commit a412ebe4cf35714e56165657adde2373f4a6c9f5
parent 6cfd509b8d4b16045b011bdf6276c614d1865ab8
Author: MTRNord <mtrnord1@gmail.com>
Date: Fri, 20 Dec 2024 10:05:12 +0100
Deploy gerrit
Diffstat:
2 files changed, 35 insertions(+), 37 deletions(-)
diff --git a/apps/base/gerrit/gerrit_cluster.yaml b/apps/base/gerrit/gerrit_cluster.yaml
@@ -26,7 +26,7 @@ spec:
external-dns.alpha.kubernetes.io/hostname: midnightthoughts.space
tls:
enabled: true
- secret: ENC[AES256_GCM,data:PadbDuau7X16R5BV1aWrNp26Z3nh3mOoBDmE8R1LO8Ol,iv:MZzPA/5GWW9tmQW0rotJiWlkgXMc928gzGQUgGLEvF8=,tag:8XCXsX7indGehLgK+ENhPA==,type:str]
+ secret: ENC[AES256_GCM,data:FIhGV0mJTJ+NsmBrLVbEpSQJ/mo1+KDAqSuRvVpiEB0f,iv:oD59GGtVtAtX3vN2IDO62saKlftMC/kDkIHo3ER+6gM=,tag:5ukkOc1TfLIXLr+aPbV6xw==,type:str]
# All Gerrit instances in the GerritCluster serve the same repositories and
# thus have to use the same serverId, which has to be set centrally here.
serverId: midnightthoughts-gerrit
@@ -84,7 +84,7 @@ spec:
configFiles:
# Some configuration options are specific to the k8sgerrit setup. These
# will be set by the Gerrit Operator.
- gerrit.config: ENC[AES256_GCM,data:Jv0UgGL9s2i3tDyKSbep/MoqKBSeNkC3q/itAn25TO4eTGn9kQ0oL/jNUkKYXa95D53qRoDFgki75f0ReVeyr6bd7daDYO8br9l3tR1/QVyDjWvmFXH7zancQY1Yl8ud4gBjx7FyMdORVWconrk3KuKBSKAYXxjhmIVUFnY9keMjh85QvPrBHLN4pC6At9Nm9uC2Sceu3CHsIgxzolkPcdPUG8jWCGaXA3xwtgCsUyI+6OlJs+6ag+kFoGcMLn0CBzY2J0/nEYlwd/za4BAjG1A4K75+fTl/vA7ZRwcKW2Tz7zSJ0sjTBjJKO6kVBNYIKtjgdm+NERs0F4O7UleHqt0Oe0qlvUKmfkXhB5Kpg2D3LHXqiJYOftF8mgN5DNKClKwt+Ah9hpfykm9jVUOXp/kWy+e2UX4afMrabsTOc2kW5zIyr5PXcjIoijrRj7ATex4tAkFps7+YZVQYVupuMSd7L8d/7oz6zHtXyQfFOfeW/lrTSMtQDt5K9FQ6gxi8zMZ93enHUvx4mKyVaITdrL4MgTj/IWtiEeTH/5Ji0h+j/QqcLH35VC3lW3cXcSH9T/kDXKgzVIFIeYio9WA1LbjuIovDj6GjHx8RZUMLeehEmPpE27JACs2Ky3uJjuOOZPCNYpef8TPp/ORdILBPPn/yy/zA9CT1pNqxror/K+eF6Bp1CiS7CCFBJAAmx4F25QrpTWrFPe79rcZp8a7Nb+hrKOpD4G1oZHKcwQ8oksBwmnH7irH4nITnUt/0zGL6lnGC+Yl7UXMOAAaFYK521Dy/OqKr/4iV7iwLDPej2K942ApG5OpTUPYfddq9QwS5lMGBqWKx/hnz6N6ZOvKTqZ3gMSYqIDYfqD4xcW/g3YeF0UmMo3ED21eNSltQ8v1KLf7AFeQKFLoxHKJ5ykCDG7zWdvo8vlCIBoorHdCOVR1m4KlbqSWJ+dhwx9EEEaU5BQO6qzZ1KRS1Gn9Z2AZXDIEka2iNgawwlWHHVcYwIwlHVba+zoclqT378UgkQF0hqkwOPJnHeupQKK6EzNyoTpd/U6P1OWPnK+BfcvIY6ZexIiSmBh6XILQnKlIwnOtVKRMzlxPFSocB2wxwJ0Fx26FfP5XiPoKas2cWYFXYYS7hJTLrz9N16v9WlW6T0JDmj5ELVuEU2kmDo9N7XPOiEU3/GCdCJpmUixmmeItBYEaV6B8pvto/B09d7RNraHvORdbjuQIvloksretCD43M+F96jHysthGBLnTtd9m+Tp6talz6/0xPgXgB9o/ESC5tl/w/vWw91WVMCNj7W480u7nDtNfxW7bvc1xaUQZRid3c9SdEicbiLCUtDBL32ePFdgoUhFkDjRydNx4zrWcUL4LAZBhJOjSHw90WH+4ar/FIDtIq+ArlKxsAEKj9TBuRUq4trhTFm7YAq8XgaSg8ZelCMTrPki2mVG1zio3Mk+oxPvFUNb1wPPw88ArQKtm3HnhPh552j6gbxw0hsGYMW0cCl0OLTIeKgIyDIsNmdzKXrWubLG2lRhcrQ2RfU5RlHjzsdJHjuPqMB2ZeUbtnyZulzBjlp96kGho3DAGTLV8=,iv:2q0C1fTTGCRE0MRhs/l16BBAIv5vZxkz/aIvkWombvo=,tag:EI3kE4kkbAz4RVRg9G0Org==,type:str]
+ gerrit.config: ENC[AES256_GCM,data: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,iv:pj/sGL+qM3MhLpQEUNQkTA8cHUuRAIQbMVKbA5objwk=,tag:08DqLJ2QknhsgJohULkkRg==,type:str]
# Reference by name to the Secret containing secret files to be mounted to
# $SITE/etc
secretRef: gerrit-secure-config
@@ -132,7 +132,7 @@ spec:
successThreshold: 1
failureThreshold: 3
configFiles:
- gerrit.config: ENC[AES256_GCM,data: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,iv:VavsmXFVq4DTtIHmJFyBCqZjE+ERz8LgUgOSg0iYATE=,tag:t1s6ZwNmK4rUE+57w0GRzw==,type:str]
+ gerrit.config: ENC[AES256_GCM,data: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,iv:JhfLFLIrifhk9q/1yE4qo1j+V2BwRkOEbwrIP6U+8uM=,tag:470FdeJmVgv3f18Ft6aUlg==,type:str]
healthcheck.config: |-
[healthcheck "auth"]
enabled = false
@@ -146,14 +146,14 @@ sops:
- recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
- YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBidkgreXJTQTc3eSt2dkE4
- cHdaa21xSUVZRUpKQmtDRjFwNCtkQjlWaGxnCnB3ZmVxaG15RGRkZ3kvTGdlMUVE
- a0xtbzBBcWZWQ2ZmQUJWU25mZXRZa3cKLS0tIEVZeW1LSE4vQ291endLc08wU05h
- emdZbHQ4MHl3YUs5b1VOdVg1UTQ4SFEKinfmyozp2HawqNTX9LTEApQejZaSTeiE
- vxGKP7HUCmEj/Xxv5vXxO0Xz0l9THDl6vG4WW12ystEXV2E7SJMKxw==
+ YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAxN3dMQmRISCtpaHNGVlV6
+ Qml2dEYxbHBlU2hnU1ZpeEdyeFJqUWZBVlF3Cnd0eERicEMyeURwM2pnREFlVzgv
+ cnRrMytxZEhSQWxNTlR0LzRRODVBUVkKLS0tIHNxK1hFU3pSbjZvdFFzeHFIUkJi
+ aWN5VkRjSTBkbDVJU1Q2NExSMDBzdm8Kg4tnYgfZFPkJn8mXWaHkXzRfhYjVxEih
+ NRS350GWISCfDFRW1fFwMNqD3oTEjpw/KyGYQsDQJorc7dDRaEXblw==
-----END AGE ENCRYPTED FILE-----
