mirror of
https://github.com/helm/charts.git
synced 2026-08-23 06:17:18 +00:00
* value provides the drone shared secret Signed-off-by: nicolas kowenski <zakkg3@gmail.com> * Update Chart.yaml Signed-off-by: nicolas kowenski <zakkg3@gmail.com> * fix template path Signed-off-by: nicolas kowenski <zakkg3@gmail.com> * Add full-name-source-control secret if sourceControl.secret is not definded. Signed-off-by: nicolas kowenski <zakkg3@gmail.com> * use same key defined Signed-off-by: nicolas kowenski <zakkg3@gmail.com> * add secret field and description Signed-off-by: nicolas kowenski <zakkg3@gmail.com> * helm hint valid Signed-off-by: nicolas kowenski <zakkg3@gmail.com> * Update Chart.yaml Signed-off-by: nicolas kowenski <zakkg3@gmail.com> * singedcommit Signed-off-by: nicolas kowenski <zakkg3@gmail.com> * fix chart yaml error Signed-off-by: nicolas kowenski <zakkg3@gmail.com> * fix fw port to pod 80 Signed-off-by: nicolas kowenski <zakkg3@gmail.com> * Update Chart.yaml Signed-off-by: nicolas kowenski <zakkg3@gmail.com> * Update Chart.yaml Signed-off-by: nicolas kowenski <zakkg3@gmail.com> * Update secret documentation, clearer now. Signed-off-by: nicolas kowenski <zakkg3@gmail.com> * rename checksum secret file to secrets.yaml Signed-off-by: nicolas kowenski <zakkg3@gmail.com> * rename secrets file back to original name Signed-off-by: nicolas kowenski <zakkg3@gmail.com> * Merge secret-providers in the single checksumed file Signed-off-by: nicolas kowenski <zakkg3@gmail.com> * Update secret field name Signed-off-by: nicolas kowenski <zakkg3@gmail.com>
330 lines
9.6 KiB
YAML
330 lines
9.6 KiB
YAML
images:
|
|
## The official drone (server) image, change tag to use a different version.
|
|
## ref: https://hub.docker.com/r/drone/drone/tags/
|
|
##
|
|
server:
|
|
repository: "docker.io/drone/drone"
|
|
tag: 1.0.0-rc.5
|
|
pullPolicy: IfNotPresent
|
|
|
|
## The official drone (agent) image, change tag to use a different version.
|
|
## ref: https://hub.docker.com/r/drone/agent/tags/
|
|
##
|
|
agent:
|
|
repository: "docker.io/drone/agent"
|
|
tag: 1.0.0-rc.5
|
|
pullPolicy: IfNotPresent
|
|
|
|
## The official docker (dind) image, change tag to use a different version.
|
|
## ref: https://hub.docker.com/r/library/docker/tags/
|
|
##
|
|
dind:
|
|
repository: "docker.io/library/docker"
|
|
tag: 18.06.1-ce-dind
|
|
pullPolicy: IfNotPresent
|
|
|
|
service:
|
|
httpPort: 80
|
|
|
|
## If service.type is not set to NodePort, the following statement
|
|
## will be ignored.
|
|
##
|
|
# nodePort: 32015
|
|
|
|
## Service type can be set to ClusterIP, NodePort or LoadBalancer.
|
|
##
|
|
type: ClusterIP
|
|
|
|
## Specify a load balancer IP address to use if your provider supports it.
|
|
# loadBalancerIP:
|
|
|
|
## Drone Service annotations
|
|
##
|
|
# annotations:
|
|
# service.beta.kubernetes.io/aws-load-balancer-backend-protocol: http
|
|
# service.beta.kubernetes.io/aws-load-balancer-ssl-cert: arn:aws:acm:xx-xxxx-x:xxxxxxxxxxx:certificate/xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxx
|
|
# external-dns.alpha.kubernetes.io/hostname: drone.domain.tld.
|
|
|
|
## set to true if you want to expose drone's GRPC via the service (for external access)
|
|
exposeGRPC: false
|
|
|
|
ingress:
|
|
## If true, Drone Ingress will be created.
|
|
##
|
|
enabled: false
|
|
|
|
## Drone Ingress annotations
|
|
##
|
|
# annotations:
|
|
# kubernetes.io/ingress.class: nginx
|
|
# kubernetes.io/tls-acme: 'true'
|
|
|
|
## Drone hostnames must be provided if Ingress is enabled
|
|
##
|
|
# hosts:
|
|
# - drone.domain.io
|
|
|
|
## Drone Ingress TLS configuration secrets
|
|
## Must be manually created in the namespace
|
|
##
|
|
# tls:
|
|
# - secretName: drone-tls
|
|
# hosts:
|
|
# - drone.domain.io
|
|
|
|
sourceControl:
|
|
## your source control provider: github,gitlab,gitea,gogs,bitbucketCloud,bitbucketServer
|
|
provider:
