Files
k8scd/gitea/gitea-deployment.yaml
T
Ruben Hensen 145f4eaac4 gitea: pin to 1.27.3 (CVE-2026-60004, CVE-2026-20896, CVE-2026-27771)
The floating gitea/gitea:1 tag with IfNotPresent pull policy left the
node on a cached 1.26.1 image. Pin the version and let Renovate track it.
2026-09-24 11:40:12 +02:00

61 lines
1.5 KiB
YAML

apiVersion: apps/v1
kind: Deployment
metadata:
name: gitea
labels:
app: gitea
spec:
replicas: 1
strategy:
type: Recreate
selector:
matchLabels:
app: gitea
template:
metadata:
labels:
app: gitea
spec:
securityContext:
fsGroup: 1000
containers:
- name: gitea
image: gitea/gitea:1.27.3
env:
- name: USER_UID
value: "1000"
- name: USER_GID
value: "1000"
- name: TZ
value: Europe/Amsterdam
- name: GITEA__server__ROOT_URL
value: https://git.rubenhensen.nl/
- name: GITEA__server__DOMAIN
value: git.rubenhensen.nl
- name: GITEA__server__PROTOCOL
value: http
- name: GITEA__server__HTTP_PORT
value: "3000"
- name: GITEA__server__DISABLE_SSH
value: "true"
- name: GITEA__database__DB_TYPE
value: sqlite3
- name: GITEA__database__PATH
value: /data/gitea/gitea.db
- name: GITEA__security__INSTALL_LOCK
value: "true"
- name: GITEA__log__MODE
value: console
ports:
- containerPort: 3000
name: http
protocol: TCP
volumeMounts:
- mountPath: /data
name: data
restartPolicy: Always
volumes:
- name: data
persistentVolumeClaim:
claimName: gitea-data