This pull request adds the `app` and `version` labels that are used by Istio. > Pods with app and version labels: We recommend adding an explicit app label and version label to the specification of the pods deployed using a Kubernetes Deployment. The app and version labels add contextual information to the metrics and telemetry that Istio collects. > > * The app label: Each deployment should have a distinct app label with a meaningful value. The app label is used to add contextual information in distributed tracing. > > * The version label: This label indicates the version of the application corresponding to the particular deployment. From https://istio.io/latest/docs/ops/deployment/requirements/#pod-requirements Reviewed-on: gitea/helm-chart#121 Reviewed-by: luhahn <luhahn@noreply.gitea.io> Reviewed-by: lafriks <lafriks@noreply.gitea.io> Co-authored-by: Starefossen <starefossen@noreply.gitea.io> Co-committed-by: Starefossen <starefossen@noreply.gitea.io>

Reviewed-on: gitea/helm-chart#116 Reviewed-by: luhahn <luhahn@noreply.gitea.io> Reviewed-by: lafriks <lafriks@noreply.gitea.io> Co-authored-by: Starefossen <starefossen@noreply.gitea.io> Co-committed-by: Starefossen <starefossen@noreply.gitea.io>

Reviewed-on: gitea/helm-chart#115 Reviewed-by: luhahn <luhahn@noreply.gitea.io> Reviewed-by: lafriks <lafriks@noreply.gitea.io> Co-authored-by: martencassel <martencassel@noreply.gitea.io> Co-committed-by: martencassel <martencassel@noreply.gitea.io>

closes #110 Co-authored-by: Lunny Xiao <xiaolunwen@gmail.com> Reviewed-on: gitea/helm-chart#111 Reviewed-by: luhahn <luhahn@noreply.gitea.io> Reviewed-by: Lunny Xiao <xiaolunwen@gmail.com> Co-authored-by: viceice <viceice@noreply.gitea.io> Co-committed-by: viceice <viceice@noreply.gitea.io>

Nothing critical, but had a typo in the naming of the config entry to enable `pprof`. Co-authored-by: josef <josef.nilsen@outlook.com> Reviewed-on: gitea/helm-chart#114 Reviewed-by: luhahn <luhahn@noreply.gitea.io> Reviewed-by: Lunny Xiao <xiaolunwen@gmail.com> Co-authored-by: JosefWN <josefwn@noreply.gitea.io> Co-committed-by: JosefWN <josefwn@noreply.gitea.io>

SSH service might want to limit the a range of source IPs. LoadBalancerSourceRanges enables to limit them just passing a list of CIDR addresses to whitelist Co-authored-by: javier <perezrubio.javier@gmail.com> Co-authored-by: techknowlogick <techknowlogick@gitea.io> Reviewed-on: gitea/helm-chart#105 Reviewed-by: luhahn <luhahn@noreply.gitea.io> Reviewed-by: techknowlogick <techknowlogick@gitea.io> Co-authored-by: JPRbrs <jprbrs@noreply.gitea.io> Co-committed-by: JPRbrs <jprbrs@noreply.gitea.io>

Reviewed-on: gitea/helm-chart#108 Reviewed-by: Lunny Xiao <xiaolunwen@gmail.com> Reviewed-by: luhahn <luhahn@noreply.gitea.io> Co-authored-by: techknowlogick <techknowlogick@gitea.io> Co-committed-by: techknowlogick <techknowlogick@gitea.io>

1. sshPublicKeyAttribute is useful to sync ssh public keys from ldap. 2. It would be easier to set pvc annotations/labels for those who are using storage services from cloud providers. Co-authored-by: 钱卫春 <qianwch@chinasofti.com> Reviewed-on: gitea/helm-chart#76 Reviewed-by: techknowlogick <techknowlogick@gitea.io> Reviewed-by: luhahn <luhahn@noreply.gitea.io> Co-authored-by: sanigo <sanigo@noreply.gitea.io> Co-committed-by: sanigo <sanigo@noreply.gitea.io>

