Update valuees

application-template.yaml

@@ -6,7 +6,7 @@ metadata:
 spec:
   project: dev-tools
   source:
-    repoURL: 'https://git.dvirlabs.com/dvirlabs/dev-tools.git'
+    repoURL: 'ssh://git@gitea-ssh.dev-tools.svc.cluster.local.:2222/dvirlabs/dev-tools.git'
     targetRevision: HEAD
     path: charts/application-template
     helm:

argocd-apps/cluster-secret-store-creator.yaml

@@ -6,7 +6,7 @@ metadata:
 spec:
   project: dev-tools
   source:
-    repoURL: https://git.dvirlabs.com/dvirlabs/dev-tools.git
+    repoURL: ssh://git@gitea-ssh.dev-tools.svc.cluster.local.:2222/dvirlabs/dev-tools.git
     targetRevision: HEAD
     path: manifests/cluster-secret-store
     directory:
@@ -15,8 +15,5 @@ spec:
     server: https://kubernetes.default.svc
     namespace: dev-tools
   syncPolicy:
-    automated:
-      prune: true
-      selfHeal: true
     syncOptions:
       - CreateNamespace=true

argocd-apps/external-secrets-dev-tools.yaml

@@ -6,7 +6,7 @@ metadata:
 spec:
   project: dev-tools
   source:
-    repoURL: https://git.dvirlabs.com/dvirlabs/dev-tools.git
+    repoURL: ssh://git@gitea-ssh.dev-tools.svc.cluster.local.:2222/dvirlabs/dev-tools.git
     targetRevision: HEAD
     path: manifests/external-secrets-dev-tools
     directory:
@@ -15,8 +15,5 @@ spec:
     server: https://kubernetes.default.svc
     namespace: dev-tools
   syncPolicy:
-    automated:
-      prune: true
-      selfHeal: true
     syncOptions:
       - CreateNamespace=true

argocd-apps/external-secrets.yaml

@@ -6,7 +6,7 @@ metadata:
 spec:
   project: dev-tools
   source:
-    repoURL: 'https://git.dvirlabs.com/dvirlabs/dev-tools.git'
+    repoURL: 'ssh://git@gitea-ssh.dev-tools.svc.cluster.local.:2222/dvirlabs/dev-tools.git'
     targetRevision: HEAD
     path: charts/external-secrets
     helm:
@@ -15,7 +15,4 @@ spec:
   destination:
     server: https://kubernetes.default.svc
     namespace: dev-tools
-  syncPolicy:
+  syncPolicy: {}
-    automated:
-      prune: true
-      selfHeal: true

argocd-apps/gitea.yaml

@@ -6,7 +6,7 @@ metadata:
 spec:
   project: dev-tools
   source:
-    repoURL: 'https://git.dvirlabs.com/dvirlabs/dev-tools.git'
+    repoURL: 'ssh://git@gitea-ssh.dev-tools.svc.cluster.local.:2222/dvirlabs/dev-tools.git'
     targetRevision: HEAD
     path: charts/helm-gitea
     helm:

argocd-apps/harbor.yaml

@@ -6,7 +6,7 @@ metadata:
 spec:
   project: dev-tools
   source:
-    repoURL: 'https://git.dvirlabs.com/dvirlabs/dev-tools.git'
+    repoURL: 'ssh://git@gitea-ssh.dev-tools.svc.cluster.local.:2222/dvirlabs/dev-tools.git'
     targetRevision: HEAD
     path: charts/harbor
     helm:

argocd-apps/oidc-bootstrap.yaml

@@ -6,7 +6,7 @@ metadata:
 spec:
   project: dev-tools
   source:
-    repoURL: https://git.dvirlabs.com/dvirlabs/dev-tools.git
+    repoURL: ssh://git@gitea-ssh.dev-tools.svc.cluster.local.:2222/dvirlabs/dev-tools.git
     targetRevision: HEAD
     path: manifests/oidc-bootstrap
     directory:
@@ -14,7 +14,4 @@ spec:
   destination:
     server: https://kubernetes.default.svc
     namespace: dev-tools
-  syncPolicy:
+  syncPolicy: {}
-    automated:
-      prune: false
-      selfHeal: true

argocd-apps/planka.yaml

@@ -6,7 +6,7 @@ metadata:
 spec:
   project: dev-tools
   source:
-    repoURL: https://git.dvirlabs.com/dvirlabs/dev-tools.git
+    repoURL: ssh://git@gitea-ssh.dev-tools.svc.cluster.local.:2222/dvirlabs/dev-tools.git
     targetRevision: HEAD
     path: charts/planka
     helm:

argocd-apps/vault-config.yaml

@@ -6,7 +6,7 @@ metadata:
 spec:
   project: dev-tools
   source:
-    repoURL: https://git.dvirlabs.com/dvirlabs/dev-tools.git
+    repoURL: ssh://git@gitea-ssh.dev-tools.svc.cluster.local.:2222/dvirlabs/dev-tools.git
     targetRevision: HEAD
     path: manifests/vault
     directory:
@@ -14,7 +14,4 @@ spec:
   destination:
     server: https://kubernetes.default.svc
     namespace: dev-tools
-  syncPolicy:
+  syncPolicy: {}
-    automated:
-      prune: true
-      selfHeal: true

argocd-apps/vault.yaml

@@ -6,7 +6,7 @@ metadata:
 spec:
   project: dev-tools
   source:
-    repoURL: https://git.dvirlabs.com/dvirlabs/dev-tools.git
+    repoURL: ssh://git@gitea-ssh.dev-tools.svc.cluster.local.:2222/dvirlabs/dev-tools.git
     targetRevision: HEAD
     path: charts/vault
     helm:
@@ -15,10 +15,7 @@ spec:
   destination:
     server: https://kubernetes.default.svc
     namespace: dev-tools
-  syncPolicy:
+  syncPolicy: {}
-    automated:
-      prune: true
-      selfHeal: true
   ignoreDifferences:
   - group: admissionregistration.k8s.io
     kind: MutatingWebhookConfiguration

argocd-apps/wikijs.yaml

@@ -6,7 +6,7 @@ metadata:
 spec:
   project: dev-tools
   source:
-    repoURL: 'https://git.dvirlabs.com/dvirlabs/dev-tools.git'
+    repoURL: 'ssh://git@gitea-ssh.dev-tools.svc.cluster.local.:2222/dvirlabs/dev-tools.git'
     targetRevision: HEAD
     path: charts/wiki
     helm:
@@ -16,9 +16,6 @@ spec:
     server: https://kubernetes.default.svc
     namespace: dev-tools
   syncPolicy:
-    automated:
-      prune: true
-      selfHeal: true
     syncOptions:
       - CreateNamespace=true
   ignoreDifferences:

argocd-apps/woodpecker.yaml

@@ -8,7 +8,7 @@ metadata:
 spec:
   project: dev-tools
   source:
-    repoURL: 'https://git.dvirlabs.com/dvirlabs/dev-tools.git'
+    repoURL: 'ssh://git@gitea-ssh.dev-tools.svc.cluster.local.:2222/dvirlabs/dev-tools.git'
     targetRevision: HEAD
     path: charts/woodpecker
     helm:

manifests/gitea/current-values.yaml

@@ -0,0 +1,88 @@
+nodeSelector:
+  workload: general
+
+ingress:
+  enabled: true
+  className: traefik
+  annotations:
+    traefik.ingress.kubernetes.io/router.entrypoints: websecure
+    traefik.ingress.kubernetes.io/router.tls: "true"
+  hosts:
+    - host: git.dvirlabs.com
+      paths:
+        - path: /
+          pathType: Prefix
+  tls:
+    - hosts:
+        - git.dvirlabs.com
+      secretName: git-dvirlabs-cert
+
+gitea:
+  admin:
+    username: admin
+    password: admin1234
+    email: admin@dvirlabs.com
+    passwordMode: keepUpdated
+
+  config:
+    server:
+      DOMAIN: git.dvirlabs.com
+      ROOT_URL: https://git.dvirlabs.com/
+      SSH_DOMAIN: git.dvirlabs.com
+      SSH_LISTEN_PORT: 2222
+      SSH_PORT: 22
+      PROTOCOL: http
+    metrics:
+        ENABLED: true
+        TOKEN: prometheusmetricstoken
+    security:
+      INSTALL_LOCK: true
+      SECRET_KEY: somesecret
+      INTERNAL_TOKEN: somesecret
+  oauth:
+    - name: "Keycloak"
+      provider: "openidConnect"
+      key: "gitea"
+      secret: "gIA3YXhesiyIbKkMMtasCVTd7CvUyLwA"
+      autoDiscoverUrl: "https://keycloak.dvirlabs.com/realms/lab/.well-known/openid-configuration"
+      scopes: "openid profile email"
+      groupClaimName: "groups"
+      adminGroup: "gitea-admins"
+      restrictedGroup: "gitea-users"
+
+  livenessProbe:
+    enabled: true
+    tcpSocket:
+      port: http
+    initialDelaySeconds: 200
+
+  readinessProbe:
+    enabled: true
+    tcpSocket:
+      port: http
+    initialDelaySeconds: 5
+
+postgresql-ha:
+  enabled: false
+
+postgresql:
+  enabled: true
+  global:
+    postgresql:
+      auth:
+        username: gitea
+        password: gitea
+        database: gitea
+  primary:
+    nodeSelector:
+      workload: general
+    persistence:
+      storageClass: nfs-client
+      size: 20Gi
+
+persistence:
+  enabled: true
+  storageClass: nfs-client
+  size: 50Gi
+  accessModes:
+    - ReadWriteOnce

manifests/gitea/values.yaml

@@ -1,3 +1,10 @@
+global:
+  security:
+    allowInsecureImages: true
+
+nodeSelector:
+  workload: general
+
 ingress:
   enabled: true
   className: traefik
@@ -64,6 +71,10 @@ postgresql-ha:
 
 postgresql:
   enabled: true
+  image:
+    registry: docker.io
+    repository: bitnamilegacy/postgresql
+    tag: 17.5.0-debian-12-r3
   global:
     postgresql:
       auth:
@@ -72,10 +83,19 @@ postgresql:
         database: gitea
   primary:
     persistence:
-      size: 10Gi
+      storageClass: nfs-client
+      size: 50Gi
 
 persistence:
   enabled: true
-  size: 5Gi
+  storageClass: nfs-client
+  size: 50Gi
   accessModes:
     - ReadWriteOnce
+
+valkey-cluster:
+  enabled: true
+  image:
+    registry: docker.io
+    repository: bitnamilegacy/valkey-cluster
+    tag: 8.1.1-debian-12-r2

manifests/wikijs/values.yaml

@@ -27,6 +27,10 @@ postgresql:
   postgresqlUsername: wikijs
   postgresqlPassword: wikijs123
   postgresqlDatabase: wiki
+  image:
+    registry: docker.io
+    repository: bitnamilegacy/postgresql
+    tag: 11.22.0
   persistence:
     enabled: true
     size: 30Gi