cluster

commit cd0dd60bb9517f6656d5e3f3f178341b3aed912a
parent 5e42e8fb74693a1ec49f36972fd78506e1e55624
Author: MTRNord <mtrnord1@gmail.com>
Date:   Sun, 19 Mar 2023 18:14:40 +0100

Further woodpicker fixes

Diffstat:
M
apps/base/woodpecker/release.yaml
 | 
32
+++++++++-----------------------
M
apps/production/secrets/woodpecker-secret.yaml
 | 
16
++++++++--------
M
apps/production/woodpecker-values.yaml
 | 
17
+++++++++++++++++

3 files changed, 34 insertions(+), 31 deletions(-)
diff --git a/apps/base/woodpecker/release.yaml b/apps/base/woodpecker/release.yaml
@@ -19,6 +19,11 @@ spec:
   # https://github.com/stefanprodan/podinfo/blob/master/charts/podinfo/values.yaml
   values:
     replicaCount: 1
+    updateStrategy:
+      rollingUpdate:
+        maxUnavailable: 1
+        maxSurge: 0
+      type: RollingUpdate
 
     image:
       repository: woodpeckerci/woodpecker-agent
@@ -29,10 +34,8 @@ spec:
     env:
       WOODPECKER_SERVER: "woodpecker-woodpecker-server.woodpecker.svc.cluster.local:9000"
       WOODPECKER_BACKEND: kubernetes
-      WOODPECKER_BACKEND_K8S_NAMESPACE: woodpecker
-      WOODPECKER_BACKEND_K8S_STORAGE_CLASS: "nfs-client"
-      WOODPECKER_BACKEND_K8S_VOLUME_SIZE: 10G
-      WOODPECKER_BACKEND_K8S_STORAGE_RWX: true
+      WOODPECKER_GITEA: true
+      WOODPECKER_GITHUB: false
       WOODPECKER_MAX_PROCS: "8"
       WOODPECKER_DEBUG_PRETTY: "true"
       WOODPECKER_LOG_LEVEL: debug
@@ -52,27 +55,10 @@ spec:
       resources: {}
 
     extraSecretNamesForEnvFrom:
+      - woodpecker-gitea-client
+      - woodpecker-gitea-secret
       - woodpecker-secret
 