Adds support for toggling support for `pprof` and metrics: ```yaml gitea: pprofEnabled: true metrics: enabled: true serviceMonitor: enabled: true ``` Co-authored-by: josef <josef.nilsen@outlook.com> Reviewed-on: gitea/helm-chart#100 Reviewed-by: luhahn <luhahn@noreply.gitea.io> Reviewed-by: techknowlogick <techknowlogick@gitea.io> Co-authored-by: JosefWN <josefwn@noreply.gitea.io> Co-committed-by: JosefWN <josefwn@noreply.gitea.io>

This PR adds a few new chart features which adds to the flexibility of the chart. - allow extra volumes to be mounted (such as secrets): 2f862c5a48 - pass environment variables also to the init-container: 7044049478 - allow a preparation script to be "injected" into the init-container: 6125a69345 As a concrete example of how this can be used, I use is to configure Gitea to use client certificate authentication against an external Postgres database. That could be accomplished by having a `gitea-postgres-ssl` secret: ``` apiVersion: v1 kind: Secret type: Opaque metadata: name: gitea-postgres-ssl data: postgresql.crt: <base64...> postgresql.key: <base64...> root.crt: <base64...> ``` and then mounting this as a volume in Gitea using: ``` extraVolumes: - name: postgres-ssl-vol secret: secretName: gitea-postgres-ssl extraVolumeMounts: - name: postgres-ssl-vol readOnly: true mountPath: "/pg-ssl" ``` To get the right permissions on the credentials, we'd use the `initPreScript`: ``` initPreScript: | # copy postgres client and CA cert from mount and # give proper permissions mkdir -p /data/git/.postgresql cp /pg-ssl/* /data/git/.postgresql/ chown -R git:git /data/git/.postgresql/ chmod 400 /data/git/.postgresql/postgresql.key ``` and to make sure that Gitea uses the certificate we need to pass the proper postgres environment variables (both to the init container and the "main" container): ``` statefulset: env: - name: "PGSSLCERT" value: "/data/git/.postgresql/postgresql.crt" - name: "PGSSLKEY" value: "/data/git/.postgresql/postgresql.key" - name: "PGSSLROOTCERT" value: "/data/git/.postgresql/root.crt" ``` Co-authored-by: Peter Gardfjäll <peter.gardfjall.work@gmail.com> Reviewed-on: gitea/helm-chart#47 Reviewed-by: luhahn <luhahn@noreply.gitea.io> Reviewed-by: 6543 <6543@obermui.de> Co-authored-by: petergardfjall <petergardfjall@noreply.gitea.io> Co-committed-by: petergardfjall <petergardfjall@noreply.gitea.io>

Fixed an error in ldap port setting. Added ldap checksum to deployment so chart will actually update on ldap changes. Fixes: #99 Co-authored-by: Lucas Hahn <lucas.hahn@novum-rgi.de> Co-authored-by: Lunny Xiao <xiaolunwen@gmail.com> Reviewed-on: gitea/helm-chart#101 Reviewed-by: lafriks <lafriks@noreply.gitea.io> Reviewed-by: Lunny Xiao <xiaolunwen@gmail.com> Co-authored-by: luhahn <luhahn@noreply.gitea.io> Co-committed-by: luhahn <luhahn@noreply.gitea.io>

Reviewed-on: gitea/helm-chart#102 Reviewed-by: luhahn <luhahn@noreply.gitea.io> Reviewed-by: Lunny Xiao <xiaolunwen@gmail.com> Co-authored-by: fabioluciano <fabioluciano@noreply.gitea.io> Co-committed-by: fabioluciano <fabioluciano@noreply.gitea.io>

Reviewed-on: gitea/helm-chart#97 Reviewed-by: Lunny Xiao <xiaolunwen@gmail.com> Co-authored-by: techknowlogick <techknowlogick@gitea.io> Co-committed-by: techknowlogick <techknowlogick@gitea.io>

