68 lines
2.2 KiB
YAML
68 lines
2.2 KiB
YAML
apiVersion: kustomize.config.k8s.io/v1beta1
|
|
kind: Kustomization
|
|
|
|
namespace: woodpecker
|
|
|
|
# spec: https://kubectl.docs.kubernetes.io/references/kustomize/builtins/#_helmchartinflationgenerator_
|
|
helmCharts:
|
|
- includeCRDs: true
|
|
name: &name woodpecker
|
|
releaseName: *name
|
|
repo: oci://ghcr.io/woodpecker-ci/helm
|
|
valuesInline:
|
|
agent:
|
|
image:
|
|
registry: mirror.gcr.io
|
|
env:
|
|
WOODPECKER_BACKEND_K8S_STORAGE_CLASS: woodpecker
|
|
WOODPECKER_BACKEND_K8S_VOLUME_SIZE: 100Mi
|
|
extraSecretNamesForEnvFrom:
|
|
- woodpecker-agent-secret
|
|
persistence:
|
|
enabled: false
|
|
server:
|
|
ingress:
|
|
enabled: true
|
|
# ingressClassName: treafik # too new
|
|
annotations:
|
|
external-dns.alpha.kubernetes.io/target: traefik.k-space.ee
|
|
kubernetes.io/ingress.class: traefik
|
|
traefik.ingress.kubernetes.io/router.entrypoints: websecure
|
|
hosts:
|
|
- host: woodpecker.k-space.ee
|
|
paths:
|
|
- backend:
|
|
serviceName: woodpecker-server # *name-server (from releaseName)
|
|
path: "/"
|
|
tls:
|
|
- hosts: ["*.k-space.ee"]
|
|
|
|
env:
|
|
WOODPECKER_ADMIN: eaas,rasmus
|
|
WOODPECKER_DATABASE_DRIVER: mysql
|
|
WOODPECKER_GITEA: true
|
|
WOODPECKER_GITEA_URL: https://git.k-space.ee
|
|
WOODPECKER_HOST: https://woodpecker.k-space.ee
|
|
WOODPECKER_OPEN: true
|
|
# the chart's built-in woodpecker-default-agent-secret is random on
|
|
# every template render, breaking agent auth after each ArgoCD sync.
|
|
# It cannot be disabled (the agent subchart hardcodes the envFrom
|
|
# reference), so a stable SecretClaim-generated secret is layered
|
|
# after it: for duplicate keys the last envFrom source wins, making
|
|
# the random one inert (see agent-secret.yaml)
|
|
extraSecretNamesForEnvFrom:
|
|
- woodpecker-gitea-oauth2
|
|
- mariadb-secrets
|
|
- woodpecker-agent-secret
|
|
image:
|
|
registry: mirror.gcr.io
|
|
# persistentVolume:
|
|
# enabled: false
|
|
version: 3.0.7
|
|
|
|
# secrets (.env): woodpecker-gitea-oauth2, woodpecker-db
|
|
resources:
|
|
- ssh://git@git.k-space.ee/secretspace/kube/woodpecker
|
|
- ./mariadb.yaml
|
|
- ./agent-secret.yaml
|