volker.raschekandCopilot
1b82a15b7f
The bundled `postgresql-ha` sub-chart was the only HA-ready database option, but it pinned us to a Bitnami chart whose images are no longer freely distributed, and it bundled repmgr and pgpool into the release. Operating a Postgres cluster through a Helm release also means the chart has to reimplement failover, backup and upgrade orchestration that a dedicated operator already solves. CloudNativePG is the de-facto standard operator for Postgres on Kubernetes and handles instance management, streaming replication, switchover and rolling upgrades itself. The operator is deliberately *not* part of this chart: cluster-scoped CRDs and controllers do not belong into an application release and would conflict with an operator that is already installed. The chart only renders the namespaced `Cluster` resource, so the operator can be managed independently. Because the operator cannot be assumed to be present, `cloudnativePG.enabled` defaults to `false`. Existing users of `postgresql` or an external database are therefore unaffected. Credentials follow the chart-wide `secrets.*` convention. Only the password is read from a Secret, because CloudNativePG requires `bootstrap.initdb.database` and `bootstrap.initdb.owner` as literals in the `Cluster` spec and cannot resolve them from a Secret. The password is injected into the `init-app-ini` container as `GITEA__database__PASSWD` instead of being written into the generated `app.ini`. BREAKING CHANGE: The `postgresql-ha` sub-chart and all `postgresql-ha.*` values have been removed. There is no in-place migration path between the two deployments: dump the database of the old `postgresql-ha` release with `pg_dump`, remove the `postgresql-ha` values, deploy the chart with `cloudnativePG.enabled=true` and restore the dump. Setting `postgresql-ha` now fails the release with a pointer to the changelog. Co-authored-by: Copilot <copilot@github.com>
57 lines
1.9 KiB
Smarty
57 lines
1.9 KiB
Smarty
---
|
|
|
|
{{/* annotations */}}
|
|
|
|
{{- define "gitea.pod.annotations" -}}
|
|
|
|
{{/* secret - admin */}}
|
|
{{- if and .Values.secrets.admin.enabled .Values.secrets.admin.addSHASumAnnotation }}
|
|
checksum/admin: {{ include "gitea.secret.checksum" (list . "admin") }}
|
|
{{- end }}
|
|
|
|
{{/* secret - cloudnativePG */}}
|
|
{{- if and .Values.cloudnativePG.enabled .Values.cloudnativePG.credentials.addSHASumAnnotation }}
|
|
checksum/cloudnativePG: {{ include "gitea.secret.checksum" (list . "cloudnativePG") }}
|
|
{{- end }}
|
|
|
|
{{/* secret - config */}}
|
|
{{- if and .Values.secrets.config.enabled .Values.secrets.config.addSHASumAnnotation }}
|
|
checksum/config: {{ include "gitea.secret.checksum" (list . "config") }}
|
|
{{- end }}
|
|
|
|
{{/* secret - gpg */}}
|
|
{{- if and .Values.secrets.gpg.enabled .Values.secrets.gpg.addSHASumAnnotation }}
|
|
checksum/gpg: {{ include "gitea.secret.checksum" (list . "gpg") }}
|
|
{{- end }}
|
|
|
|
{{/* secret - init */}}
|
|
{{- if and .Values.secrets.init.enabled .Values.secrets.init.addSHASumAnnotation }}
|
|
checksum/init: {{ include "gitea.secret.checksum" (list . "init") }}
|
|
{{- end }}
|
|
|
|
{{/* secret - inlineConfig */}}
|
|
{{- if and .Values.secrets.inlineConfig.enabled .Values.secrets.inlineConfig.addSHASumAnnotation }}
|
|
checksum/inlineConfig: {{ include "gitea.secret.checksum" (list . "inlineConfig") }}
|
|
{{- end }}
|
|
|
|
{{/* secret - metrics */}}
|
|
{{- if and .Values.secrets.metrics.enabled .Values.secrets.metrics.addSHASumAnnotation }}
|
|
checksum/metrics: {{ include "gitea.secret.checksum" (list . "metrics") }}
|
|
{{- end }}
|
|
|
|
{{/* secret - ldap */}}
|
|
{{- range $idx, $value := .Values.gitea.ldap }}
|
|
checksum/ldap_{{ $idx }}: {{ include "gitea.ldap_settings" (list $idx $value) | sha256sum }}
|
|
{{- end }}
|
|
|
|
{{/* secret - oauth */}}
|
|
{{- range $idx, $value := .Values.gitea.oauth }}
|
|
checksum/oauth_{{ $idx }}: {{ include "gitea.oauth_settings" (list $idx $value) | sha256sum }}
|
|
{{- end }}
|
|
|
|
{{/* custom pod annotations */}}
|
|
{{- with .Values.gitea.podAnnotations }}
|
|
{{ toYaml . }}
|
|
{{- end }}
|
|
|
|
{{- end }} |