Kebab case will fail because of the current ldap default values in values.yml as stated in #88 Co-authored-by: Lucas Hahn <lucas.hahn@novum-rgi.de> Reviewed-on: gitea/helm-chart#89 Reviewed-by: lafriks <lafriks@noreply.gitea.io> Reviewed-by: techknowlogick <techknowlogick@gitea.io> Co-authored-by: luhahn <luhahn@noreply.gitea.io> Co-committed-by: luhahn <luhahn@noreply.gitea.io>

Move chart version to drone build using tag Merge branch 'master' into feat/chart_version Co-authored-by: Lauris BH <lauris@nix.lv> Co-authored-by: techknowlogick <techknowlogick@gitea.io> Reviewed-on: gitea/helm-chart#93 Reviewed-by: luhahn <luhahn@noreply.gitea.io> Reviewed-by: techknowlogick <techknowlogick@gitea.io> Co-Authored-By: lafriks <lafriks@noreply.gitea.io> Co-Committed-By: lafriks <lafriks@noreply.gitea.io>

Use image tag instead of image version in values Change to tenary function instead of if Update description and add link to tag list Fixup readme Co-authored-by: Lauris BH <lauris@nix.lv> Reviewed-on: gitea/helm-chart#91 Reviewed-by: luhahn <luhahn@noreply.gitea.io> Reviewed-by: techknowlogick <techknowlogick@gitea.io> Co-Authored-By: lafriks <lafriks@noreply.gitea.io> Co-Committed-By: lafriks <lafriks@noreply.gitea.io>

Improve ldap settings with helper function Allow clusterIP for http service to be set, default to None Use imagePullSecrets in statefulset now Update default values Update README Bump Chart version Co-authored-by: luhahn <lucas.hahn@novum-rgi.de> Reviewed-on: gitea/helm-chart#87 Reviewed-by: lafriks <lafriks@noreply.gitea.io> Reviewed-by: Lunny Xiao <xiaolunwen@gmail.com> Co-Authored-By: luhahn <luhahn@noreply.gitea.io> Co-Committed-By: luhahn <luhahn@noreply.gitea.io>

Fix ingress path type for 1.16 Bump chart version Co-authored-by: Lucas Hahn <lucas.hahn@novum-rgi.de> Reviewed-on: gitea/helm-chart#83 Reviewed-by: 6543 <6543@obermui.de> Reviewed-by: Lunny Xiao <xiaolunwen@gmail.com> Co-Authored-By: luhahn <luhahn@noreply.gitea.io> Co-Committed-By: luhahn <luhahn@noreply.gitea.io>

Fix admin user creation for gitea 1.13.0 Add load balancer hint for ssh in README Merge branch 'master' into fix-admin-user-creation Co-authored-by: Lucas Hahn <lucas.hahn@novum-rgi.de> Reviewed-on: gitea/helm-chart#80 Reviewed-by: Andrew Thornton <art27@cantab.net> Reviewed-by: Lunny Xiao <xiaolunwen@gmail.com> Co-Authored-By: luhahn <luhahn@noreply.gitea.io> Co-Committed-By: luhahn <luhahn@noreply.gitea.io>

Co-authored-by: Sebastian Kuethe <sebastian.kuethe@she.net> Co-authored-by: techknowlogick <techknowlogick@gitea.io> Reviewed-on: gitea/helm-chart#78 Reviewed-by: luhahn <luhahn@noreply.gitea.io> Reviewed-by: lafriks <lafriks@noreply.gitea.io> Co-Authored-By: skuethe <skuethe@noreply.gitea.io> Co-Committed-By: skuethe <skuethe@noreply.gitea.io>

Gitea 1.13.0 Update 'README.md' Update 'values.yaml' Reviewed-on: gitea/helm-chart#75 Reviewed-by: lafriks <lafriks@noreply.gitea.io> Co-Authored-By: techknowlogick <techknowlogick@gitea.io> Co-Committed-By: techknowlogick <techknowlogick@gitea.io>

