├── .DS_Store
├── .gitignore
├── .idea
    ├── encodings.xml
    ├── gitlab-chart.iml
    ├── inspectionProfiles
    │   └── profiles_settings.xml
    ├── misc.xml
    ├── modules.xml
    ├── vcs.xml
    └── workspace.xml
├── README.md
├── dump_secrets.sh
├── examples
    └── values-test.yaml
└── gitlab
    ├── .DS_Store
    ├── .helmignore
    ├── Chart.yaml
    ├── LICENSE
    ├── requirements.lock
    ├── requirements.yaml
    ├── templates
        ├── NOTES.txt
        ├── _helpers.tpl
        ├── configmap.yaml
        ├── deployment.yaml
        ├── ingress.yaml
        ├── partials
        │   ├── _advanced.yaml
        │   ├── _backup.yaml
        │   ├── _backup_aws.yaml
        │   ├── _backup_gcs.yaml
        │   ├── _email.yaml
        │   ├── _gitlab_registry.yaml
        │   ├── _imap.yaml
        │   ├── _ldap.yaml
        │   ├── _nginx_tuning.yaml
        │   ├── _oauth.yaml
        │   ├── _pages.yaml
        │   ├── _rack.yaml
        │   ├── _smtp.yaml
        │   └── _ssl.yaml
        ├── pvc.yaml
        ├── secret.yaml
        └── service.yaml
    └── values.yaml


/.DS_Store:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/lwolf/gitlab-chart/5aae6ebf1ece56449a8f719917e661a4dbbe025c/.DS_Store


--------------------------------------------------------------------------------
/.gitignore:
--------------------------------------------------------------------------------
1 | charts


--------------------------------------------------------------------------------
/.idea/encodings.xml:
--------------------------------------------------------------------------------
1 | <?xml version="1.0" encoding="UTF-8"?>
2 | <project version="4">
3 |   <component name="Encoding">
4 |     <file url="PROJECT" charset="UTF-8" />
5 |   </component>
6 | </project>


--------------------------------------------------------------------------------
/.idea/gitlab-chart.iml:
--------------------------------------------------------------------------------
 1 | <?xml version="1.0" encoding="UTF-8"?>
 2 | <module type="PYTHON_MODULE" version="4">
 3 |   <component name="NewModuleRootManager">
 4 |     <content url="file://$MODULE_DIR$" />
 5 |     <orderEntry type="inheritedJdk" />
 6 |     <orderEntry type="sourceFolder" forTests="false" />
 7 |   </component>
 8 |   <component name="TemplatesService">
 9 |     <option name="TEMPLATE_FOLDERS">
10 |       <list>
11 |         <option value="$MODULE_DIR$/templates" />
12 |       </list>
13 |     </option>
14 |   </component>
15 | </module>


--------------------------------------------------------------------------------
/.idea/inspectionProfiles/profiles_settings.xml:
--------------------------------------------------------------------------------
1 | <component name="InspectionProjectProfileManager">
2 |   <settings>
3 |     <option name="useProjectProfile" value="false" />
4 |     <option name="USE_PROJECT_PROFILE" value="false" />
5 |     <version value="1.0" />
6 |   </settings>
7 | </component>


--------------------------------------------------------------------------------
/.idea/misc.xml:
--------------------------------------------------------------------------------
 1 | <?xml version="1.0" encoding="UTF-8"?>
 2 | <project version="4">
 3 |   <component name="ProjectInspectionProfilesVisibleTreeState">
 4 |     <entry key="Project Default">
 5 |       <profile-state>
 6 |         <expanded-state>
 7 |           <State>
 8 |             <id />
 9 |           </State>
10 |           <State>
11 |             <id>File Watchers</id>
12 |           </State>
13 |         </expanded-state>
14 |         <selected-state>
15 |           <State>
16 |             <id>File Watchers</id>
17 |           </State>
18 |         </selected-state>
19 |       </profile-state>
20 |     </entry>
21 |   </component>
22 |   <component name="ProjectRootManager" version="2" project-jdk-name="Python 2.7.6 (/usr/bin/python)" project-jdk-type="Python SDK" />
23 | </project>


--------------------------------------------------------------------------------
/.idea/modules.xml:
--------------------------------------------------------------------------------
1 | <?xml version="1.0" encoding="UTF-8"?>
2 | <project version="4">
3 |   <component name="ProjectModuleManager">
4 |     <modules>
5 |       <module fileurl="file://$PROJECT_DIR$/.idea/gitlab-chart.iml" filepath="$PROJECT_DIR$/.idea/gitlab-chart.iml" />
6 |     </modules>
7 |   </component>
8 | </project>


--------------------------------------------------------------------------------
/.idea/vcs.xml:
--------------------------------------------------------------------------------
1 | <?xml version="1.0" encoding="UTF-8"?>
2 | <project version="4">
3 |   <component name="VcsDirectoryMappings">
4 |     <mapping directory="$PROJECT_DIR$" vcs="Git" />
5 |   </component>
6 | </project>


--------------------------------------------------------------------------------
/.idea/workspace.xml:
--------------------------------------------------------------------------------
  1 | <?xml version="1.0" encoding="UTF-8"?>
  2 | <project version="4">
  3 |   <component name="ChangeListManager">
  4 |     <list default="true" id="778af3c8-ceb9-4cb8-a008-e1d43d2795d3" name="Default" comment="" />
  5 |     <ignored mask="rest-client.private.env.json" />
  6 |     <ignored mask="http-client.private.env.json" />
  7 |     <option name="EXCLUDED_CONVERTED_TO_IGNORED" value="true" />
  8 |     <option name="TRACKING_ENABLED" value="true" />
  9 |     <option name="SHOW_DIALOG" value="false" />
 10 |     <option name="HIGHLIGHT_CONFLICTS" value="true" />
 11 |     <option name="HIGHLIGHT_NON_ACTIVE_CHANGELIST" value="false" />
 12 |     <option name="LAST_RESOLUTION" value="IGNORE" />
 13 |   </component>
 14 |   <component name="CreatePatchCommitExecutor">
 15 |     <option name="PATCH_PATH" value="" />
 16 |   </component>
 17 |   <component name="FileEditorManager">
 18 |     <leaf SIDE_TABS_SIZE_LIMIT_KEY="300">
 19 |       <file leaf-file-name="requirements.lock" pinned="false" current-in-tab="false">
 20 |         <entry file="file://$PROJECT_DIR$/gitlab/requirements.lock">
 21 |           <provider selected="true" editor-type-id="text-editor">
 22 |             <state relative-caret-position="270">
 23 |               <caret line="18" column="0" lean-forward="false" selection-start-line="18" selection-start-column="0" selection-end-line="18" selection-end-column="0" />
 24 |               <folding />
 25 |             </state>
 26 |           </provider>
 27 |         </entry>
 28 |       </file>
 29 |       <file leaf-file-name="values.yaml" pinned="false" current-in-tab="true">
 30 |         <entry file="file://$PROJECT_DIR$/gitlab/values.yaml">
 31 |           <provider selected="true" editor-type-id="text-editor">
 32 |             <state relative-caret-position="268">
 33 |               <caret line="125" column="16" lean-forward="false" selection-start-line="125" selection-start-column="16" selection-end-line="125" selection-end-column="16" />
 34 |               <folding />
 35 |             </state>
 36 |           </provider>
 37 |         </entry>
 38 |       </file>
 39 |       <file leaf-file-name="values-test.yaml" pinned="false" current-in-tab="false">
 40 |         <entry file="file://$PROJECT_DIR$/examples/values-test.yaml">
 41 |           <provider selected="true" editor-type-id="text-editor">
 42 |             <state relative-caret-position="283">
 43 |               <caret line="84" column="8" lean-forward="false" selection-start-line="84" selection-start-column="8" selection-end-line="84" selection-end-column="8" />
 44 |               <folding />
 45 |             </state>
 46 |           </provider>
 47 |         </entry>
 48 |       </file>
 49 |     </leaf>
 50 |   </component>
 51 |   <component name="FindInProjectRecents">
 52 |     <findStrings>
 53 |       <find>git</find>
 54 |       <find>GITLAB_ROOT_EMAIL</find>
 55 |       <find>gitlabUrl</find>
 56 |       <find>minio</find>
 57 |       <find>export</find>
 58 |     </findStrings>
 59 |   </component>
 60 |   <component name="GOROOT" path="/usr/local/Cellar/go/1.9.3/libexec" />
 61 |   <component name="Git.Settings">
 62 |     <option name="RECENT_GIT_ROOT_PATH" value="$PROJECT_DIR$" />
 63 |   </component>
 64 |   <component name="IdeDocumentHistory">
 65 |     <option name="CHANGED_PATHS">
 66 |       <list>
 67 |         <option value="$PROJECT_DIR$/examples/values-test.yaml" />
 68 |         <option value="$PROJECT_DIR$/gitlab/values.yaml" />
 69 |       </list>
 70 |     </option>
 71 |   </component>
 72 |   <component name="JsBuildToolGruntFileManager" detection-done="true" sorting="DEFINITION_ORDER" />
 73 |   <component name="JsBuildToolPackageJson" detection-done="true" sorting="DEFINITION_ORDER" />
 74 |   <component name="JsGulpfileManager">
 75 |     <detection-done>true</detection-done>
 76 |     <sorting>DEFINITION_ORDER</sorting>
 77 |   </component>
 78 |   <component name="ProjectFrameBounds">
 79 |     <option name="y" value="23" />
 80 |     <option name="width" value="1280" />
 81 |     <option name="height" value="777" />
 82 |   </component>
 83 |   <component name="ProjectView">
 84 |     <navigator currentView="ProjectPane" proportions="" version="1">
 85 |       <flattenPackages />
 86 |       <showMembers />
 87 |       <showModules />
 88 |       <showLibraryContents />
 89 |       <hideEmptyPackages />
 90 |       <abbreviatePackageNames />
 91 |       <autoscrollToSource />
 92 |       <autoscrollFromSource />
 93 |       <sortByType />
 94 |       <manualOrder />
 95 |       <foldersAlwaysOnTop value="true" />
 96 |     </navigator>
 97 |     <panes>
 98 |       <pane id="Scope" />
 99 |       <pane id="Scratches" />
100 |       <pane id="ProjectPane">
101 |         <subPane>
102 |           <expand>
103 |             <path>
104 |               <item name="gitlab-chart" type="b2602c69:ProjectViewProjectNode" />
105 |               <item name="gitlab-chart" type="462c0819:PsiDirectoryNode" />
106 |             </path>
107 |             <path>
108 |               <item name="gitlab-chart" type="b2602c69:ProjectViewProjectNode" />
109 |               <item name="gitlab-chart" type="462c0819:PsiDirectoryNode" />
110 |               <item name="examples" type="462c0819:PsiDirectoryNode" />
111 |             </path>
112 |             <path>
113 |               <item name="gitlab-chart" type="b2602c69:ProjectViewProjectNode" />
114 |               <item name="gitlab-chart" type="462c0819:PsiDirectoryNode" />
115 |               <item name="gitlab" type="462c0819:PsiDirectoryNode" />
116 |             </path>
117 |             <path>
118 |               <item name="gitlab-chart" type="b2602c69:ProjectViewProjectNode" />
119 |               <item name="gitlab-chart" type="462c0819:PsiDirectoryNode" />
120 |               <item name="gitlab" type="462c0819:PsiDirectoryNode" />
121 |               <item name="templates" type="462c0819:PsiDirectoryNode" />
122 |             </path>
123 |           </expand>
124 |           <select />
125 |         </subPane>
126 |       </pane>
127 |     </panes>
128 |   </component>
129 |   <component name="PropertiesComponent">
130 |     <property name="go.sdk.automatically.set" value="true" />
131 |     <property name="http.client.ignore.private.env.files.were.configured" value="true" />
132 |     <property name="last_opened_file_path" value="$PROJECT_DIR$" />
133 |     <property name="settings.editor.selected.configurable" value="configurable.group.editor" />
134 |     <property name="settings.editor.splitter.proportion" value="0.2" />
135 |     <property name="WebServerToolWindowFactoryState" value="false" />
136 |   </component>
137 |   <component name="RunDashboard">
138 |     <option name="ruleStates">
139 |       <list>
140 |         <RuleState>
141 |           <option name="name" value="ConfigurationTypeDashboardGroupingRule" />
142 |         </RuleState>
143 |         <RuleState>
144 |           <option name="name" value="StatusDashboardGroupingRule" />
145 |         </RuleState>
146 |       </list>
147 |     </option>
148 |   </component>
149 |   <component name="ShelveChangesManager" show_recycled="false">
150 |     <option name="remove_strategy" value="false" />
151 |   </component>
152 |   <component name="SvnConfiguration">
153 |     <configuration />
154 |   </component>
155 |   <component name="TaskManager">
156 |     <task active="true" id="Default" summary="Default task">
157 |       <changelist id="778af3c8-ceb9-4cb8-a008-e1d43d2795d3" name="Default" comment="" />
158 |       <created>1487925462849</created>
159 |       <option name="number" value="Default" />
160 |       <option name="presentableId" value="Default" />
161 |       <updated>1487925462849</updated>
162 |     </task>
163 |     <task id="LOCAL-00001" summary="[WIP] update minio dependency, make values-test.yaml easier for the first-runners">
164 |       <created>1528753644767</created>
165 |       <option name="number" value="00001" />
166 |       <option name="presentableId" value="LOCAL-00001" />
167 |       <option name="project" value="LOCAL" />
168 |       <updated>1528753644767</updated>
169 |     </task>
170 |     <option name="localTasksCounter" value="2" />
171 |     <servers />
172 |   </component>
173 |   <component name="ToolWindowManager">
174 |     <frame x="0" y="23" width="1280" height="777" extended-state="0" />
175 |     <editor active="true" />
176 |     <layout>
177 |       <window_info id="TODO" active="false" anchor="bottom" auto_hide="false" internal_type="DOCKED" type="DOCKED" visible="false" show_stripe_button="true" weight="0.33" sideWeight="0.5" order="6" side_tool="false" content_ui="tabs" />
178 |       <window_info id="Event Log" active="false" anchor="bottom" auto_hide="false" internal_type="DOCKED" type="DOCKED" visible="false" show_stripe_button="true" weight="0.33" sideWeight="0.5" order="-1" side_tool="true" content_ui="tabs" />
179 |       <window_info id="Run" active="false" anchor="bottom" auto_hide="false" internal_type="DOCKED" type="DOCKED" visible="false" show_stripe_button="true" weight="0.33" sideWeight="0.5" order="2" side_tool="false" content_ui="tabs" />
180 |       <window_info id="Version Control" active="false" anchor="bottom" auto_hide="false" internal_type="DOCKED" type="DOCKED" visible="false" show_stripe_button="true" weight="0.33" sideWeight="0.5" order="-1" side_tool="false" content_ui="tabs" />
181 |       <window_info id="Python Console" active="false" anchor="bottom" auto_hide="false" internal_type="DOCKED" type="DOCKED" visible="false" show_stripe_button="true" weight="0.33" sideWeight="0.5" order="-1" side_tool="false" content_ui="tabs" />
182 |       <window_info id="Terminal" active="false" anchor="bottom" auto_hide="false" internal_type="DOCKED" type="DOCKED" visible="false" show_stripe_button="true" weight="0.33" sideWeight="0.5" order="-1" side_tool="false" content_ui="tabs" />
183 |       <window_info id="Project" active="false" anchor="left" auto_hide="false" internal_type="DOCKED" type="DOCKED" visible="true" show_stripe_button="true" weight="0.25" sideWeight="0.5" order="0" side_tool="false" content_ui="combo" />
184 |       <window_info id="Docker" active="false" anchor="bottom" auto_hide="false" internal_type="DOCKED" type="DOCKED" visible="false" show_stripe_button="false" weight="0.33" sideWeight="0.5" order="-1" side_tool="false" content_ui="tabs" />
185 |       <window_info id="Database" active="false" anchor="right" auto_hide="false" internal_type="DOCKED" type="DOCKED" visible="false" show_stripe_button="true" weight="0.33" sideWeight="0.5" order="-1" side_tool="false" content_ui="tabs" />
186 |       <window_info id="Find" active="false" anchor="bottom" auto_hide="false" internal_type="DOCKED" type="DOCKED" visible="false" show_stripe_button="true" weight="0.33" sideWeight="0.5" order="1" side_tool="false" content_ui="tabs" />
187 |       <window_info id="SciView" active="false" anchor="right" auto_hide="false" internal_type="DOCKED" type="DOCKED" visible="false" show_stripe_button="true" weight="0.33" sideWeight="0.5" order="-1" side_tool="false" content_ui="tabs" />
188 |       <window_info id="Structure" active="false" anchor="left" auto_hide="false" internal_type="DOCKED" type="DOCKED" visible="false" show_stripe_button="true" weight="0.25" sideWeight="0.5" order="1" side_tool="false" content_ui="tabs" />
189 |       <window_info id="Debug" active="false" anchor="bottom" auto_hide="false" internal_type="DOCKED" type="DOCKED" visible="false" show_stripe_button="true" weight="0.4" sideWeight="0.5" order="3" side_tool="false" content_ui="tabs" />
190 |       <window_info id="Favorites" active="false" anchor="left" auto_hide="false" internal_type="DOCKED" type="DOCKED" visible="false" show_stripe_button="true" weight="0.33" sideWeight="0.5" order="-1" side_tool="true" content_ui="tabs" />
191 |       <window_info id="Cvs" active="false" anchor="bottom" auto_hide="false" internal_type="DOCKED" type="DOCKED" visible="false" show_stripe_button="true" weight="0.25" sideWeight="0.5" order="4" side_tool="false" content_ui="tabs" />
192 |       <window_info id="Hierarchy" active="false" anchor="right" auto_hide="false" internal_type="DOCKED" type="DOCKED" visible="false" show_stripe_button="true" weight="0.25" sideWeight="0.5" order="2" side_tool="false" content_ui="combo" />
193 |       <window_info id="Message" active="false" anchor="bottom" auto_hide="false" internal_type="DOCKED" type="DOCKED" visible="false" show_stripe_button="true" weight="0.33" sideWeight="0.5" order="0" side_tool="false" content_ui="tabs" />
194 |       <window_info id="Commander" active="false" anchor="right" auto_hide="false" internal_type="DOCKED" type="DOCKED" visible="false" show_stripe_button="true" weight="0.4" sideWeight="0.5" order="0" side_tool="false" content_ui="tabs" />
195 |       <window_info id="Inspection" active="false" anchor="bottom" auto_hide="false" internal_type="DOCKED" type="DOCKED" visible="false" show_stripe_button="true" weight="0.4" sideWeight="0.5" order="5" side_tool="false" content_ui="tabs" />
196 |       <window_info id="Ant Build" active="false" anchor="right" auto_hide="false" internal_type="DOCKED" type="DOCKED" visible="false" show_stripe_button="true" weight="0.25" sideWeight="0.5" order="1" side_tool="false" content_ui="tabs" />
197 |     </layout>
198 |   </component>
199 |   <component name="TypeScriptGeneratedFilesManager">
200 |     <option name="version" value="1" />
201 |   </component>
202 |   <component name="VcsContentAnnotationSettings">
203 |     <option name="myLimit" value="2678400000" />
204 |   </component>
205 |   <component name="VcsManagerConfiguration">
206 |     <MESSAGE value="[WIP] update minio dependency, make values-test.yaml easier for the first-runners" />
207 |     <option name="LAST_COMMIT_MESSAGE" value="[WIP] update minio dependency, make values-test.yaml easier for the first-runners" />
208 |   </component>
209 |   <component name="XDebuggerManager">
210 |     <breakpoint-manager />
211 |     <watches-manager />
212 |   </component>
213 |   <component name="editorHistoryManager">
214 |     <entry file="file://$PROJECT_DIR$/gitlab/requirements.lock">
215 |       <provider selected="true" editor-type-id="text-editor">
216 |         <state relative-caret-position="0">
217 |           <caret line="0" column="0" lean-forward="false" selection-start-line="0" selection-start-column="0" selection-end-line="0" selection-end-column="0" />
218 |           <folding />
219 |         </state>
220 |       </provider>
221 |     </entry>
222 |     <entry file="file://$PROJECT_DIR$/gitlab/values.yaml">
223 |       <provider selected="true" editor-type-id="text-editor">
224 |         <state relative-caret-position="120">
225 |           <caret line="8" column="16" lean-forward="true" selection-start-line="8" selection-start-column="11" selection-end-line="8" selection-end-column="16" />
226 |           <folding />
227 |         </state>
228 |       </provider>
229 |     </entry>
230 |     <entry file="file://$PROJECT_DIR$/gitlab/requirements.lock">
231 |       <provider selected="true" editor-type-id="text-editor">
232 |         <state relative-caret-position="270">
233 |           <caret line="18" column="0" lean-forward="false" selection-start-line="18" selection-start-column="0" selection-end-line="18" selection-end-column="0" />
234 |           <folding />
235 |         </state>
236 |       </provider>
237 |     </entry>
238 |     <entry file="file://$PROJECT_DIR$/values-test.yaml">
239 |       <provider selected="true" editor-type-id="text-editor">
240 |         <state relative-caret-position="0">
241 |           <caret line="0" column="0" lean-forward="false" selection-start-line="0" selection-start-column="0" selection-end-line="0" selection-end-column="0" />
242 |           <folding />
243 |         </state>
244 |       </provider>
245 |     </entry>
246 |     <entry file="file://$PROJECT_DIR$/examples/values-test.yaml">
247 |       <provider selected="true" editor-type-id="text-editor">
248 |         <state relative-caret-position="283">
249 |           <caret line="84" column="8" lean-forward="false" selection-start-line="84" selection-start-column="8" selection-end-line="84" selection-end-column="8" />
250 |           <folding />
251 |         </state>
252 |       </provider>
253 |     </entry>
254 |     <entry file="file://$PROJECT_DIR$/gitlab/requirements.yaml">
255 |       <provider selected="true" editor-type-id="text-editor">
256 |         <state relative-caret-position="270">
257 |           <caret line="18" column="0" lean-forward="true" selection-start-line="18" selection-start-column="0" selection-end-line="18" selection-end-column="0" />
258 |           <folding />
259 |         </state>
260 |       </provider>
261 |     </entry>
262 |     <entry file="file://$PROJECT_DIR$/gitlab/values.yaml">
263 |       <provider selected="true" editor-type-id="text-editor">
264 |         <state relative-caret-position="268">
265 |           <caret line="125" column="16" lean-forward="false" selection-start-line="125" selection-start-column="16" selection-end-line="125" selection-end-column="16" />
266 |           <folding />
267 |         </state>
268 |       </provider>
269 |     </entry>
270 |   </component>
271 | </project>


