# Source: gitea/charts/postgresql-ha/templates/pgpool/deployment.yaml apiVersion: apps/v1 kind: Deployment metadata: name: release-name-postgresql-ha-pgpool namespace: gitea labels: app.kubernetes.io/instance: release-name app.kubernetes.io/name: postgresql-ha app.kubernetes.io/version: 4.5.2 app.kubernetes.io/component: pgpool spec: replicas: 1 selector: matchLabels: app.kubernetes.io/instance: release-name app.kubernetes.io/name: postgresql-ha app.kubernetes.io/component: pgpool template: metadata: labels: app.kubernetes.io/instance: release-name app.kubernetes.io/name: postgresql-ha app.kubernetes.io/version: 4.5.2 app.kubernetes.io/component: pgpool spec: automountServiceAccountToken: false affinity: podAffinity: podAntiAffinity: preferredDuringSchedulingIgnoredDuringExecution: - podAffinityTerm: labelSelector: matchLabels: app.kubernetes.io/instance: release-name app.kubernetes.io/name: postgresql-ha app.kubernetes.io/component: pgpool topologyKey: kubernetes.io/hostname weight: 1 nodeAffinity: securityContext: fsGroup: 1001 fsGroupChangePolicy: Always supplementalGroups: [] sysctls: [] serviceAccountName: release-name-postgresql-ha # Auxiliary vars to populate environment variables imagePullSecrets: - name: ncr-billing containers: - name: pgpool image: 36671e2b-kr1-registry.container.nhncloud.com/billing-base/pgpool:4.5.2-debian-12-r2 imagePullPolicy: "IfNotPresent" securityContext: allowPrivilegeEscalation: false capabilities: drop: - ALL privileged: false readOnlyRootFilesystem: true runAsGroup: 1001 runAsNonRoot: true runAsUser: 1001 seccompProfile: type: RuntimeDefault env: - name: BITNAMI_DEBUG value: "false" - name: PGPOOL_BACKEND_NODES value: 0:release-name-postgresql-ha-postgresql-0.release-name-postgresql-ha-postgresql-headless:5432,1:release-name-postgresql-ha-postgresql-1.release-name-postgresql-ha-postgresql-headless:5432,2:release-name-postgresql-ha-postgresql-2.release-name-postgresql-ha-postgresql-headless:5432, - name: PGPOOL_SR_CHECK_USER value: "repmgr" - name: PGPOOL_SR_CHECK_PASSWORD valueFrom: secretKeyRef: name: release-name-postgresql-ha-postgresql key: repmgr-password - name: PGPOOL_SR_CHECK_DATABASE value: "postgres" - name: PGPOOL_ENABLE_LDAP value: "no" - name: PGPOOL_POSTGRES_USERNAME value: "gitea" - name: PGPOOL_POSTGRES_PASSWORD valueFrom: secretKeyRef: name: release-name-postgresql-ha-postgresql key: password - name: PGPOOL_ADMIN_USERNAME value: "admin" - name: PGPOOL_ADMIN_PASSWORD valueFrom: secretKeyRef: name: release-name-postgresql-ha-pgpool key: admin-password - name: PGPOOL_AUTHENTICATION_METHOD value: "scram-sha-256" - name: PGPOOL_ENABLE_LOAD_BALANCING value: "yes" - name: PGPOOL_DISABLE_LOAD_BALANCE_ON_WRITE value: "transaction" - name: PGPOOL_ENABLE_LOG_CONNECTIONS value: "no" - name: PGPOOL_ENABLE_LOG_HOSTNAME value: "yes" - name: PGPOOL_ENABLE_LOG_PER_NODE_STATEMENT value: "no" - name: PGPOOL_RESERVED_CONNECTIONS value: '1' - name: PGPOOL_CHILD_LIFE_TIME value: "" - name: PGPOOL_ENABLE_TLS value: "no" - name: PGPOOL_HEALTH_CHECK_PSQL_TIMEOUT value: "6" envFrom: ports: - name: postgresql containerPort: 5432 protocol: TCP livenessProbe: failureThreshold: 5 