Bump chart version to 2.0.7 Fix Ingress - Ingress uses now .Capabilities.APIVersions.Has to compare the api version available - Added pathType since it is required in v1 and optional in v1beta1 Co-authored-by: Lucas Hahn <lucas.hahn@novum-rgi.de> Reviewed-on: gitea/helm-chart#70 Reviewed-by: Andrew Thornton <art27@cantab.net> Reviewed-by: Lunny Xiao <xiaolunwen@gmail.com> Co-Authored-By: luhahn <luhahn@noreply.gitea.io> Co-Committed-By: luhahn <luhahn@noreply.gitea.io>

Fixes access of Capabilities variable Co-authored-by: Joel Gallant <joel@joelgallant.me> Reviewed-on: gitea/helm-chart#67 Reviewed-by: techknowlogick <techknowlogick@gitea.io> Reviewed-by: luhahn <luhahn@noreply.gitea.io> Co-Authored-By: joelgallant <joelgallant@noreply.gitea.io> Co-Committed-By: joelgallant <joelgallant@noreply.gitea.io>

Fixes ingress by using new {service: {name, port}} structure Co-authored-by: Joel Gallant <joel@joelgallant.me> Reviewed-on: gitea/helm-chart#65 Reviewed-by: luhahn <luhahn@noreply.gitea.io> Reviewed-by: techknowlogick <techknowlogick@gitea.io> Co-Authored-By: joelgallant <joelgallant@noreply.gitea.io> Co-Committed-By: joelgallant <joelgallant@noreply.gitea.io>

Use apiVersion v1 for Ingress in 1.19+ Currently, a warning is shown in newer versions of kubernetes: ``` W1120 10:04:16.194312 8003 warnings.go:67] networking.k8s.io/v1beta1 Ingress is deprecated in v1.19+, unavailable in v1.22+; use networking.k8s.io/v1 Ingress ``` Co-authored-by: Joel Gallant <joel@joelgallant.me> Reviewed-on: gitea/helm-chart#63 Reviewed-by: techknowlogick <techknowlogick@gitea.io> Reviewed-by: Andrew Thornton <art27@cantab.net> Co-Authored-By: joelgallant <joelgallant@noreply.gitea.io> Co-Committed-By: joelgallant <joelgallant@noreply.gitea.io>

Get http annotations from the right place Allow templated annotations for http-service When deploying this to cloud Kubernetes, annotations are useful to add features to the http-service Co-authored-by: javier <perezrubio.javier@gmail.com> Reviewed-on: gitea/helm-chart#62 Reviewed-by: luhahn <luhahn@noreply.gitea.io> Reviewed-by: Lunny Xiao <xiaolunwen@gmail.com> Co-Authored-By: JPRbrs <jprbrs@noreply.gitea.io> Co-Committed-By: JPRbrs <jprbrs@noreply.gitea.io>

Merge branch 'master' into gitea1.12.6 Gitea 1.12.6 Co-authored-by: luhahn <luhahn@noreply.gitea.io> Co-authored-by: Matti R <matti@mdranta.net> Reviewed-on: gitea/helm-chart#58 Reviewed-by: Lunny Xiao <xiaolunwen@gmail.com> Reviewed-by: luhahn <luhahn@noreply.gitea.io> Co-Authored-By: techknowlogick <techknowlogick@gitea.io> Co-Committed-By: techknowlogick <techknowlogick@gitea.io>

fix-test-pod service name and port was wrong and was preventing the helm chart deployment Co-authored-by: javier <perezrubio.javier@gmail.com> Reviewed-on: gitea/helm-chart#56 Reviewed-by: techknowlogick <techknowlogick@gitea.io> Reviewed-by: luhahn <luhahn@noreply.gitea.io> Co-Authored-By: JPRbrs <jprbrs@noreply.gitea.io> Co-Committed-By: JPRbrs <jprbrs@noreply.gitea.io>