- lastmodified: "2024-12-20T02:53:07Z"
- mac: ENC[AES256_GCM,data:zAr/O+FlgDxBpSTLKeXtH+q2t2bLIZZCKOfpismeViJDJ1va3xOJuNpF+Qbl9qMj8GIc/6ymxo+IiWVMqx20iR8puGfSgCnp/iYGRBY9q8n5q5zeuev9yg0DhG0RrGu7V/UbmPt+VTEHiUu+mHllLGM8CLvYdd0cdrF0mu3ki+w=,iv:rVSK/dbrVxFcNhjCmV3FROKFwIrpEheBwC3pcelkqo0=,tag:aTI7w2voLZ5Xee8AcXkjrw==,type:str]
+ lastmodified: "2024-12-20T09:05:02Z"
+ mac: ENC[AES256_GCM,data:D+dwUPaiON2kIkuRb7/plgU4HMoMdhGGovTizW9wbzU7Rbw8DOJYimPPGID0M2M+Vcjr8U0cwZmqBnYQK478PPFpmZNa2T4kVOujRDB4X/ii9Cfw1Ah74n7UNCzxTFF2lTl4SMiuKNP0WpnvNjFirOTaT0B07IF5f9qBlpuXH9E=,iv:0DlFt9bEiJobSCyXv8ECNYDOrx6NybyCALQFNgzGG8Y=,tag:KAeCIXvysxB57cok+RgNGQ==,type:str]
pgp: []
encrypted_regex: ^(gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
version: 3.9.1
diff --git a/apps/base/gerrit/ingress.yaml b/apps/base/gerrit/ingress.yaml
@@ -1,4 +1,3 @@
----
apiVersion: traefik.io/v1alpha1
kind: Middleware
metadata:
@@ -29,26 +28,25 @@ spec:
rules:
- host: gerrit.midnightthoughts.space
http:
- paths:
- - backend:
- service:
- name: gerrit-replica-service
- port:
- name: http
- path: /.*/git-upload-pack
- pathType: ImplementationSpecific
- - backend:
- service:
- name: gerrit-service
- port:
- name: http
- path: /
- pathType: Prefix
+ paths:
+ - backend:
+ service:
+ name: gerrit-replica-service
+ port:
+ name: http
+ path: /.*/git-upload-pack
+ pathType: ImplementationSpecific
+ - backend:
+ service:
+ name: gerrit-service
+ port:
+ name: http
+ path: /
+ pathType: Prefix
tls:
- hosts:
- - gerrit.midnightthoughts.space
+ - gerrit.midnightthoughts.space
secretName: gerrit.midnightthoughts.space-tls
-
---
apiVersion: networking.k8s.io/v1
kind: Ingress
@@ -66,15 +64,15 @@ spec:
rules:
- host: gerrit.midnightthoughts.space
http:
- paths:
- - backend:
- service:
- name: gerrit-replica-service
- port:
- name: http
- path: /(a)?/plugins/high-availability/.*
- pathType: ImplementationSpecific
+ paths:
+ - backend:
+ service:
+ name: gerrit-replica-service
+ port:
+ name: http
+ path: /(a)?/plugins/high-availability/.*
+ pathType: ImplementationSpecific
tls:
- hosts:
- - gerrit.midnightthoughts.space
+ - gerrit.midnightthoughts.space
secretName: gerrit.midnightthoughts.space-tls
