134 lines
2.9 KiB
YAML
134 lines
2.9 KiB
YAML
apiVersion: apps/v1
|
|
kind: Deployment
|
|
metadata:
|
|
name: gitea
|
|
labels:
|
|
app: gitea
|
|
spec:
|
|
selector:
|
|
matchLabels:
|
|
app: gitea
|
|
template:
|
|
metadata:
|
|
labels:
|
|
app: gitea
|
|
spec:
|
|
containers:
|
|
- name: gitea
|
|
image: gitea/gitea:1.11.4
|
|
env:
|
|
- name: INSTALL_LOCK
|
|
value: "yes"
|
|
- name: DISABLE_REGISTRATION
|
|
value: "yes"
|
|
- name: APP_NAME
|
|
value: Badjware's code stash
|
|
- name: RUN_MODE
|
|
value: prod
|
|
- name: ROOT_URL
|
|
value: https://$(GITEA_EXTERNAL_HOST)
|
|
- name: SSH_DOMAIN
|
|
value: $(GITEA_EXTERNAL_HOST)
|
|
- name: DB_TYPE
|
|
value: mysql
|
|
- name: DB_HOST
|
|
value: mariadb.gitea.svc:3306
|
|
- name: DB_NAME
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: mariadb-credentials-secret
|
|
key: database
|
|
- name: DB_USER
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: mariadb-credentials-secret
|
|
key: username
|
|
- name: DB_PASSWD
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: mariadb-credentials-secret
|
|
key: password
|
|
ports:
|
|
- name: http
|
|
containerPort: 3000
|
|
- name: ssh
|
|
containerPort: 22
|
|
volumeMounts:
|
|
- name: gitea-pvc
|
|
mountPath: /data
|
|
# - name: gitea-app-ini
|
|
# mountPath: /data/gitea/conf/
|
|
# readOnly: true
|
|
volumes:
|
|
- name: gitea-pvc
|
|
persistentVolumeClaim:
|
|
claimName: gitea-pvc
|
|
# - name: gitea-app-ini
|
|
# secret:
|
|
# secretName: gitea-app-ini-secret
|
|
---
|
|
apiVersion: v1
|
|
kind: PersistentVolumeClaim
|
|
metadata:
|
|
name: gitea-pvc
|
|
labels:
|
|
app: gitea
|
|
spec:
|
|
accessModes:
|
|
- ReadWriteOnce
|
|
resources:
|
|
requests:
|
|
storage: 20Gi
|
|
---
|
|
apiVersion: v1
|
|
kind: Service
|
|
metadata:
|
|
name: gitea-http
|
|
labels:
|
|
app: gitea
|
|
spec:
|
|
selector:
|
|
app: gitea
|
|
ports:
|
|
- name: http
|
|
protocol: TCP
|
|
port: 80
|
|
targetPort: http
|
|
---
|
|
apiVersion: v1
|
|
kind: Service
|
|
metadata:
|
|
name: gitea-ssh
|
|
labels:
|
|
app: gitea
|
|
spec:
|
|
selector:
|
|
app: gitea
|
|
ports:
|
|
- name: ssh
|
|
protocol: TCP
|
|
port: 22
|
|
targetPort: ssh
|
|
---
|
|
apiVersion: networking.k8s.io/v1beta1
|
|
kind: Ingress
|
|
metadata:
|
|
name: gitea
|
|
labels:
|
|
app: gitea
|
|
annotations:
|
|
nginx.ingress.kubernetes.io/rewrite-target: /
|
|
cert-manager.io/cluster-issuer: letsencrypt
|
|
spec:
|
|
tls:
|
|
- hosts:
|
|
- gitea.127.0.0.1.nip.io
|
|
secretName: letsencrypt-cert
|
|
rules:
|
|
- host: gitea.127.0.0.1.nip.io
|
|
http:
|
|
paths:
|
|
- path: /
|
|
backend:
|
|
serviceName: gitea-http
|
|
servicePort: http |