upgrade to 10.1.4

gitea.tf

@@ -10,7 +10,7 @@ resource "helm_release" "this" {
 
   repository = "https://dl.gitea.io/charts/"
   chart      = "gitea"
-  version    = "7.0.4"
+  version    = "10.1.4"
 
   create_namespace = false
 
@@ -23,8 +23,8 @@ resource "helm_release" "this" {
     jsonencode({
       ingress = {
         enabled   = true
+        className = "traefik"
         annotations = {
-          "kubernetes.io/ingress.class"                             = "traefik"
           "traefik.ingress.kubernetes.io/router.entrypoints"        = "websecure"
           "traefik.ingress.kubernetes.io/router.tls"                = "true"
           "traefik.ingress.kubernetes.io/router.tls.domains.0.main" = local.ingress_domain
@@ -50,11 +50,17 @@ resource "helm_release" "this" {
           }
         ]
       }
+      service = {
+        http = {
+          externalTrafficPolicy = "Local"
+        }
+      }
     }),
     jsonencode({
       service = {
         ssh = {
           type                  = "LoadBalancer"
+          externalTrafficPolicy = "Local"
         }
       }
     }),
@@ -117,15 +123,18 @@ resource "helm_release" "this" {
     jsonencode({
       persistence = {
         enabled   = true
-        existingClaim = module.gitea_persistance.pvc_name
+        create    = false
+        claimName = module.gitea_persistance.pvc_name
       }
     }),
     jsonencode({
       postgresql = {
         enabled = true
+        primary = {
           persistence = {
             enabled       = true
             existingClaim = module.postgres_persistance.pvc_name
+            claimName     = module.postgres_persistance.pvc_name
           }
           podSecurityContext = {
             enabled = true
@@ -134,9 +143,47 @@ resource "helm_release" "this" {
             enabled = true
           }
         }
+      }
+    }),
+    # Non-HA config base, see https://gitea.com/gitea/helm-chart/src/tag/v10.1.4#single-pod-configurations 
+    jsonencode({
+      "redis-cluster" = {
+        enabled = false
+      }
+      "postgresql-ha" = {
+        enabled = false
+      }
+      gitea = {
+        config = {
+          database = {
+            DB_TYPE = "postgres"
+          }
+          session = {
+            PROVIDER = "db"
+          }
+          cache = {
+            ADAPTER = "memory"
+          }
+          queue = {
+            TYPE = "level"
+          }
+          indexer = {
+            ISSUE_INDEXER_TYPE   = "bleve"
+            REPO_INDEXER_ENABLED = true
+          }
+        }
+      }
     }),
   ]
 
+  set_sensitive {
+    name  = "postgresql.global.postgresql.auth.password"
+    value = random_password.postgresql_gitea.result
+  }
+  set_sensitive {
+    name  = "postgresql.global.postgresql.auth.postgresPassword"
+    value = random_password.postgresql.result
+  }
   set_sensitive {
     name  = "gitea.oauth[0].key"
     value = aws_cognito_user_pool_client.gitea.id
@@ -152,6 +199,14 @@ resource "helm_release" "this" {
   }
 }
 
+resource "random_password" "postgresql_gitea" {
+  length = 5
+}
+
+resource "random_password" "postgresql" {
+  length = 10
+}
+
 resource "random_password" "gitea_admin" {
   length  = 16
   special = true