--------------------------------------------------------------------------------
/README.md:
--------------------------------------------------------------------------------
 1 | # Helm chart to install Gitlab
 2 | 
 3 | This chart is based on [my manifests](https://github.com/lwolf/kubernetes-gitlab) 
 4 | for manual deployment with lots of improvements.
 5 | 
 6 |  
 7 | Some of the features:
 8 | * Fully automated installation of Gitlab. 
 9 | * Register and manage Letsencrypt certificates with [kube-lego](https://github.com/jetstack/kube-lego)
10 | * Deploys PostgreSQL, Redis and Minio as part of the setup
11 | * Deploys fully configured Docker registry with external domain (letsencrypt) and integration with gitlab.
12 | * Semi-automatic creating of Runner
13 | * Ability to customize any of the [environment variables](https://github.com/sameersbn/docker-gitlab#available-configuration-parameters)
14 | 
15 | ## Requirements
16 | * Kubernetes 1.5 (for StatefulSets support).
17 | * PV support on the underlying infrastructure
18 | * Helm 2.2.0 (for conditions and flags support)
19 | 
20 | ## Quick installation
21 | 
22 | ```
23 | # add repository (needed for dependencies)
24 | $ helm repo add lwolf-charts http://charts.lwolf.org
25 | 
26 | # get default values.yaml file
27 | $ curl https://raw.githubusercontent.com/lwolf/gitlab-chart/master/gitlab/values.yaml -o values-test.yaml
28 | 
29 | # install
30 | $ helm install -f values-test.yaml lwolf-charts/gitlab
31 | 
32 | # establish DNS
33 | # if running with minikube, add an entry in /etc/hosts to the result of `$ minikube ip`
34 | 
35 | # Wait until gitlab is up and running.
36 | $ while ! curl --output /dev/null --silent --head --fail https://gitlab.example.com/help; do sleep 1 && echo -n .; done
37 | ...................................................
38 | 
39 | # Open gitlab runner configuration and check that Runner is successfully registered.
40 | # Copy token and run upgrade.
41 | $ helm upgrade -f values-test.yaml --set runner.token=<TOKEN> <install-name> lwolf-charts/gitlab --namespace=gitlab
42 | ```
43 | 
44 | ## TODO:
45 | - [x] splitting registry/runner into separate charts
46 | - [x] Add support for gitlab pages
47 | - [x] Upgrade to v9
48 | - [x] Upgrade to Kubernetes 1.6+
49 | - [x] more flexible runner configuration
50 | - [ ] testing/refactoring
51 | - [ ] monitoring of the whole thing in Prometheus
52 | 
53 | ## Support on Beerpay
54 | Hey dude! Help me out for a couple of :beers:!
55 | 
56 | [![Beerpay](https://beerpay.io/lwolf/gitlab-chart/badge.svg?style=beer-square)](https://beerpay.io/lwolf/gitlab-chart)  [![Beerpay](https://beerpay.io/lwolf/gitlab-chart/make-wish.svg?style=flat-square)](https://beerpay.io/lwolf/gitlab-chart?focus=wish)
57 | 


--------------------------------------------------------------------------------
/dump_secrets.sh:
--------------------------------------------------------------------------------
1 | #!/usr/bin/env bash
2 | 
3 | NAMESPACE=${1}
4 | 
5 | echo "GITLAB_ROOT_PASSWORD: $(kubectl get secret --namespace gitlab ${NAMESPACE}-gitlab -o jsonpath="{.data.GITLAB_ROOT_PASSWORD}" | base64 --decode)"
6 | echo "GITLAB_SECRETS_DB_KEY_BASE: $(kubectl get secret --namespace gitlab ${NAMESPACE}-gitlab -o jsonpath="{.data.GITLAB_SECRETS_DB_KEY_BASE}" | base64 --decode)"
7 | echo "GITLAB_SECRETS_SECRET_KEY_BASE: $(kubectl get secret --namespace gitlab ${NAMESPACE}-gitlab -o jsonpath="{.data.GITLAB_SECRETS_SECRET_KEY_BASE}" | base64 --decode)"
8 | echo "GITLAB_SECRETS_OTP_KEY_BASE: $(kubectl get secret --namespace gitlab ${NAMESPACE}-gitlab -o jsonpath="{.data.GITLAB_SECRETS_OTP_KEY_BASE}" | base64 --decode)"


--------------------------------------------------------------------------------
/examples/values-test.yaml:
--------------------------------------------------------------------------------
  1 | ingress:
  2 |   enabled: false
  3 |   configNamespaceOverride: "default"
  4 | 
  5 |   ## Gitlab Ingress annotations
  6 |   ##
  7 |   annotations:
  8 |     kubernetes.io/ingress.class: nginx
  9 |     kubernetes.io/tls-acme: 'true'
 10 | 
 11 |   ## Gitlab Ingress hostnames
 12 |   ## Must be provided if Ingress is enabled
 13 |   ##
 14 |   hosts:
 15 |     - gitlab.example.com
 16 | 
 17 |   ## Gitlab Ingress TLS configuration
 18 |   ## Secrets must be manually created in the namespace
 19 |   ##
 20 |   tls:
 21 |     - secretName: gitlab-server-tls
 22 |       hosts:
 23 |         - gitlab.example.com
 24 | 
 25 | persistence:
 26 |   ## This volume persists generated configuration files, keys, and certs.
 27 |   ##
 28 |   enabled: false
 29 |   size: 2Gi
 30 |   ## If defined, volume.beta.kubernetes.io/storage-class: <storageClass>
 31 |   ## Default: volume.alpha.kubernetes.io/storage-class: default
 32 |   ##
 33 |   storageClass: "default"
 34 |   accessMode: ReadWriteOnce
 35 | 
 36 | resources:
 37 |   requests:
 38 |     memory: 512Mi
 39 | 
 40 | postgresql:
 41 |   memory: 256Mi
 42 |   persistence:
 43 |     enabled: false
 44 |     storageClass: "default"
 45 |     size: 1Gi
 46 | 
 47 | redis:
 48 |   resources:
 49 |     requests:
 50 |       memory: 256Mi
 51 |   persistence:
 52 |     enabled: false
 53 |     storageClass: "default"
 54 |     size: 1Gi
 55 | 
 56 | minio:
 57 |   accessKey: "AKIAIOSFODNN7EXAMPLE"
 58 |   secretKey: "wJalrXUtnFEMI/K7MDENG/bPxRfiCYEXAMPLEKEY"
 59 |   persistence:
 60 |     enabled: true
 61 |     storageClass: "default"
 62 |     size: 1Gi
 63 | 
 64 | sshPort: 22
 65 | httpPort: 80
 66 | httpsPort: 443
 67 | 
 68 | 
 69 | config:
 70 |   DEBUG: "true"
 71 |   GITLAB_ROOT_EMAIL: "gitlab-admin@gitlab.example.com"
 72 |   GITLAB_HOST: gitlab.example.com
 73 |   GITLAB_HTTPS: "false"
 74 | 
 75 |   GITLAB_ROOT_PASSWORD: "3Uhprz35WEYCmebz56dyvLciwvzQxz"
 76 |   GITLAB_SECRETS_DB_KEY_BASE: "kCFSUsLlyZETCpStxxKG"
 77 |   GITLAB_SECRETS_SECRET_KEY_BASE: "gPL3l6dQ4FXo6a9fwa6I"
 78 |   GITLAB_SECRETS_OTP_KEY_BASE: "SVEHkkfIViQ4xDuNN8LM"
 79 | 
 80 |   GITLAB_PORT: 443
 81 |   GITLAB_TIMEZONE: "Europe/Stockholm"
 82 |   GITLAB_SHARED_RUNNERS_REGISTRATION_TOKEN: "186f6cdcb713adEXAMPLETOKEN"
 83 | 
 84 |   GITLAB_SSH_HOST: "git.example.com"
 85 |   GITLAB_SSH_PORT: "22"
 86 | 
 87 | 
 88 | runner:
 89 |   enabled: false
 90 |   # gitlabUrl should point to the GITLAB_HOST
 91 |   gitlabUrl: "https://gitlab.example.com/ci/"
 92 |   registrationToken: "186f6cdcb713adEXAMPLETOKEN"
 93 |   cache:
 94 |     enabled: true
 95 |     accessKey: "AKIAIOSFODNN7EXAMPLE"
 96 |     secretKey: "wJalrXUtnFEMI/K7MDENG/bPxRfiCYEXAMPLEKEY"
 97 | 
 98 | registry:
 99 |   enabled: false
100 |   # authTokenRealm should point to the GITLAB_HOST
101 |   authTokenRealm: "https://gitlab.example.com/jwt/auth"
102 |   ingress:
103 |     enabled: true
104 |     annotations:
105 |       kubernetes.io/ingress.class: nginx
106 |       kubernetes.io/tls-acme: 'true'
107 |     hosts:
108 |       - dhub.example.com
109 | 
110 |   persistence:
111 |     enabled: false
112 | 


--------------------------------------------------------------------------------
/gitlab/.DS_Store:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/lwolf/gitlab-chart/5aae6ebf1ece56449a8f719917e661a4dbbe025c/gitlab/.DS_Store


--------------------------------------------------------------------------------
/gitlab/.helmignore:
--------------------------------------------------------------------------------
 1 | # Patterns to ignore when building packages.
 2 | # This supports shell glob matching, relative path matching, and
 3 | # negation (prefixed with !). Only one pattern per line.
 4 | .DS_Store
 5 | # Common VCS dirs
 6 | .git/
 7 | .gitignore
 8 | .bzr/
 9 | .bzrignore
10 | .hg/
11 | .hgignore
12 | .svn/
13 | # Common backup files
14 | *.swp
15 | *.bak
16 | *.tmp
17 | *~
18 | # Various IDEs
19 | .project
20 | .idea/
21 | *.tmproj
22 | 


--------------------------------------------------------------------------------
/gitlab/Chart.yaml:
--------------------------------------------------------------------------------
 1 | name: gitlab
 2 | version: 0.3.0
 3 | appVersion: 11.11.0
 4 | description: GitLab Community Edition
 5 | keywords:
 6 | - git
 7 | - ci
 8 | - deploy
 9 | - issue tracker
10 | - code review
11 | - wiki
12 | home: https://about.gitlab.com
13 | sources:
14 | - https://hub.docker.com/r/sameersbn/gitlab
15 | - https://github.com/sameersbn/docker-gitlab
16 | icon: https://gitlab.com/uploads/group/avatar/6543/gitlab-logo-square.png
17 | maintainers:
18 | - name: Sergey Nuzhdin
19 |   email: ipaq.lw@gmail.com
20 | 


--------------------------------------------------------------------------------
/gitlab/LICENSE:
--------------------------------------------------------------------------------
 1 | MIT License
 2 | 
 3 | Copyright (c) 2017 Sergey Nuzhdin
 4 | 
 5 | Permission is hereby granted, free of charge, to any person obtaining a copy
 6 | of this software and associated documentation files (the "Software"), to deal
 7 | in the Software without restriction, including without limitation the rights
 8 | to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
 9 | copies of the Software, and to permit persons to whom the Software is
10 | furnished to do so, subject to the following conditions:
11 | 
12 | The above copyright notice and this permission notice shall be included in all
13 | copies or substantial portions of the Software.
14 | 
15 | THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
16 | IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
17 | FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
18 | AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
19 | LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
20 | OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
21 | SOFTWARE.
22 | 


--------------------------------------------------------------------------------
/gitlab/requirements.lock:
--------------------------------------------------------------------------------
 1 | dependencies:
 2 | - name: redis
 3 |   repository: https://kubernetes-charts.storage.googleapis.com/
 4 |   version: 0.7.0
 5 | - name: postgresql
 6 |   repository: https://kubernetes-charts.storage.googleapis.com/
 7 |   version: 0.6.0
 8 | - name: minio
 9 |   repository: https://kubernetes-charts.storage.googleapis.com/
10 |   version: 1.3.3
11 | - name: runner
12 |   repository: http://charts.lwolf.org/
13 |   version: 0.4.1
14 | - name: registry
15 |   repository: http://charts.lwolf.org/
16 |   version: 0.2.0
17 | digest: sha256:25e51eec0d7d50fc104f663272cb836081dc3364d66e44ee28690b9bdd6b3925
18 | generated: 2018-06-11T22:02:17.61264+01:00
19 | 


--------------------------------------------------------------------------------
/gitlab/requirements.yaml:
--------------------------------------------------------------------------------
 1 | dependencies:
 2 | - name: redis
 3 |   version: 0.7.0
 4 |   repository: https://kubernetes-charts.storage.googleapis.com/
 5 | - name: postgresql
 6 |   version: 0.6.0
 7 |   repository: https://kubernetes-charts.storage.googleapis.com/
 8 | - name: minio
 9 |   version: 1.3.3
10 |   repository: https://kubernetes-charts.storage.googleapis.com/
11 | - name: runner
12 |   version: 0.4.1
13 |   repository: http://charts.lwolf.org/
14 |   condition: runner.enabled
15 | - name: registry
16 |   version: 0.2.0
17 |   repository: http://charts.lwolf.org/
18 |   condition: registry.enabled
19 | 


--------------------------------------------------------------------------------
/gitlab/templates/NOTES.txt:
--------------------------------------------------------------------------------
 1 | 1. Get your GitLab URL by running:
 2 | 
 3 | {{- if contains "NodePort" .Values.serviceType }}
 4 | 
 5 |   export NODE_IP=$(kubectl get nodes --namespace {{ .Release.Namespace }} -o jsonpath="{.items[0].status.addresses[0].address}")
 6 |   echo http://$NODE_IP/
 7 | 
 8 | {{- else if contains "LoadBalancer" .Values.serviceType }}
 9 | 
10 |   NOTE: It may take a few minutes for the LoadBalancer IP to be available.
11 |         Watch the status with: 'kubectl get svc -w {{ template "fullname" . }}'
12 | 
13 |   export SERVICE_IP=$(kubectl get svc --namespace {{ .Release.Namespace }} {{ template "fullname" . }} -o jsonpath='{.status.loadBalancer.ingress[0].ip}')
14 |   echo http://$SERVICE_IP/
15 | {{- else if contains "ClusterIP"  .Values.serviceType }}
16 | 
17 |   export POD_NAME=$(kubectl get pods --namespace {{ .Release.Namespace }} -l "app={{ template "fullname" . }}" -o jsonpath="{.items[0].metadata.name}")
18 |   echo http://127.0.0.1:8080/
19 |   kubectl port-forward $POD_NAME 8080:80
20 | {{- end }}
21 | 
22 | 
23 | 2. Login as the root user:
24 | 
25 |   Username: root
26 |   Password: $(kubectl get secret --namespace {{ .Release.Namespace }} {{ template "fullname" . }} -o jsonpath="{.data.GITLAB_ROOT_PASSWORD}" | base64 --decode)
27 | 
28 | 3. Point a DNS entry at your install to ensure that your specified
29 |    external URL is reachable:
30 | 
31 |    {{ default "UNSPECIFIED" .Values.config.GITLAB_HOST }}
32 | 
33 | 
34 | ##############################################################################
35 | ## IMPORTANT NOTE!                                                          ##
36 | ##############################################################################
37 | 
38 | After successful installation make sure to save generated secrets:
39 | 
40 | GITLAB_ROOT_PASSWORD: $(kubectl get secret --namespace {{ .Release.Namespace }} {{ template "fullname" . }} -o jsonpath="{.data.GITLAB_ROOT_PASSWORD}" | base64 --decode)
41 | GITLAB_SECRETS_DB_KEY_BASE: $(kubectl get secret --namespace {{ .Release.Namespace }} {{ template "fullname" . }} -o jsonpath="{.data.GITLAB_SECRETS_DB_KEY_BASE}" | base64 --decode)
42 | GITLAB_SECRETS_SECRET_KEY_BASE: $(kubectl get secret --namespace {{ .Release.Namespace }} {{ template "fullname" . }} -o jsonpath="{.data.GITLAB_SECRETS_SECRET_KEY_BASE}" | base64 --decode)
43 | GITLAB_SECRETS_OTP_KEY_BASE: $(kubectl get secret --namespace {{ .Release.Namespace }} {{ template "fullname" . }} -o jsonpath="{.data.GITLAB_SECRETS_OTP_KEY_BASE}" | base64 --decode)
44 | 
45 | You need to provide this values during `helm upgrade` to avoid regeneration.
46 | 
47 | 
48 | 


--------------------------------------------------------------------------------
/gitlab/templates/_helpers.tpl:
--------------------------------------------------------------------------------
 1 | {{/* vim: set filetype=mustache: */}}
 2 | {{/*
 3 | Expand the name of the chart.
 4 | */}}
 5 | {{- define "name" -}}
 6 | {{- default .Chart.Name .Values.nameOverride | trunc 63 | trimSuffix "-" -}}
 7 | {{- end -}}
 8 | 
 9 | {{/*
10 | Create a default fully qualified app name.
11 | We truncate at 63 chars because some Kubernetes name fields are limited to this (by the DNS naming spec).
12 | */}}
13 | {{- define "fullname" -}}
14 | {{- $name := default .Chart.Name .Values.nameOverride -}}
15 | {{- printf "%s-%s" .Release.Name $name | trunc 63 | trimSuffix "-" -}}
16 | {{- end -}}
17 | 
18 | {{/*
19 | Create a default fully qualified postgresql name.
20 | We truncate at 63 chars because some Kubernetes name fields are limited to this (by the DNS naming spec).
21 | */}}
22 | {{- define "postgresql.fullname" -}}
23 | {{- printf "%s-%s" .Release.Name "postgresql" | trunc 63 | trimSuffix "-" -}}
24 | {{- end -}}
25 | 
26 | {{/*
27 | Create a default fully qualified redis name.
28 | We truncate at 63 chars because some Kubernetes name fields are limited to this (by the DNS naming spec).
29 | */}}
30 | {{- define "redis.fullname" -}}
31 | {{- printf "%s-%s" .Release.Name "redis" | trunc 63 | trimSuffix "-" -}}
32 | {{- end -}}
33 | 


--------------------------------------------------------------------------------
/gitlab/templates/configmap.yaml:
--------------------------------------------------------------------------------
 1 | apiVersion: v1
 2 | kind: ConfigMap
 3 | metadata:
 4 |   name: {{ template "fullname" . }}
 5 |   namespace: {{ .Release.Namespace }}
 6 |   labels:
 7 |     app: {{ template "fullname" . }}
 8 |     chart: "{{ .Chart.Name }}-{{ .Chart.Version }}"
 9 |     release: "{{ .Release.Name }}"
10 |     heritage: "{{ .Release.Service }}"
11 | data:
12 |   DEBUG: {{ default "false" .Values.config.DEBUG | quote }}
13 | 
14 |   GITLAB_HOST: {{  required "GITLAB_HOST is required" .Values.config.GITLAB_HOST | quote }}
15 |   GITLAB_PORT: {{ .Values.config.GITLAB_PORT | quote }}
16 | 
17 |   GITLAB_ROOT_EMAIL: {{ required "GITLAB_ROOT_EMAIL is required" .Values.config.GITLAB_ROOT_EMAIL | quote }}
18 | 
19 |   REDIS_PORT: {{ default "6379" .Values.config.REDIS_PORT | quote }}
20 |   REDIS_DB_NUMBER: {{ default "0" .Values.config.REDIS_DB_NUMBER | quote }}
21 | 
22 |   DB_ADAPTER: {{ default "postgresql" .Values.config.DB_ADAPTER | quote }}
23 |   DB_ENCODING: {{ default "utf8" .Values.config.DB_ENCODING | quote }}
24 |   DB_PORT: {{ default "5432" .Values.config.DB_PORT | quote }}
25 |   DB_NAME: {{ default "gitlab_production" .Values.config.DB_NAME | quote }}
26 |   DB_POOL: {{ default "10" .Values.config.DB_POOL | quote }}
27 |   {{ if .Values.config.GITLAB_SHARED_RUNNERS_REGISTRATION_TOKEN }}
28 |   GITLAB_SHARED_RUNNERS_REGISTRATION_TOKEN: {{ .Values.config.GITLAB_SHARED_RUNNERS_REGISTRATION_TOKEN | quote}}
29 |   {{- end }}
30 |   {{ if .Values.config.GITLAB_TIMEZONE -}}
31 |   GITLAB_TIMEZONE: {{ .Values.config.GITLAB_TIMEZONE | quote }}
32 |   {{- end }}
33 |   {{ if .Values.config.GITLAB_SSH_HOST -}}
34 |   GITLAB_SSH_HOST: {{ .Values.config.GITLAB_SSH_HOST | quote }}
35 |   {{- end }}
36 |   {{ if .Values.config.GITLAB_SSH_PORT -}}
37 |   GITLAB_SSH_PORT: {{ .Values.config.GITLAB_SSH_PORT | quote }}
38 |   {{- end }}
39 |   {{ if .Values.config.GITLAB_RELATIVE_URL_ROOT -}}
40 |   GITLAB_RELATIVE_URL_ROOT: {{ .Values.config.GITLAB_RELATIVE_URL_ROOT | quote }}
41 |   {{- end }}
42 |   {{ if .Values.config.GITLAB_TRUSTED_PROXIES -}}
43 |   GITLAB_TRUSTED_PROXIES: {{ .Values.config.GITLAB_TRUSTED_PROXIES | quote }}
44 |   {{- end }}
45 |   {{ if .Values.config.GITLAB_HTTPS -}}
46 |   GITLAB_HTTPS: {{ .Values.config.GITLAB_HTTPS | quote }}
47 |   {{- end }}
48 | 
49 | {{ include "backup_config" . | indent 2 }}
50 | {{ include "email_config" . | indent 2 }}
51 | {{ include "ssl_config" . | indent 2 }}
52 | {{ include "registry_config" . | indent 2 }}
53 | {{ include "nginx_config" . | indent 2 }}
54 | {{ include "smtp_config" . | indent 2 }}
55 | {{ include "imap_config" . | indent 2 }}
56 | {{ include "ldap_config" . | indent 2 }}
57 | {{ include "oauth_config" . | indent 2 }}
58 | {{ include "aws_backup_config" . | indent 2 }}
59 | {{ include "gcs_backup_config" . | indent 2 }}
60 | {{ include "rack_config" . | indent 2 }}
61 | {{ include "advanced_config" . | indent 2 }}
62 | {{ include "pages_config" . | indent 2 }}
63 | 
64 | 