initialDelaySeconds: 30 periodSeconds: 10 successThreshold: 1 timeoutSeconds: 5 exec: command: - /opt/bitnami/scripts/pgpool/healthcheck.sh readinessProbe: failureThreshold: 5 initialDelaySeconds: 5 periodSeconds: 5 successThreshold: 1 timeoutSeconds: 5 exec: command: - bash - -ec - PGPASSWORD=${PGPOOL_POSTGRES_PASSWORD} psql -U "gitea" -d "gitea" -h /opt/bitnami/pgpool/tmp -tA -c "SELECT 1" >/dev/null resources: limits: cpu: 375m ephemeral-storage: 2Gi memory: 384Mi requests: cpu: 250m ephemeral-storage: 50Mi memory: 256Mi volumeMounts: - name: empty-dir mountPath: /tmp subPath: tmp-dir - name: empty-dir mountPath: /opt/bitnami/pgpool/etc subPath: app-etc-dir - name: empty-dir mountPath: /opt/bitnami/pgpool/conf subPath: app-conf-dir - name: empty-dir mountPath: /opt/bitnami/pgpool/tmp subPath: app-tmp-dir - name: empty-dir mountPath: /opt/bitnami/pgpool/logs subPath: app-logs-dir volumes: - name: empty-dir emptyDir: {} --- # Source: gitea/templates/gitea/deployment.yaml apiVersion: apps/v1 kind: Deployment metadata: name: release-name-gitea namespace: gitea annotations: labels: app: gitea app.kubernetes.io/name: gitea app.kubernetes.io/instance: release-name app.kubernetes.io/version: "1.22.1" version: "1.22.1" spec: replicas: 1 strategy: type: RollingUpdate rollingUpdate: maxUnavailable: 0 maxSurge: 100% selector: matchLabels: app.kubernetes.io/name: gitea app.kubernetes.io/instance: release-name template: metadata: annotations: checksum/config: 00fd8064076a446a896870db4974c6590fcf51561cf391547e559011465a57d8 labels: app: gitea app.kubernetes.io/name: gitea app.kubernetes.io/instance: release-name app.kubernetes.io/version: "1.22.1" version: "1.22.1" spec: imagePullSecrets: - name: ncr-billing #ljh securityContext: fsGroup: 1000 initContainers: - name: init-directories image: "36671e2b-kr1-registry.container.nhncloud.com/billing-base/gitea/gitea:1.22.1-rootless" imagePullPolicy: IfNotPresent command: ["/usr/sbin/init_directory_structure.sh"] env: - name: GITEA_APP_INI value: /data/gitea/conf/app.ini - name: GITEA_CUSTOM value: /data/gitea - name: GITEA_WORK_DIR value: /data - name: GITEA_TEMP value: /tmp/gitea volumeMounts: - name: init mountPath: /usr/sbin - name: temp mountPath: /tmp - name: data mountPath: /data securityContext: {} resources: limits: {} requests: cpu: 100m memory: 128Mi - name: init-app-ini image: "36671e2b-kr1-registry.container.nhncloud.com/billing-base/gitea/gitea:1.22.1-rootless" imagePullPolicy: IfNotPresent command: ["/usr/sbin/config_environment.sh"] env: - name: GITEA_APP_INI value: /data/gitea/conf/app.ini - name: GITEA_CUSTOM value: /data/gitea - name: GITEA_WORK_DIR value: /data - name: GITEA_TEMP value: /tmp/gitea volumeMounts: - name: config mountPath: /usr/sbin - name: temp mountPath: /tmp - name: data mountPath: /data - name: inline-config-sources mountPath: /env-to-ini-mounts/inlines/ securityContext: {} resources: limits: {} requests: cpu: 100m memory: 128Mi - name: configure-gitea image: "36671e2b-kr1-registry.container.nhncloud.com/billing-base/gitea/gitea:1.22.1-rootless" command: ["/usr/sbin/configure_gitea.sh"] imagePullPolicy: IfNotPresent securityContext: runAsUser: 1000 env: - name: GITEA_APP_INI value: /data/gitea/conf/app.ini - name: GITEA_CUSTOM value: /data/gitea - name: GITEA_WORK_DIR value: /data - name: GITEA_TEMP value: /tmp/gitea - name: HOME value: /data/gitea/git - name: GITEA_ADMIN_USERNAME value: "gitea_admin" - name: GITEA_ADMIN_PASSWORD #value: "ijinc123!" # sdjo value: "grumatic123!" - name: GITEA_ADMIN_PASSWORD_MODE value: keepUpdated volumeMounts: - name: init mountPath: /usr/sbin - name: temp mountPath: /tmp - name: data mountPath: /data resources: limits: {} requests: cpu: 100m memory: 128Mi terminationGracePeriodSeconds: 60 imagePullSecrets: - name: ncr-billing containers: - name: gitea image: "gitea/gitea:1.22.1-rootless" imagePullPolicy: IfNotPresent env: # SSH Port values have to be set here as well for openssh configuration - name: SSH_LISTEN_PORT value: "2222" - name: SSH_PORT value: "22" - name: GITEA_APP_INI value: /data/gitea/conf/app.ini - name: GITEA_CUSTOM value: /data/gitea - name: GITEA_WORK_DIR value: /data - name: GITEA_TEMP value: /tmp/gitea - name: TMPDIR value: /tmp/gitea - name: HOME value: /data/gitea/git ports: - name: ssh containerPort: 2222 - name: http containerPort: 3000 livenessProbe: failureThreshold: 10 initialDelaySeconds: 200 periodSeconds: 10 successThreshold: 1 tcpSocket: port: http timeoutSeconds: 1 readinessProbe: failureThreshold: 3 initialDelaySeconds: 5 periodSeconds: 10 successThreshold: 1 tcpSocket: port: http timeoutSeconds: 1 resources: {} securityContext: {} volumeMounts: - name: temp mountPath: /tmp - name: data mountPath: /data volumes: - name: init secret: secretName: release-name-gitea-init defaultMode: 110 - name: config secret: secretName: release-name-gitea defaultMode: 110 - name: inline-config-sources secret: secretName: release-name-gitea-inline-config - name: temp emptyDir: {} - name: data persistentVolumeClaim: claimName: gitea-shared-storage --- # Source: gitea/charts/postgresql-ha/templates/postgresql/statefulset.yaml apiVersion: apps/v1 kind: StatefulSet metadata: name: release-name-postgresql-ha-postgresql namespace: "gitea" labels: app.kubernetes.io/instance: release-name app.kubernetes.io/name: postgresql-ha app.kubernetes.io/version: 16.3.0 app.kubernetes.io/component: postgresql role: data spec: replicas: 3 podManagementPolicy: "Parallel" serviceName: release-name-postgresql-ha-postgresql-headless updateStrategy: type: RollingUpdate selector: matchLabels: app.kubernetes.io/instance: release-name app.kubernetes.io/name: postgresql-ha app.kubernetes.io/component: postgresql role: data template: metadata: labels: app.kubernetes.io/instance: release-name app.kubernetes.io/name: postgresql-ha app.kubernetes.io/version: 16.3.0 app.kubernetes.io/component: postgresql role: data spec: automountServiceAccountToken: false affinity: podAffinity: podAntiAffinity: preferredDuringSchedulingIgnoredDuringExecution: - podAffinityTerm: labelSelector: matchLabels: app.kubernetes.io/instance: release-name app.kubernetes.io/name: postgresql-ha app.kubernetes.io/component: postgresql topologyKey: kubernetes.io/hostname weight: 1 nodeAffinity: securityContext: fsGroup: 1001 fsGroupChangePolicy: Always supplementalGroups: [] sysctls: [] serviceAccountName: release-name-postgresql-ha hostNetwork: false hostIPC: false imagePullSecrets: - name: ncr-billing containers: - name: postgresql image: 36671e2b-kr1-registry.container.nhncloud.com/billing-base/postgresql-repmgr:16.3.0-debian-12-r15 imagePullPolicy: "IfNotPresent" securityContext: allowPrivilegeEscalation: false capabilities: drop: - ALL privileged: false readOnlyRootFilesystem: true runAsGroup: 1001 runAsNonRoot: true runAsUser: 1001 seccompProfile: type: RuntimeDefault lifecycle: preStop: exec: command: - /pre-stop.sh - "25" # Auxiliary vars to populate environment variables env: - name: BITNAMI_DEBUG value: "false" # PostgreSQL configuration - name: POSTGRESQL_VOLUME_DIR value: "/bitnami/postgresql" - name: PGDATA value: "/bitnami/postgresql/data" - name: POSTGRES_POSTGRES_PASSWORD valueFrom: secretKeyRef: name: release-name-postgresql-ha-postgresql key: postgres-password - name: POSTGRES_USER value: "gitea" - name: POSTGRES_PASSWORD valueFrom: secretKeyRef: name: release-name-postgresql-ha-postgresql key: password - name: POSTGRES_DB value: "gitea" - name: POSTGRESQL_LOG_HOSTNAME value: "true" - name: POSTGRESQL_LOG_CONNECTIONS value: "false" - name: POSTGRESQL_LOG_DISCONNECTIONS value: "false" - name: POSTGRESQL_PGAUDIT_LOG_CATALOG value: "off" - name: POSTGRESQL_CLIENT_MIN_MESSAGES value: "error" - name: POSTGRESQL_SHARED_PRELOAD_LIBRARIES value: "pgaudit, repmgr" - name: POSTGRESQL_ENABLE_TLS value: "no" - name: POSTGRESQL_PORT_NUMBER value: "5432" # Repmgr configuration - name: REPMGR_PORT_NUMBER value: "5432" - name: REPMGR_PRIMARY_PORT value: "5432" - name: MY_POD_NAME valueFrom: fieldRef: fieldPath: metadata.name - name: REPMGR_UPGRADE_EXTENSION value: "no" - name: REPMGR_PGHBA_TRUST_ALL value: "no" - name: REPMGR_MOUNTED_CONF_DIR value: "/bitnami/repmgr/conf" - name: REPMGR_NAMESPACE valueFrom: fieldRef: fieldPath: metadata.namespace - name: REPMGR_PARTNER_NODES value: release-name-postgresql-ha-postgresql-0.release-name-postgresql-ha-postgresql-headless.$(REPMGR_NAMESPACE).svc.cluster.local,release-name-postgresql-ha-postgresql-1.release-name-postgresql-ha-postgresql-headless.$(REPMGR_NAMESPACE).svc.cluster.local,release-name-postgresql-ha-postgresql-2.release-name-postgresql-ha-postgresql-headless.$(REPMGR_NAMESPACE).svc.cluster.local, - name: REPMGR_PRIMARY_HOST value: "release-name-postgresql-ha-postgresql-0.release-name-postgresql-ha-postgresql-headless.$(REPMGR_NAMESPACE).svc.cluster.local" - name: REPMGR_NODE_NAME value: "$(MY_POD_NAME)" - name: REPMGR_NODE_NETWORK_NAME value: "$(MY_POD_NAME).release-name-postgresql-ha-postgresql-headless.$(REPMGR_NAMESPACE).svc.cluster.local" - name: REPMGR_NODE_TYPE value: "data" - name: REPMGR_LOG_LEVEL value: "NOTICE" - name: REPMGR_CONNECT_TIMEOUT value: "5" - name: REPMGR_RECONNECT_ATTEMPTS value: "2" - name: REPMGR_RECONNECT_INTERVAL value: "3" - name: REPMGR_USERNAME value: "repmgr" - name: REPMGR_PASSWORD valueFrom: secretKeyRef: name: release-name-postgresql-ha-postgresql key: repmgr-password - name: REPMGR_DATABASE value: "repmgr" - name: REPMGR_FENCE_OLD_PRIMARY value: "no" - name: REPMGR_CHILD_NODES_CHECK_INTERVAL value: "5" - name: REPMGR_CHILD_NODES_CONNECTED_MIN_COUNT value: "1" - name: REPMGR_CHILD_NODES_DISCONNECT_TIMEOUT value: "30" envFrom: ports: - name: postgresql containerPort: 5432 protocol: TCP livenessProbe: failureThreshold: 6 initialDelaySeconds: 30 periodSeconds: 10 successThreshold: 1 timeoutSeconds: 5 exec: command: - bash - -ec - 'PGPASSWORD=$POSTGRES_PASSWORD psql -w -U "gitea" -d "gitea" -h 127.0.0.1 -p 5432 -c "SELECT 1"' readinessProbe: failureThreshold: 6 initialDelaySeconds: 5 periodSeconds: 10 successThreshold: 1 timeoutSeconds: 5 exec: command: - bash - -ec - | exec pg_isready -U "postgres" -h 127.0.0.1 -p 5432 [ -f /opt/bitnami/postgresql/tmp/.initialized ] || [ -f /bitnami/postgresql/.initialized ] resources: limits: cpu: 375m ephemeral-storage: 2Gi memory: 384Mi requests: cpu: 250m ephemeral-storage: 50Mi memory: 256Mi volumeMounts: - name: empty-dir mountPath: /tmp subPath: tmp-dir - name: empty-dir mountPath: /opt/bitnami/postgresql/conf subPath: app-conf-dir - name: empty-dir mountPath: /opt/bitnami/postgresql/tmp subPath: app-tmp-dir - name: empty-dir mountPath: /opt/bitnami/repmgr/conf subPath: repmgr-conf-dir - name: empty-dir mountPath: /opt/bitnami/repmgr/tmp subPath: repmgr-tmp-dir - name: empty-dir mountPath: /opt/bitnami/repmgr/logs subPath: repmgr-logs-dir - name: data mountPath: /bitnami/postgresql - name: hooks-scripts mountPath: /pre-stop.sh subPath: pre-stop.sh - name: hooks-scripts mountPath: /readiness-probe.sh subPath: readiness-probe.sh volumes: - name: empty-dir emptyDir: {} - name: hooks-scripts configMap: name: release-name-postgresql-ha-postgresql-hooks-scripts defaultMode: 0755 volumeClaimTemplates: - apiVersion: v1 kind: PersistentVolumeClaim metadata: name: data spec: accessModes: - "ReadWriteOnce" storageClassName: billing-portal-sc resources: requests: storage: "8Gi" --- # Source: cdgitea/charts/redis-cluster/templates/redis-statefulset.yaml apiVersion: apps/v1 kind: StatefulSet metadata: name: release-name-redis-cluster namespace: "gitea" labels: app.kubernetes.io/instance: release-name app.kubernetes.io/name: redis-cluster app.kubernetes.io/version: 7.2.5 spec: updateStrategy: rollingUpdate: partition: 0 type: RollingUpdate selector: matchLabels: app.kubernetes.io/instance: release-name app.kubernetes.io/name: redis-cluster replicas: 3 serviceName: release-name-redis-cluster-headless podManagementPolicy: Parallel template: metadata: labels: app.kubernetes.io/instance: release-name app.kubernetes.io/name: redis-cluster app.kubernetes.io/version: 7.2.5 annotations: checksum/scripts: f4443ed238f1b19ab40555e6ba2aea56daba79e8270549f884b9b31cf8e0e2ee checksum/secret: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 checksum/config: 958b865b26062946819f240fe4e5fd268b7c3203b944549981f1bd7fdc7947eb spec: hostNetwork: false enableServiceLinks: false securityContext: fsGroup: 1001 fsGroupChangePolicy: Always supplementalGroups: [] sysctls: [] serviceAccountName: release-name-redis-cluster automountServiceAccountToken: false affinity: podAffinity: podAntiAffinity: preferredDuringSchedulingIgnoredDuringExecution: - podAffinityTerm: labelSelector: matchLabels: app.kubernetes.io/instance: release-name app.kubernetes.io/name: redis-cluster topologyKey: kubernetes.io/hostname weight: 1 nodeAffinity: imagePullSecrets: - name: ncr-billing containers: - name: release-name-redis-cluster image: 36671e2b-kr1-registry.container.nhncloud.com/billing-base/redis-cluster:7.2.5-debian-12-r2 imagePullPolicy: "IfNotPresent" securityContext: allowPrivilegeEscalation: false capabilities: drop: - ALL privileged: false readOnlyRootFilesystem: true runAsGroup: 1001 runAsNonRoot: true runAsUser: 1001 seccompProfile: type: RuntimeDefault command: ['/bin/bash', '-c'] args: - | # Backwards compatibility change if ! [[ -f /opt/bitnami/redis/etc/redis.conf ]]; then echo COPYING FILE cp /opt/bitnami/redis/etc/redis-default.conf /opt/bitnami/redis/etc/redis.conf fi pod_index=($(echo "$POD_NAME" | tr "-" "\n")) pod_index="${pod_index[-1]}" if [[ "$pod_index" == "0" ]]; then export REDIS_CLUSTER_CREATOR="yes" export REDIS_CLUSTER_REPLICAS="0" fi /opt/bitnami/scripts/redis-cluster/entrypoint.sh /opt/bitnami/scripts/redis-cluster/run.sh env: - name: POD_NAME valueFrom: fieldRef: fieldPath: metadata.name - name: REDIS_NODES value: "release-name-redis-cluster-0.release-name-redis-cluster-headless release-name-redis-cluster-1.release-name-redis-cluster-headless release-name-redis-cluster-2.release-name-redis-cluster-headless " - name: ALLOW_EMPTY_PASSWORD value: "yes" - name: REDIS_AOF_ENABLED value: "yes" - name: REDIS_TLS_ENABLED value: "no" - name: REDIS_PORT_NUMBER value: "6379" ports: - name: tcp-redis containerPort: 6379 - name: tcp-redis-bus containerPort: 16379 livenessProbe: initialDelaySeconds: 5 periodSeconds: 5 # One second longer than command timeout should prevent generation of zombie processes. timeoutSeconds: 6 successThreshold: 1 failureThreshold: 5 exec: command: - sh - -c - /scripts/ping_liveness_local.sh 5 readinessProbe: initialDelaySeconds: 5 periodSeconds: 5 # One second longer than command timeout should prevent generation of zombie processes. timeoutSeconds: 2 successThreshold: 1 failureThreshold: 5 exec: command: - sh - -c - /scripts/ping_readiness_local.sh 1 resources: limits: cpu: 150m ephemeral-storage: 2Gi memory: 192Mi requests: cpu: 100m ephemeral-storage: 50Mi memory: 128Mi volumeMounts: - name: scripts mountPath: /scripts - name: redis-data mountPath: /bitnami/redis/data subPath: - name: default-config mountPath: /opt/bitnami/redis/etc/redis-default.conf subPath: redis-default.conf - name: empty-dir mountPath: /opt/bitnami/redis/etc/ subPath: app-conf-dir - name: empty-dir mountPath: /opt/bitnami/redis/tmp subPath: app-tmp-dir - name: empty-dir mountPath: /opt/bitnami/redis/logs subPath: app-logs-dir - name: empty-dir mountPath: /tmp subPath: tmp-dir volumes: - name: scripts configMap: name: release-name-redis-cluster-scripts defaultMode: 0755 - name: default-config configMap: name: release-name-redis-cluster-default - name: empty-dir emptyDir: {} volumeClaimTemplates: - metadata: name: redis-data labels: app.kubernetes.io/instance: release-name app.kubernetes.io/name: redis-cluster spec: accessModes: - "ReadWriteOnce" storageClassName: billing-portal-sc resources: requests: storage: "8Gi"