Tamas Kiss
0cff237e31
Some checks reported errors
continuous-integration/drone/push Build was killed
Terraform used the selected providers to generate the following execution plan. Resource actions are indicated with the following symbols:
~ update in-place
Terraform will perform the following actions:
# helm_release.drone_runner will be updated in-place
~ resource "helm_release" "drone_runner" {
id = "runner"
name = "runner"
~ version = "0.1.8" -> "0.6.0"
# (26 unchanged attributes hidden)
set_sensitive {
# At least one attribute in this block is (or was) sensitive,
# so its contents will not be displayed.
}
}
Plan: 0 to add, 1 to change, 0 to destroy.
68 lines
1.8 KiB
HCL
68 lines
1.8 KiB
HCL
|
|
resource "helm_release" "drone_server" {
|
|
name = "drone"
|
|
chart = "drone"
|
|
repository = "https://charts.drone.io"
|
|
version = "0.6.4"
|
|
namespace = kubernetes_namespace.server.metadata.0.name
|
|
create_namespace = false
|
|
|
|
values = [
|
|
jsonencode({
|
|
env = {
|
|
DRONE_SERVER_HOST = local.ingress_domain
|
|
DRONE_SERVER_PROTO = "https"
|
|
DRONE_GITEA_SERVER = "https://${local.gitea_server}/"
|
|
}
|
|
}),
|
|
jsonencode({
|
|
ingress = {
|
|
enabled = true
|
|
annotations = {
|
|
"kubernetes.io/ingress.class" = "traefik"
|
|
"traefik.ingress.kubernetes.io/router.entrypoints" = "websecure"
|
|
"traefik.ingress.kubernetes.io/router.tls" = "true"
|
|
"traefik.ingress.kubernetes.io/router.tls.certresolver" = "acme-thomasklein-me"
|
|
"traefik.ingress.kubernetes.io/router.tls.domains.0.main" = local.ingress_domain
|
|
}
|
|
hosts = [
|
|
{
|
|
host = local.ingress_domain
|
|
paths = [
|
|
{
|
|
path = "/"
|
|
pathType = "Prefix"
|
|
}
|
|
]
|
|
}
|
|
]
|
|
}
|
|
}),
|
|
jsonencode({
|
|
persistentVolume = {
|
|
enabled = true
|
|
existingClaim = module.drone_persistance.pvc_name
|
|
}
|
|
})
|
|
]
|
|
|
|
set_sensitive {
|
|
name = "env.DRONE_RPC_SECRET"
|
|
value = random_password.drone_rpc_secret.result
|
|
}
|
|
|
|
set_sensitive {
|
|
name = "env.DRONE_GITEA_CLIENT_ID"
|
|
value = gitea_oauth2_app.this.client_id
|
|
}
|
|
set_sensitive {
|
|
name = "env.DRONE_GITEA_CLIENT_SECRET"
|
|
value = gitea_oauth2_app.this.client_secret
|
|
}
|
|
}
|
|
|
|
resource "random_password" "drone_rpc_secret" {
|
|
special = true
|
|
length = 32
|
|
}
|