panxiao81/homelab-infra
1
0
Fork 0
Code Issues 10 Pull Requests Actions Packages Projects Releases Wiki Activity

分阶段接管 Gitea Helm release #22

Merged
panxiao81 merged 1 commits from feat/flux-gitea-adoption-stage into main 2026-09-10 05:35:26 +00:00
Conversation 0 Commits 1 Files Changed 8
+101 -6
panxiao81 commented 2026-09-10 05:33:11 +00:00
Owner
Copy Link
Copy Source

第一阶段：只登记，不执行 Helm action

  • 固定现有 chart gitea 版本 12.5.3（Gitea 1.25.5）
  • 添加 suspend: true 的 HelmRelease 和同 namespace HelmRepository
  • 从已跟踪的 gitea-values.yaml 生成 watch-enabled ConfigMap
  • 将现有 HTTPRoute 纳入同一 app Kustomization
  • 子 Kustomization 与 root 均保持 prune: false

Secret 边界

  • 继续引用 ESO 管理的 gitea-db
  • 现有手工 gitea-oidc-secret 只引用、不覆盖
  • 剩余 Secret 迁移到 OpenBao/ESO 独立处理，不与首次接管混合

验证

  • live release：revision 14，chart 12.5.3，Gitea 1.25.5
  • 固定 chart + Git values 的完整 render 对 live 业务资源零差异
  • 唯一 diff 是不常驻的 Helm test hook Pod
  • HTTPRoute 对 live diff 为空且 Accepted/ResolvedRefs 均为 True
  • apps/gitea 与 clusters/homelab Kustomize build 通过
  • server-side dry-run、yamllint、git diff --check 通过

合并后只验证 HelmRepository、suspended HelmRelease 和 HTTPRoute ownership；不会触发 Gitea restart。第二 PR 才解除 suspend。

## 第一阶段：只登记，不执行 Helm action - 固定现有 chart `gitea` 版本 `12.5.3`（Gitea `1.25.5`） - 添加 `suspend: true` 的 HelmRelease 和同 namespace HelmRepository - 从已跟踪的 `gitea-values.yaml` 生成 watch-enabled ConfigMap - 将现有 HTTPRoute 纳入同一 app Kustomization - 子 Kustomization 与 root 均保持 `prune: false` ## Secret 边界 - 继续引用 ESO 管理的 `gitea-db` - 现有手工 `gitea-oidc-secret` 只引用、不覆盖 - 剩余 Secret 迁移到 OpenBao/ESO 独立处理，不与首次接管混合 ## 验证 - live release：revision 14，chart `12.5.3`，Gitea `1.25.5` - 固定 chart + Git values 的完整 render 对 live 业务资源零差异 - 唯一 diff 是不常驻的 Helm test hook Pod - HTTPRoute 对 live diff 为空且 Accepted/ResolvedRefs 均为 True - apps/gitea 与 clusters/homelab Kustomize build 通过 - server-side dry-run、yamllint、git diff --check 通过 合并后只验证 HelmRepository、suspended HelmRelease 和 HTTPRoute ownership；不会触发 Gitea restart。第二 PR 才解除 suspend。
panxiao81 added 1 commit 2026-09-10 05:33:12 +00:00
feat(gitops): staged 接管 Gitea Helm release
lint / yaml (push) Successful in 13s
Details
lint / terraform (pull_request) Successful in 32s
Details
lint / terraform (push) Successful in 30s
Details
lint / ansible (pull_request) Successful in 3m39s
Details
lint / ansible (push) Successful in 4m9s
Details
lint / yaml (pull_request) Successful in 13s
Details
37abad9a04
panxiao81 merged commit bcf4f5c0f1 into main 2026-09-10 05:35:26 +00:00
panxiao81 deleted branch feat/flux-gitea-adoption-stage 2026-09-10 05:35:26 +00:00
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
No items
No labels
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Assignees
Clear assignees
panxiao81 (Xiao Pan)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: panxiao81/homelab-infra#22