ad3637303f
- gitea-push eventsource (:12000/push) + gitea-deploy sensor (filter ref main/master -> submit fxhnt-cockpit, commit-sha from body.after). Pods NOT part-of:foxhunt (stay default-allow, matching working workflow-trigger pattern). - gitea netpol: egress 12000 namespace-wide (eventsource not part-of -> can't target by label) - gitea values: webhook.ALLOWED_HOST_LIST=private (Gitea blocked delivery to in-cluster 10.32.x) Verified: push to fxhnt master auto-fires a cockpit build+deploy. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
74 lines
2.2 KiB
YAML
74 lines
2.2 KiB
YAML
# Gitea — lightweight git host replacing GitLab (Phase 2B). External Postgres (existing in-cluster
|
|
# `postgres`), no bundled DB/redis/memcached, Actions off (Argo does CI). Internal-only until cutover.
|
|
replicaCount: 1
|
|
image:
|
|
rootless: true
|
|
|
|
# RWO PVC (sbs-default-retain) → only one pod can mount it. RollingUpdate deadlocks (new pod can't
|
|
# attach while old holds it). Recreate terminates old before starting new.
|
|
strategy:
|
|
type: Recreate
|
|
|
|
# Disable all bundled subcharts — reuse the existing in-cluster postgres, no redis/memcached.
|
|
postgresql:
|
|
enabled: false
|
|
postgresql-ha:
|
|
enabled: false
|
|
redis-cluster:
|
|
enabled: false
|
|
redis:
|
|
enabled: false
|
|
# chart 12.x replaced redis with valkey — disable both, gitea uses embedded queue/cache/session
|
|
valkey-cluster:
|
|
enabled: false
|
|
valkey:
|
|
enabled: false
|
|
|
|
persistence:
|
|
enabled: true
|
|
size: 5Gi
|
|
storageClass: sbs-default-retain
|
|
|
|
resources:
|
|
requests: { cpu: 100m, memory: 256Mi }
|
|
limits: { cpu: "1", memory: 2Gi } # 2Gi headroom: indexing the 876MB foxhunt pack OOMed at 512Mi
|
|
|
|
service:
|
|
http: { type: ClusterIP, port: 3000 }
|
|
ssh: { type: ClusterIP, port: 22 }
|
|
|
|
gitea:
|
|
admin:
|
|
existingSecret: gitea-admin
|
|
config:
|
|
actions:
|
|
ENABLED: "false" # Argo does CI/CD; Gitea Actions off (subchart removed in chart 12.x)
|
|
server:
|
|
ROOT_URL: https://git.fxhnt.ai/
|
|
DOMAIN: git.fxhnt.ai
|
|
SSH_DOMAIN: git.fxhnt.ai
|
|
SSH_PORT: "22" # clean git@git.fxhnt.ai clone URLs; :2222 retired (Task 5).
|
|
DISABLE_SSH: "false"
|
|
database:
|
|
DB_TYPE: postgres
|
|
HOST: postgres.foxhunt.svc.cluster.local:5432
|
|
NAME: gitea
|
|
USER: gitea
|
|
service:
|
|
DISABLE_REGISTRATION: "true"
|
|
webhook:
|
|
# allow delivery to in-cluster targets (Argo Events eventsource on the 10.32.x service CIDR);
|
|
# default blocks private hosts. Argo auto-deploy webhook needs this.
|
|
ALLOWED_HOST_LIST: "private"
|
|
# No redis/memcached — use embedded adapters
|
|
cache:
|
|
ADAPTER: memory
|
|
session:
|
|
PROVIDER: db
|
|
queue:
|
|
TYPE: level
|
|
additionalConfigFromEnvs:
|
|
- name: GITEA__database__PASSWD
|
|
valueFrom:
|
|
secretKeyRef: { name: gitea-db, key: password }
|