--------------------------------------------------------------------------------
/gitlab/templates/deployment.yaml:
--------------------------------------------------------------------------------
  1 | apiVersion: extensions/v1beta1
  2 | kind: Deployment
  3 | metadata:
  4 |   name: {{ template "fullname" . }}
  5 |   namespace: {{ .Release.Namespace }}
  6 |   labels:
  7 |     app: {{ template "fullname" . }}
  8 |     chart: "{{ .Chart.Name }}-{{ .Chart.Version }}"
  9 |     release: "{{ .Release.Name }}"
 10 |     heritage: "{{ .Release.Service }}"
 11 | spec:
 12 |   replicas: {{ .Values.replicas }}
 13 |   template:
 14 |     metadata:
 15 |       labels:
 16 |         app: {{ template "fullname" . }}
 17 |       annotations:
 18 |         checksum/config-map: {{ include (print $.Chart.Name "/templates/configmap.yaml") . | sha256sum }}
 19 |     spec:
 20 |       terminationGracePeriodSeconds: 30
 21 |       containers:
 22 |       - name: {{ template "fullname" . }}
 23 |         image: "{{ .Values.image }}:{{ .Values.imageTag }}"
 24 |         imagePullPolicy: {{ default "" .Values.imagePullPolicy | quote }}
 25 |         env:
 26 |         {{- if .Values.config.GITLAB_TIMEZONE }}
 27 |         - name: GITLAB_TIMEZONE
 28 |           valueFrom:
 29 |             configMapKeyRef:
 30 |               name: {{ template "fullname" . }}
 31 |               key: GITLAB_TIMEZONE
 32 |         {{- end }}
 33 |         {{- if .Values.config.DEBUG }}
 34 |         - name: DEBUG
 35 |           valueFrom:
 36 |             configMapKeyRef:
 37 |               name: {{ template "fullname" . }}
 38 |               key: DEBUG
 39 |         {{- end }}
 40 |         - name: GITLAB_SECRETS_DB_KEY_BASE
 41 |           valueFrom:
 42 |             secretKeyRef:
 43 |               name: {{ template "fullname" . }}
 44 |               key: GITLAB_SECRETS_DB_KEY_BASE
 45 |         - name: GITLAB_SECRETS_SECRET_KEY_BASE
 46 |           valueFrom:
 47 |             secretKeyRef:
 48 |               name: {{ template "fullname" . }}
 49 |               key: GITLAB_SECRETS_SECRET_KEY_BASE
 50 |         - name: GITLAB_SECRETS_OTP_KEY_BASE
 51 |           valueFrom:
 52 |             secretKeyRef:
 53 |               name: {{ template "fullname" . }}
 54 |               key: GITLAB_SECRETS_OTP_KEY_BASE
 55 |         - name: GITLAB_ROOT_PASSWORD
 56 |           valueFrom:
 57 |             secretKeyRef:
 58 |               name: {{ template "fullname" . }}
 59 |               key: GITLAB_ROOT_PASSWORD
 60 |         - name: GITLAB_ROOT_EMAIL
 61 |           valueFrom:
 62 |             configMapKeyRef:
 63 |               name: {{ template "fullname" . }}
 64 |               key: GITLAB_ROOT_EMAIL
 65 |         - name: GITLAB_HOST
 66 |           valueFrom:
 67 |             configMapKeyRef:
 68 |               name: {{ template "fullname" . }}
 69 |               key: GITLAB_HOST
 70 |         - name: GITLAB_PORT
 71 |           valueFrom:
 72 |             configMapKeyRef:
 73 |               name: {{ template "fullname" . }}
 74 |               key: GITLAB_PORT
 75 |         {{ if .Values.config.GITLAB_SSH_HOST -}}
 76 |         - name: GITLAB_SSH_HOST
 77 |           valueFrom:
 78 |             configMapKeyRef:
 79 |               name: {{ template "fullname" . }}
 80 |               key: GITLAB_SSH_HOST
 81 |         {{ end }}
 82 |         {{ if .Values.config.GITLAB_SSH_PORT -}}
 83 |         - name: GITLAB_SSH_PORT
 84 |           valueFrom:
 85 |             configMapKeyRef:
 86 |               name: {{ template "fullname" . }}
 87 |               key: GITLAB_SSH_PORT
 88 |         {{ end }}
 89 |         {{ if .Values.config.GITLAB_RELATIVE_URL_ROOT -}}
 90 |         - name: GITLAB_RELATIVE_URL_ROOT
 91 |           valueFrom:
 92 |             configMapKeyRef:
 93 |               name: {{ template "fullname" . }}
 94 |               key: GITLAB_RELATIVE_URL_ROOT
 95 |         {{ end }}
 96 |         {{ if .Values.config.GITLAB_TRUSTED_PROXIES -}}
 97 |         - name: GITLAB_TRUSTED_PROXIES
 98 |           valueFrom:
 99 |             configMapKeyRef:
100 |               name: {{ template "fullname" . }}
101 |               key: GITLAB_TRUSTED_PROXIES
102 |         {{ end }}
103 |         {{ if .Values.config.GITLAB_HTTPS -}}
104 |         - name: GITLAB_HTTPS
105 |           valueFrom:
106 |             configMapKeyRef:
107 |               name: {{ template "fullname" . }}
108 |               key: GITLAB_HTTPS
109 |         {{ end }}
110 |         {{ if .Values.config.GITLAB_SHARED_RUNNERS_REGISTRATION_TOKEN -}}
111 |         - name: GITLAB_SHARED_RUNNERS_REGISTRATION_TOKEN
112 |           valueFrom:
113 |             configMapKeyRef:
114 |               name: {{ template "fullname" . }}
115 |               key: GITLAB_SHARED_RUNNERS_REGISTRATION_TOKEN
116 |         {{ end }}
117 |         - name: DB_ADAPTER
118 |           valueFrom:
119 |             configMapKeyRef:
120 |               name: {{ template "fullname" . }}
121 |               key: DB_ADAPTER
122 |         - name: DB_ENCODING
123 |           valueFrom:
124 |             configMapKeyRef:
125 |               name: {{ template "fullname" . }}
126 |               key: DB_ENCODING
127 |         - name: DB_HOST
128 |           value: {{ template "postgresql.fullname" . }}
129 |         - name: DB_PORT
130 |           valueFrom:
131 |             configMapKeyRef:
132 |               name: {{ template "fullname" . }}
133 |               key: DB_PORT
134 |         - name: DB_POOL
135 |           valueFrom:
136 |             configMapKeyRef:
137 |               name: {{ template "fullname" . }}
138 |               key: DB_POOL
139 |         - name: DB_USER
140 |           valueFrom:
141 |             secretKeyRef:
142 |               name: {{ template "fullname" . }}
143 |               key: DB_USER
144 |         - name: DB_PASS
145 |           valueFrom:
146 |             secretKeyRef:
147 |               name: {{ template "fullname" . }}
148 |               key: DB_PASS
149 |         - name: DB_NAME
150 |           valueFrom:
151 |             configMapKeyRef:
152 |               name: {{ template "fullname" . }}
153 |               key: DB_NAME
154 |         - name: REDIS_HOST
155 |           value: {{ template "redis.fullname" . }}
156 |         - name: REDIS_PORT
157 |           valueFrom:
158 |             configMapKeyRef:
159 |               name: {{ template "fullname" . }}
160 |               key: REDIS_PORT
161 |         - name: REDIS_DB_NUMBER
162 |           valueFrom:
163 |             configMapKeyRef:
164 |               name: {{ template "fullname" . }}
165 |               key: REDIS_DB_NUMBER
166 |         - name: REDIS_PASSWORD
167 |           valueFrom:
168 |             secretKeyRef:
169 |               name: {{ template "fullname" . }}
170 |               key: REDIS_PASSWORD
171 | {{- if .Values.config.AWS_BACKUPS }}
172 | {{ include "aws_backup_data" . | indent 8 }}
173 | {{- end }}
174 | {{- if .Values.config.GCS_BACKUPS }}
175 | {{ include "gcs_backup_data" . | indent 8 }}
176 | {{- end }}
177 | {{- if .Values.config.OAUTH_ENABLED }}
178 | {{ include "oauth_data" . | indent 8 }}
179 | {{- end }}
180 | {{- if .Values.config.IMAP_ENABLED }}
181 | {{ include "imap_data" . | indent 8 }}
182 | {{- end }}
183 | {{- if .Values.config.SMTP_ENABLED }}
184 | {{ include "smtp_data" . | indent 8 }}
185 | {{- end }}
186 | {{- if .Values.config.LDAP_ENABLED }}
187 | {{ include "ldap_data" . | indent 8 }}
188 | {{- end }}
189 | {{- if .Values.config.GITLAB_REGISTRY_ENABLED }}
190 | {{ include "registry_data" . | indent 8 }}
191 | {{- end }}
192 | {{- if .Values.config.RACK_ATTACK_ENABLED }}
193 | {{ include "rack_data" . | indent 8 }}
194 | {{- end }}
195 | {{ include "nginx_data" . | indent 8 }}
196 | {{ include "ssl_data" . | indent 8 }}
197 | {{ include "email_data" . | indent 8 }}
198 | {{ include "backup_data" . | indent 8 }}
199 | {{ include "advanced_data" . | indent 8 }}
200 | {{ include "pages_data" . | indent 8 }}
201 | 
202 |         ports:
203 |         - name: http
204 |           containerPort: 80
205 |         - name: ssh
206 |           containerPort: 22
207 |         - name: https
208 |           containerPort: 443
209 |         livenessProbe:
210 |           httpGet:
211 |             path: /help
212 |             port: 80
213 |           initialDelaySeconds: 180
214 |           timeoutSeconds: 15
215 |         readinessProbe:
216 |           httpGet:
217 |             path: /help
218 |             port: 80
219 |           initialDelaySeconds: 15
220 |           timeoutSeconds: 1
221 |         volumeMounts:
222 |         {{ if .Values.registry.enabled }}
223 |         - name: certs
224 |           mountPath: /certs
225 |           readOnly: true
226 |         {{ end }}
227 |         - name: gitlab-data
228 |           mountPath: /home/git/data
229 |         resources:
230 | {{ toYaml .Values.resources | indent 10 }}
231 |       volumes:
232 |       - name: gitlab-data
233 |       {{- if .Values.persistence.enabled }}
234 |         persistentVolumeClaim:
235 |           claimName: {{ template "fullname" . }}-data
236 |       {{- else }}
237 |         emptyDir: {}
238 |       {{- end }}
239 |       {{- if .Values.registry.enabled }}
240 |       - name: certs
241 |         secret:
242 |           secretName: {{ default "registry-server-tls" .Values.registry.ingress.secretName }}
243 |       {{- end }}
244 | 


--------------------------------------------------------------------------------
/gitlab/templates/ingress.yaml:
--------------------------------------------------------------------------------
 1 | {{- if .Values.ingress.enabled -}}
 2 | {{- $releaseName := .Release.Name -}}
 3 | {{- $servicePort := .Values.httpPort -}}
 4 | {{- $relativePath := .Values.config.GITLAB_RELATIVE_URL_ROOT }}
 5 | apiVersion: extensions/v1beta1
 6 | kind: Ingress
 7 | metadata:
 8 |   annotations:
 9 |   {{- range $key, $value := .Values.ingress.annotations }}
10 |     {{ $key }}: {{ $value | quote }}
11 |   {{- end }}
12 |   labels:
13 |     app: {{ template "fullname" . }}
14 |     chart: "{{ .Chart.Name }}-{{ .Chart.Version }}"
15 |     heritage: "{{ .Release.Service }}"
16 |     release: "{{ .Release.Name }}"
17 |   name: {{ template "fullname" . }}
18 |   namespace: {{ .Release.Namespace }}
19 | spec:
20 |   rules:
21 |   {{- range .Values.ingress.hosts }}
22 |     - host: {{ . }}
23 |       http:
24 |         paths:
25 |           - path: {{ default "/" $relativePath }}
26 |             backend:
27 |               serviceName: {{ printf "%s-%s" $releaseName "gitlab" | trunc 63 }}
28 |               servicePort: {{ $servicePort }}
29 |   {{- end }}
30 |     - host: {{ .Values.config.GITLAB_SSH_HOST }}
31 |       http:
32 |         paths:
33 |           - path: /
34 |             backend:
35 |               serviceName: {{ printf "%s-%s" $releaseName "gitlab" | trunc 63 }}
36 |               servicePort: {{ .Values.config.GITLAB_SSH_PORT }}
37 | 
38 |   {{- if .Values.ingress.tls }}
39 |   tls:
40 | {{ toYaml .Values.ingress.tls | indent 4 }}
41 |   {{- end -}}
42 | {{- end -}}
43 | 


--------------------------------------------------------------------------------
/gitlab/templates/partials/_advanced.yaml:
--------------------------------------------------------------------------------
  1 | {{- define "advanced_config" -}}
  2 | {{ if .Values.config.GITLAB_SIGNUP_ENABLED -}}
  3 | GITLAB_SIGNUP_ENABLED: {{ .Values.config.GITLAB_SIGNUP_ENABLED | quote }}
  4 | {{- end }}
  5 | {{ if .Values.config.GITLAB_PROJECTS_LIMIT -}}
  6 | GITLAB_PROJECTS_LIMIT: {{ .Values.config.GITLAB_PROJECTS_LIMIT | quote }}
  7 | {{- end }}
  8 | {{ if .Values.config.GITLAB_USERNAME_CHANGE -}}
  9 | GITLAB_USERNAME_CHANGE: {{ .Values.config.GITLAB_USERNAME_CHANGE | quote }}
 10 | {{- end }}
 11 | {{ if .Values.config.GITLAB_CREATE_GROUP -}}
 12 | GITLAB_CREATE_GROUP: {{ .Values.config.GITLAB_CREATE_GROUP | quote }}
 13 | {{- end }}
 14 | {{ if .Values.config.GITLAB_PROJECTS_ISSUES -}}
 15 | GITLAB_PROJECTS_ISSUES: {{ .Values.config.GITLAB_PROJECTS_ISSUES | quote }}
 16 | {{- end }}
 17 | {{ if .Values.config.GITLAB_PROJECTS_MERGE_REQUESTS -}}
 18 | GITLAB_PROJECTS_MERGE_REQUESTS: {{ .Values.config.GITLAB_PROJECTS_MERGE_REQUESTS | quote }}
 19 | {{- end }}
 20 | {{ if .Values.config.GITLAB_PROJECTS_WIKI -}}
 21 | GITLAB_PROJECTS_WIKI: {{ .Values.config.GITLAB_PROJECTS_WIKI | quote }}
 22 | {{- end }}
 23 | {{ if .Values.config.GITLAB_PROJECTS_SNIPPETS -}}
 24 | GITLAB_PROJECTS_SNIPPETS: {{ .Values.config.GITLAB_PROJECTS_SNIPPETS | quote }}
 25 | {{- end }}
 26 | {{ if .Values.config.GITLAB_PROJECTS_BUILDS -}}
 27 | GITLAB_PROJECTS_BUILDS: {{ .Values.config.GITLAB_PROJECTS_BUILDS | quote }}
 28 | {{- end }}
 29 | {{ if .Values.config.GITLAB_PROJECTS_CONTAINER_REGISTRY -}}
 30 | GITLAB_PROJECTS_CONTAINER_REGISTRY: {{ .Values.config.GITLAB_PROJECTS_CONTAINER_REGISTRY | quote }}
 31 | {{- end }}
 32 | {{ if .Values.config.GITLAB_WEBHOOK_TIMEOUT -}}
 33 | GITLAB_WEBHOOK_TIMEOUT: {{ .Values.config.GITLAB_WEBHOOK_TIMEOUT | quote }}
 34 | {{- end }}
 35 | {{ if .Values.config.GITLAB_TIMEOUT -}}
 36 | GITLAB_TIMEOUT: {{ .Values.config.GITLAB_TIMEOUT | quote }}
 37 | {{- end }}
 38 | {{ if .Values.config.GITLAB_MAX_OBJECT_SIZE -}}
 39 | GITLAB_MAX_OBJECT_SIZE: {{ .Values.config.GITLAB_MAX_OBJECT_SIZE | quote }}
 40 | {{- end }}
 41 | {{ if .Values.config.GITLAB_REPOS_DIR -}}
 42 | GITLAB_REPOS_DIR: {{ .Values.config.GITLAB_REPOS_DIR | quote }}
 43 | {{- end }}
 44 | {{ if .Values.config.GITLAB_BACKUP_DIR -}}
 45 | GITLAB_BACKUP_DIR: {{ .Values.config.GITLAB_BACKUP_DIR | quote }}
 46 | {{- end }}
 47 | {{ if .Values.config.GITLAB_BUILDS_DIR -}}
 48 | GITLAB_BUILDS_DIR: {{ .Values.config.GITLAB_BUILDS_DIR | quote }}
 49 | {{- end }}
 50 | {{ if .Values.config.GITLAB_DOWNLOADS_DIR -}}
 51 | GITLAB_DOWNLOADS_DIR: {{ .Values.config.GITLAB_DOWNLOADS_DIR | quote }}
 52 | {{- end }}
 53 | {{ if .Values.config.GITLAB_SHARED_DIR -}}
 54 | GITLAB_SHARED_DIR: {{ .Values.config.GITLAB_SHARED_DIR | quote }}
 55 | {{- end }}
 56 | {{ if .Values.config.GITLAB_ARTIFACTS_ENABLED -}}
 57 | GITLAB_ARTIFACTS_ENABLED: {{ .Values.config.GITLAB_ARTIFACTS_ENABLED | quote }}
 58 | {{- end }}
 59 | {{ if .Values.config.GITLAB_ARTIFACTS_DIR -}}
 60 | GITLAB_ARTIFACTS_DIR: {{ .Values.config.GITLAB_ARTIFACTS_DIR | quote }}
 61 | {{- end }}
 62 | {{ if .Values.config.GITLAB_LFS_ENABLED -}}
 63 | GITLAB_LFS_ENABLED: {{ .Values.config.GITLAB_LFS_ENABLED | quote }}
 64 | {{- end }}
 65 | {{ if .Values.config.GITLAB_LFS_OBJECTS_DIR -}}
 66 | GITLAB_LFS_OBJECTS_DIR: {{ .Values.config.GITLAB_LFS_OBJECTS_DIR | quote }}
 67 | {{- end }}
 68 | {{- end }}
 69 | 
 70 | {{- define "advanced_data" -}}
 71 | {{ if .Values.config.GITLAB_SIGNUP_ENABLED -}}
 72 | - name: GITLAB_SIGNUP_ENABLED
 73 |   valueFrom:
 74 |     configMapKeyRef:
 75 |       name: {{ template "fullname" .}}
 76 |       key: GITLAB_SIGNUP_ENABLED
 77 | {{- end }}
 78 | {{ if .Values.config.GITLAB_PROJECTS_LIMIT -}}
 79 | - name: GITLAB_PROJECTS_LIMIT
 80 |   valueFrom:
 81 |     configMapKeyRef:
 82 |       name: {{ template "fullname" .}}
 83 |       key: GITLAB_PROJECTS_LIMIT
 84 | {{- end }}
 85 | {{ if .Values.config.GITLAB_USERNAME_CHANGE -}}
 86 | - name: GITLAB_USERNAME_CHANGE
 87 |   valueFrom:
 88 |     configMapKeyRef:
 89 |       name: {{ template "fullname" .}}
 90 |       key: GITLAB_USERNAME_CHANGE
 91 | {{- end }}
 92 | {{ if .Values.config.GITLAB_CREATE_GROUP -}}
 93 | - name: GITLAB_CREATE_GROUP
 94 |   valueFrom:
 95 |     configMapKeyRef:
 96 |       name: {{ template "fullname" .}}
 97 |       key: GITLAB_CREATE_GROUP
 98 | {{- end }}
 99 | {{ if .Values.config.GITLAB_PROJECTS_ISSUES -}}
100 | - name: GITLAB_PROJECTS_ISSUES
101 |   valueFrom:
102 |     configMapKeyRef:
103 |       name: {{ template "fullname" .}}
104 |       key: GITLAB_PROJECTS_ISSUES
105 | {{- end }}
106 | {{ if .Values.config.GITLAB_PROJECTS_MERGE_REQUESTS -}}
107 | - name: GITLAB_PROJECTS_MERGE_REQUESTS
108 |   valueFrom:
109 |     configMapKeyRef:
110 |       name: {{ template "fullname" .}}
111 |       key: GITLAB_PROJECTS_MERGE_REQUESTS
112 | {{- end }}
113 | {{ if .Values.config.GITLAB_PROJECTS_WIKI -}}
114 | - name: GITLAB_PROJECTS_WIKI
115 |   valueFrom:
116 |     configMapKeyRef:
117 |       name: {{ template "fullname" .}}
118 |       key: GITLAB_PROJECTS_WIKI
119 | {{- end }}
120 | {{ if .Values.config.GITLAB_PROJECTS_SNIPPETS -}}
121 | - name: GITLAB_PROJECTS_SNIPPETS
122 |   valueFrom:
123 |     configMapKeyRef:
124 |       name: {{ template "fullname" .}}
125 |       key: GITLAB_PROJECTS_SNIPPETS
126 | {{- end }}
127 | {{ if .Values.config.GITLAB_PROJECTS_BUILDS -}}
128 | - name: GITLAB_PROJECTS_BUILDS
129 |   valueFrom:
130 |     configMapKeyRef:
131 |       name: {{ template "fullname" .}}
132 |       key: GITLAB_PROJECTS_BUILDS
133 | {{- end }}
134 | {{ if .Values.config.GITLAB_PROJECTS_CONTAINER_REGISTRY -}}
135 | - name: GITLAB_PROJECTS_CONTAINER_REGISTRY
136 |   valueFrom:
137 |     configMapKeyRef:
138 |       name: {{ template "fullname" .}}
139 |       key: GITLAB_PROJECTS_CONTAINER_REGISTRY
140 | {{- end }}
141 | {{ if .Values.config.GITLAB_WEBHOOK_TIMEOUT -}}
142 | - name: GITLAB_WEBHOOK_TIMEOUT
143 |   valueFrom:
144 |     configMapKeyRef:
145 |       name: {{ template "fullname" .}}
146 |       key: GITLAB_WEBHOOK_TIMEOUT
147 | {{- end }}
148 | {{ if .Values.config.GITLAB_TIMEOUT -}}
149 | - name: GITLAB_TIMEOUT
150 |   valueFrom:
151 |     configMapKeyRef:
152 |       name: {{ template "fullname" .}}
153 |       key: GITLAB_TIMEOUT
154 | {{- end }}
155 | {{ if .Values.config.GITLAB_MAX_OBJECT_SIZE -}}
156 | - name: GITLAB_MAX_OBJECT_SIZE
157 |   valueFrom:
158 |     configMapKeyRef:
159 |       name: {{ template "fullname" .}}
160 |       key: GITLAB_MAX_OBJECT_SIZE
161 | {{- end }}
162 | {{ if .Values.config.GITLAB_REPOS_DIR -}}
163 | - name: GITLAB_REPOS_DIR
164 |   valueFrom:
165 |     configMapKeyRef:
166 |       name: {{ template "fullname" .}}
167 |       key: GITLAB_REPOS_DIR
168 | {{- end }}
169 | {{ if .Values.config.GITLAB_BACKUP_DIR -}}
170 | - name: GITLAB_BACKUP_DIR
171 |   valueFrom:
172 |     configMapKeyRef:
173 |       name: {{ template "fullname" .}}
174 |       key: GITLAB_BACKUP_DIR
175 | {{- end }}
176 | {{ if .Values.config.GITLAB_BUILDS_DIR -}}
177 | - name: GITLAB_BUILDS_DIR
178 |   valueFrom:
179 |     configMapKeyRef:
180 |       name: {{ template "fullname" .}}
181 |       key: GITLAB_BUILDS_DIR
182 | {{- end }}
183 | {{ if .Values.config.GITLAB_DOWNLOADS_DIR -}}
184 | - name: GITLAB_DOWNLOADS_DIR
185 |   valueFrom:
186 |     configMapKeyRef:
187 |       name: {{ template "fullname" .}}
188 |       key: GITLAB_DOWNLOADS_DIR
189 | {{- end }}
190 | {{ if .Values.config.GITLAB_SHARED_DIR -}}
191 | - name: GITLAB_SHARED_DIR
192 |   valueFrom:
193 |     configMapKeyRef:
194 |       name: {{ template "fullname" .}}
195 |       key: GITLAB_SHARED_DIR
196 | {{- end }}
197 | {{ if .Values.config.GITLAB_ARTIFACTS_ENABLED -}}
198 | - name: GITLAB_ARTIFACTS_ENABLED
199 |   valueFrom:
200 |     configMapKeyRef:
201 |       name: {{ template "fullname" .}}
202 |       key: GITLAB_ARTIFACTS_ENABLED
203 | {{- end }}
204 | {{ if .Values.config.GITLAB_ARTIFACTS_DIR -}}
205 | - name: GITLAB_ARTIFACTS_DIR
206 |   valueFrom:
207 |     configMapKeyRef:
208 |       name: {{ template "fullname" .}}
209 |       key: GITLAB_ARTIFACTS_DIR
210 | {{- end }}
211 | {{ if .Values.config.GITLAB_LFS_ENABLED -}}
212 | - name: GITLAB_LFS_ENABLED
213 |   valueFrom:
214 |     configMapKeyRef:
215 |       name: {{ template "fullname" .}}
216 |       key: GITLAB_LFS_ENABLED
217 | {{- end }}
218 | {{ if .Values.config.GITLAB_LFS_OBJECTS_DIR -}}
219 | - name: GITLAB_LFS_OBJECTS_DIR
220 |   valueFrom:
221 |     configMapKeyRef:
222 |       name: {{ template "fullname" .}}
223 |       key: GITLAB_LFS_OBJECTS_DIR
224 | {{- end }}
225 | {{- end }}
226 | 


--------------------------------------------------------------------------------
/gitlab/templates/partials/_backup.yaml:
--------------------------------------------------------------------------------
 1 | {{- define "backup_config" -}}
 2 | {{ if .Values.config.GITLAB_BACKUP_SCHEDULE -}}
 3 | GITLAB_BACKUP_SCHEDULE: {{ .Values.config.GITLAB_BACKUP_SCHEDULE | quote }}
 4 | {{- end }}
 5 | {{ if .Values.config.GITLAB_BACKUP_EXPIRY -}}
 6 | GITLAB_BACKUP_EXPIRY: {{ .Values.config.GITLAB_BACKUP_EXPIRY | quote }}
 7 | {{- end }}
 8 | {{ if .Values.config.GITLAB_BACKUP_PG_SCHEMA -}}
 9 | GITLAB_BACKUP_PG_SCHEMA: {{ .Values.config.GITLAB_BACKUP_PG_SCHEMA | quote }}
10 | {{- end }}
11 | {{ if .Values.config.GITLAB_BACKUP_ARCHIVE_PERMISSIONS -}}
12 | GITLAB_BACKUP_ARCHIVE_PERMISSIONS: {{ .Values.config.GITLAB_BACKUP_ARCHIVE_PERMISSIONS | quote }}
13 | {{- end }}
14 | {{ if .Values.config.GITLAB_BACKUP_TIME -}}
15 | GITLAB_BACKUP_TIME: {{ .Values.config.GITLAB_BACKUP_TIME | quote }}
16 | {{- end }}
17 | {{ if .Values.config.GITLAB_BACKUP_SKIP -}}
18 | GITLAB_BACKUP_SKIP: {{ .Values.config.GITLAB_BACKUP_SKIP | quote }}
19 | {{- end }}
20 | {{- end }}
21 | 
22 | 
23 | {{- define "backup_data" -}}
24 | {{ if .Values.config.GITLAB_BACKUP_SCHEDULE -}}
25 | - name: GITLAB_BACKUP_SCHEDULE
26 |   valueFrom:
27 |     configMapKeyRef:
28 |       name: {{ template "fullname" . }}
29 |       key: GITLAB_BACKUP_SCHEDULE
30 | {{- end }}
31 | {{ if .Values.config.GITLAB_BACKUP_EXPIRY -}}
32 | - name: GITLAB_BACKUP_EXPIRY
33 |   valueFrom:
34 |     configMapKeyRef:
35 |       name: {{ template "fullname" . }}
36 |       key: GITLAB_BACKUP_EXPIRY
37 | {{- end }}
38 | {{ if .Values.config.GITLAB_BACKUP_PG_SCHEMA -}}
39 | - name: GITLAB_BACKUP_PG_SCHEMA
40 |   valueFrom:
41 |     configMapKeyRef:
42 |       name: {{ template "fullname" . }}
43 |       key: GITLAB_BACKUP_PG_SCHEMA
44 | {{- end }}
45 | {{ if .Values.config.GITLAB_BACKUP_ARCHIVE_PERMISSIONS -}}
46 | - name: GITLAB_BACKUP_ARCHIVE_PERMISSIONS
47 |   valueFrom:
48 |     configMapKeyRef:
49 |       name: {{ template "fullname" . }}
50 |       key: GITLAB_BACKUP_ARCHIVE_PERMISSIONS
51 | {{- end }}
52 | {{ if .Values.config.GITLAB_BACKUP_TIME -}}
53 | - name: GITLAB_BACKUP_TIME
54 |   valueFrom:
55 |     configMapKeyRef:
56 |       name: {{ template "fullname" . }}
57 |       key: GITLAB_BACKUP_TIME
58 | {{- end }}
59 | {{ if .Values.config.GITLAB_BACKUP_SKIP -}}
60 | - name: GITLAB_BACKUP_SKIP
61 |   valueFrom:
62 |     configMapKeyRef:
63 |       name: {{ template "fullname" . }}
64 |       key: GITLAB_BACKUP_SKIP
65 | {{- end }}
66 | {{- end }}
67 | 


--------------------------------------------------------------------------------
/gitlab/templates/partials/_backup_aws.yaml:
--------------------------------------------------------------------------------
 1 | {{- define "aws_backup_config" -}}
 2 | {{ if .Values.config.AWS_BACKUPS -}}
 3 | AWS_BACKUPS: {{ .Values.config.AWS_BACKUPS | quote }}
 4 | {{- end }}
 5 | {{ if .Values.config.AWS_BACKUP_REGION -}}
 6 | AWS_BACKUP_REGION: {{ .Values.config.AWS_BACKUP_REGION | quote }}
 7 | {{- end }}
 8 | {{ if .Values.config.AWS_BACKUP_ENDPOINT -}}
 9 | AWS_BACKUP_ENDPOINT: {{ .Values.config.AWS_BACKUP_ENDPOINT | quote }}
10 | {{- end }}
11 | {{ if .Values.config.AWS_BACKUP_ACCESS_KEY_ID -}}
12 | AWS_BACKUP_ACCESS_KEY_ID: {{ .Values.config.AWS_BACKUP_ACCESS_KEY_ID | quote }}
13 | {{- end }}
14 | {{ if .Values.config.AWS_BACKUP_SECRET_ACCESS_KEY -}}
15 | AWS_BACKUP_SECRET_ACCESS_KEY: {{ .Values.config.AWS_BACKUP_SECRET_ACCESS_KEY | quote }}
16 | {{- end }}
17 | {{ if .Values.config.AWS_BACKUP_BUCKET -}}
18 | AWS_BACKUP_BUCKET: {{ .Values.config.AWS_BACKUP_BUCKET | quote }}
19 | {{- end }}
20 | {{ if .Values.config.AWS_BACKUP_MULTIPART_CHUNK_SIZE -}}
21 | AWS_BACKUP_MULTIPART_CHUNK_SIZE: {{ .Values.config.AWS_BACKUP_MULTIPART_CHUNK_SIZE | quote }}
22 | {{- end }}
23 | {{- end }}
24 | 
25 | 
26 | {{- define "aws_backup_data" -}}
27 | {{ if .Values.config.AWS_BACKUPS -}}
28 | - name: AWS_BACKUPS
29 |   valueFrom:
30 |     configMapKeyRef:
31 |       name: {{ template "fullname" . }}
32 |       key: AWS_BACKUPS
33 | {{- end }}
34 | {{ if .Values.config.AWS_BACKUP_REGION -}}
35 | - name: AWS_BACKUP_REGION
36 |   valueFrom:
37 |     configMapKeyRef:
38 |       name: {{ template "fullname" . }}
39 |       key: AWS_BACKUP_REGION
40 | {{- end }}
41 | {{ if .Values.config.AWS_BACKUP_ENDPOINT -}}
42 | - name: AWS_BACKUP_ENDPOINT
43 |   valueFrom:
44 |     configMapKeyRef:
45 |       name: {{ template "fullname" . }}
46 |       key: AWS_BACKUP_ENDPOINT
47 | {{- end }}
48 | {{ if .Values.config.AWS_BACKUP_ACCESS_KEY_ID -}}
49 | - name: AWS_BACKUP_ACCESS_KEY_ID
50 |   valueFrom:
51 |     configMapKeyRef:
52 |       name: {{ template "fullname" . }}
53 |       key: AWS_BACKUP_ACCESS_KEY_ID
54 | {{- end }}
55 | {{ if .Values.config.AWS_BACKUP_SECRET_ACCESS_KEY -}}
56 | - name: AWS_BACKUP_SECRET_ACCESS_KEY
57 |   valueFrom:
58 |     configMapKeyRef:
59 |       name: {{ template "fullname" . }}
60 |       key: AWS_BACKUP_SECRET_ACCESS_KEY
61 | {{- end }}
62 | {{ if .Values.config.AWS_BACKUP_BUCKET -}}
63 | - name: AWS_BACKUP_BUCKET
64 |   valueFrom:
65 |     configMapKeyRef:
66 |       name: {{ template "fullname" . }}
67 |       key: AWS_BACKUP_BUCKET
68 | {{- end }}
69 | {{ if .Values.config.AWS_BACKUP_MULTIPART_CHUNK_SIZE -}}
70 | - name: AWS_BACKUP_MULTIPART_CHUNK_SIZE
71 |   valueFrom:
72 |     configMapKeyRef:
73 |       name: {{ template "fullname" . }}
74 |       key: AWS_BACKUP_MULTIPART_CHUNK_SIZE
75 | {{- end }}
76 | {{- end }}
77 | 


--------------------------------------------------------------------------------
/gitlab/templates/partials/_backup_gcs.yaml:
--------------------------------------------------------------------------------
 1 | {{- define "gcs_backup_config" -}}
 2 | {{ if .Values.config.GCS_BACKUPS -}}
 3 | GCS_BACKUPS: {{ .Values.config.GCS_BACKUPS | quote }}
 4 | {{- end }}
 5 | {{ if .Values.config.GCS_BACKUP_ACCESS_KEY_ID -}}
 6 | GCS_BACKUP_ACCESS_KEY_ID: {{ .Values.config.GCS_BACKUP_ACCESS_KEY_ID | quote }}
 7 | {{- end }}
 8 | {{ if .Values.config.GCS_BACKUP_SECRET_ACCESS_KEY -}}
 9 | GCS_BACKUP_SECRET_ACCESS_KEY: {{ .Values.config.GCS_BACKUP_SECRET_ACCESS_KEY | quote }}
10 | {{- end }}
11 | {{ if .Values.config.GCS_BACKUP_BUCKET -}}
12 | GCS_BACKUP_BUCKET: {{ .Values.config.GCS_BACKUP_BUCKET | quote }}
13 | {{- end }}
14 | {{- end }}
15 | 
16 | 
17 | {{- define "gcs_backup_data" -}}
18 | {{ if .Values.config.GCS_BACKUPS -}}
19 | - name: GCS_BACKUPS
20 |   valueFrom:
21 |     configMapKeyRef:
22 |       name: {{ template "fullname" . }}
23 |       key: GCS_BACKUPS
24 | {{- end }}
25 | {{ if .Values.config.GCS_BACKUP_ACCESS_KEY_ID -}}
26 | - name: GCS_BACKUP_ACCESS_KEY_ID
27 |   valueFrom:
28 |     configMapKeyRef:
29 |       name: {{ template "fullname" . }}
30 |       key: GCS_BACKUP_ACCESS_KEY_ID
31 | {{- end }}
32 | {{ if .Values.config.GCS_BACKUP_SECRET_ACCESS_KEY -}}
33 | - name: GCS_BACKUP_SECRET_ACCESS_KEY
34 |   valueFrom:
35 |     configMapKeyRef:
36 |       name: {{ template "fullname" . }}
37 |       key: GCS_BACKUP_SECRET_ACCESS_KEY
38 | {{- end }}
39 | {{ if .Values.config.GCS_BACKUP_BUCKET -}}
40 | - name: GCS_BACKUP_BUCKET
41 |   valueFrom:
42 |     configMapKeyRef:
43 |       name: {{ template "fullname" . }}
44 |       key: GCS_BACKUP_BUCKET
45 | {{- end }}
46 | {{- end }}
47 | 
48 | 
49 | 
50 | 
51 | 
52 | 


--------------------------------------------------------------------------------
/gitlab/templates/partials/_email.yaml:
--------------------------------------------------------------------------------
 1 | 
 2 | {{- define "email_config" -}}
 3 | {{ if .Values.config.GITLAB_EMAIL -}}
 4 | GITLAB_EMAIL: {{ .Values.config.GITLAB_EMAIL | quote }}
 5 | {{- end }}
 6 | {{ if .Values.config.GITLAB_EMAIL_DISPLAY_NAME -}}
 7 | GITLAB_EMAIL_DISPLAY_NAME: {{ .Values.config.GITLAB_EMAIL_DISPLAY_NAME | quote }}
 8 | {{- end }}
 9 | {{ if .Values.config.GITLAB_EMAIL_REPLY_TO -}}
10 | GITLAB_EMAIL_REPLY_TO: {{ .Values.config.GITLAB_EMAIL_REPLY_TO | quote }}
11 | {{- end }}
12 | {{ if .Values.config.GITLAB_EMAIL_SUBJECT_SUFFIX -}}
13 | GITLAB_EMAIL_SUBJECT_SUFFIX: {{ .Values.config.GITLAB_EMAIL_SUBJECT_SUFFIX | quote }}
14 | {{- end }}
15 | {{ if .Values.config.GITLAB_EMAIL_ENABLED -}}
16 | GITLAB_EMAIL_ENABLED: {{ .Values.config.GITLAB_EMAIL_ENABLED | quote }}
17 | {{- end }}
18 | {{ if .Values.config.GITLAB_INCOMING_EMAIL_ADDRESS -}}
19 | GITLAB_INCOMING_EMAIL_ADDRESS: {{ .Values.config.GITLAB_INCOMING_EMAIL_ADDRESS | quote }}
20 | {{- end }}
21 | {{ if .Values.config.GITLAB_INCOMING_EMAIL_ENABLED -}}
22 | GITLAB_INCOMING_EMAIL_ENABLED: {{ .Values.config.GITLAB_INCOMING_EMAIL_ENABLED | quote }}
23 | {{- end }}
24 | {{ if .Values.config.GITLAB_NOTIFY_ON_BROKEN_BUILDS -}}
25 | GITLAB_NOTIFY_ON_BROKEN_BUILDS: {{ .Values.config.GITLAB_NOTIFY_ON_BROKEN_BUILDS | quote }}
26 | {{- end }}
27 | {{ if .Values.config.GITLAB_NOTIFY_PUSHER -}}
28 | GITLAB_NOTIFY_PUSHER: {{ .Values.config.GITLAB_NOTIFY_PUSHER | quote }}
29 | {{- end }}
30 | {{- end }}
31 | 
32 | {{- define "email_data" -}}
33 | {{ if .Values.config.GITLAB_EMAIL -}}
34 | - name: GITLAB_EMAIL
35 |   valueFrom:
36 |     configMapKeyRef:
37 |       name: {{ template "fullname" . }}
38 |       key: GITLAB_EMAIL
39 | {{- end }}
40 | {{ if .Values.config.GITLAB_EMAIL_DISPLAY_NAME -}}
41 | - name: GITLAB_EMAIL_DISPLAY_NAME
42 |   valueFrom:
43 |     configMapKeyRef:
44 |       name: {{ template "fullname" . }}
45 |       key: GITLAB_EMAIL_DISPLAY_NAME
46 | {{- end }}
47 | {{ if .Values.config.GITLAB_EMAIL_REPLY_TO -}}
48 | - name: GITLAB_EMAIL_REPLY_TO
49 |   valueFrom:
50 |     configMapKeyRef:
51 |       name: {{ template "fullname" . }}
52 |       key: GITLAB_EMAIL_REPLY_TO
53 | {{- end }}
54 | {{ if .Values.config.GITLAB_EMAIL_SUBJECT_SUFFIX -}}
55 | - name: GITLAB_EMAIL_SUBJECT_SUFFIX
56 |   valueFrom:
57 |     configMapKeyRef:
58 |       name: {{ template "fullname" . }}
59 |       key: GITLAB_EMAIL_SUBJECT_SUFFIX
60 | {{- end }}
61 | {{ if .Values.config.GITLAB_EMAIL_ENABLED -}}
62 | - name: GITLAB_EMAIL_ENABLED
63 |   valueFrom:
64 |     configMapKeyRef:
65 |       name: {{ template "fullname" . }}
66 |       key: GITLAB_EMAIL_ENABLED
67 | {{- end }}
68 | {{ if .Values.config.GITLAB_INCOMING_EMAIL_ADDRESS -}}
69 | - name: GITLAB_INCOMING_EMAIL_ADDRESS
70 |   valueFrom:
71 |     configMapKeyRef:
72 |       name: {{ template "fullname" . }}
73 |       key: GITLAB_INCOMING_EMAIL_ADDRESS
74 | {{- end }}
75 | {{ if .Values.config.GITLAB_INCOMING_EMAIL_ENABLED -}}
76 | - name: GITLAB_INCOMING_EMAIL_ENABLED
77 |   valueFrom:
78 |     configMapKeyRef:
79 |       name: {{ template "fullname" . }}
80 |       key: GITLAB_INCOMING_EMAIL_ENABLED
81 | {{- end }}
82 | {{ if .Values.config.GITLAB_NOTIFY_ON_BROKEN_BUILDS -}}
83 | - name: GITLAB_NOTIFY_ON_BROKEN_BUILDS
84 |   valueFrom:
85 |     configMapKeyRef:
86 |       name: {{ template "fullname" . }}
87 |       key: GITLAB_NOTIFY_ON_BROKEN_BUILDS
88 | {{- end }}
89 | {{ if .Values.config.GITLAB_NOTIFY_PUSHER -}}
90 | - name: GITLAB_NOTIFY_PUSHER
91 |   valueFrom:
92 |     configMapKeyRef:
93 |       name: {{ template "fullname" . }}
94 |       key: GITLAB_NOTIFY_PUSHER
95 | {{- end }}
96 | {{- end }}
97 | 


