen@gmail.com> Reviewed-on: gitea/helm-chart#101 Reviewed-by: lafriks <lafriks@noreply.gitea.io> Reviewed-by: Lunny Xiao <xiaolunwen@gmail.com> Co-authored-by: luhahn <luhahn@noreply.gitea.io> Co-committed-by: luhahn <luhahn@noreply.gitea.io>

Reviewed-on: gitea/helm-chart#102 Reviewed-by: luhahn <luhahn@noreply.gitea.io> Reviewed-by: Lunny Xiao <xiaolunwen@gmail.com> Co-authored-by: fabioluciano <fabioluciano@noreply.gitea.io> Co-committed-by: fabioluciano <fabioluciano@noreply.gitea.io>

Reviewed-on: gitea/helm-chart#97 Reviewed-by: Lunny Xiao <xiaolunwen@gmail.com> Co-authored-by: techknowlogick <techknowlogick@gitea.io> Co-committed-by: techknowlogick <techknowlogick@gitea.io>

Kebab case will fail because of the current ldap default values in values.yml as stated in #88 Co-authored-by: Lucas Hahn <lucas.hahn@novum-rgi.de> Reviewed-on: gitea/helm-chart#89 Reviewed-by: lafriks <lafriks@noreply.gitea.io> Reviewed-by: techknowlogick <techknowlogick@gitea.io> Co-authored-by: luhahn <luhahn@noreply.gitea.io> Co-committed-by: luhahn <luhahn@noreply.gitea.io>

Move chart version to drone build using tag Merge branch 'master' into feat/chart_version Co-authored-by: Lauris BH <lauris@nix.lv> Co-authored-by: techknowlogick <techknowlogick@gitea.io> Reviewed-on: gitea/helm-chart#93 Reviewed-by: luhahn <luhahn@noreply.gitea.io> Reviewed-by: techknowlogick <techknowlogick@gitea.io> Co-Authored-By: lafriks <lafriks@noreply.gitea.io> Co-Committed-By: lafriks <lafriks@noreply.gitea.io>

Use image tag instead of image version in values Change to tenary function instead of if Update description and add link to tag list Fixup readme Co-authored-by: Lauris BH <lauris@nix.lv> Reviewed-on: gitea/helm-chart#91 Reviewed-by: luhahn <luhahn@noreply.gitea.io> Reviewed-by: techknowlogick <techknowlogick@gitea.io> Co-Authored-By: lafriks <lafriks@noreply.gitea.io> Co-Committed-By: lafriks <lafriks@noreply.gitea.io>

Improve ldap settings with helper function Allow clusterIP for http service to be set, default to None Use imagePullSecrets in statefulset now Update default values Update README Bump Chart version Co-authored-by: luhahn <lucas.hahn@novum-rgi.de> Reviewed-on: gitea/helm-chart#87 Reviewed-by: lafriks <lafriks@noreply.gitea.io> Reviewed-by: Lunny Xiao <xiaolunwen@gmail.com> Co-Authored-By: luhahn <luhahn@noreply.gitea.io> Co-Committed-By: luhahn <luhahn@noreply.gitea.io>

Fix ingress path type for 1.16 Bump chart version Co-authored-by: Lucas Hahn <lucas.hahn@novum-rgi.de> Reviewed-on: gitea/helm-chart#83 Reviewed-by: 6543 <6543@obermui.de> Reviewed-by: Lunny Xiao <xiaolunwen@gmail.com> Co-Authored-By: luhahn <luhahn@noreply.gitea.io> Co-Committed-By: luhahn <luhahn@noreply.gitea.io>

Fix admin user creation for gitea 1.13.0 Add load balancer hint for ssh in README Merge branch 'master' into fix-admin-user-creation Co-authored-by: Lucas Hahn <lucas.hahn@novum-rgi.de> Reviewed-on: gitea/helm-chart#80 Reviewed-by: Andrew Thornton <art27@cantab.net> Reviewed-by: Lunny Xiao <xiaolunwen@gmail.com> Co-Authored-By: luhahn <luhahn@noreply.gitea.io> Co-Committed-By: luhahn <luhahn@noreply.gitea.io>

Co-authored-by: Sebastian Kuethe <sebastian.kuethe@she.net> Co-authored-by: techknowlogick <techknowlogick@gitea.io> Reviewed-on: gitea/helm-chart#78 Reviewed-by: luhahn <luhahn@noreply.gitea.io> Reviewed-by: lafriks <lafriks@noreply.gitea.io> Co-Authored-By: skuethe <skuethe@noreply.gitea.io> Co-Committed-By: skuethe <skuethe@noreply.gitea.io>

Gitea 1.13.0 Update 'README.md' Update 'values.yaml' Reviewed-on: gitea/helm-chart#75 Reviewed-by: lafriks <lafriks@noreply.gitea.io> Co-Authored-By: techknowlogick <techknowlogick@gitea.io> Co-Committed-By: techknowlogick <techknowlogick@gitea.io>

Bump chart version to 2.0.7 Fix Ingress - Ingress uses now .Capabilities.APIVersions.Has to compare the api version available - Added pathType since it is required in v1 and optional in v1beta1 Co-authored-by: Lucas Hahn <lucas.hahn@novum-rgi.de> Reviewed-on: gitea/helm-chart#70 Reviewed-by: Andrew Thornton <art27@cantab.net> Reviewed-by: Lunny Xiao <xiaolunwen@gmail.com> Co-Authored-By: luhahn <luhahn@noreply.gitea.io> Co-Committed-By: luhahn <luhahn@noreply.gitea.io>