|
|
## secret containing your source control provider secrets, keys provided below.
|
|
## if left blank will assume a secret based on the release name of the chart.
|
|
secret:
|
|
## Fill in the correct values for your chosen source control provider
|
|
## Any key in this list with the suffix `Key` will be fetched from the
|
|
## secret named above, if not provided the secret it will be created as
|
|
## `<fullName>-source-control` using for the key "ClientSecretKey" and
|
|
# "clientSecretValue" for the value. Be awere to not leak shis file with your password
|
|
github:
|
|
clientID:
|
|
clientSecretKey: clientSecret
|
|
clientSecretValue:
|
|
server: https://github.com
|
|
gitlab:
|
|
clientID:
|
|
clientSecretKey: clientSecret
|
|
clientSecretValue:
|
|
server:
|
|
gitea:
|
|
server:
|
|
gogs:
|
|
server:
|
|
bitbucketCloud:
|
|
clientID:
|
|
clientSecretKey: clientSecret
|
|
clientSecretValue:
|
|
bitbucketServer:
|
|
server:
|
|
consumerKey: consumerKey
|
|
privateKey: privateKey
|
|
username:
|
|
passwordKey: password
|
|
|
|
server:
|
|
## If not set, it will be autofilled with the cluster host.
|
|
## Host shoud be just the hostname.
|
|
##
|
|
# host: "drone.domain.io"
|
|
|
|
## protocol should be http or https
|
|
protocol: http
|
|
|
|
## Initial admin user
|
|
## Leaving this blank may make it impossible to log into drone.
|
|
## Set to a valid oauth user from your git/oauth server
|
|
## For more complex user creation you can use env variables below instead.
|
|
adminUser:
|
|
|
|
## Configures Drone to authenticate when cloning public repositories. This is only required
|
|
## when your source code management system (e.g. GitHub Enterprise) has private mode enabled.
|
|
alwaysAuth: false
|
|
|
|
## Configures drone to use kubernetes to run pipelines rather than agents, if enabled
|
|
## will not deploy any agents.
|
|
kubernetes:
|
|
## set to true if you want drone to use kubernetes to run pipelines
|
|
enabled: true
|
|
## you can run pipeline jobs in another namespace, if you choose to do this
|
|
## you'll need to create that namespace manually.
|
|
# namespace:
|
|
|
|
## alternative service account to create to create drone pipelines. this account
|
|
## will be given cluster-admin rights.
|
|
## if not set the rights will be given to the default drone service account name.
|
|
# pipelineServiceAccount:
|
|
|
|
## Drone server configuration.
|
|
## Values in here get injected as environment variables.
|
|
## You can set up remote database servers etc using environment
|
|
## variables.
|
|
## ref: https://docs.drone.io/reference/server/
|
|
##
|
|
env:
|
|
DRONE_LOGS_DEBUG: "false"
|
|
DRONE_DATABASE_DRIVER: "sqlite3"
|
|
DRONE_DATABASE_DATASOURCE: "/var/lib/drone/drone.sqlite"
