unkin-agent
1d5e8edbdd
Deploy goodtune/ghp so estate agents have a GitHub proxy. Mirrors the artifactapi app structure under apps/base/ghp with a CNPG Postgres backend, VSO-synced GitHub App + encryption secrets, an internal Vault-PKI serving cert, a PreSync migration hook, and platform ApplicationSet/project registration.
23 lines
840 B
YAML
23 lines
840 B
YAML
---
|
|
apiVersion: v1
|
|
kind: ConfigMap
|
|
metadata:
|
|
name: ghp-env
|
|
namespace: ghp
|
|
data:
|
|
GHP_DATABASE_DRIVER: postgres
|
|
# nonroot cannot bind <1024; listen high and remap in the Service.
|
|
GHP_SERVER_HTTPS_LISTEN: ":8443"
|
|
GHP_SERVER_HTTP_LISTEN: ":8080"
|
|
GHP_METRICS_LISTEN: ":9136"
|
|
GHP_METRICS_ENABLED: "true"
|
|
GHP_SERVER_BASE_URL: https://ghp.k8s.syd1.au.unkin.net
|
|
GHP_SERVER_MANAGEMENT_HOST: ghp.k8s.syd1.au.unkin.net
|
|
# private_key key from the ghp-github-app Secret, mounted as a file.
|
|
GHP_GITHUB_PRIVATE_KEY_FILE: /etc/ghp/github-app/private_key
|
|
# cert-manager Certificate ghp-tls, mounted from the ghp-tls Secret.
|
|
GHP_TLS_CERT_FILE: /etc/ghp/tls/tls.crt
|
|
GHP_TLS_KEY_FILE: /etc/ghp/tls/tls.key
|
|
# PLACEHOLDER: set to Ben's GitHub username before ghp will admit an admin.
|
|
GHP_ADMINS: "REPLACE_ME_ben_github_username"
|