Merge branch 'master' into master Bump chart version and add gitea/helm-chart as link for artifacthub Remove default value for storageClass Remove storageClass 'Standard' and let it be set automatically Co-authored-by: Lucas Hahn <lucas.hahn@novum-rgi.de> Reviewed-on: gitea/helm-chart#45 Reviewed-by: techknowlogick <techknowlogick@gitea.io> Reviewed-by: Andrew Thornton <art27@cantab.net> Co-Authored-By: luhahn <luhahn@noreply.gitea.io> Co-Committed-By: luhahn <luhahn@noreply.gitea.io>

Merge branch 'master' into cluster-domain Make cluster domain configurable Currently the deployment fails due to a hard-coded cluster domain "cluster.local". Co-authored-by: Lunny Xiao <xiaolunwen@gmail.com> Co-authored-by: Steffen Vogel <post@steffenvogel.de> Reviewed-on: gitea/helm-chart#51 Reviewed-by: luhahn <luhahn@noreply.gitea.io> Reviewed-by: Andrew Thornton <art27@cantab.net> Co-Authored-By: Steffen Vogel <stv0g@noreply.gitea.io> Co-Committed-By: Steffen Vogel <stv0g@noreply.gitea.io>

Fix indention of exterrnal IPs for SSH service Co-authored-by: Steffen Vogel <post@steffenvogel.de> Reviewed-on: gitea/helm-chart#52 Reviewed-by: luhahn <luhahn@noreply.gitea.io> Reviewed-by: Lunny Xiao <xiaolunwen@gmail.com> Co-Authored-By: Steffen Vogel <stv0g@noreply.gitea.io> Co-Committed-By: Steffen Vogel <stv0g@noreply.gitea.io>

Upgrade mariadb Helm chart to 8.0.0 The names of the values changed in the new Helm chart, see [1]. Thus the Helm chart ships breaking changes and therefore bump the major version of this Chart.yaml (not sure if you use semver?) Furthermore, there is a bug [2] where not setting the root password results in the mariadb entering a CrashLoopBackOff when re-installing it. Thus set it (as done in the mysql values already). [1] 1206942b69 [2] https://github.com/bitnami/charts/issues/3884 Co-authored-by: Andre Schröder <andre.schroedr@gmail.com> Reviewed-on: https://gitea.com/gitea/helm-chart/pulls/48 Reviewed-by: Andrew Thornton <art27@cantab.net> Reviewed-by: luhahn <luhahn@noreply.gitea.io> Co-Authored-By: schra <schra@noreply.gitea.io> Co-Committed-By: schra <schra@noreply.gitea.io>

Enable LoadBalancer type service of http (#42) Enable LoadBalancer type service of http Signed-off-by: Martyn Ranyard <m@rtyn.berlin> Co-authored-by: Martyn Ranyard <m@rtyn.berlin> Reviewed-on: gitea/helm-chart#42 Reviewed-by: luhahn <luhahn@noreply.gitea.io> Reviewed-by: techknowlogick <techknowlogick@gitea.io> Co-Authored-By: iMartyn <imartyn@noreply.gitea.io> Co-Committed-By: iMartyn <imartyn@noreply.gitea.io> Co-authored-by: iMartyn <imartyn@noreply.gitea.io> Reviewed-on: gitea/helm-chart#49 Reviewed-by: luhahn <luhahn@noreply.gitea.io> Reviewed-by: Andrew Thornton <art27@cantab.net> Co-Authored-By: schra <schra@noreply.gitea.io> Co-Committed-By: schra <schra@noreply.gitea.io>

Bump Chart version Extend REAMDE - add default handling explanation - add MariaDB values Add APP_DATA_PATH default to config Co-authored-by: Lucas Hahn <lucas.hahn@novum-rgi.de> Reviewed-on: gitea/helm-chart#37 Reviewed-by: Andrew Thornton <art27@cantab.net> Reviewed-by: Lunny Xiao <xiaolunwen@gmail.com>