|
|
|
|
## Secret environment variables are configured in `server.envSecrets`.
|
|
## Each item in `server.envSecrets` references a Kubernetes Secret.
|
|
## These Secrets should be created before they are referenced.
|
|
##
|
|
# envSecrets:
|
|
# # The name of a Kubernetes Secret
|
|
# drone-server-secrets:
|
|
# # A list of Secret keys to include as environment variables
|
|
# - DRONE_GITHUB_SECRET
|
|
|
|
## Additional server annotations.
|
|
## ref: https://kubernetes.io/docs/concepts/overview/working-with-objects/annotations/
|
|
##
|
|
annotations: {}
|
|
|
|
## CPU and memory limits for drone server
|
|
##
|
|
resources: {}
|
|
# requests:
|
|
# memory: 32Mi
|
|
# cpu: 40m
|
|
# limits:
|
|
# memory: 2Gi
|
|
# cpu: 1
|
|
|
|
## Use an alternate scheduler, e.g. "stork".
|
|
## ref: https://kubernetes.io/docs/tasks/administer-cluster/configure-multiple-schedulers/
|
|
##
|
|
# schedulerName:
|
|
|
|
## Pod scheduling preferences.
|
|
## ref: https://kubernetes.io/docs/concepts/configuration/assign-pod-node/#affinity-and-anti-affinity
|
|
##
|
|
affinity: {}
|
|
|
|
## Node labels for pod assignment
|
|
## ref: https://kubernetes.io/docs/user-guide/node-selection
|
|
##
|
|
nodeSelector: {}
|
|
|
|
## additional siecar containers, e. g. for a database proxy, such as Google's cloudsql-proxy.
|
|
## ex: https://github.com/kubernetes/charts/tree/master/stable/keycloak
|
|
##
|
|
extraContainers: |
|
|
|
|
## additional volumes, e. g. for secrets used in an extraContainers.
|
|
##
|
|
extraVolumes: |
|
|
|
|
agent:
|
|
## Drone agent configuration.
|
|
## Values in here get injected as environment variables.
|
|
## ref: https://docs.drone.io/reference/agent/
|
|
##
|
|
env:
|
|
DRONE_LOGS_DEBUG: "false"
|
|
|
|
## Number of drone agent replicas
|
|
replicas: 1
|
|
|
|
## Additional agent annotations.
|
|
## ref: https://kubernetes.io/docs/concepts/overview/working-with-objects/annotations/
|
|
##
|
|
annotations: {}
|
|
|
|
## CPU and memory limits for drone agent
|
|
##
|
|
resources: {}
|
|
# requests:
|
|
# memory: 32Mi
|
|
# cpu: 40m
|
|
# limits:
|
|
# memory: 2Gi
|
|
# cpu: 1
|
|
|
|
## Liveness and readiness probe values
|
|
## Ref: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle/#container-probes
|
|
## drone agent does not currently have a health endpoint to check against.
|
|
livenessProbe: {}
|
|
readinessProbe: {}
|
|
|
|
## Use an alternate scheduler, e.g. "stork".
|
|
## ref: https://kubernetes.io/docs/tasks/administer-cluster/configure-multiple-schedulers/
|
|
##
|
|
# schedulerName:
|
|
|
|
## Pod scheduling preferences.
|
|
## ref: https://kubernetes.io/docs/concepts/configuration/assign-pod-node/#affinity-and-anti-affinity
|
|
##
|
|
affinity: {}
|
|
|
|
## Node labels for pod assignment
|
|
## ref: https://kubernetes.io/docs/user-guide/node-selection
|
|
##
|
|
nodeSelector: {}
|
|
|
|
dind:
|
|
## Enable or disable DinD
|
|
## If disabled, the drone agent will spawn docker containers on the host. Pay
|
|
## attention to the fact that we can't enforce resource constraints in that case.
|
|
##
|
|
enabled: true
|
|
|
|
## Values in here get injected as environment variables to DinD.
|
|
## ref: http://readme.drone.io/admin/installation-reference
|
|
##
|
|
# env:
|
|
# DRONE_DEBUG: "false"
|
|
|
|
## Allowing custom command and args to DinD
|
|
## ref: https://discourse.drone.io/t/docker-mtu-problem/1207
|
|
##
|
|
# command: '["/bin/sh"]'
|
|
# args: '["-c", "dockerd --host=unix:///var/run/docker.sock --host=tcp://127.0.0.1:2375 --mtu=1350"]'
|
|
|
|
## Docker storage driver.
|
|
## Your DinD instance should be using the same driver as your host.
|
|
## ref: https://docs.docker.com/engine/userguide/storagedriver/selectadriver/
|
|
##
|
|
driver: overlay2
|
|
|
|
## CPU and memory limits for dind
|
|
##
|
|
resources: {}
|
|
# requests:
|
|
# memory: 32Mi
|
|
# cpu: 40m
|
|
# limits:
|
|
# memory: 2Gi
|
|
# cpu: 1
|
|
|
|
## Enable scraping of the /metrics endpoint for Prometheus
|
|
metrics:
|
|
prometheus:
|
|
enabled: false
|
|
|
|
## Enable persistence using Persistent Volume Claims
|
|
## ref: http://kubernetes.io/docs/user-guide/persistent-volumes/
|
|
##
|
|
persistence:
|
|
enabled: true
|
|
|
|
## A manually managed Persistent Volume and Claim
|
|
## Requires persistence.enabled: true
|
|
## If defined, PVC must be created manually before volume will be bound
|
|
# existingClaim:
|
|
|
|
## rabbitmq data Persistent Volume Storage Class
|
|
## If defined, storageClassName: <storageClass>
|
|
## If set to "-", storageClassName: "", which disables dynamic provisioning
|
|
## If undefined (the default) or set to null, no storageClassName spec is
|
|
## set, choosing the default provisioner. (gp2 on AWS, standard on
|
|
## GKE, AWS & OpenStack)
|
|
##
|
|
# storageClass: "-"
|
|
accessMode: ReadWriteOnce
|
|
size: 1Gi
|
|
|
|
## Uncomment this if you want to set a specific shared secret between
|
|
## the agents and servers, otherwise this will be auto-generated.
|
|
##
|
|
# sharedSecret: supersecret
|
|
|
|
rbac:
|
|
## Specifies whether RBAC resources should be created
|
|
create: true
|
|
## RBAC api version (v1, v1beta1, or v1alpha1)
|
|
apiVersion: v1
|
|
|
|
serviceAccount:
|
|
## Specifies whether a ServiceAccount should be created
|
|
create: true
|
|
## The name of the ServiceAccount to use.
|
|
## If not set and create is true, a name is generated using the fullname template
|
|
name:
|