athens-school/Gitea
4
0
Fork 0
Code Issues 3 Pull Requests Packages Projects Releases Wiki Activity

Compare commits

base: athens-school:k3s
Branches Tags
athens-school:k3s
athens-school:master
..
compare: athens-school:master
Branches Tags
athens-school:k3s
athens-school:master

No commits in common. "k3s" and "master" have entirely different histories.
k3s ... master

16 changed files with 0 additions and 493 deletions
Show Stats Expand all files Collapse all files

49
README.md
View File

@ -1,49 +0,0 @@
# Gitea
Front end for Git, with integrated Container Registry and CI/CD capabilities.
This repository only contains configuration used for Kubernetes.
## From Docker to Gitea
Get a dump of your current Docker instance:
```bash
gitea dump -c /data/gitea/conf/app.ini
```
In this context, my `/data` path is mounted to the host.
Then modify the `deployment.yaml` file to only start a "sleeping" container:
```yaml
[...]
image: gitea/gitea:1.22.3
ports:
- containerPort: 3000
command: ["/bin/sh", "-c", "sleep 1000000000"] # Add this line
env:
- name: GITEA__database__DB_TYPE
value: "postgres"
[...]
```
Then, copy the dump to the container:
```bash
kubectl cp <dump file> <namespace>/<pod name>:/data/dump
```
Get into the pod and go as follows.
Unzip the dump
```bash
unzip <dump file>
```
Then, restore the dump
```bash
mv repo/* /data/git/repositories
mv lfs/* /data/git/lfs
mv data/* /data/gitea
```
And finally, restore the database
```bash
PGPASSWORD=$GITEA__database__PASSWD psql -h gitea-db-rw.gitea.svc.cluster.local -U $GITEA__database__USER < halis_gitea.sql
```

16
manifests/admin-creator.yaml
View File

@ -1,16 +0,0 @@
apiVersion: v1
kind: ConfigMap
metadata:
name: gitea-admin-creator
namespace: gitea
data:
admin-creator.sh: |
#!/bin/sh
gitea admin user list --admin | grep $(echo ' ' $ADMIN_USER ' ') >/dev/null 2>&1
if [ $? -eq 1 ];
then
gitea admin user create --username $ADMIN_USER --password $ADMIN_PASSWORD --email $ADMIN_MAIL --admin
fi

12
manifests/certificate.yaml
View File

@ -1,12 +0,0 @@
apiVersion: cert-manager.io/v1
kind: Certificate
metadata:
name: gitea
namespace: gitea
spec:
secretName: git-halis-io-tls
dnsNames:
- git.halis.io
issuerRef:
name: letsencrypt-production
kind: ClusterIssuer

98
manifests/configmap.yaml
View File

@ -1,98 +0,0 @@
apiVersion: v1
kind: ConfigMap
metadata:
name: gitea-config
namespace: gitea
data:
APP_NAME: Halis hosted git solution
RUN_MODE: prod
GITEA__server__DISABLE_SSH: "true"
GITEA__server__ROOT_URL: "https://git.halis.io"
GITEA__security__INSTALL_LOCK: "true"
GITEA__service__DISABLE_REGISTRATION: "true"
GITEA__metrics__ENABLED: "true"
GITEA__queue__TYPE: "level"
#GITEA__indexer__REPO_INDEXER_ENABLED: "false"
#app.ini: |
# APP_NAME = K8s implementation
# RUN_MODE = prod
# RUN_USER = git
# [repository]
# ROOT = /data/git/repositories
# [repository.local]
# LOCAL_COPY_PATH = /data/gitea/tmp/local-repo
# [repository.upload]
# TEMP_PATH = /data/gitea/uploads
# [server]
# APP_DATA_PATH = /data/gitea
# DOMAIN = localhost
# SSH_DOMAIN = localhost
# HTTP_PORT = 3000
# ROOT_URL = http://localhost:3000/
# SSH_PORT = 22
# SSH_LISTEN_PORT = 22
# LFS_START_SERVER = true
# OFFLINE_MODE = false
# [indexer]
# ISSUE_INDEXER_PATH = /data/gitea/indexers/issues.bleve
# [session]
# PROVIDER_CONFIG = /data/gitea/sessions
# PROVIDER = file
# [picture]
# AVATAR_UPLOAD_PATH = /data/gitea/avatars
# REPOSITORY_AVATAR_UPLOAD_PATH = /data/gitea/repo-avatars
# [attachment]
# PATH = /data/gitea/attachments
# [log]
# MODE = console
# LEVEL = info
# ROUTER = console
# ROOT_PATH = /data/gitea/log
# [security]
# SECRET_KEY = NONE
# REVERSE_PROXY_LIMIT = 1
# REVERSE_PROXY_TRUSTED_PROXIES = *
# PASSWORD_HASH_ALGO = pbkdf2
# [service]
# REQUIRE_SIGNIN_VIEW = false
# REGISTER_EMAIL_CONFIRM = false
# ENABLE_NOTIFY_MAIL = false
# ALLOW_ONLY_EXTERNAL_REGISTRATION = false
# ENABLE_CAPTCHA = false
# DEFAULT_KEEP_EMAIL_PRIVATE = false
# DEFAULT_ALLOW_CREATE_ORGANIZATION = true
# DEFAULT_ENABLE_TIMETRACKING = true
# NO_REPLY_ADDRESS = noreply.localhost
# [lfs]
# PATH = /data/git/lfs
# [mailer]
# ENABLED = false
# [openid]
# ENABLE_OPENID_SIGNIN = true
# ENABLE_OPENID_SIGNUP = true
# [cron.update_checker]
# ENABLED = false
# [repository.pull-request]
# DEFAULT_MERGE_STYLE = merge
# [repository.signing]
# DEFAULT_TRUST_MODEL = committer
# [oauth2]
# ENABLE = false

