Initial upload

otc/stacks/forgejo/forgejo-runner.yaml

@@ -19,6 +19,6 @@ spec:
   destination:
     server: "https://kubernetes.default.svc"
   source:
-    repoURL: https://forgejo.edf-bootstrap.cx.fg1.ffm.osc.live/DevFW-CICD/stacks-instances
+    repoURL: https://edp.buildth.ing/DevFW-CICD/stacks-instances
     targetRevision: HEAD
     path: "otc//stacks/forgejo/forgejo-runner"

otc/stacks/forgejo/forgejo-runner/dind-docker.yaml

@@ -39,7 +39,7 @@ spec:
               --token ${RUNNER_SECRET} \
               --name ${RUNNER_NAME} \
               --instance ${FORGEJO_INSTANCE_URL} \
-              --labels docker:docker://node:20-bookworm,ubuntu-22.04:docker://forgejo.edf-bootstrap.cx.fg1.ffm.osc.live/devfw-cicd/catthehackerubuntu:act-22.04,ubuntu-latest:docker://forgejo.edf-bootstrap.cx.fg1.ffm.osc.live/devfw-cicd/catthehackerubuntu:act-22.04
+              --labels docker:docker://node:20-bookworm,ubuntu-22.04:docker://edp.buildth.ing/devfw-cicd/catthehackerubuntu:act-22.04,ubuntu-latest:docker://edp.buildth.ing/devfw-cicd/catthehackerubuntu:act-22.04
           env:
             - name: RUNNER_NAME
               valueFrom:

otc/stacks/forgejo/forgejo-server.yaml

@@ -18,21 +18,21 @@ spec:
     name: in-cluster
     namespace: gitea
   sources:
-    - repoURL: https://forgejo.edf-bootstrap.cx.fg1.ffm.osc.live/DevFW-CICD/forgejo-helm.git
+    - repoURL: https://edp.buildth.ing/DevFW-CICD/forgejo-helm.git
       path: .
       # first check out the desired version (example v9.0.0): https://code.forgejo.org/forgejo-helm/forgejo-helm/src/tag/v9.0.0/Chart.yaml
       # (note that the chart version is not the same as the forgejo application version, which is specified in the above Chart.yaml file)
       # then use the devops pipeline and select development, forgejo and the desired version (example v9.0.0):
-      # https://forgejo.edf-bootstrap.cx.fg1.ffm.osc.live/DevFW-CICD/devops-pipelines/actions?workflow=update-helm-depends.yaml&actor=0&status=0
+      # https://edp.buildth.ing/DevFW-CICD/devops-pipelines/actions?workflow=update-helm-depends.yaml&actor=0&status=0
       # finally update the desired version here and include "-depends", it is created by the devops pipeline. 
       # why do we have an added "-depends" tag? it resolves rate limitings when downloading helm OCI dependencies
-      targetRevision: v9.0.0-depends
+      targetRevision: v12.0.0-depends
       helm:
         valueFiles:
           - $values/otc//stacks/forgejo/forgejo-server/values.yaml
-    - repoURL: https://forgejo.edf-bootstrap.cx.fg1.ffm.osc.live/DevFW-CICD/stacks-instances
+    - repoURL: https://edp.buildth.ing/DevFW-CICD/stacks-instances
       targetRevision: HEAD
       ref: values
-    - repoURL: https://forgejo.edf-bootstrap.cx.fg1.ffm.osc.live/DevFW-CICD/stacks-instances
+    - repoURL: https://edp.buildth.ing/DevFW-CICD/stacks-instances
       targetRevision: HEAD
       path: "otc//stacks/forgejo/forgejo-server/manifests"

otc/stacks/forgejo/forgejo-server/values.yaml

@@ -39,6 +39,10 @@ extraVolumes:
       secretName: custom-database-certs
 
 gitea:
+  metrics:
+    enabled: true
+    serviceMonitor:
+      enabled: true
   additionalConfigFromEnvs:
     - name: FORGEJO__storage__MINIO_ACCESS_KEY_ID
       valueFrom:
@@ -85,11 +89,22 @@ gitea:
         secretKeyRef:
           name: postgres-forgejo-cloud-credentials
           key: password
+    # Either 'elasticsearch' or 'bleve' (go in memory search engine)
+    - name: FORGEJO__indexer__ISSUE_INDEXER_TYPE
+      valueFrom:
+        secretKeyRef:
+          name: elasticsearch-cloud-credentials
+          key: type
     - name: FORGEJO__indexer__ISSUE_INDEXER_CONN_STR
       valueFrom:
         secretKeyRef:
           name: elasticsearch-cloud-credentials
           key: connection-string
+    - name: FORGEJO__indexer__ISSUE_INDEXER_ENABLED
+      valueFrom:
+        secretKeyRef:
+          name: elasticsearch-cloud-credentials
+          key: enabled
     - name: FORGEJO__mailer__PASSWD
       valueFrom:
         secretKeyRef:
@@ -100,18 +115,13 @@ gitea:
     existingSecret: gitea-credential
 
   config:
-    indexer:
-      ISSUE_INDEXER_ENABLED: true
-      ISSUE_INDEXER_TYPE: elasticsearch
-      # TODO next
-      REPO_INDEXER_ENABLED: false
-      # REPO_INDEXER_TYPE: meilisearch # not yet working
-
+    APP_NAME: 'EDP'
+    APP_SLOGAN: 'Build your thing in minutes'
     storage:
       MINIO_ENDPOINT: obs.eu-de.otc.t-systems.com:443
       STORAGE_TYPE: minio
       MINIO_LOCATION: eu-de
-      MINIO_BUCKET: edp-forgejo-dns_zone
+      MINIO_BUCKET: edp-forgejo-observability
       MINIO_USE_SSL: true
 
     queue:
@@ -149,16 +159,19 @@ gitea:
 
 service:
   ssh:
-    type: NodePort
+    type: LoadBalancer
     nodePort: 32222
-    externalTrafficPolicy: Local
+    externalTrafficPolicy: Cluster
+    annotations:
+      kubernetes.io/elb.id:   
 
 image:
   pullPolicy: "IfNotPresent"
   # Overrides the image tag whose default is the chart appVersion.
   #tag: "8.0.3"
   # Adds -rootless suffix to image name
-  rootless: true
+  # rootless: true
+  fullOverride: forgejo.edf-bootstrap.cx.fg1.ffm.osc.live/devfw-cicd/edp-forgejo:v1.1.0-edp-v11.0.3
 
 forgejo:
   runner: