added gitea

helm-overrides/k8s-admin-prd-ase1/gitea/custom-values.yaml

@@ -0,0 +1,65 @@
+gitea:
+  # Adopting the standalone install from localvm-kubernetes-setup's
+  # deploy_gitea.sh (helm release "gitea", namespace "gitea") — same
+  # config, translated to values so it's GitOps-managed from here on.
+  # See devops-infra-argo-config values/admin/incubator-infra-k8s-admin-prd-ase1-values.yaml
+  # for the nameOverride that makes Argo's render match the existing
+  # release/object names instead of creating a second Gitea.
+  #
+  # sqlite + valkey/postgres disabled: sqlite is enough for a lab, and
+  # the valkey-cluster pod was stuck Pending until the StorageClass was
+  # fixed (claude.md issue #2/#3) — disabling it avoids that dependency.
+  # persistence.size must stay 10Gi to match the already-bound PVC —
+  # local-path-provisioner doesn't support volume expansion.
+
+  persistence:
+    size: 10Gi
+
+  postgresql:
+    enabled: false
+  postgresql-ha:
+    enabled: false
+  valkey:
+    enabled: false
+  valkey-cluster:
+    enabled: false
+
+  resources:
+    requests:
+      cpu: 100m
+      memory: 300Mi
+    limits:
+      memory: 500Mi
+
+  gitea:
+    config:
+      database:
+        DB_TYPE: sqlite3
+      actions:
+        ENABLED: true
+    admin:
+      username: gitadmin
+      # The running install set this via a plaintext --set-string flag
+      # at install time — the admin account already exists, so switching
+      # to existingSecret here doesn't touch it (Gitea's admin-creation
+      # Job is install-time only, doesn't re-run on upgrade). Still worth
+      # creating this Secret now so a future full reinstall doesn't fail
+      # on a missing values reference:
+      #   kubectl -n gitea create secret generic gitea-admin-credentials \
+      #     --from-literal=username=gitadmin \
+      #     --from-literal=password='<the password you already set>'
+      existingSecret: gitea-admin-credentials
+      email: "admin@local.lab"
+
+  ingress:
+    enabled: true
+    className: contour
+    hosts:
+      - host: gitea.192.168.1.7.nip.io
+        paths:
+          - path: /
+            pathType: Prefix
+      - host: gitea.100.90.248.118.nip.io
+        paths:
+          - path: /
+            pathType: Prefix

helm-overrides/k8s-devops-admin-ase1/contour-internal-0/custom-values.yaml

@@ -1,89 +0,0 @@
-configInline:
-  enableExternalNameService: true
-  timeouts:
-    connection-idle-timeout: 305s
-    connection-shutdown-grace-period: 300s	
-    max-connection-duration: 1200s
-  disablePermitInsecure: false
-  tls:
-    fallback-certificate: {}
-  accesslog-format: envoy
-  accesslog-level: disabled
-contour:
-  enabled: true
-  replicaCount: 3
-  podLabels:
-    bu: devops-admin
-    team: devops
-    env: prd
-  manageCRDs: true
-  resources:
-    requests:
-      cpu: 2
-      memory: 4Gi
-  tolerations:
-    - effect: NoSchedule
-      key: app
-      operator: Equal
-      value: common-infra
-  nodeSelector:
-    team: devops
-  service:
-    type: ClusterIP
-    ports:
-      xds: 8001
-      metrics: 8000
-  ingressClass:
-    name: "contour-internal-0"
-    create: true
-  debug: false
-  podAnnotations:
-    prometheus.io/path: /metrics
-    prometheus.io/port: '8000'
-    prometheus.io/scrape: 'true'
-envoy:
-  enabled: true
-  podLabels:
-    bu: devops-admin
-    team: devops
-    env: prd
-  kind: deployment
-  tolerations:
-    - effect: NoSchedule
-      key: app
-      operator: Equal
-      value: common-infra
-  nodeSelector:
-    dedicated: common-infra
-  logLevel: error
-  autoscaling:
-    enabled: true
-    minReplicas: 2
-    maxReplicas: 250
-    targetCPU: "40"
-    targetMemory: "55"
-  podAnnotations:
-    prometheus.io/path: /stats/prometheus
-    prometheus.io/port: '8002'
-    prometheus.io/scrape: 'true'
-  resources:
-    requests:
-      cpu: 2
-      memory: 4Gi
-  service:
-    tcpLB: true
-    export:
-      enabled: true
-    targetPorts:
-      http: http
-      https: https
-    type: ClusterIP
-    annotations:
-      cloud.google.com/neg: '{"exposed_ports": {"80":{"name": "envoy-int-0-devops-admin-prd"}}}'
-    ports:
-      http: 80
-      https: 443
-      grpc: 8080 ## only when tcpLB is true it will be used
-  # useHostPort: false
-defaultBackend:
-  enabled: false

helm-overrides/k8s-devops-admin-ase1/nginx-internal/custom-values.yaml

@@ -1,32 +0,0 @@
-ingress-nginx:
-  controller:
-    metrics:
-      enabled: true
-    podAnnotations:
-      prometheus.io/port: "10254"
-      prometheus.io/scrape: "true"
-    resources:
-      requests:
-        cpu: 200m
-        memory: 512Mi
-    autoscaling:
-      enabled: true
-      minReplicas: 2
-      maxReplicas: 30
-      targetCPUUtilizationPercentage: 60
-      targetMemoryUtilizationPercentage: 60
-    ingressClassResource:
-      name: nginx-internal
-    admissionWebhooks:
-      enabled: false
-    service:
-      type: ClusterIP
-      annotations:
-        cloud.google.com/neg: '{"exposed_ports": {"80":{"name": "nginx-devops-admin"}}}'
-    nodeSelector:
-      team: devops
-    tolerations:
-      - key: "app"
-        operator: "Equal"
-        value: "common-infra"
-        effect: "NoSchedule"

helm-templates/gitea/Chart.yaml

@@ -0,0 +1,7 @@
+apiVersion: v2
+name: gitea
+version: 1.0.0
+dependencies:
+  - name: gitea
+    version: 12.7.0
+    repository: https://dl.gitea.com/charts/