fa0e2a3809
- Wildcard LE cert for *.fxhnt.ai - Subdomain routing: git/grafana/prometheus.fxhnt.ai - CI/CD: Kaniko image builds, sccache, deploy stage - Grafana with Prometheus datasource - GitLab node upgraded to GP1-XS (16GB)
221 lines
4.3 KiB
YAML
221 lines
4.3 KiB
YAML
# GitLab CE - Foxhunt deployment
|
|
# Runs on dedicated 'gitlab' node pool (DEV1-L)
|
|
# External Postgres + Redis on always-on pool
|
|
|
|
global:
|
|
edition: ce
|
|
hosts:
|
|
domain: fxhnt.ai
|
|
gitlab:
|
|
name: git.fxhnt.ai
|
|
https: true
|
|
registry:
|
|
name: git.fxhnt.ai
|
|
https: true
|
|
ingress:
|
|
enabled: false
|
|
configureCertmanager: false
|
|
shell:
|
|
port: 2222
|
|
psql:
|
|
host: postgres.foxhunt.svc.cluster.local
|
|
port: 5432
|
|
database: gitlab
|
|
username: gitlab
|
|
password:
|
|
secret: gitlab-secrets
|
|
key: db-password
|
|
redis:
|
|
host: redis.foxhunt.svc.cluster.local
|
|
port: 6379
|
|
auth:
|
|
enabled: false
|
|
minio:
|
|
enabled: false
|
|
registry:
|
|
bucket: foxhunt-gitlab-registry
|
|
appConfig:
|
|
lfs:
|
|
bucket: foxhunt-gitlab-artifacts
|
|
connection:
|
|
secret: gitlab-s3-credentials
|
|
key: connection
|
|
artifacts:
|
|
bucket: foxhunt-gitlab-artifacts
|
|
connection:
|
|
secret: gitlab-s3-credentials
|
|
key: connection
|
|
uploads:
|
|
bucket: foxhunt-gitlab-artifacts
|
|
connection:
|
|
secret: gitlab-s3-credentials
|
|
key: connection
|
|
packages:
|
|
bucket: foxhunt-gitlab-artifacts
|
|
connection:
|
|
secret: gitlab-s3-credentials
|
|
key: connection
|
|
|
|
# Disable bundled databases — use external
|
|
postgresql:
|
|
install: false
|
|
redis:
|
|
install: false
|
|
|
|
# Disable components we don't need
|
|
installCertmanager: false
|
|
certmanager:
|
|
installCRDs: false
|
|
nginx-ingress:
|
|
enabled: false
|
|
prometheus:
|
|
install: true
|
|
rbac:
|
|
create: true
|
|
alertmanager:
|
|
enabled: false
|
|
server:
|
|
nodeSelector:
|
|
k8s.scaleway.com/pool-name: gitlab
|
|
tolerations:
|
|
- key: gitlab
|
|
operator: Equal
|
|
value: "true"
|
|
effect: NoSchedule
|
|
persistentVolume:
|
|
enabled: false
|
|
resources:
|
|
requests:
|
|
cpu: 100m
|
|
memory: 256Mi
|
|
limits:
|
|
cpu: 500m
|
|
memory: 512Mi
|
|
gitlab-runner:
|
|
install: false
|
|
|
|
# Registry — S3-backed
|
|
registry:
|
|
replicaCount: 1
|
|
hpa:
|
|
minReplicas: 1
|
|
maxReplicas: 1
|
|
storage:
|
|
secret: gitlab-s3-credentials
|
|
key: registry
|
|
nodeSelector:
|
|
k8s.scaleway.com/pool-name: gitlab
|
|
tolerations:
|
|
- key: gitlab
|
|
operator: Equal
|
|
value: "true"
|
|
effect: NoSchedule
|
|
|
|
# GitLab core components — all on gitlab node pool
|
|
gitlab:
|
|
webservice:
|
|
replicaCount: 1
|
|
hpa:
|
|
minReplicas: 1
|
|
maxReplicas: 1
|
|
workerProcesses: 2
|
|
workhorse:
|
|
extraArgs: "-apiLimit 0 -apiQueueLimit 0"
|
|
nodeSelector:
|
|
k8s.scaleway.com/pool-name: gitlab
|
|
tolerations:
|
|
- key: gitlab
|
|
operator: Equal
|
|
value: "true"
|
|
effect: NoSchedule
|
|
resources:
|
|
requests:
|
|
cpu: 500m
|
|
memory: 2Gi
|
|
limits:
|
|
cpu: 2000m
|
|
memory: 4Gi
|
|
extraEnv:
|
|
REDIS_URL: "redis://redis.foxhunt.svc.cluster.local:6379/8"
|
|
|
|
sidekiq:
|
|
replicas: 1
|
|
hpa:
|
|
minReplicas: 1
|
|
maxReplicas: 1
|
|
concurrency: 10
|
|
nodeSelector:
|
|
k8s.scaleway.com/pool-name: gitlab
|
|
tolerations:
|
|
- key: gitlab
|
|
operator: Equal
|
|
value: "true"
|
|
effect: NoSchedule
|
|
resources:
|
|
requests:
|
|
cpu: 250m
|
|
memory: 1Gi
|
|
limits:
|
|
cpu: 1000m
|
|
memory: 2Gi
|
|
extraEnv:
|
|
REDIS_URL: "redis://redis.foxhunt.svc.cluster.local:6379/8"
|
|
|
|
gitaly:
|
|
persistence:
|
|
enabled: true
|
|
size: 50Gi
|
|
nodeSelector:
|
|
k8s.scaleway.com/pool-name: gitlab
|
|
tolerations:
|
|
- key: gitlab
|
|
operator: Equal
|
|
value: "true"
|
|
effect: NoSchedule
|
|
resources:
|
|
requests:
|
|
cpu: 200m
|
|
memory: 512Mi
|
|
limits:
|
|
cpu: 1000m
|
|
memory: 2Gi
|
|
|
|
gitlab-shell:
|
|
replicaCount: 1
|
|
hpa:
|
|
minReplicas: 1
|
|
maxReplicas: 1
|
|
nodeSelector:
|
|
k8s.scaleway.com/pool-name: gitlab
|
|
tolerations:
|
|
- key: gitlab
|
|
operator: Equal
|
|
value: "true"
|
|
effect: NoSchedule
|
|
service:
|
|
type: NodePort
|
|
nodePort: 32222
|
|
|
|
toolbox:
|
|
backups:
|
|
objectStorage:
|
|
config:
|
|
secret: gitlab-s3-credentials
|
|
key: connection
|
|
nodeSelector:
|
|
k8s.scaleway.com/pool-name: gitlab
|
|
tolerations:
|
|
- key: gitlab
|
|
operator: Equal
|
|
value: "true"
|
|
effect: NoSchedule
|
|
|
|
kas:
|
|
enabled: false
|
|
hpa:
|
|
minReplicas: 0
|
|
maxReplicas: 0
|
|
|
|
gitlab-exporter:
|
|
enabled: false
|