--------------------------------------------------------------------------------
/gitlab/templates/partials/_gitlab_registry.yaml:
--------------------------------------------------------------------------------
 1 | {{- define "registry_config" -}}
 2 | {{ if .Values.config.GITLAB_REGISTRY_ENABLED -}}
 3 | GITLAB_REGISTRY_ENABLED: {{ .Values.config.GITLAB_REGISTRY_ENABLED | quote }}
 4 | {{- end }}
 5 | {{ if .Values.config.GITLAB_REGISTRY_HOST -}}
 6 | GITLAB_REGISTRY_HOST: {{ .Values.config.GITLAB_REGISTRY_HOST | quote }}
 7 | {{- end }}
 8 | {{ if .Values.config.GITLAB_REGISTRY_PORT -}}
 9 | GITLAB_REGISTRY_PORT: {{ .Values.config.GITLAB_REGISTRY_PORT | quote }}
10 | {{- end }}
11 | {{ if .Values.config.GITLAB_REGISTRY_API_URL -}}
12 | GITLAB_REGISTRY_API_URL: {{ .Values.config.GITLAB_REGISTRY_API_URL | quote }}
13 | {{- end }}
14 | {{ if .Values.config.GITLAB_REGISTRY_KEY_PATH -}}
15 | GITLAB_REGISTRY_KEY_PATH: {{ .Values.config.GITLAB_REGISTRY_KEY_PATH | quote }}
16 | {{- end }}
17 | {{ if .Values.config.GITLAB_REGISTRY_DIR -}}
18 | GITLAB_REGISTRY_DIR: {{ .Values.config.GITLAB_REGISTRY_DIR | quote }}
19 | {{- end }}
20 | {{ if .Values.config.GITLAB_REGISTRY_ISSUER -}}
21 | GITLAB_REGISTRY_ISSUER: {{ .Values.config.GITLAB_REGISTRY_ISSUER | quote }}
22 | {{- end }}
23 | {{- end }}
24 | 
25 | {{- define "registry_data" -}}
26 | {{ if .Values.config.GITLAB_REGISTRY_ENABLED -}}
27 | - name: GITLAB_REGISTRY_ENABLED
28 |   valueFrom:
29 |     configMapKeyRef:
30 |       name: {{ template "fullname" . }}
31 |       key: GITLAB_REGISTRY_ENABLED
32 | {{- end }}
33 | {{ if .Values.config.GITLAB_REGISTRY_HOST -}}
34 | - name: GITLAB_REGISTRY_HOST
35 |   valueFrom:
36 |     configMapKeyRef:
37 |       name: {{ template "fullname" . }}
38 |       key: GITLAB_REGISTRY_HOST
39 | {{- end }}
40 | {{ if .Values.config.GITLAB_REGISTRY_PORT -}}
41 | - name: GITLAB_REGISTRY_PORT
42 |   valueFrom:
43 |     configMapKeyRef:
44 |       name: {{ template "fullname" . }}
45 |       key: GITLAB_REGISTRY_PORT
46 | {{- end }}
47 | {{ if .Values.config.GITLAB_REGISTRY_API_URL -}}
48 | - name: GITLAB_REGISTRY_API_URL
49 |   valueFrom:
50 |     configMapKeyRef:
51 |       name: {{ template "fullname" . }}
52 |       key: GITLAB_REGISTRY_API_URL
53 | {{- end }}
54 | {{ if .Values.config.GITLAB_REGISTRY_KEY_PATH -}}
55 | - name: GITLAB_REGISTRY_KEY_PATH
56 |   valueFrom:
57 |     configMapKeyRef:
58 |       name: {{ template "fullname" . }}
59 |       key: GITLAB_REGISTRY_KEY_PATH
60 | {{- end }}
61 | {{ if .Values.config.GITLAB_REGISTRY_DIR -}}
62 | - name: GITLAB_REGISTRY_DIR
63 |   valueFrom:
64 |     configMapKeyRef:
65 |       name: {{ template "fullname" . }}
66 |       key: GITLAB_REGISTRY_DIR
67 | {{- end }}
68 | {{ if .Values.config.GITLAB_REGISTRY_ISSUER -}}
69 | - name: GITLAB_REGISTRY_ISSUER
70 |   valueFrom:
71 |     configMapKeyRef:
72 |       name: {{ template "fullname" . }}
73 |       key: GITLAB_REGISTRY_ISSUER
74 | {{- end }}
75 | {{- end }}
76 | 


--------------------------------------------------------------------------------
/gitlab/templates/partials/_imap.yaml:
--------------------------------------------------------------------------------
 1 | {{- define "imap_config" -}}
 2 | {{ if .Values.config.IMAP_ENABLED -}}
 3 | IMAP_ENABLED: {{ .Values.config.IMAP_ENABLED | quote }}
 4 | {{- end }}
 5 | {{ if .Values.config.IMAP_HOST -}}
 6 | IMAP_HOST: {{ .Values.config.IMAP_HOST | quote }}
 7 | {{- end }}
 8 | {{ if .Values.config.IMAP_PORT -}}
 9 | IMAP_PORT: {{ .Values.config.IMAP_PORT | quote }}
10 | {{- end }}
11 | {{ if .Values.config.IMAP_USER -}}
12 | IMAP_USER: {{ .Values.config.IMAP_USER | quote }}
13 | {{- end }}
14 | {{ if .Values.config.IMAP_PASS -}}
15 | IMAP_PASS: {{ .Values.config.IMAP_PASS | quote }}
16 | {{- end }}
17 | {{ if .Values.config.IMAP_SSL -}}
18 | IMAP_SSL: {{ .Values.config.IMAP_SSL | quote }}
19 | {{- end }}
20 | {{ if .Values.config.IMAP_STARTTLS -}}
21 | IMAP_STARTTLS: {{ .Values.config.IMAP_STARTTLS | quote }}
22 | {{- end }}
23 | {{ if .Values.config.IMAP_MAILBOX -}}
24 | IMAP_MAILBOX: {{ .Values.config.IMAP_MAILBOX | quote }}
25 | {{- end }}
26 | {{- end }}
27 | 
28 | {{- define "imap_data" -}}
29 | {{ if .Values.config.IMAP_ENABLED -}}
30 | - name: IMAP_ENABLED
31 |   valueFrom:
32 |     configMapKeyRef:
33 |       name: {{ template "fullname" . }}
34 |       key: IMAP_ENABLED
35 | {{- end }}
36 | {{ if .Values.config.IMAP_HOST -}}
37 | - name: IMAP_HOST
38 |   valueFrom:
39 |     configMapKeyRef:
40 |       name: {{ template "fullname" . }}
41 |       key: IMAP_HOST
42 | {{- end }}
43 | {{ if .Values.config.IMAP_PORT -}}
44 | - name: IMAP_PORT
45 |   valueFrom:
46 |     configMapKeyRef:
47 |       name: {{ template "fullname" . }}
48 |       key: IMAP_PORT
49 | {{- end }}
50 | {{ if .Values.config.IMAP_USER -}}
51 | - name: IMAP_USER
52 |   valueFrom:
53 |     configMapKeyRef:
54 |       name: {{ template "fullname" . }}
55 |       key: IMAP_USER
56 | {{- end }}
57 | {{ if .Values.config.IMAP_PASS -}}
58 | - name: IMAP_PASS
59 |   valueFrom:
60 |     configMapKeyRef:
61 |       name: {{ template "fullname" . }}
62 |       key: IMAP_PASS
63 | {{- end }}
64 | {{ if .Values.config.IMAP_SSL -}}
65 | - name: IMAP_SSL
66 |   valueFrom:
67 |     configMapKeyRef:
68 |       name: {{ template "fullname" . }}
69 |       key: IMAP_SSL
70 | {{- end }}
71 | {{ if .Values.config.IMAP_STARTTLS -}}
72 | - name: IMAP_STARTTLS
73 |   valueFrom:
74 |     configMapKeyRef:
75 |       name: {{ template "fullname" . }}
76 |       key: IMAP_STARTTLS
77 | {{- end }}
78 | {{ if .Values.config.IMAP_MAILBOX -}}
79 | - name: IMAP_MAILBOX
80 |   valueFrom:
81 |     configMapKeyRef:
82 |       name: {{ template "fullname" . }}
83 |       key: IMAP_MAILBOX
84 | {{- end }}
85 | 
86 | {{- end }}
87 | 


--------------------------------------------------------------------------------
/gitlab/templates/partials/_ldap.yaml:
--------------------------------------------------------------------------------
  1 | {{- define "ldap_config" -}}
  2 | {{ if .Values.config.LDAP_ENABLED -}}
  3 | LDAP_ENABLED: {{ .Values.config.LDAP_ENABLED | quote }}
  4 | {{- end }}
  5 | {{ if .Values.config.LDAP_LABEL -}}
  6 | LDAP_LABEL: {{ .Values.config.LDAP_LABEL | quote }}
  7 | {{- end }}
  8 | {{ if .Values.config.LDAP_HOST -}}
  9 | LDAP_HOST: {{ .Values.config.LDAP_HOST | quote }}
 10 | {{- end }}
 11 | {{ if .Values.config.LDAP_PORT -}}
 12 | LDAP_PORT: {{ .Values.config.LDAP_PORT | quote }}
 13 | {{- end }}
 14 | {{ if .Values.config.LDAP_UID -}}
 15 | LDAP_UID: {{ .Values.config.LDAP_UID | quote }}
 16 | {{- end }}
 17 | {{ if .Values.config.LDAP_METHOD -}}
 18 | LDAP_METHOD: {{ .Values.config.LDAP_METHOD | quote }}
 19 | {{- end }}
 20 | {{ if .Values.config.LDAP_BIND_DN -}}
 21 | LDAP_BIND_DN: {{ .Values.config.LDAP_BIND_DN | quote }}
 22 | {{- end }}
 23 | {{ if .Values.config.LDAP_PASS -}}
 24 | LDAP_PASS: {{ .Values.config.LDAP_PASS | quote }}
 25 | {{- end }}
 26 | {{ if .Values.config.LDAP_TIMEOUT -}}
 27 | LDAP_TIMEOUT: {{ .Values.config.LDAP_TIMEOUT | quote }}
 28 | {{- end }}
 29 | {{ if .Values.config.LDAP_ACTIVE_DIRECTORY -}}
 30 | LDAP_ACTIVE_DIRECTORY: {{ .Values.config.LDAP_ACTIVE_DIRECTORY | quote }}
 31 | {{- end }}
 32 | {{ if .Values.config.LDAP_ALLOW_USERNAME_OR_EMAIL_LOGIN -}}
 33 | LDAP_ALLOW_USERNAME_OR_EMAIL_LOGIN: {{ .Values.config.LDAP_ALLOW_USERNAME_OR_EMAIL_LOGIN | quote }}
 34 | {{- end }}
 35 | {{ if .Values.config.LDAP_BLOCK_AUTO_CREATED_USERS -}}
 36 | LDAP_BLOCK_AUTO_CREATED_USERS: {{ .Values.config.LDAP_BLOCK_AUTO_CREATED_USERS | quote }}
 37 | {{- end }}
 38 | {{ if .Values.config.LDAP_BASE -}}
 39 | LDAP_BASE: {{ .Values.config.LDAP_BASE | quote }}
 40 | {{- end }}
 41 | {{ if .Values.config.LDAP_USER_FILTER -}}
 42 | LDAP_USER_FILTER: {{ .Values.config.LDAP_USER_FILTER | quote }}
 43 | {{- end }}
 44 | {{- end }}
 45 | 
 46 | {{- define "ldap_data" -}}
 47 | {{ if .Values.config.LDAP_ENABLED -}}
 48 | - name: LDAP_ENABLED
 49 |   valueFrom:
 50 |     configMapKeyRef:
 51 |       name: {{ template "fullname" . }}
 52 |       key: LDAP_ENABLED
 53 | {{- end }}
 54 | {{ if .Values.config.LDAP_LABEL -}}
 55 | - name: LDAP_LABEL
 56 |   valueFrom:
 57 |     configMapKeyRef:
 58 |       name: {{ template "fullname" . }}
 59 |       key: LDAP_LABEL
 60 | {{- end }}
 61 | {{ if .Values.config.LDAP_HOST -}}
 62 | - name: LDAP_HOST
 63 |   valueFrom:
 64 |     configMapKeyRef:
 65 |       name: {{ template "fullname" . }}
 66 |       key: LDAP_HOST
 67 | {{- end }}
 68 | {{ if .Values.config.LDAP_PORT -}}
 69 | - name: LDAP_PORT
 70 |   valueFrom:
 71 |     configMapKeyRef:
 72 |       name: {{ template "fullname" . }}
 73 |       key: LDAP_PORT
 74 | {{- end }}
 75 | {{ if .Values.config.LDAP_UID -}}
 76 | - name: LDAP_UID
 77 |   valueFrom:
 78 |     configMapKeyRef:
 79 |       name: {{ template "fullname" . }}
 80 |       key: LDAP_UID
 81 | {{- end }}
 82 | {{ if .Values.config.LDAP_METHOD -}}
 83 | - name: LDAP_METHOD
 84 |   valueFrom:
 85 |     configMapKeyRef:
 86 |       name: {{ template "fullname" . }}
 87 |       key: LDAP_METHOD
 88 | {{- end }}
 89 | {{ if .Values.config.LDAP_BIND_DN -}}
 90 | - name: LDAP_BIND_DN
 91 |   valueFrom:
 92 |     configMapKeyRef:
 93 |       name: {{ template "fullname" . }}
 94 |       key: LDAP_BIND_DN
 95 | {{- end }}
 96 | {{ if .Values.config.LDAP_PASS -}}
 97 | - name: LDAP_PASS
 98 |   valueFrom:
 99 |     configMapKeyRef:
100 |       name: {{ template "fullname" . }}
101 |       key: LDAP_PASS
102 | {{- end }}
103 | {{ if .Values.config.LDAP_TIMEOUT -}}
104 | - name: LDAP_TIMEOUT
105 |   valueFrom:
106 |     configMapKeyRef:
107 |       name: {{ template "fullname" . }}
108 |       key: LDAP_TIMEOUT
109 | {{- end }}
110 | {{ if .Values.config.LDAP_ACTIVE_DIRECTORY -}}
111 | - name: LDAP_ACTIVE_DIRECTORY
112 |   valueFrom:
113 |     configMapKeyRef:
114 |       name: {{ template "fullname" . }}
115 |       key: LDAP_ACTIVE_DIRECTORY
116 | {{- end }}
117 | {{ if .Values.config.LDAP_ALLOW_USERNAME_OR_EMAIL_LOGIN -}}
118 | - name: LDAP_ALLOW_USERNAME_OR_EMAIL_LOGIN
119 |   valueFrom:
120 |     configMapKeyRef:
121 |       name: {{ template "fullname" . }}
122 |       key: LDAP_ALLOW_USERNAME_OR_EMAIL_LOGIN
123 | {{- end }}
124 | {{ if .Values.config.LDAP_BLOCK_AUTO_CREATED_USERS -}}
125 | - name: LDAP_BLOCK_AUTO_CREATED_USERS
126 |   valueFrom:
127 |     configMapKeyRef:
128 |       name: {{ template "fullname" . }}
129 |       key: LDAP_BLOCK_AUTO_CREATED_USERS
130 | {{- end }}
131 | {{ if .Values.config.LDAP_BASE -}}
132 | - name: LDAP_BASE
133 |   valueFrom:
134 |     configMapKeyRef:
135 |       name: {{ template "fullname" . }}
136 |       key: LDAP_BASE
137 | {{- end }}
138 | {{ if .Values.config.LDAP_USER_FILTER -}}
139 | - name: LDAP_USER_FILTER
140 |   valueFrom:
141 |     configMapKeyRef:
142 |       name: {{ template "fullname" . }}
143 |       key: LDAP_USER_FILTER
144 | {{- end }}
145 | {{- end }}
146 | 


--------------------------------------------------------------------------------
/gitlab/templates/partials/_nginx_tuning.yaml:
--------------------------------------------------------------------------------
 1 | {{- define "nginx_config" -}}
 2 | {{ if .Values.config.NGINX_WORKERS -}}
 3 | NGINX_WORKERS: {{ .Values.config.NGINX_WORKERS | quote }}
 4 | {{- end }}
 5 | {{ if .Values.config.NGINX_SERVER_NAMES_HASH_BUCKET_SIZE -}}
 6 | NGINX_SERVER_NAMES_HASH_BUCKET_SIZE: {{ .Values.config.NGINX_SERVER_NAMES_HASH_BUCKET_SIZE | quote }}
 7 | {{- end }}
 8 | {{ if .Values.config.NGINX_HSTS_ENABLED -}}
 9 | NGINX_HSTS_ENABLED: {{ .Values.config.NGINX_HSTS_ENABLED | quote }}
10 | {{- end }}
11 | {{ if .Values.config.NGINX_HSTS_MAXAGE -}}
12 | NGINX_HSTS_MAXAGE: {{ .Values.config.NGINX_HSTS_MAXAGE | quote }}
13 | {{- end }}
14 | {{ if .Values.config.NGINX_PROXY_BUFFERING -}}
15 | NGINX_PROXY_BUFFERING: {{ .Values.config.NGINX_PROXY_BUFFERING | quote }}
16 | {{- end }}
17 | {{ if .Values.config.NGINX_ACCEL_BUFFERING -}}
18 | NGINX_ACCEL_BUFFERING: {{ .Values.config.NGINX_ACCEL_BUFFERING | quote }}
19 | {{- end }}
20 | {{ if .Values.config.NGINX_X_FORWARDED_PROTO -}}
21 | NGINX_X_FORWARDED_PROTO: {{ .Values.config.NGINX_X_FORWARDED_PROTO | quote }}
22 | {{- end }}
23 | {{- end }}
24 | 
25 | {{- define "nginx_data" -}}
26 | {{ if .Values.config.NGINX_WORKERS -}}
27 | - name: NGINX_WORKERS
28 |   valueFrom:
29 |     configMapKeyRef:
30 |       name: {{ template "fullname" . }}
31 |       key: NGINX_WORKERS
32 | {{- end }}
33 | {{ if .Values.config.NGINX_SERVER_NAMES_HASH_BUCKET_SIZE -}}
34 | - name: NGINX_SERVER_NAMES_HASH_BUCKET_SIZE
35 |   valueFrom:
36 |     configMapKeyRef:
37 |       name: {{ template "fullname" . }}
38 |       key: NGINX_SERVER_NAMES_HASH_BUCKET_SIZE
39 | {{- end }}
40 | {{ if .Values.config.NGINX_HSTS_ENABLED -}}
41 | - name: NGINX_HSTS_ENABLED
42 |   valueFrom:
43 |     configMapKeyRef:
44 |       name: {{ template "fullname" . }}
45 |       key: NGINX_HSTS_ENABLED
46 | {{- end }}
47 | {{ if .Values.config.NGINX_HSTS_MAXAGE -}}
48 | - name: NGINX_HSTS_MAXAGE
49 |   valueFrom:
50 |     configMapKeyRef:
51 |       name: {{ template "fullname" . }}
52 |       key: NGINX_HSTS_MAXAGE
53 | {{- end }}
54 | {{ if .Values.config.NGINX_PROXY_BUFFERING -}}
55 | - name: NGINX_PROXY_BUFFERING
56 |   valueFrom:
57 |     configMapKeyRef:
58 |       name: {{ template "fullname" . }}
59 |       key: NGINX_PROXY_BUFFERING
60 | {{- end }}
61 | {{ if .Values.config.NGINX_ACCEL_BUFFERING -}}
62 | - name: NGINX_ACCEL_BUFFERING
63 |   valueFrom:
64 |     configMapKeyRef:
65 |       name: {{ template "fullname" . }}
66 |       key: NGINX_ACCEL_BUFFERING
67 | {{- end }}
68 | {{ if .Values.config.NGINX_X_FORWARDED_PROTO -}}
69 | - name: NGINX_X_FORWARDED_PROTO
70 |   valueFrom:
71 |     configMapKeyRef:
72 |       name: {{ template "fullname" . }}
73 |       key: NGINX_X_FORWARDED_PROTO
74 | {{- end }}
75 | {{- end }}
76 | 