10
manifests/database-backup.yaml
View File

@ -1,10 +0,0 @@
apiVersion: postgresql.cnpg.io/v1
kind: ScheduledBackup
metadata:
name: gitea-db-backup
namespace: gitea
spec:
schedule: "0 0 0 * * *"
backupOwnerReference: self
cluster:
name: gitea-db

8
manifests/database-ondemande-backup.yaml
View File

@ -1,8 +0,0 @@
apiVersion: postgresql.cnpg.io/v1
kind: Backup
metadata:
name: gitea-db-ondemand-backup
namespace: gitea
spec:
cluster:
name: gitea-db

48
manifests/database-recovery.yaml
View File

@ -1,48 +0,0 @@
apiVersion: postgresql.cnpg.io/v1
kind: Cluster
metadata:
name: gitea-db
namespace: gitea
spec:
instances: 2
storage:
size: 1Gi
storageClass: local-path
bootstrap:
recovery:
source: gitea-db
postgresql:
pg_hba:
- host all all all md5
externalClusters:
- name: gitea-db
barmanObjectStore:
serverName: gitea-db
destinationPath: "s3://halis/cloudnativepg"
endpointURL: https://s3.halia.dev
s3Credentials:
accessKeyId:
name: s3-secret
key: AWS_ACCESS_KEY_ID
secretAccessKey:
name: s3-secret
key: AWS_SECRET_ACCESS_KEY
region:
name: s3-secret
key: AWS_REGION
wal:
compression: gzip
maxParallel: 8
resources:
requests:
cpu: 100m
memory: 100Mi
limits:
cpu: 500m
memory: 500Mi

52
manifests/database.yaml
View File

@ -1,52 +0,0 @@
apiVersion: postgresql.cnpg.io/v1
kind: Cluster
metadata:
name: gitea-db
namespace: gitea
spec:
instances: 3
storage:
size: 1Gi
storageClass: local-path
bootstrap:
initdb:
database: gitea
owner: gitea
secret:
name: gitea-db
postgresql:
pg_hba:
- host all all all md5
backup:
barmanObjectStore:
destinationPath: "s3://halis/cloudnativepg"
endpointURL: https://s3.halia.dev
s3Credentials:
accessKeyId:
name: s3-secret
key: AWS_ACCESS_KEY_ID
secretAccessKey:
name: s3-secret
key: AWS_SECRET_ACCESS_KEY
region:
name: s3-secret
key: AWS_REGION
wal:
compression: gzip
maxParallel: 8
resources:
requests:
cpu: 100m
memory: 100Mi
limits:
cpu: 500m
memory: 500Mi
monitoring:
enablePodMonitor: true