     serviceAccount:
       # Specifies whether a service account should be created (also see RBAC subsection)
       create: true
-      # Annotations to add to the service account
-      annotations: {}
-      # The name of the service account to use.
-      # If not set and create is true, a name is generated using the fullname template
-      name: ""
-      rbac:
-        # If your cluster has RBAC enabled and you're using the Kubernetes agent-
-        # backend you'll need this. (this is true for almost all production clusters)
-        # only change this if you have a non CNCF compliant cluster, missing the RBAC endpoints
-        # the Role and RoleBinding are only created if serviceAccount.create is also true
-        create: true
-        # additional annotations and labels in role and roleBinding are only needed, if you
-        # are using additional tooling to manage / verify roles or roleBindings (OPA, etc.)
-        role:
-          annotations: {}
-          labels: {}
-        roleBinding:
-          annotations: {}
-          labels: {}
diff --git a/apps/production/secrets/woodpecker-secret.yaml b/apps/production/secrets/woodpecker-secret.yaml
@@ -5,7 +5,7 @@ metadata:
     namespace: woodpecker
 type: Opaque
 stringData:
-    WOODPECKER_AGENT_SECRET: ENC[AES256_GCM,data:PYGnRusedHrMrCoeiKlF2K9X0JlwRuoCBSDNVKhgAGfWwxwh+zOtJhzYclx/lHV4DDITBYz1S887b0lhMr5WkQ==,iv:hKXb/owRCbOe02DWz2O71C60pr1gPrQEF4n9wstThxk=,tag:5gF2h+yQwHDafPolP/50Ew==,type:str]
+    WOODPECKER_AGENT_SECRET: ENC[AES256_GCM,data:0uzbxKPDdHcZrWVWAnI7lFTvBbBQyGvgsU4RhlzDg/SwHn8umjzZPDlFw6ZW0OnDJ4fXktYYYOZyzPyaUbD1zA==,iv:OyVwjPf+DGbmitTdQTbqgzjwIDT3Ln+8qygSo1gA4nY=,tag:JXdULurqyVuPer3P+gneWw==,type:str]
 sops:
     kms: []
     gcp_kms: []
@@ -15,14 +15,14 @@ sops:
         - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBlY1d6WC9hYkFTTlFTQ0ox
-            SFZjakR5U0lhdnk5MThRUk1xRlhVNXQrOFJNCmw3V2lhSmNZMjZwYzc4a3NLVTNk
-            MjZ4akR6WHdoNnBJaHNRa29yTEhQSEUKLS0tIEpLcURBOEJaZzZnVkJLdjNqTFRt
-            eHVkZ3BQcThKY3A1bUlMT3BTbThvSm8Kduehba/sI+dEynppChQKxLOEphYHtPax
-            04xWJaVp66+qbNpvuOHZiwIfX4k8awVOifYndA91iC3AGIM+NhJDTw==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBpQzJEdHpFK3UzdGF6RkZq
+            YTRsSnMwN2dQamEwVjJuOHVqbEdiR1JjQWh3ClpnYW1UVlFkVEhPSko0RkxhMEpF
+            WE9tLzRROGFpU3lacEZrNHJGa2lnL3MKLS0tIGFtbld3UFRPVkhISy9OTnRsc2tB
+            dC9SNENzM053eHhOckFhYWltRHRxWWcKT4nPu3NcLmxNm2lSjJvSYYtMXnBXI7KP
+            XKO4DxdIHnDA9dHivDevlEyVu0HNXuVnXdCIPf0s4hp33rxjWJBmsQ==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2023-03-19T15:41:09Z"
-    mac: ENC[AES256_GCM,data:8L7GJJ4q8FZgmRUGhbXE2fs8+y3gjy/IPul5h4ciRpRtOsFib9OwQJwv1uh0hGeR51ZFpmWGpbrj4SMD336ZeUwPHTmv8RuCn0P2DUxhpadb4mB7hE/aT+wJ4WWsfVCRRvcUT50/2WoMykNx5wNJAEbf2PXc5cuvYdnqe0HFwuo=,iv:j2yOpGLqcAM+ho7hp7kGuiaqaU4jhWCZQj3FF5NJ6ig=,tag:yKz7IEdC39RPDuvVxE11Mg==,type:str]
+    lastmodified: "2023-03-19T17:12:51Z"
+    mac: ENC[AES256_GCM,data:cDIlX2ATGUhMnRgRcrkNE94gofmJQ0cLZR85v8NjT8xlIYwAbN4cZGYZSaLlm0MFJbiL5j2a2Ywn1q16aeYPxxKj+LQw5f8Mc4V6CwkPc0oKvvx8ZQ1wa24Y4QbzLbb3VX4S3nVO7ywtb8TYga7g/r+06TX37ielDMbBndauruQ=,iv:fAm4p+BXjZiPL2adTVlX0nm1z2O5dqduUmz8o1RXtqc=,tag:CvPd+dXmIZg4ZkZYa7XAmQ==,type:str]
     pgp: []
     encrypted_regex: ^(data|stringData)$
     version: 3.7.3
diff --git a/apps/production/woodpecker-values.yaml b/apps/production/woodpecker-values.yaml
@@ -10,3 +10,20 @@ spec:
       persistentVolume:
         enabled: true
         existingClaim: woodpecker-woodpecker-server
+      env:
+        WOODPECKER_ADMIN: "mtrnord"
+        WOODPECKER_HOST: https://ci.nordgedanken.dev
+        WOODPECKER_GITEA_URL: https://git.nordgedanken.dev
+        ingress:
+          enabled: true
+          annotations:
+            cert-manager.io/cluster-issuer: letsencrypt-dns
+
+          hosts:
+            - host: ci.nordgedanken.dev
+              paths:
+                - path: /
+          tls:
+            - secretName: ci.nordgedanken.dev-tls
+              hosts:
+                - ci.nordgedanken.dev