--------------------------------------------------------------------------------
/gitlab/templates/partials/_oauth.yaml:
--------------------------------------------------------------------------------
  1 | {{- define "oauth_config" -}}
  2 | {{ if .Values.config.OAUTH_ENABLED -}}
  3 | OAUTH_ENABLED: {{ .Values.config.OAUTH_ENABLED | quote }}
  4 | {{- end }}
  5 | {{ if .Values.config.OAUTH_AUTO_SIGN_IN_WITH_PROVIDER -}}
  6 | OAUTH_AUTO_SIGN_IN_WITH_PROVIDER: {{ .Values.config.OAUTH_AUTO_SIGN_IN_WITH_PROVIDER | quote }}
  7 | {{- end }}
  8 | {{ if .Values.config.OAUTH_ALLOW_SSO -}}
  9 | OAUTH_ALLOW_SSO: {{ .Values.config.OAUTH_ALLOW_SSO | quote }}
 10 | {{- end }}
 11 | {{ if .Values.config.OAUTH_BLOCK_AUTO_CREATED_USERS -}}
 12 | OAUTH_BLOCK_AUTO_CREATED_USERS: {{ .Values.config.OAUTH_BLOCK_AUTO_CREATED_USERS | quote }}
 13 | {{- end }}
 14 | {{ if .Values.config.OAUTH_AUTO_LINK_LDAP_USER -}}
 15 | OAUTH_AUTO_LINK_LDAP_USER: {{ .Values.config.OAUTH_AUTO_LINK_LDAP_USER | quote }}
 16 | {{- end }}
 17 | {{ if .Values.config.OAUTH_AUTO_LINK_SAML_USER -}}
 18 | OAUTH_AUTO_LINK_SAML_USER: {{ .Values.config.OAUTH_AUTO_LINK_SAML_USER | quote }}
 19 | {{- end }}
 20 | {{ if .Values.config.OAUTH_EXTERNAL_PROVIDERS -}}
 21 | OAUTH_EXTERNAL_PROVIDERS: {{ .Values.config.OAUTH_EXTERNAL_PROVIDERS | quote }}
 22 | {{- end }}
 23 | {{ if .Values.config.OAUTH_CAS3_LABEL -}}
 24 | OAUTH_CAS3_LABEL: {{ .Values.config.OAUTH_CAS3_LABEL | quote }}
 25 | {{- end }}
 26 | {{ if .Values.config.OAUTH_CAS3_SERVER -}}
 27 | OAUTH_CAS3_SERVER: {{ .Values.config.OAUTH_CAS3_SERVER | quote }}
 28 | {{- end }}
 29 | {{ if .Values.config.OAUTH_CAS3_DISABLE_SSL_VERIFICATION -}}
 30 | OAUTH_CAS3_DISABLE_SSL_VERIFICATION: {{ .Values.config.OAUTH_CAS3_DISABLE_SSL_VERIFICATION | quote }}
 31 | {{- end }}
 32 | {{ if .Values.config.OAUTH_CAS3_LOGIN_URL -}}
 33 | OAUTH_CAS3_LOGIN_URL: {{ .Values.config.OAUTH_CAS3_LOGIN_URL | quote }}
 34 | {{- end }}
 35 | {{ if .Values.config.OAUTH_CAS3_VALIDATE_URL -}}
 36 | OAUTH_CAS3_VALIDATE_URL: {{ .Values.config.OAUTH_CAS3_VALIDATE_URL | quote }}
 37 | {{- end }}
 38 | {{ if .Values.config.OAUTH_CAS3_LOGOUT_URL -}}
 39 | OAUTH_CAS3_LOGOUT_URL: {{ .Values.config.OAUTH_CAS3_LOGOUT_URL | quote }}
 40 | {{- end }}
 41 | {{ if .Values.config.OAUTH_GOOGLE_API_KEY -}}
 42 | OAUTH_GOOGLE_API_KEY: {{ .Values.config.OAUTH_GOOGLE_API_KEY | quote }}
 43 | {{- end }}
 44 | {{ if .Values.config.OAUTH_GOOGLE_APP_SECRET -}}
 45 | OAUTH_GOOGLE_APP_SECRET: {{ .Values.config.OAUTH_GOOGLE_APP_SECRET | quote }}
 46 | {{- end }}
 47 | {{ if .Values.config.OAUTH_GOOGLE_RESTRICT_DOMAIN -}}
 48 | OAUTH_GOOGLE_RESTRICT_DOMAIN: {{ .Values.config.OAUTH_GOOGLE_RESTRICT_DOMAIN | quote }}
 49 | {{- end }}
 50 | {{ if .Values.config.OAUTH_FACEBOOK_API_KEY -}}
 51 | OAUTH_FACEBOOK_API_KEY: {{ .Values.config.OAUTH_FACEBOOK_API_KEY | quote }}
 52 | {{- end }}
 53 | {{ if .Values.config.OAUTH_FACEBOOK_APP_SECRET -}}
 54 | OAUTH_FACEBOOK_APP_SECRET: {{ .Values.config.OAUTH_FACEBOOK_APP_SECRET | quote }}
 55 | {{- end }}
 56 | {{ if .Values.config.OAUTH_TWITTER_API_KEY -}}
 57 | OAUTH_TWITTER_API_KEY: {{ .Values.config.OAUTH_TWITTER_API_KEY | quote }}
 58 | {{- end }}
 59 | {{ if .Values.config.OAUTH_TWITTER_APP_SECRET -}}
 60 | OAUTH_TWITTER_APP_SECRET: {{ .Values.config.OAUTH_TWITTER_APP_SECRET | quote }}
 61 | {{- end }}
 62 | {{ if .Values.config.OAUTH_AUTHENTIQ_CLIENT_ID -}}
 63 | OAUTH_AUTHENTIQ_CLIENT_ID: {{ .Values.config.OAUTH_AUTHENTIQ_CLIENT_ID | quote }}
 64 | {{- end }}
 65 | {{ if .Values.config.OAUTH_AUTHENTIQ_CLIENT_SECRET -}}
 66 | OAUTH_AUTHENTIQ_CLIENT_SECRET: {{ .Values.config.OAUTH_AUTHENTIQ_CLIENT_SECRET | quote }}
 67 | {{- end }}
 68 | {{ if .Values.config.OAUTH_AUTHENTIQ_SCOPE -}}
 69 | OAUTH_AUTHENTIQ_SCOPE: {{ .Values.config.OAUTH_AUTHENTIQ_SCOPE | quote }}
 70 | {{- end }}
 71 | {{ if .Values.config.OAUTH_AUTHENTIQ_REDIRECT_URI -}}
 72 | OAUTH_AUTHENTIQ_REDIRECT_URI: {{ .Values.config.OAUTH_AUTHENTIQ_REDIRECT_URI | quote }}
 73 | {{- end }}
 74 | {{ if .Values.config.OAUTH_GITHUB_API_KEY -}}
 75 | OAUTH_GITHUB_API_KEY: {{ .Values.config.OAUTH_GITHUB_API_KEY | quote }}
 76 | {{- end }}
 77 | {{ if .Values.config.OAUTH_GITHUB_APP_SECRET -}}
 78 | OAUTH_GITHUB_APP_SECRET: {{ .Values.config.OAUTH_GITHUB_APP_SECRET | quote }}
 79 | {{- end }}
 80 | {{ if .Values.config.OAUTH_GITHUB_URL -}}
 81 | OAUTH_GITHUB_URL: {{ .Values.config.OAUTH_GITHUB_URL | quote }}
 82 | {{- end }}
 83 | {{ if .Values.config.OAUTH_GITHUB_VERIFY_SSL -}}
 84 | OAUTH_GITHUB_VERIFY_SSL: {{ .Values.config.OAUTH_GITHUB_VERIFY_SSL | quote }}
 85 | {{- end }}
 86 | {{ if .Values.config.OAUTH_GITLAB_API_KEY -}}
 87 | OAUTH_GITLAB_API_KEY: {{ .Values.config.OAUTH_GITLAB_API_KEY | quote }}
 88 | {{- end }}
 89 | {{ if .Values.config.OAUTH_GITLAB_APP_SECRET -}}
 90 | OAUTH_GITLAB_APP_SECRET: {{ .Values.config.OAUTH_GITLAB_APP_SECRET | quote }}
 91 | {{- end }}
 92 | {{ if .Values.config.OAUTH_BITBUCKET_API_KEY -}}
 93 | OAUTH_BITBUCKET_API_KEY: {{ .Values.config.OAUTH_BITBUCKET_API_KEY | quote }}
 94 | {{- end }}
 95 | {{ if .Values.config.OAUTH_BITBUCKET_APP_SECRET -}}
 96 | OAUTH_BITBUCKET_APP_SECRET: {{ .Values.config.OAUTH_BITBUCKET_APP_SECRET | quote }}
 97 | {{- end }}
 98 | {{ if .Values.config.OAUTH_SAML_ASSERTION_CONSUMER_SERVICE_URL -}}
 99 | OAUTH_SAML_ASSERTION_CONSUMER_SERVICE_URL: {{ .Values.config.OAUTH_SAML_ASSERTION_CONSUMER_SERVICE_URL | quote }}
100 | {{- end }}
101 | {{ if .Values.config.OAUTH_SAML_IDP_CERT_FINGERPRINT -}}
102 | OAUTH_SAML_IDP_CERT_FINGERPRINT: {{ .Values.config.OAUTH_SAML_IDP_CERT_FINGERPRINT | quote }}
103 | {{- end }}
104 | {{ if .Values.config.OAUTH_SAML_IDP_SSO_TARGET_URL -}}
105 | OAUTH_SAML_IDP_SSO_TARGET_URL: {{ .Values.config.OAUTH_SAML_IDP_SSO_TARGET_URL | quote }}
106 | {{- end }}
107 | {{ if .Values.config.OAUTH_SAML_ISSUER -}}
108 | OAUTH_SAML_ISSUER: {{ .Values.config.OAUTH_SAML_ISSUER | quote }}
109 | {{- end }}
110 | {{ if .Values.config.OAUTH_SAML_LABEL -}}
111 | OAUTH_SAML_LABEL: {{ .Values.config.OAUTH_SAML_LABEL | quote }}
112 | {{- end }}
113 | {{ if .Values.config.OAUTH_SAML_NAME_IDENTIFIER_FORMAT -}}
114 | OAUTH_SAML_NAME_IDENTIFIER_FORMAT: {{ .Values.config.OAUTH_SAML_NAME_IDENTIFIER_FORMAT | quote }}
115 | {{- end }}
116 | {{ if .Values.config.OAUTH_SAML_GROUPS_ATTRIBUTE -}}
117 | OAUTH_SAML_GROUPS_ATTRIBUTE: {{ .Values.config.OAUTH_SAML_GROUPS_ATTRIBUTE | quote }}
118 | {{- end }}
119 | {{ if .Values.config.OAUTH_SAML_EXTERNAL_GROUPS -}}
120 | OAUTH_SAML_EXTERNAL_GROUPS: {{ .Values.config.OAUTH_SAML_EXTERNAL_GROUPS | quote }}
121 | {{- end }}
122 | {{ if .Values.config.OAUTH_SAML_ATTRIBUTE_STATEMENTS_EMAIL -}}
123 | OAUTH_SAML_ATTRIBUTE_STATEMENTS_EMAIL: {{ .Values.config.OAUTH_SAML_ATTRIBUTE_STATEMENTS_EMAIL | quote }}
124 | {{- end }}
125 | {{ if .Values.config.OAUTH_SAML_ATTRIBUTE_STATEMENTS_NAME -}}
126 | OAUTH_SAML_ATTRIBUTE_STATEMENTS_NAME: {{ .Values.config.OAUTH_SAML_ATTRIBUTE_STATEMENTS_NAME | quote }}
127 | {{- end }}
128 | {{ if .Values.config.OAUTH_SAML_ATTRIBUTE_STATEMENTS_FIRST_NAME -}}
129 | OAUTH_SAML_ATTRIBUTE_STATEMENTS_FIRST_NAME: {{ .Values.config.OAUTH_SAML_ATTRIBUTE_STATEMENTS_FIRST_NAME | quote }}
130 | {{- end }}
131 | {{ if .Values.config.OAUTH_SAML_ATTRIBUTE_STATEMENTS_LAST_NAME -}}
132 | OAUTH_SAML_ATTRIBUTE_STATEMENTS_LAST_NAME: {{ .Values.config.OAUTH_SAML_ATTRIBUTE_STATEMENTS_LAST_NAME | quote }}
133 | {{- end }}
134 | {{ if .Values.config.OAUTH_CROWD_SERVER_URL -}}
135 | OAUTH_CROWD_SERVER_URL: {{ .Values.config.OAUTH_CROWD_SERVER_URL | quote }}
136 | {{- end }}
137 | {{ if .Values.config.OAUTH_CROWD_APP_NAME -}}
138 | OAUTH_CROWD_APP_NAME: {{ .Values.config.OAUTH_CROWD_APP_NAME | quote }}
139 | {{- end }}
140 | {{ if .Values.config.OAUTH_CROWD_APP_PASSWORD -}}
141 | OAUTH_CROWD_APP_PASSWORD: {{ .Values.config.OAUTH_CROWD_APP_PASSWORD | quote }}
142 | {{- end }}
143 | {{ if .Values.config.OAUTH_AUTH0_CLIENT_ID -}}
144 | OAUTH_AUTH0_CLIENT_ID: {{ .Values.config.OAUTH_AUTH0_CLIENT_ID | quote }}
145 | {{- end }}
146 | {{ if .Values.config.OAUTH_AUTH0_CLIENT_SECRET -}}
147 | OAUTH_AUTH0_CLIENT_SECRET: {{ .Values.config.OAUTH_AUTH0_CLIENT_SECRET | quote }}
148 | {{- end }}
149 | {{ if .Values.config.OAUTH_AUTH0_DOMAIN -}}
150 | OAUTH_AUTH0_DOMAIN: {{ .Values.config.OAUTH_AUTH0_DOMAIN | quote }}
151 | {{- end }}
152 | {{ if .Values.config.OAUTH_AZURE_API_KEY -}}
153 | OAUTH_AZURE_API_KEY: {{ .Values.config.OAUTH_AZURE_API_KEY | quote }}
154 | {{- end }}
155 | {{ if .Values.config.OAUTH_AZURE_API_SECRET -}}
156 | OAUTH_AZURE_API_SECRET: {{ .Values.config.OAUTH_AZURE_API_SECRET | quote }}
157 | {{- end }}
158 | {{ if .Values.config.OAUTH_AZURE_TENANT_ID -}}
159 | OAUTH_AZURE_TENANT_ID: {{ .Values.config.OAUTH_AZURE_TENANT_ID | quote }}
160 | {{- end }}
161 | {{- end }}
162 | 
163 | {{- define "oauth_data" -}}
164 | {{ if .Values.config.OAUTH_ENABLED -}}
165 | - name: OAUTH_ENABLED
166 |   valueFrom:
167 |     configMapKeyRef:
168 |       name: {{ template "fullname" .}}
169 |       key: OAUTH_ENABLED
170 | {{- end }}
171 | {{ if .Values.config.OAUTH_AUTO_SIGN_IN_WITH_PROVIDER -}}
172 | - name: OAUTH_AUTO_SIGN_IN_WITH_PROVIDER
173 |   valueFrom:
174 |     configMapKeyRef:
175 |       name: {{ template "fullname" .}}
176 |       key: OAUTH_AUTO_SIGN_IN_WITH_PROVIDER
177 | {{- end }}
178 | {{ if .Values.config.OAUTH_ALLOW_SSO -}}
179 | - name: OAUTH_ALLOW_SSO
180 |   valueFrom:
181 |     configMapKeyRef:
182 |       name: {{ template "fullname" .}}
183 |       key: OAUTH_ALLOW_SSO
184 | {{- end }}
185 | {{ if .Values.config.OAUTH_BLOCK_AUTO_CREATED_USERS -}}
186 | - name: OAUTH_BLOCK_AUTO_CREATED_USERS
187 |   valueFrom:
188 |     configMapKeyRef:
189 |       name: {{ template "fullname" .}}
190 |       key: OAUTH_BLOCK_AUTO_CREATED_USERS
191 | {{- end }}
192 | {{ if .Values.config.OAUTH_AUTO_LINK_LDAP_USER -}}
193 | - name: OAUTH_AUTO_LINK_LDAP_USER
194 |   valueFrom:
195 |     configMapKeyRef:
196 |       name: {{ template "fullname" .}}
197 |       key: OAUTH_AUTO_LINK_LDAP_USER
198 | {{- end }}
199 | {{ if .Values.config.OAUTH_AUTO_LINK_SAML_USER -}}
200 | - name: OAUTH_AUTO_LINK_SAML_USER
201 |   valueFrom:
202 |     configMapKeyRef:
203 |       name: {{ template "fullname" .}}
204 |       key: OAUTH_AUTO_LINK_SAML_USER
205 | {{- end }}
206 | {{ if .Values.config.OAUTH_EXTERNAL_PROVIDERS -}}
207 | - name: OAUTH_EXTERNAL_PROVIDERS
208 |   valueFrom:
209 |     configMapKeyRef:
210 |       name: {{ template "fullname" .}}
211 |       key: OAUTH_EXTERNAL_PROVIDERS
212 | {{- end }}
213 | {{ if .Values.config.OAUTH_CAS3_LABEL -}}
214 | - name: OAUTH_CAS3_LABEL
215 |   valueFrom:
216 |     configMapKeyRef:
217 |       name: {{ template "fullname" .}}
218 |       key: OAUTH_CAS3_LABEL
219 | {{- end }}
220 | {{ if .Values.config.OAUTH_CAS3_SERVER -}}
221 | - name: OAUTH_CAS3_SERVER
222 |   valueFrom:
223 |     configMapKeyRef:
224 |       name: {{ template "fullname" .}}
225 |       key: OAUTH_CAS3_SERVER
226 | {{- end }}
227 | {{ if .Values.config.OAUTH_CAS3_DISABLE_SSL_VERIFICATION -}}
228 | - name: OAUTH_CAS3_DISABLE_SSL_VERIFICATION
229 |   valueFrom:
230 |     configMapKeyRef:
231 |       name: {{ template "fullname" .}}
232 |       key: OAUTH_CAS3_DISABLE_SSL_VERIFICATION
233 | {{- end }}
234 | {{ if .Values.config.OAUTH_CAS3_LOGIN_URL -}}
235 | - name: OAUTH_CAS3_LOGIN_URL
236 |   valueFrom:
237 |     configMapKeyRef:
238 |       name: {{ template "fullname" .}}
239 |       key: OAUTH_CAS3_LOGIN_URL
240 | {{- end }}
241 | {{ if .Values.config.OAUTH_CAS3_VALIDATE_URL -}}
242 | - name: OAUTH_CAS3_VALIDATE_URL
243 |   valueFrom:
244 |     configMapKeyRef:
245 |       name: {{ template "fullname" .}}
246 |       key: OAUTH_CAS3_VALIDATE_URL
247 | {{- end }}
248 | {{ if .Values.config.OAUTH_CAS3_LOGOUT_URL -}}
249 | - name: OAUTH_CAS3_LOGOUT_URL
250 |   valueFrom:
251 |     configMapKeyRef:
252 |       name: {{ template "fullname" .}}
253 |       key: OAUTH_CAS3_LOGOUT_URL
254 | {{- end }}
255 | {{ if .Values.config.OAUTH_GOOGLE_API_KEY -}}
256 | - name: OAUTH_GOOGLE_API_KEY
257 |   valueFrom:
258 |     configMapKeyRef:
259 |       name: {{ template "fullname" .}}
260 |       key: OAUTH_GOOGLE_API_KEY
261 | {{- end }}
262 | {{ if .Values.config.OAUTH_GOOGLE_APP_SECRET -}}
263 | - name: OAUTH_GOOGLE_APP_SECRET
264 |   valueFrom:
265 |     configMapKeyRef:
266 |       name: {{ template "fullname" .}}
267 |       key: OAUTH_GOOGLE_APP_SECRET
268 | {{- end }}
269 | {{ if .Values.config.OAUTH_GOOGLE_RESTRICT_DOMAIN -}}
270 | - name: OAUTH_GOOGLE_RESTRICT_DOMAIN
271 |   valueFrom:
272 |     configMapKeyRef:
273 |       name: {{ template "fullname" .}}
274 |       key: OAUTH_GOOGLE_RESTRICT_DOMAIN
275 | {{- end }}
276 | {{ if .Values.config.OAUTH_FACEBOOK_API_KEY -}}
277 | - name: OAUTH_FACEBOOK_API_KEY
278 |   valueFrom:
279 |     configMapKeyRef:
280 |       name: {{ template "fullname" .}}
281 |       key: OAUTH_FACEBOOK_API_KEY
282 | {{- end }}
283 | {{ if .Values.config.OAUTH_FACEBOOK_APP_SECRET -}}
284 | - name: OAUTH_FACEBOOK_APP_SECRET
285 |   valueFrom:
286 |     configMapKeyRef:
287 |       name: {{ template "fullname" .}}
288 |       key: OAUTH_FACEBOOK_APP_SECRET
289 | {{- end }}
290 | {{ if .Values.config.OAUTH_TWITTER_API_KEY -}}
291 | - name: OAUTH_TWITTER_API_KEY
292 |   valueFrom:
293 |     configMapKeyRef:
294 |       name: {{ template "fullname" .}}
295 |       key: OAUTH_TWITTER_API_KEY
296 | {{- end }}
297 | {{ if .Values.config.OAUTH_TWITTER_APP_SECRET -}}
298 | - name: OAUTH_TWITTER_APP_SECRET
299 |   valueFrom:
300 |     configMapKeyRef:
301 |       name: {{ template "fullname" .}}
302 |       key: OAUTH_TWITTER_APP_SECRET
303 | {{- end }}
304 | {{ if .Values.config.OAUTH_AUTHENTIQ_CLIENT_ID -}}
305 | - name: OAUTH_AUTHENTIQ_CLIENT_ID
306 |   valueFrom:
307 |     configMapKeyRef:
308 |       name: {{ template "fullname" .}}
309 |       key: OAUTH_AUTHENTIQ_CLIENT_ID
310 | {{- end }}
311 | {{ if .Values.config.OAUTH_AUTHENTIQ_CLIENT_SECRET -}}
312 | - name: OAUTH_AUTHENTIQ_CLIENT_SECRET
313 |   valueFrom:
314 |     configMapKeyRef:
315 |       name: {{ template "fullname" .}}
316 |       key: OAUTH_AUTHENTIQ_CLIENT_SECRET
317 | {{- end }}
318 | {{ if .Values.config.OAUTH_AUTHENTIQ_SCOPE -}}
319 | - name: OAUTH_AUTHENTIQ_SCOPE
320 |   valueFrom:
321 |     configMapKeyRef:
322 |       name: {{ template "fullname" .}}
323 |       key: OAUTH_AUTHENTIQ_SCOPE
324 | {{- end }}
325 | {{ if .Values.config.OAUTH_AUTHENTIQ_REDIRECT_URI -}}
326 | - name: OAUTH_AUTHENTIQ_REDIRECT_URI
327 |   valueFrom:
328 |     configMapKeyRef:
329 |       name: {{ template "fullname" .}}
330 |       key: OAUTH_AUTHENTIQ_REDIRECT_URI
331 | {{- end }}
332 | {{ if .Values.config.OAUTH_GITHUB_API_KEY -}}
333 | - name: OAUTH_GITHUB_API_KEY
334 |   valueFrom:
335 |     configMapKeyRef:
336 |       name: {{ template "fullname" .}}
337 |       key: OAUTH_GITHUB_API_KEY
338 | {{- end }}
339 | {{ if .Values.config.OAUTH_GITHUB_APP_SECRET -}}
340 | - name: OAUTH_GITHUB_APP_SECRET
341 |   valueFrom:
342 |     configMapKeyRef:
343 |       name: {{ template "fullname" .}}
344 |       key: OAUTH_GITHUB_APP_SECRET
345 | {{- end }}
346 | {{ if .Values.config.OAUTH_GITHUB_URL -}}
347 | - name: OAUTH_GITHUB_URL
348 |   valueFrom:
349 |     configMapKeyRef:
350 |       name: {{ template "fullname" .}}
351 |       key: OAUTH_GITHUB_URL
352 | {{- end }}
353 | {{ if .Values.config.OAUTH_GITHUB_VERIFY_SSL -}}
354 | - name: OAUTH_GITHUB_VERIFY_SSL
355 |   valueFrom:
356 |     configMapKeyRef:
357 |       name: {{ template "fullname" .}}
358 |       key: OAUTH_GITHUB_VERIFY_SSL
359 | {{- end }}
360 | {{ if .Values.config.OAUTH_GITLAB_API_KEY -}}
361 | - name: OAUTH_GITLAB_API_KEY
362 |   valueFrom:
363 |     configMapKeyRef:
364 |       name: {{ template "fullname" .}}
365 |       key: OAUTH_GITLAB_API_KEY
366 | {{- end }}
367 | {{ if .Values.config.OAUTH_GITLAB_APP_SECRET -}}
368 | - name: OAUTH_GITLAB_APP_SECRET
369 |   valueFrom:
370 |     configMapKeyRef:
371 |       name: {{ template "fullname" .}}
372 |       key: OAUTH_GITLAB_APP_SECRET
373 | {{- end }}
374 | {{ if .Values.config.OAUTH_BITBUCKET_API_KEY -}}
375 | - name: OAUTH_BITBUCKET_API_KEY
376 |   valueFrom:
377 |     configMapKeyRef:
378 |       name: {{ template "fullname" .}}
379 |       key: OAUTH_BITBUCKET_API_KEY
380 | {{- end }}
381 | {{ if .Values.config.OAUTH_BITBUCKET_APP_SECRET -}}
382 | - name: OAUTH_BITBUCKET_APP_SECRET
383 |   valueFrom:
384 |     configMapKeyRef:
385 |       name: {{ template "fullname" .}}
386 |       key: OAUTH_BITBUCKET_APP_SECRET
387 | {{- end }}
388 | {{ if .Values.config.OAUTH_SAML_ASSERTION_CONSUMER_SERVICE_URL -}}
389 | - name: OAUTH_SAML_ASSERTION_CONSUMER_SERVICE_URL
390 |   valueFrom:
391 |     configMapKeyRef:
392 |       name: {{ template "fullname" .}}
393 |       key: OAUTH_SAML_ASSERTION_CONSUMER_SERVICE_URL
394 | {{- end }}
395 | {{ if .Values.config.OAUTH_SAML_IDP_CERT_FINGERPRINT -}}
396 | - name: OAUTH_SAML_IDP_CERT_FINGERPRINT
397 |   valueFrom:
398 |     configMapKeyRef:
399 |       name: {{ template "fullname" .}}
400 |       key: OAUTH_SAML_IDP_CERT_FINGERPRINT
401 | {{- end }}
402 | {{ if .Values.config.OAUTH_SAML_IDP_SSO_TARGET_URL -}}
403 | - name: OAUTH_SAML_IDP_SSO_TARGET_URL
404 |   valueFrom:
405 |     configMapKeyRef:
406 |       name: {{ template "fullname" .}}
407 |       key: OAUTH_SAML_IDP_SSO_TARGET_URL
408 | {{- end }}
409 | {{ if .Values.config.OAUTH_SAML_ISSUER -}}
410 | - name: OAUTH_SAML_ISSUER
411 |   valueFrom:
412 |     configMapKeyRef:
413 |       name: {{ template "fullname" .}}
414 |       key: OAUTH_SAML_ISSUER
415 | {{- end }}
416 | {{ if .Values.config.OAUTH_SAML_LABEL -}}
417 | - name: OAUTH_SAML_LABEL
418 |   valueFrom:
419 |     configMapKeyRef:
420 |       name: {{ template "fullname" .}}
421 |       key: OAUTH_SAML_LABEL
422 | {{- end }}
423 | {{ if .Values.config.OAUTH_SAML_NAME_IDENTIFIER_FORMAT -}}
424 | - name: OAUTH_SAML_NAME_IDENTIFIER_FORMAT
425 |   valueFrom:
426 |     configMapKeyRef:
427 |       name: {{ template "fullname" .}}
428 |       key: OAUTH_SAML_NAME_IDENTIFIER_FORMAT
429 | {{- end }}
430 | {{ if .Values.config.OAUTH_SAML_GROUPS_ATTRIBUTE -}}
431 | - name: OAUTH_SAML_GROUPS_ATTRIBUTE
432 |   valueFrom:
433 |     configMapKeyRef:
434 |       name: {{ template "fullname" .}}
435 |       key: OAUTH_SAML_GROUPS_ATTRIBUTE
436 | {{- end }}
437 | {{ if .Values.config.OAUTH_SAML_EXTERNAL_GROUPS -}}
438 | - name: OAUTH_SAML_EXTERNAL_GROUPS
439 |   valueFrom:
440 |     configMapKeyRef:
441 |       name: {{ template "fullname" .}}
442 |       key: OAUTH_SAML_EXTERNAL_GROUPS
443 | {{- end }}
444 | {{ if .Values.config.OAUTH_SAML_ATTRIBUTE_STATEMENTS_EMAIL -}}
445 | - name: OAUTH_SAML_ATTRIBUTE_STATEMENTS_EMAIL
446 |   valueFrom:
447 |     configMapKeyRef:
448 |       name: {{ template "fullname" .}}
449 |       key: OAUTH_SAML_ATTRIBUTE_STATEMENTS_EMAIL
450 | {{- end }}
451 | {{ if .Values.config.OAUTH_SAML_ATTRIBUTE_STATEMENTS_NAME -}}
452 | - name: OAUTH_SAML_ATTRIBUTE_STATEMENTS_NAME
453 |   valueFrom:
454 |     configMapKeyRef:
455 |       name: {{ template "fullname" .}}
456 |       key: OAUTH_SAML_ATTRIBUTE_STATEMENTS_NAME
457 | {{- end }}
458 | {{ if .Values.config.OAUTH_SAML_ATTRIBUTE_STATEMENTS_FIRST_NAME -}}
459 | - name: OAUTH_SAML_ATTRIBUTE_STATEMENTS_FIRST_NAME
460 |   valueFrom:
461 |     configMapKeyRef:
462 |       name: {{ template "fullname" .}}
463 |       key: OAUTH_SAML_ATTRIBUTE_STATEMENTS_FIRST_NAME
464 | {{- end }}
465 | {{ if .Values.config.OAUTH_SAML_ATTRIBUTE_STATEMENTS_LAST_NAME -}}
466 | - name: OAUTH_SAML_ATTRIBUTE_STATEMENTS_LAST_NAME
467 |   valueFrom:
468 |     configMapKeyRef:
469 |       name: {{ template "fullname" .}}
470 |       key: OAUTH_SAML_ATTRIBUTE_STATEMENTS_LAST_NAME
471 | {{- end }}
472 | {{ if .Values.config.OAUTH_CROWD_SERVER_URL -}}
473 | - name: OAUTH_CROWD_SERVER_URL
474 |   valueFrom:
475 |     configMapKeyRef:
476 |       name: {{ template "fullname" .}}
477 |       key: OAUTH_CROWD_SERVER_URL
478 | {{- end }}
479 | {{ if .Values.config.OAUTH_CROWD_APP_NAME -}}
480 | - name: OAUTH_CROWD_APP_NAME
481 |   valueFrom:
482 |     configMapKeyRef:
483 |       name: {{ template "fullname" .}}
484 |       key: OAUTH_CROWD_APP_NAME
485 | {{- end }}
486 | {{ if .Values.config.OAUTH_CROWD_APP_PASSWORD -}}
487 | - name: OAUTH_CROWD_APP_PASSWORD
488 |   valueFrom:
489 |     configMapKeyRef:
490 |       name: {{ template "fullname" .}}
491 |       key: OAUTH_CROWD_APP_PASSWORD
492 | {{- end }}
493 | {{ if .Values.config.OAUTH_AUTH0_CLIENT_ID -}}
494 | - name: OAUTH_AUTH0_CLIENT_ID
495 |   valueFrom:
496 |     configMapKeyRef:
497 |       name: {{ template "fullname" .}}
498 |       key: OAUTH_AUTH0_CLIENT_ID
499 | {{- end }}
500 | {{ if .Values.config.OAUTH_AUTH0_CLIENT_SECRET -}}
501 | - name: OAUTH_AUTH0_CLIENT_SECRET
502 |   valueFrom:
503 |     configMapKeyRef:
504 |       name: {{ template "fullname" .}}
505 |       key: OAUTH_AUTH0_CLIENT_SECRET
506 | {{- end }}
507 | {{ if .Values.config.OAUTH_AUTH0_DOMAIN -}}
508 | - name: OAUTH_AUTH0_DOMAIN
509 |   valueFrom:
510 |     configMapKeyRef:
511 |       name: {{ template "fullname" .}}
512 |       key: OAUTH_AUTH0_DOMAIN
513 | {{- end }}
514 | {{ if .Values.config.OAUTH_AZURE_API_KEY -}}
515 | - name: OAUTH_AZURE_API_KEY
516 |   valueFrom:
517 |     configMapKeyRef:
518 |       name: {{ template "fullname" .}}
519 |       key: OAUTH_AZURE_API_KEY
520 | {{- end }}
521 | {{ if .Values.config.OAUTH_AZURE_API_SECRET -}}
522 | - name: OAUTH_AZURE_API_SECRET
523 |   valueFrom:
524 |     configMapKeyRef:
525 |       name: {{ template "fullname" .}}
526 |       key: OAUTH_AZURE_API_SECRET
527 | {{- end }}
528 | {{ if .Values.config.OAUTH_AZURE_TENANT_ID -}}
529 | - name: OAUTH_AZURE_TENANT_ID
530 |   valueFrom:
531 |     configMapKeyRef:
532 |       name: {{ template "fullname" .}}
533 |       key: OAUTH_AZURE_TENANT_ID
534 | {{- end }}
535 | 
536 | {{- end }}
537 | 


