Gitea_kube/Gitea-webserver.kube.yaml

apiVersion: v1
kind: Namespace
metadata:
  name: gitea
---
apiVersion: apps/v1
kind: Deployment
metadata:
  name: gitea-webserver
  namespace: gitea
spec:
  replicas: 1
  selector:
    matchLabels:
      app: gitea-webserver
  template:
    metadata:
      labels:
        app: gitea-webserver
    spec:
      containers:
      - name: gitea-webserver
        image: gitea/gitea:1.27.0
        imagePullPolicy: IfNotPresent      
        livenessProbe:
          httpGet:
            path: /api/healthz
            port: http
          initialDelaySeconds: 200
          timeoutSeconds: 5
          periodSeconds: 10
          successThreshold: 1
          failureThreshold: 10
        ports:
        - containerPort: 3000
          name: webserver-port
        env:
        - name: GITEA__database__DB_TYPE
          value: postgres
        - name: GITEA__database__HOST
          value: db:5432
        - name: GITEA__database__USER
          valueFrom:
            secretKeyRef:
              name: gitea-credentials
              key: POSTGRES_USER
        - name: GITEA__database__PASSWD
          valueFrom:
            secretKeyRef:
              name: gitea-credentials
              key: POSTGRES_PASSWORD
        - name: GITEA__database__NAME
          valueFrom:
            secretKeyRef:
              name: gitea-credentials
              key: POSTGRES_DB


        volumeMounts:
#        - name: data
#          mountPath: /usr/src/gitea/data
        - name: gitea-data
          mountPath: /data/
        - name: gitea-documents-backup
          mountPath: /backup
        resources:
            limits:
              cpu: 500m
              memory: 1000Mi

      volumes:
      - name: gitea-data
        persistentVolumeClaim:
          claimName: gitea-data
      - name: gitea-documents-backup
        persistentVolumeClaim:
          claimName: gitea-documents-backup
---
apiVersion: apps/v1
kind: Deployment
metadata:
  name: gitea-runner
  namespace: gitea
spec:
  replicas: 1
  selector:
    matchLabels:
      app: gitea-runner
  template:
    metadata:
      labels:
        app: gitea-runner
    spec:
      nodeName: kube-master
      containers:
      - name: gitea-runner
        #image: gitea/act_runner:nightly
        image: gitea/act_runner:latest
        securityContext:
          privileged: true
          runAsUser: 0
        imagePullPolicy: IfNotPresent
        env:
        - name: CONFIG_FILE
          value: /config/config.yaml
        - name: GITEA_INSTANCE_URL
          value: "https://gitea.tryton.geeraert.eu/"
        - name: GITEA_RUNNER_REGISTRATION_TOKEN
#          value: "2lLHg3Zt4mqjz04cBVIi6UI11cDOwIrwvNY6FMTH"
          value: "95NWFriTQnu910SpcbteDybyi9X5LffdLdaTK8lk"
        - name: GITEA_RUNNER_NAME
          value: "runner"
        - name: GITEA_RUNNER_LABELS
          value: "label"
        volumeMounts:
        - name: gitea-runner-data
          mountPath: /data/
        - name:  gitea-var-docker-sock
          mountPath: /var/run/docker.sock
        - name: gitea-runner-configfile         
          mountPath: /config
        resources:
            limits:
#              cpu: 500m
              memory: 1000Mi
      volumes:
      - name: gitea-var-docker-sock
        hostPath:
           path: /var/run/docker.sock
      - name: gitea-runner-data
        persistentVolumeClaim:
          claimName: gitea-runner-data
      - name: gitea-runner-configfile
        configMap: 
          name: gitea-runner-configfile
          defaultMode: 0555


---
apiVersion: apps/v1
kind: Deployment
metadata:
  name: remote-buildkitd
  namespace: gitea
spec:
  replicas: 1
  selector:
    matchLabels:
      app: remote-buildkitd
  template:
    metadata:
      labels:
        app: remote-buildkitd
    spec:
      nodeName: kube-master
      containers:
      - name: remote-buildkitd
        image:  moby/buildkit:latest
        securityContext:
          privileged: true
          runAsUser: 0
        imagePullPolicy: IfNotPresent
        ports:
        - containerPort: 1234
          name: buildkitd-port
        volumeMounts:
        - name: remote-buildkitd-data
          mountPath: /etc/buildkit/certs
        resources:
            limits:
#              cpu: 500m
              memory: 1000Mi
      volumes:
      - name: gitea-var-docker-sock
        hostPath:
           path: /var/run/docker.sock
      - name: remote-buildkitd-data
        persistentVolumeClaim:
          claimName: remote-buildkitd-data
---
apiVersion: v1
kind: Service
metadata:
  name: webserver
  namespace: gitea
spec:
  ports:
    - port: 3000
      targetPort: webserver-port
      protocol: TCP
  selector:
    app: gitea-webserver


---
apiVersion: v1
kind: Service
metadata:
  name: buildkitd
  namespace: gitea
spec:
  ports:
    - port: 1234
      targetPort: buildkitd-port
      protocol: TCP
  selector:
    app: remote-buildkitd