apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization

namespace: woodpecker

# spec: https://kubectl.docs.kubernetes.io/references/kustomize/builtins/#_helmchartinflationgenerator_
helmCharts:
- includeCRDs: true
  name: &name woodpecker
  releaseName: *name
  repo: oci://ghcr.io/woodpecker-ci/helm
  valuesInline:
    agent:
      image:
        registry: mirror.gcr.io
      env:
        WOODPECKER_BACKEND_K8S_STORAGE_CLASS: woodpecker
        WOODPECKER_BACKEND_K8S_VOLUME_SIZE: 100Mi
      persistence:
        enabled: false
    server:
      ingress:
        enabled: true
        # ingressClassName: treafik # too new
        annotations:
          external-dns.alpha.kubernetes.io/target: traefik.k-space.ee
          kubernetes.io/ingress.class: traefik
          traefik.ingress.kubernetes.io/router.entrypoints: websecure
        hosts:
        - host: woodpecker.k-space.ee
          paths:
          - backend:
              serviceName: woodpecker-server # *name-server (from releaseName)
            path: "/"
        tls:
        - hosts: ["*.k-space.ee"]

      env:
        WOODPECKER_ADMIN: eaas,rasmus
        WOODPECKER_DATABASE_DRIVER: mysql
        WOODPECKER_GITEA: true
        WOODPECKER_GITEA_URL: https://git.k-space.ee
        WOODPECKER_HOST: https://woodpecker.k-space.ee
        WOODPECKER_OPEN: true
      extraSecretNamesForEnvFrom:
        - woodpecker-gitea-oauth2
        - woodpecker-db
      image:
        registry: mirror.gcr.io
      # persistentVolume:
      #   enabled: false
  version: 3.0.7

# secrets (.env): woodpecker-gitea-oauth2, woodpecker-db
resources:
- ssh://git@git.k-space.ee/secretspace/kube/woodpecker