--------------------------------------------------------------------------------
/gitlab/templates/partials/_pages.yaml:
--------------------------------------------------------------------------------
 1 | {{- define "pages_config" -}}
 2 | {{ if .Values.config.GITLAB_PAGES_ENABLED -}}
 3 | GITLAB_PAGES_ENABLED: {{ .Values.config.GITLAB_PAGES_ENABLED | quote }}
 4 | {{- end }}
 5 | {{ if .Values.config.GITLAB_PAGES_DOMAIN -}}
 6 | GITLAB_PAGES_DOMAIN: {{ .Values.config.GITLAB_PAGES_DOMAIN | quote }}
 7 | {{- end }}
 8 | {{ if .Values.config.GITLAB_PAGES_DIR -}}
 9 | GITLAB_PAGES_DIR: {{ .Values.config.GITLAB_PAGES_DIR | quote }}
10 | {{- end }}
11 | {{ if .Values.config.GITLAB_PAGES_PORT -}}
12 | GITLAB_PAGES_PORT: {{ .Values.config.GITLAB_PAGES_PORT | quote }}
13 | {{- end }}
14 | {{ if .Values.config.GITLAB_PAGES_HTTPS -}}
15 | GITLAB_PAGES_HTTPS: {{ .Values.config.GITLAB_PAGES_HTTPS | quote }}
16 | {{- end }}
17 | {{ if .Values.config.GITLAB_PAGES_EXTERNAL_HTTP -}}
18 | GITLAB_PAGES_EXTERNAL_HTTP: {{ .Values.config.GITLAB_PAGES_EXTERNAL_HTTP | quote }}
19 | {{- end }}
20 | {{ if .Values.config.GITLAB_PAGES_EXTERNAL_HTTPS -}}
21 | GITLAB_PAGES_EXTERNAL_HTTPS: {{ .Values.config.GITLAB_PAGES_EXTERNAL_HTTPS | quote }}
22 | {{- end }}
23 | {{ if .Values.config.SSL_PAGES_KEY_PATH -}}
24 | SSL_PAGES_KEY_PATH: {{ .Values.config.SSL_PAGES_KEY_PATH | quote }}
25 | {{- end }}
26 | {{ if .Values.config.SSL_PAGES_CERT_PATH -}}
27 | SSL_PAGES_CERT_PATH: {{ .Values.config.SSL_PAGES_CERT_PATH | quote }}
28 | {{- end }}
29 | {{- end }}
30 | 
31 | 
32 | {{- define "pages_data" -}}
33 | {{ if .Values.config.GITLAB_PAGES_ENABLED -}}
34 | - name: GITLAB_PAGES_ENABLED
35 |   valueFrom:
36 |     configMapKeyRef:
37 |       name: {{ template "fullname" . }}
38 |       key: GITLAB_PAGES_ENABLED
39 | {{- end }}
40 | {{ if .Values.config.GITLAB_PAGES_DOMAIN -}}
41 | - name: GITLAB_PAGES_DOMAIN
42 |   valueFrom:
43 |     configMapKeyRef:
44 |       name: {{ template "fullname" . }}
45 |       key: GITLAB_PAGES_DOMAIN
46 | {{- end }}
47 | {{ if .Values.config.GITLAB_PAGES_DIR -}}
48 | - name: GITLAB_PAGES_DIR
49 |   valueFrom:
50 |     configMapKeyRef:
51 |       name: {{ template "fullname" . }}
52 |       key: GITLAB_PAGES_DIR
53 | {{- end }}
54 | {{ if .Values.config.GITLAB_PAGES_PORT -}}
55 | - name: GITLAB_PAGES_PORT
56 |   valueFrom:
57 |     configMapKeyRef:
58 |       name: {{ template "fullname" . }}
59 |       key: GITLAB_PAGES_PORT
60 | {{- end }}
61 | {{ if .Values.config.GITLAB_PAGES_HTTPS -}}
62 | - name: GITLAB_PAGES_HTTPS
63 |   valueFrom:
64 |     configMapKeyRef:
65 |       name: {{ template "fullname" . }}
66 |       key: GITLAB_PAGES_HTTPS
67 | {{- end }}
68 | {{ if .Values.config.GITLAB_PAGES_EXTERNAL_HTTP -}}
69 | - name: GITLAB_PAGES_EXTERNAL_HTTP
70 |   valueFrom:
71 |     configMapKeyRef:
72 |       name: {{ template "fullname" . }}
73 |       key: GITLAB_PAGES_EXTERNAL_HTTP
74 | {{- end }}
75 | {{ if .Values.config.GITLAB_PAGES_EXTERNAL_HTTPS -}}
76 | - name: GITLAB_PAGES_EXTERNAL_HTTPS
77 |   valueFrom:
78 |     configMapKeyRef:
79 |       name: {{ template "fullname" . }}
80 |       key: GITLAB_PAGES_EXTERNAL_HTTPS
81 | {{- end }}
82 | {{ if .Values.config.SSL_PAGES_KEY_PATH -}}
83 | - name: SSL_PAGES_KEY_PATH
84 |   valueFrom:
85 |     configMapKeyRef:
86 |       name: {{ template "fullname" . }}
87 |       key: SSL_PAGES_KEY_PATH
88 | {{- end }}
89 | {{ if .Values.config.SSL_PAGES_CERT_PATH -}}
90 | - name: SSL_PAGES_CERT_PATH
91 |   valueFrom:
92 |     configMapKeyRef:
93 |       name: {{ template "fullname" . }}
94 |       key: SSL_PAGES_CERT_PATH
95 | {{- end }}
96 | {{- end }}
97 | 


--------------------------------------------------------------------------------
/gitlab/templates/partials/_rack.yaml:
--------------------------------------------------------------------------------
 1 | {{- define "rack_config" -}}
 2 | {{ if .Values.config.RACK_ATTACK_ENABLED -}}
 3 | RACK_ATTACK_ENABLED: {{ .Values.config.RACK_ATTACK_ENABLED | quote }}
 4 | {{- end }}
 5 | {{ if .Values.config.RACK_ATTACK_WHITELIST -}}
 6 | RACK_ATTACK_WHITELIST: {{ .Values.config.RACK_ATTACK_WHITELIST | quote }}
 7 | {{- end }}
 8 | {{ if .Values.config.RACK_ATTACK_MAXRETRY -}}
 9 | RACK_ATTACK_MAXRETRY: {{ .Values.config.RACK_ATTACK_MAXRETRY | quote }}
10 | {{- end }}
11 | {{ if .Values.config.RACK_ATTACK_FINDTIME -}}
12 | RACK_ATTACK_FINDTIME: {{ .Values.config.RACK_ATTACK_FINDTIME | quote }}
13 | {{- end }}
14 | {{ if .Values.config.RACK_ATTACK_BANTIME -}}
15 | RACK_ATTACK_BANTIME: {{ .Values.config.RACK_ATTACK_BANTIME | quote }}
16 | {{- end }}
17 | {{- end }}
18 | 
19 | {{- define "rack_data" -}}
20 | {{ if .Values.config.RACK_ATTACK_ENABLED -}}
21 | - name: RACK_ATTACK_ENABLED
22 |   valueFrom:
23 |     configMapKeyRef:
24 |       name: {{ template "fullname" . }}
25 |       key: RACK_ATTACK_ENABLED
26 | {{- end }}
27 | {{ if .Values.config.RACK_ATTACK_WHITELIST -}}
28 | - name: RACK_ATTACK_WHITELIST
29 |   valueFrom:
30 |     configMapKeyRef:
31 |       name: {{ template "fullname" . }}
32 |       key: RACK_ATTACK_WHITELIST
33 | {{- end }}
34 | {{ if .Values.config.RACK_ATTACK_MAXRETRY -}}
35 | - name: RACK_ATTACK_MAXRETRY
36 |   valueFrom:
37 |     configMapKeyRef:
38 |       name: {{ template "fullname" . }}
39 |       key: RACK_ATTACK_MAXRETRY
40 | {{- end }}
41 | {{ if .Values.config.RACK_ATTACK_FINDTIME -}}
42 | - name: RACK_ATTACK_FINDTIME
43 |   valueFrom:
44 |     configMapKeyRef:
45 |       name: {{ template "fullname" . }}
46 |       key: RACK_ATTACK_FINDTIME
47 | {{- end }}
48 | {{ if .Values.config.RACK_ATTACK_BANTIME -}}
49 | - name: RACK_ATTACK_BANTIME
50 |   valueFrom:
51 |     configMapKeyRef:
52 |       name: {{ template "fullname" . }}
53 |       key: RACK_ATTACK_BANTIME
54 | {{- end }}
55 | {{- end }}
56 | 


