mirror of
https://code.forgejo.org/infrastructure/documentation
synced 2024-11-25 12:11:10 +00:00
1.1 KiB
1.1 KiB
Forgejo k8s instance
forgejo configuration in ingress for the reverse proxy (traefik
) to route the domain and for the ACME issuer (cert-manager
) to obtain a certificate. And in service for the ssh
port to be bound to the desired IPs of the load balancer (metallb
). A PVC is created on the networked storage.
Secrets
New
cp forgejo-secrets.yml.example $name-secrets.yml
- edit
kubectl create secret generic forgejo-$name-secrets --from-file=value=$name-secrets.yml
Existing
kubectl get secret forgejo-$name-secrets -o json | jq -r '.data.value' | base64 -d > $name-secrets.yml
Storage
../k3s-host/setup.sh setup_k8s_pvc forgejo-$name 4Gi 1000
Pod
../k3s-host/subst.sh forgejo-values.yml | helm upgrade forgejo-$name -f - -f $name-values.yml -f $name-secrets.yml oci://code.forgejo.org/forgejo-helm/forgejo --atomic --wait --install