Fixes access of Capabilities variable Co-authored-by: Joel Gallant <joel@joelgallant.me> Reviewed-on: gitea/helm-chart#67 Reviewed-by: techknowlogick <techknowlogick@gitea.io> Reviewed-by: luhahn <luhahn@noreply.gitea.io> Co-Authored-By: joelgallant <joelgallant@noreply.gitea.io> Co-Committed-By: joelgallant <joelgallant@noreply.gitea.io>

Fixes ingress by using new {service: {name, port}} structure Co-authored-by: Joel Gallant <joel@joelgallant.me> Reviewed-on: gitea/helm-chart#65 Reviewed-by: luhahn <luhahn@noreply.gitea.io> Reviewed-by: techknowlogick <techknowlogick@gitea.io> Co-Authored-By: joelgallant <joelgallant@noreply.gitea.io> Co-Committed-By: joelgallant <joelgallant@noreply.gitea.io>

Use apiVersion v1 for Ingress in 1.19+ Currently, a warning is shown in newer versions of kubernetes: ``` W1120 10:04:16.194312 8003 warnings.go:67] networking.k8s.io/v1beta1 Ingress is deprecated in v1.19+, unavailable in v1.22+; use networking.k8s.io/v1 Ingress ``` Co-authored-by: Joel Gallant <joel@joelgallant.me> Reviewed-on: gitea/helm-chart#63 Reviewed-by: techknowlogick <techknowlogick@gitea.io> Reviewed-by: Andrew Thornton <art27@cantab.net> Co-Authored-By: joelgallant <joelgallant@noreply.gitea.io> Co-Committed-By: joelgallant <joelgallant@noreply.gitea.io>

Get http annotations from the right place Allow templated annotations for http-service When deploying this to cloud Kubernetes, annotations are useful to add features to the http-service Co-authored-by: javier <perezrubio.javier@gmail.com> Reviewed-on: gitea/helm-chart#62 Reviewed-by: luhahn <luhahn@noreply.gitea.io> Reviewed-by: Lunny Xiao <xiaolunwen@gmail.com> Co-Authored-By: JPRbrs <jprbrs@noreply.gitea.io> Co-Committed-By: JPRbrs <jprbrs@noreply.gitea.io>

Merge branch 'master' into gitea1.12.6 Gitea 1.12.6 Co-authored-by: luhahn <luhahn@noreply.gitea.io> Co-authored-by: Matti R <matti@mdranta.net> Reviewed-on: gitea/helm-chart#58 Reviewed-by: Lunny Xiao <xiaolunwen@gmail.com> Reviewed-by: luhahn <luhahn@noreply.gitea.io> Co-Authored-By: techknowlogick <techknowlogick@gitea.io> Co-Committed-By: techknowlogick <techknowlogick@gitea.io>

fix-test-pod service name and port was wrong and was preventing the helm chart deployment Co-authored-by: javier <perezrubio.javier@gmail.com> Reviewed-on: gitea/helm-chart#56 Reviewed-by: techknowlogick <techknowlogick@gitea.io> Reviewed-by: luhahn <luhahn@noreply.gitea.io> Co-Authored-By: JPRbrs <jprbrs@noreply.gitea.io> Co-Committed-By: JPRbrs <jprbrs@noreply.gitea.io>

Merge branch 'master' into master Bump chart version and add gitea/helm-chart as link for artifacthub Remove default value for storageClass Remove storageClass 'Standard' and let it be set automatically Co-authored-by: Lucas Hahn <lucas.hahn@novum-rgi.de> Reviewed-on: gitea/helm-chart#45 Reviewed-by: techknowlogick <techknowlogick@gitea.io> Reviewed-by: Andrew Thornton <art27@cantab.net> Co-Authored-By: luhahn <luhahn@noreply.gitea.io> Co-Committed-By: luhahn <luhahn@noreply.gitea.io>

Merge branch 'master' into cluster-domain Make cluster domain configurable Currently the deployment fails due to a hard-coded cluster domain "cluster.local". Co-authored-by: Lunny Xiao <xiaolunwen@gmail.com> Co-authored-by: Steffen Vogel <post@steffenvogel.de> Reviewed-on: gitea/helm-chart#51 Reviewed-by: luhahn <luhahn@noreply.gitea.io> Reviewed-by: Andrew Thornton <art27@cantab.net> Co-Authored-By: Steffen Vogel <stv0g@noreply.gitea.io> Co-Committed-By: Steffen Vogel <stv0g@noreply.gitea.io>

Fix indention of exterrnal IPs for SSH service Co-authored-by: Steffen Vogel <post@steffenvogel.de> Reviewed-on: gitea/helm-chart#52 Reviewed-by: luhahn <luhahn@noreply.gitea.io> Reviewed-by: Lunny Xiao <xiaolunwen@gmail.com> Co-Authored-By: Steffen Vogel <stv0g@noreply.gitea.io> Co-Committed-By: Steffen Vogel <stv0g@noreply.gitea.io>