Gitea 1.12.5 Co-authored-by: Matti R <matti@mdranta.net> Reviewed-on: gitea/helm-chart#38 Reviewed-by: Andrew Thornton <art27@cantab.net> Reviewed-by: Lunny Xiao <xiaolunwen@gmail.com>

Merge branch 'master' into postgres-version Use postgres v9.7.2 helm chart Co-authored-by: Matti R <matti@mdranta.net> Reviewed-on: gitea/helm-chart#36 Reviewed-by: lafriks <lafriks@noreply.gitea.io> Reviewed-by: luhahn <luhahn@noreply.gitea.io>

use alpine package version of helm Reviewed-on: gitea/helm-chart#35 Reviewed-by: lafriks <lafriks@noreply.gitea.io> Reviewed-by: 6543 <6543@noreply.gitea.io>

Update dependencies - Update Postgres version from 8.6.4 to 9.7.3 - Update Mysql version from 6.14.8 to 6.14.10 - Add MariaDB as built in dependency Co-authored-by: Lucas Hahn <lucas.hahn@novum-rgi.de> Reviewed-on: gitea/helm-chart#33 Reviewed-by: Jonas Franz <jonasfranz@noreply.gitea.io> Reviewed-by: techknowlogick <techknowlogick@gitea.io>

Fix NodePort settings for ssh service Co-authored-by: Lucas Hahn <lucas.hahn@novum-rgi.de> Reviewed-on: gitea/helm-chart#32 Reviewed-by: lafriks <lafriks@noreply.gitea.io> Reviewed-by: Andrew Thornton <art27@cantab.net>

Merge branch 'master' into fix-indentation Merge branch 'master' into fix-indentation Fix indentation error inside of yaml example The `SCHEMA` key belongs to the `database` map. This commit fixes the indindentation to properly reflect that. Signed-off-by: Flavio Castelli <fcastelli@suse.com> Co-authored-by: Lunny Xiao <xiaolunwen@gmail.com> Co-authored-by: Flavio Castelli <fcastelli@suse.com> Reviewed-on: gitea/helm-chart#30 Reviewed-by: luhahn <luhahn@noreply.gitea.io> Reviewed-by: Lunny Xiao <xiaolunwen@gmail.com> Reviewed-by: Andrew Thornton <art27@cantab.net>

Bump Chart version Move all password related data to secrets Co-authored-by: Lucas Hahn <lucas.hahn@novum-rgi.de> Reviewed-on: gitea/helm-chart#28 Reviewed-by: techknowlogick <techknowlogick@gitea.io> Reviewed-by: Lunny Xiao <xiaolunwen@gmail.com>

ability to add pod annotation Reviewed-on: gitea/helm-chart#24 Reviewed-by: luhahn <luhahn@noreply.gitea.io> Reviewed-by: techknowlogick <techknowlogick@gitea.io>

Use recursive chmod for .ssh directory in init container Co-authored-by: Lucas Hahn <lucas.hahn@novum-rgi.de> Reviewed-on: gitea/helm-chart#26 Reviewed-by: techknowlogick <techknowlogick@gitea.io>

Merge branch 'master' into techknowlogick-patch-1 Merge branch 'master' into techknowlogick-patch-1 utilize service for port forwarding in instructions Reviewed-on: gitea/helm-chart#22 Reviewed-by: luhahn <luhahn@noreply.gitea.io> Reviewed-by: Lunny Xiao <xiaolunwen@gmail.com>

Fix ssh permission denied(publickey) at reinstalling the chart without deleting pvc Co-authored-by: Lucas Hahn <lucas.hahn@novum-rgi.de> Reviewed-on: gitea/helm-chart#25 Reviewed-by: techknowlogick <techknowlogick@gitea.io> Reviewed-by: Lunny Xiao <xiaolunwen@gmail.com>