--------------------------------------------------------------------------------
/gitlab/templates/partials/_smtp.yaml:
--------------------------------------------------------------------------------
  1 | {{- define "smtp_config" -}}
  2 | {{ if .Values.config.SMTP_ENABLED -}}
  3 | SMTP_ENABLED: {{ .Values.config.SMTP_ENABLED | quote }}
  4 | {{- end }}
  5 | {{ if .Values.config.SMTP_DOMAIN -}}
  6 | SMTP_DOMAIN: {{ .Values.config.SMTP_DOMAIN | quote }}
  7 | {{- end }}
  8 | {{ if .Values.config.SMTP_HOST -}}
  9 | SMTP_HOST: {{ .Values.config.SMTP_HOST | quote }}
 10 | {{- end }}
 11 | {{ if .Values.config.SMTP_PORT -}}
 12 | SMTP_PORT: {{ .Values.config.SMTP_PORT | quote }}
 13 | {{- end }}
 14 | {{ if .Values.config.SMTP_USER -}}
 15 | SMTP_USER: {{ .Values.config.SMTP_USER | quote }}
 16 | {{- end }}
 17 | {{ if .Values.config.SMTP_PASS -}}
 18 | SMTP_PASS: {{ .Values.config.SMTP_PASS | quote }}
 19 | {{- end }}
 20 | {{ if .Values.config.SMTP_STARTTLS -}}
 21 | SMTP_STARTTLS: {{ .Values.config.SMTP_STARTTLS | quote }}
 22 | {{- end }}
 23 | {{ if .Values.config.SMTP_TLS -}}
 24 | SMTP_TLS: {{ .Values.config.SMTP_TLS | quote }}
 25 | {{- end }}
 26 | {{ if .Values.config.SMTP_OPENSSL_VERIFY_MODE -}}
 27 | SMTP_OPENSSL_VERIFY_MODE: {{ .Values.config.SMTP_OPENSSL_VERIFY_MODE | quote }}
 28 | {{- end }}
 29 | {{ if .Values.config.SMTP_AUTHENTICATION -}}
 30 | SMTP_AUTHENTICATION: {{ .Values.config.SMTP_AUTHENTICATION | quote }}
 31 | {{- end }}
 32 | {{ if .Values.config.SMTP_CA_ENABLED -}}
 33 | SMTP_CA_ENABLED: {{ .Values.config.SMTP_CA_ENABLED | quote }}
 34 | {{- end }}
 35 | {{ if .Values.config.SMTP_CA_PATH -}}
 36 | SMTP_CA_PATH: {{ .Values.config.SMTP_CA_PATH | quote }}
 37 | {{- end }}
 38 | {{ if .Values.config.SMTP_CA_FILE -}}
 39 | SMTP_CA_FILE: {{ .Values.config.SMTP_CA_FILE | quote }}
 40 | {{- end }}
 41 | {{- end }}
 42 | 
 43 | {{- define "smtp_data" -}}
 44 | {{ if .Values.config.SMTP_ENABLED -}}
 45 | - name: SMTP_ENABLED
 46 |   valueFrom:
 47 |     configMapKeyRef:
 48 |       name: {{ template "fullname" . }}
 49 |       key: SMTP_ENABLED
 50 | {{- end }}
 51 | {{ if .Values.config.SMTP_DOMAIN -}}
 52 | - name: SMTP_DOMAIN
 53 |   valueFrom:
 54 |     configMapKeyRef:
 55 |       name: {{ template "fullname" . }}
 56 |       key: SMTP_DOMAIN
 57 | {{- end }}
 58 | {{ if .Values.config.SMTP_HOST -}}
 59 | - name: SMTP_HOST
 60 |   valueFrom:
 61 |     configMapKeyRef:
 62 |       name: {{ template "fullname" . }}
 63 |       key: SMTP_HOST
 64 | {{- end }}
 65 | {{ if .Values.config.SMTP_PORT -}}
 66 | - name: SMTP_PORT
 67 |   valueFrom:
 68 |     configMapKeyRef:
 69 |       name: {{ template "fullname" . }}
 70 |       key: SMTP_PORT
 71 | {{- end }}
 72 | {{ if .Values.config.SMTP_USER -}}
 73 | - name: SMTP_USER
 74 |   valueFrom:
 75 |     configMapKeyRef:
 76 |       name: {{ template "fullname" . }}
 77 |       key: SMTP_USER
 78 | {{- end }}
 79 | {{ if .Values.config.SMTP_PASS -}}
 80 | - name: SMTP_PASS
 81 |   valueFrom:
 82 |     configMapKeyRef:
 83 |       name: {{ template "fullname" . }}
 84 |       key: SMTP_PASS
 85 | {{- end }}
 86 | {{ if .Values.config.SMTP_STARTTLS -}}
 87 | - name: SMTP_STARTTLS
 88 |   valueFrom:
 89 |     configMapKeyRef:
 90 |       name: {{ template "fullname" . }}
 91 |       key: SMTP_STARTTLS
 92 | {{- end }}
 93 | {{ if .Values.config.SMTP_TLS -}}
 94 | - name: SMTP_TLS
 95 |   valueFrom:
 96 |     configMapKeyRef:
 97 |       name: {{ template "fullname" . }}
 98 |       key: SMTP_TLS
 99 | {{- end }}
100 | {{ if .Values.config.SMTP_OPENSSL_VERIFY_MODE -}}
101 | - name: SMTP_OPENSSL_VERIFY_MODE
102 |   valueFrom:
103 |     configMapKeyRef:
104 |       name: {{ template "fullname" . }}
105 |       key: SMTP_OPENSSL_VERIFY_MODE
106 | {{- end }}
107 | {{ if .Values.config.SMTP_AUTHENTICATION -}}
108 | - name: SMTP_AUTHENTICATION
109 |   valueFrom:
110 |     configMapKeyRef:
111 |       name: {{ template "fullname" . }}
112 |       key: SMTP_AUTHENTICATION
113 | {{- end }}
114 | {{ if .Values.config.SMTP_CA_ENABLED -}}
115 | - name: SMTP_CA_ENABLED
116 |   valueFrom:
117 |     configMapKeyRef:
118 |       name: {{ template "fullname" . }}
119 |       key: SMTP_CA_ENABLED
120 | {{- end }}
121 | {{ if .Values.config.SMTP_CA_PATH -}}
122 | - name: SMTP_CA_PATH
123 |   valueFrom:
124 |     configMapKeyRef:
125 |       name: {{ template "fullname" . }}
126 |       key: SMTP_CA_PATH
127 | {{- end }}
128 | {{ if .Values.config.SMTP_CA_FILE -}}
129 | - name: SMTP_CA_FILE
130 |   valueFrom:
131 |     configMapKeyRef:
132 |       name: {{ template "fullname" . }}
133 |       key: SMTP_CA_FILE
134 | {{- end }}
135 | {{- end }}
136 | 


--------------------------------------------------------------------------------
/gitlab/templates/partials/_ssl.yaml:
--------------------------------------------------------------------------------
 1 | {{- define "ssl_config" -}}
 2 | {{ if .Values.config.SSL_SELF_SIGNED -}}
 3 | SSL_SELF_SIGNED: {{ .Values.config.SSL_SELF_SIGNED | quote }}
 4 | {{- end }}
 5 | {{ if .Values.config.SSL_CERTIFICATE_PATH -}}
 6 | SSL_CERTIFICATE_PATH: {{ .Values.config.SSL_CERTIFICATE_PATH | quote }}
 7 | {{- end }}
 8 | {{ if .Values.config.SSL_KEY_PATH -}}
 9 | SSL_KEY_PATH: {{ .Values.config.SSL_KEY_PATH | quote }}
10 | {{- end }}
11 | {{ if .Values.config.SSL_DHPARAM_PATH -}}
12 | SSL_DHPARAM_PATH: {{ .Values.config.SSL_DHPARAM_PATH | quote }}
13 | {{- end }}
14 | {{ if .Values.config.SSL_VERIFY_CLIENT -}}
15 | SSL_VERIFY_CLIENT: {{ .Values.config.SSL_VERIFY_CLIENT | quote }}
16 | {{- end }}
17 | {{ if .Values.config.SSL_CA_CERTIFICATES_PATH -}}
18 | SSL_CA_CERTIFICATES_PATH: {{ .Values.config.SSL_CA_CERTIFICATES_PATH | quote }}
19 | {{- end }}
20 | {{ if .Values.config.SSL_REGISTRY_KEY_PATH -}}
21 | SSL_REGISTRY_KEY_PATH: {{ .Values.config.SSL_REGISTRY_KEY_PATH | quote }}
22 | {{- end }}
23 | {{ if .Values.config.SSL_REGISTRY_CERT_PATH -}}
24 | SSL_REGISTRY_CERT_PATH: {{ .Values.config.SSL_REGISTRY_CERT_PATH | quote }}
25 | {{- end }}
26 | {{ if .Values.config.SSL_CIPHERS -}}
27 | SSL_CIPHERS: {{ .Values.config.SSL_CIPHERS | quote }}
28 | {{- end }}
29 | {{- end }}
30 | 
31 | {{- define "ssl_data" -}}
32 | {{ if .Values.config.SSL_SELF_SIGNED -}}
33 | - name: SSL_SELF_SIGNED
34 |   valueFrom:
35 |     configMapKeyRef:
36 |       name: {{ template "fullname" . }}
37 |       key: SSL_SELF_SIGNED
38 | {{- end }}
39 | {{ if .Values.config.SSL_CERTIFICATE_PATH -}}
40 | - name: SSL_CERTIFICATE_PATH
41 |   valueFrom:
42 |     configMapKeyRef:
43 |       name: {{ template "fullname" . }}
44 |       key: SSL_CERTIFICATE_PATH
45 | {{- end }}
46 | {{ if .Values.config.SSL_KEY_PATH -}}
47 | - name: SSL_KEY_PATH
48 |   valueFrom:
49 |     configMapKeyRef:
50 |       name: {{ template "fullname" . }}
51 |       key: SSL_KEY_PATH
52 | {{- end }}
53 | {{ if .Values.config.SSL_DHPARAM_PATH -}}
54 | - name: SSL_DHPARAM_PATH
55 |   valueFrom:
56 |     configMapKeyRef:
57 |       name: {{ template "fullname" . }}
58 |       key: SSL_DHPARAM_PATH
59 | {{- end }}
60 | {{ if .Values.config.SSL_VERIFY_CLIENT -}}
61 | - name: SSL_VERIFY_CLIENT
62 |   valueFrom:
63 |     configMapKeyRef:
64 |       name: {{ template "fullname" . }}
65 |       key: SSL_VERIFY_CLIENT
66 | {{- end }}
67 | {{ if .Values.config.SSL_CA_CERTIFICATES_PATH -}}
68 | - name: SSL_CA_CERTIFICATES_PATH
69 |   valueFrom:
70 |     configMapKeyRef:
71 |       name: {{ template "fullname" . }}
72 |       key: SSL_CA_CERTIFICATES_PATH
73 | {{- end }}
74 | {{ if .Values.config.SSL_REGISTRY_KEY_PATH -}}
75 | - name: SSL_REGISTRY_KEY_PATH
76 |   valueFrom:
77 |     configMapKeyRef:
78 |       name: {{ template "fullname" . }}
79 |       key: SSL_REGISTRY_KEY_PATH
80 | {{- end }}
81 | {{ if .Values.config.SSL_REGISTRY_CERT_PATH -}}
82 | - name: SSL_REGISTRY_CERT_PATH
83 |   valueFrom:
84 |     configMapKeyRef:
85 |       name: {{ template "fullname" . }}
86 |       key: SSL_REGISTRY_CERT_PATH
87 | {{- end }}
88 | {{ if .Values.config.SSL_CIPHERS -}}
89 | - name: SSL_CIPHERS
90 |   valueFrom:
91 |     configMapKeyRef:
92 |       name: {{ template "fullname" . }}
93 |       key: SSL_CIPHERS
94 | {{- end }}
95 | {{- end }}
96 | 


--------------------------------------------------------------------------------
/gitlab/templates/pvc.yaml:
--------------------------------------------------------------------------------
 1 | {{- if .Values.persistence.enabled }}
 2 | kind: PersistentVolumeClaim
 3 | apiVersion: v1
 4 | metadata:
 5 |   name: {{ template "fullname" . }}-data
 6 |   namespace: {{ .Release.Namespace }}
 7 |   annotations:
 8 |   {{- if .Values.persistence.storageClass }}
 9 |     volume.beta.kubernetes.io/storage-class: {{ .Values.persistence.storageClass | quote }}
10 |   {{- else }}
11 |     volume.alpha.kubernetes.io/storage-class: default
12 |   {{- end }}
13 | spec:
14 |   accessModes:
15 |     - {{ .Values.persistence.accessMode | quote }}
16 |   resources:
17 |     requests:
18 |       storage: {{ .Values.persistence.size | quote }}
19 | {{- end }}
20 | 


--------------------------------------------------------------------------------
/gitlab/templates/secret.yaml:
--------------------------------------------------------------------------------
 1 | apiVersion: v1
 2 | kind: Secret
 3 | metadata:
 4 |   name: {{ template "fullname" . }}
 5 |   namespace: {{ .Release.Namespace }}
 6 |   labels:
 7 |     app: {{ template "fullname" . }}
 8 |     chart: "{{ .Chart.Name }}-{{ .Chart.Version }}"
 9 |     release: "{{ .Release.Name }}"
10 |     heritage: "{{ .Release.Service }}"
11 | type: Opaque
12 | data:
13 |   {{ if .Values.config.GITLAB_ROOT_PASSWORD }}
14 |   GITLAB_ROOT_PASSWORD: {{ .Values.config.GITLAB_ROOT_PASSWORD | b64enc | quote }}
15 |   {{ else }}
16 |   GITLAB_ROOT_PASSWORD: {{ randAlphaNum 30 | b64enc | quote }}
17 |   {{ end }}
18 | 
19 |   DB_USER: {{ .Values.postgresql.postgresUser | b64enc | quote }}
20 |   DB_PASS: {{ .Values.postgresql.postgresPassword | b64enc | quote }}
21 |   REDIS_PASSWORD: {{ .Values.redis.redisPassword | b64enc | quote }}
22 | 
23 |   {{ if .Values.config.GITLAB_SECRETS_DB_KEY_BASE }}
24 |   GITLAB_SECRETS_DB_KEY_BASE: {{ .Values.config.GITLAB_SECRETS_DB_KEY_BASE | b64enc | quote }}
25 |   {{ else }}
26 |   GITLAB_SECRETS_DB_KEY_BASE: {{ randAlphaNum 20 | b64enc | quote }}
27 |   {{ end }}
28 | 
29 |   {{ if .Values.config.GITLAB_SECRETS_SECRET_KEY_BASE }}
30 |   GITLAB_SECRETS_SECRET_KEY_BASE: {{ .Values.config.GITLAB_SECRETS_SECRET_KEY_BASE | b64enc | quote }}
31 |   {{ else }}
32 |   GITLAB_SECRETS_SECRET_KEY_BASE: {{ randAlphaNum 20 | b64enc | quote }}
33 |   {{ end }}
34 | 
35 |   {{ if .Values.config.GITLAB_SECRETS_OTP_KEY_BASE }}
36 |   GITLAB_SECRETS_OTP_KEY_BASE: {{ .Values.config.GITLAB_SECRETS_OTP_KEY_BASE | b64enc | quote }}
37 |   {{ else }}
38 |   GITLAB_SECRETS_OTP_KEY_BASE: {{ randAlphaNum 20 | b64enc | quote }}
39 |   {{ end }}
40 | 
41 | 
42 | 


--------------------------------------------------------------------------------
/gitlab/templates/service.yaml:
--------------------------------------------------------------------------------
 1 | apiVersion: v1
 2 | kind: Service
 3 | metadata:
 4 |   name: {{ template "fullname" . }}
 5 |   namespace: {{ .Release.Namespace }}
 6 |   labels:
 7 |     app: {{ template "fullname" . }}
 8 |     chart: "{{ .Chart.Name }}-{{ .Chart.Version }}"
 9 |     release: "{{ .Release.Name }}"
10 |     heritage: "{{ .Release.Service }}"
11 | spec:
12 |   type: {{ .Values.serviceType }}
13 |   selector:
14 |     app: {{ template "fullname" . }}
15 |   ports:
16 |   - name: ssh
17 |     port: {{ .Values.sshPort | int }}
18 |     targetPort: ssh
19 |   - name: http
20 |     port: {{ .Values.httpPort | int }}
21 |     targetPort: http
22 |   - name: https
23 |     port: {{ .Values.httpsPort | int }}
24 |     targetPort: https
25 | 


--------------------------------------------------------------------------------
/gitlab/values.yaml:
--------------------------------------------------------------------------------
  1 | ## GitLab image
  2 | ## ref: https://hub.docker.com/r/sameersbn/gitlab/
  3 | ##
  4 | image: sameersbn/gitlab
  5 | 
  6 | ## Gitlab image version
  7 | ## ref: https://hub.docker.com/r/sameersbn/gitlab/tags/
  8 | ##
  9 | imageTag: "11.11.0"
 10 | 
 11 | ## Specify a imagePullPolicy
 12 | ## 'Always' if imageTag is 'latest', else set to 'IfNotPresent'
 13 | ## ref: http://kubernetes.io/docs/user-guide/images/#pre-pulling-images
 14 | ##
 15 | # imagePullPolicy:
 16 | 
 17 | ## For minikube, set this to NodePort, elsewhere use LoadBalancer
 18 | ## ref: http://kubernetes.io/docs/user-guide/services/#publishing-services---service-types
 19 | ##
 20 | serviceType: NodePort
 21 | 
 22 | ## Configure external service ports
 23 | ## ref: http://kubernetes.io/docs/user-guide/services/
 24 | sshPort: 22
 25 | httpPort: 80
 26 | httpsPort: 443
 27 | 
 28 | 
 29 | ingress:
 30 |   enabled: false
 31 | 
 32 |   ## Gitlab Ingress annotations
 33 |   ##
 34 |   # annotations:
 35 |   #  kubernetes.io/ingress.class: nginx
 36 |   #  kubernetes.io/tls-acme: 'true'
 37 | 
 38 |   ## Gitlab Ingress hostnames
 39 |   ## Must be provided if Ingress is enabled
 40 |   ##
 41 |   # hosts:
 42 |   #  - gitlab.example.com
 43 | 
 44 |   ## Gitlab Ingress TLS configuration
 45 |   ## Secrets must be manually created in the namespace
 46 |   ##
 47 |   # tls:
 48 |   #   - secretName: gitlab-server-tls
 49 |   #     hosts:
 50 |   #       - gitlab.example.com
 51 | 
 52 | 
 53 | ## Configure resource requests and limits
 54 | ## ref: http://kubernetes.io/docs/user-guide/compute-resources/
 55 | ##
 56 | resources:
 57 |   ## GitLab requires a good deal of resources. We have split out Postgres and
 58 |   ## redis, which helps some. Refer to the guidelines for larger installs.
 59 |   ## ref: https://docs.gitlab.com/ce/install/requirements.html#hardware-requirements
 60 |   requests:
 61 |     memory: 1Gi
 62 |     cpu: 500m
 63 |   limits:
 64 |     memory: 2Gi
 65 |     cpu: 1
 66 | 
 67 | ## Enable persistence using Persistent Volume Claims
 68 | ## ref: http://kubernetes.io/docs/user-guide/persistent-volumes/
 69 | ## ref: https://docs.gitlab.com/ce/install/requirements.html#storage
 70 | ##
 71 | persistence:
 72 |   ## This volume persists generated configuration files, keys, and certs.
 73 |   ##
 74 |   enabled: true
 75 |   size: 10Gi
 76 |   ## If defined, volume.beta.kubernetes.io/storage-class: <storageClass>
 77 |   ## Default: volume.alpha.kubernetes.io/storage-class: default
 78 |   ##
 79 |   # storageClass: ""
 80 |   accessMode: ReadWriteOnce
 81 | 
 82 | ## Configuration values for the postgresql dependency.
 83 | ## ref: https://github.com/kubernetes/charts/blob/master/stable/postgresql/README.md
 84 | ##
 85 | postgresql:
 86 |   # 9.6 is the newest supported version for the GitLab container
 87 |   imageTag: "9.6"
 88 |   cpu: 1000m
 89 |   memory: 1Gi
 90 | 
 91 |   postgresUser: gitlab
 92 |   postgresPassword: gitlab
 93 |   postgresDatabase: gitlab_production
 94 | 
 95 |   persistence:
 96 |     size: 10Gi
 97 | 
 98 | ## Configuration values for the redis dependency.
 99 | ## ref: https://github.com/kubernetes/charts/blob/master/stable/redis/README.md
100 | ##
101 | redis:
102 |   image: redis:3.2.8
103 | 
104 |   redisPassword: "gitlabRedis"
105 |   resources:
106 |     requests:
107 |       memory: 1Gi
108 | 
109 |   persistence:
110 |     size: 10Gi
111 | 
112 | 
113 | minio:
114 |   # https://hub.docker.com/r/minio/minio/tags/
115 |   imageTag: "RELEASE.2017-03-16T21-50-32Z"
116 |   mode: "standalone"
117 |   # accessKey: "AKIAIOSFODNN7EXAMPLE"
118 |   # secretKey: "wJalrXUtnFEMI/K7MDENG/bPxRfiCYEXAMPLEKEY"
119 | 
120 |   persistence:
121 |     enabled: true
122 |     size: 20Gi
123 | 
124 | 
125 | config:
126 |   DEBUG: "false"
127 |   # GITLAB_ROOT_EMAIL: "admin@example.com"
128 |   # GITLAB_ROOT_PASSWORD: ""
129 |   # GITLAB_HOST: gitlab.example.com
130 |   GITLAB_PORT: 443
131 |   GITLAB_HTTPS: "true"
132 |   GITLAB_SSH_PORT: "22"
133 |   GITLAB_SHARED_RUNNERS_REGISTRATION_TOKEN: "4CAi770WqUUVgYzyGmeS0PbGqcpTKl8XLVZfRZom"
134 | 
135 | 
136 | runner:
137 |   enabled: false
138 |   ## Host value for gitlabUrl should be the same as config.GITLAB_HOST
139 |   gitlabUrl: "https://gitlab.example.com/ci/"
140 |   ## registrationToken should be the same as config GITLAB_SHARED_RUNNERS_REGISTRATION_TOKEN
141 |   ## for the fresh systems
142 |   registrationToken: "4CAi770WqUUVgYzyGmeS0PbGqcpTKl8XLVZfRZom"
143 | 
144 | registry:
145 |   enabled: false
146 | 


--------------------------------------------------------------------------------