devsecops-entra/values-template.yaml at main · jade-codes/devsecops-entra · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
jenkins:
  enabled: false

nexus-repository-manager:
  enabled: true

  image:
    repository: sonatype/nexus3
    tag: "3.68.1"

  nexus:
    hostAliases:
      - ip: "<LDAP-EXTERNAL-IP>"
        hostnames:
          - "<LDAP-HOSTNAME>"
          - "ldaps.<LDAP-HOSTNAME>"

    nodeSelector:
      agentpool: default

    env:
      - name: INSTALL4J_ADD_VM_PARAMS
        value: >-
          -Xms2703M -Xmx2703M -XX:MaxDirectMemorySize=2703M
          -XX:+UnlockExperimentalVMOptions -XX:+UseCGroupMemoryLimitForHeap
          -Djava.util.prefs.userRoot=/nexus-data/javaprefs
      - name: NEXUS_SECURITY_RANDOMPASSWORD
        value: "false"

  persistence:
    enabled: true
    storageClass: "managed-csi"
    storageSize: 5Gi

  ingress:
    enabled: false

gitea:
  enabled: true

  gitea:
    admin:
      username: "admin"
      email: "admin@<host_name>"

    oauth:
      - name: "Entra"
        provider: "azureadv2"
        autoDiscoverUrl: "https://login.microsoftonline.com/<TENANT-ID>/v2.0/.well-known/openid-configuration"
        customTenantId: "<TENANT-ID>"
        useCustomUrls: "true"
        scopes: "openid profile email User.Read"
        existingSecret: gitea-oauth-secret

    config:
      openid:
        ENABLE_OPENID_SIGNUP: "false"
        ENABLE_OPENID_SIGNIN: "false"
      database:
        DB_TYPE: sqlite3
      session:
        PROVIDER: memory
      cache:
        ADAPTER: memory
      queue:
        TYPE: leveldb
      service:
        DISABLE_REGISTRATION: "false"
        ALLOW_ONLY_EXTERNAL_REGISTRATION: "true"
        SHOW_REGISTRATION_BUTTON: "false"
        ENABLE_BASIC_AUTHENTICATION: "false"
        ENABLE_PASSWORD_SIGNIN_FORM: "false"
        ENABLE_PASSKEY_AUTHENTICATION: "false"
      server:
        ROOT_URL: "http://localhost:3000"
        PROTOCOL: "http"
        HTTP_PORT: "3000"
      oauth2_client:
        ENABLE_AUTO_REGISTRATION: "true"
        ACCOUNT_LINKING: "auto"

  nodeSelector:
    agentpool: default

  resources:
    limits:
      cpu: 100m
      memory: 128Mi
    requests:
      cpu: 100m
      memory: 128Mi

  persistence:
    enabled: true
    claimName: default-gitea-data
    storageClass: "managed-csi"
    size: 5Gi
    annotations:
      helm.sh/resource-policy: null

  ingress:
    enabled: false

  redis:
    enabled: false
  redis-cluster:
    enabled: false
  valkey-cluster:
    enabled: false
  valkey:
    enabled: false
  postgresql:
    enabled: false
  postgresql-ha:
    enabled: false