85
manifests/deployment.yaml
View File

@ -1,85 +0,0 @@
apiVersion: apps/v1
kind: Deployment
metadata:
name: gitea
namespace: gitea
spec:
replicas: 1
selector:
matchLabels:
app: gitea
template:
metadata:
labels:
app: gitea
spec:
hostname: gitea
subdomain: gitea
containers:
- name: gitea
image: gitea/gitea:1.22.4
ports:
- containerPort: 3000
env:
- name: GITEA__database__DB_TYPE
value: "postgres"
- name: GITEA__database__HOST
value: "gitea-db-rw.gitea.svc.cluster.local:5432"
- name: GITEA__database__NAME
value: "gitea"
- name: GITEA__database__SSL_MODE
value: "require"
- name: GITEA__database__USER
valueFrom:
secretKeyRef:
name: gitea-db
key: username
- name: GITEA__database__PASSWD
valueFrom:
secretKeyRef:
name: gitea-db
key: password
- name: GITEA__server__LFS_JWT_SECRET
valueFrom:
secretKeyRef:
name: gitea-lfs-jwt-secret
key: token
- name: GITEA__security__INTERNAL_TOKEN
valueFrom:
secretKeyRef:
name: gitea-internal-token
key: token
- name: ADMIN_USER
valueFrom:
secretKeyRef:
name: gitea-admin-user
key: token
- name: ADMIN_PASSWORD
valueFrom:
secretKeyRef:
name: gitea-admin-password
key: token
- name: ADMIN_MAIL
valueFrom:
secretKeyRef:
name: gitea-admin-mail
key: token
envFrom:
- configMapRef:
name: gitea-config
volumeMounts:
- mountPath: "/admin-creator.sh"
name: gitea-admin-creator
subPath: admin-creator.sh
- mountPath: "/data"
name: gitea-data
volumes:
- name: gitea-data
persistentVolumeClaim:
claimName: gitea-pvc
- name: gitea-config-volume
configMap:
name: gitea-config
- name: gitea-admin-creator
configMap:
name: gitea-admin-creator

28
manifests/ingress.yaml
View File

@ -1,28 +0,0 @@
apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
name: gitea-ingress
namespace: gitea
annotations:
cert-manager.io/cluster-issuer: letsencrypt-production
kubernetes.io/ingress.class: nginx-external
acme.cert-manager.io/http01-edit-in-place: "true"
nginx.ingress.kubernetes.io/configuration-snippet: |
rewrite ^/metrics(/?)$ https://git.halis.io/$1 permanent;
spec:
tls:
- hosts:
- git.halis.io
secretName: git-halis-io-tls
ingressClassName: nginx-external
rules:
- host: git.halis.io
http:
paths:
- path: /
pathType: Prefix
backend:
service:
name: gitea-svc
port:
number: 80

15
manifests/kustomization.yaml
View File

@ -1,15 +0,0 @@
apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization
resources:
- namespace.yaml
- secrets.yaml
- database.yaml
- database-backup.yaml
- service.yaml
- servicemonitor.yaml
- ingress.yaml
- configmap.yaml
- admin-creator.yaml
- pvc.yaml
- deployment.yaml

4
manifests/namespace.yaml
View File

@ -1,4 +0,0 @@
apiVersion: v1
kind: Namespace
metadata:
name: gitea

15
manifests/pvc.yaml
View File

@ -1,15 +0,0 @@
apiVersion: v1
kind: PersistentVolumeClaim
metadata:
name: gitea-pvc
namespace: gitea
labels:
recurring-job.longhorn.io/source: enabled
recurring-job-group.longhorn.io/standard-pvc: enabled
spec:
accessModes:
- ReadWriteMany
resources:
requests:
storage: 15Gi
storageClassName: redundant-storage-class

24
manifests/secrets.yaml
View File

@ -1,24 +0,0 @@
apiVersion: argoproj.io/v1alpha1
kind: Application
metadata:
name: gitea-secrets
namespace: argocd
finalizers:
- resources-finalizer.argocd.argoproj.io
spec:
project: default
source:
repoURL: https://git.halis.io/athens-school/k3s-secrets
targetRevision: prod-migration
path: gitea
syncPolicy:
automated:
prune: true
selfHeal: true
syncOptions:
- CreateNamespace=false
- ApplyOutOfSyncOnly=true
- PruneLast=true
destination:
server: https://kubernetes.default.svc
namespace: gitea

15
manifests/service.yaml
View File

@ -1,15 +0,0 @@
apiVersion: v1
kind: Service
metadata:
name: gitea-svc
namespace: gitea
labels:
app.kubernetes.io/name: gitea
spec:
ports:
- name: http
port: 80
protocol: TCP
targetPort: 3000
selector:
app: gitea

14
manifests/servicemonitor.yaml
View File

@ -1,14 +0,0 @@
apiVersion: monitoring.coreos.com/v1
kind: ServiceMonitor
metadata:
name: gitea
namespace: gitea
labels:
team: core
spec:
selector:
matchLabels:
app.kubernetes.io/name: gitea
endpoints:
- port: http
path: /metrics