Files
terraform-app-drone/drone.tf
Tamas Kiss 9826a8e55b
Some checks failed
continuous-integration/drone/push Build is failing
upgrade drone
2025-11-08 02:06:54 +01:00

79 lines
1.8 KiB
HCL

resource "helm_release" "drone_server" {
name = "drone"
chart = "drone"
repository = "https://charts.drone.io"
version = "0.6.5"
namespace = kubernetes_namespace.server.metadata.0.name
create_namespace = false
set {
name = "image.tag"
value = "2.26.0"
}
values = [
jsonencode({
env = {
DRONE_SERVER_HOST = local.drone_domain
DRONE_SERVER_PROTO = "https"
DRONE_GITEA_SERVER = "https://${local.gitea_server}/"
}
}),
jsonencode({
ingress = {
enabled = true
annotations = {
"kubernetes.io/ingress.class" = "traefik"
"traefik.ingress.kubernetes.io/router.entrypoints" = "websecure"
"cert-manager.io/cluster-issuer" = "acme-thomasklein-me"
}
hosts = [
{
host = local.drone_domain
paths = [
{
path = "/"
pathType = "Prefix"
}
]
}
]
tls = [
{
secretName = "drone-thomasklein.me-tls"
hosts = [
local.drone_domain,
]
}
]
}
}),
jsonencode({
persistentVolume = {
enabled = true
existingClaim = module.drone_persistance.pvc_name
}
})
]
set_sensitive {
name = "env.DRONE_RPC_SECRET"
value = random_password.drone_rpc_secret.result
}
set_sensitive {
name = "env.DRONE_GITEA_CLIENT_ID"
value = gitea_oauth2_app.this.client_id
}
set_sensitive {
name = "env.DRONE_GITEA_CLIENT_SECRET"
value = gitea_oauth2_app.this.client_secret
}
}
resource "random_password" "drone_rpc_secret" {
special = true
length = 32
}