---
apiVersion: v1
kind: ConfigMap
metadata:
  name: gitlab-config
  namespace: tools
data:
  gitlab.rb: |
    external_url 'https://gitlab-test.uenpay.com'
    prometheus['enable'] = false
    alertmanager['enable'] = false
    node_exporter['enable'] = false
    redis_exporter['enable'] = false
    postgres_exporter['enable'] = false
    prometheus_monitoring['enable'] = false
    #smtp邮箱相关配置可以不要
    gitlab_rails['smtp_enable'] = true
    gitlab_rails['smtp_address'] = "smtp.exmail.qq.com"
    gitlab_rails['smtp_port'] = 465
    gitlab_rails['smtp_user_name'] = "itsystem@uenpay.com"
    gitlab_rails['smtp_password'] = "C%PXW0l7Z3^hS%AZ"
    gitlab_rails['smtp_domain'] = "smtp.exmail.qq.com"
    gitlab_rails['smtp_authentication'] = "login"
    gitlab_rails['smtp_enable_starttls_auto'] = true
    gitlab_rails['smtp_tls'] = true
    gitlab_rails['gitlab_email_from'] = 'itsystem@uenpay.com'
---
apiVersion: apps/v1
kind: StatefulSet
metadata:
  name: gitlab-ce
  namespace: tools
  labels:
    app: gitlab-ce
spec:
  replicas: 1
  selector:
    matchLabels:
      app: gitlab-ce
  template:
    metadata:
      labels:
        app: gitlab-ce
    spec:
      terminationGracePeriodSeconds: 60
      containers:
      - name: gitlab-ce
        image: harbor.uenpay.com/base/gitlab-ce:15.4.6-ce.0
        #image: registry.cn-hangzhou.aliyuncs.com/zhengyu1992/gitlab-ce:15.4.6-ce.0
        imagePullPolicy: IfNotPresent
        ports:
        - containerPort: 80
        env:
        - name: abc
          value: https://gitlab-test.uenpay.com
        resources:
          limits:
            cpu: 4
            memory: 8Gi
          requests:
            cpu: 2
            memory: 4Gi
        volumeMounts:
        - name: config
          mountPath: /etc/gitlab/gitlab.rb
          subPath: gitlab.rb
        - name: data
          mountPath: /var/opt/gitlab
      volumes:
      - name: config
        configMap:
          defaultMode: 420
          items:
          - key: gitlab.rb
            path: gitlab.rb
          name: gitlab-config
  volumeClaimTemplates:
    - metadata:
        name: data
        annotations:
          volume.beta.kubernetes.io/storage-class: "cephfs-sc"
      spec:
        accessModes: [ "ReadWriteMany" ]
        resources:
          requests:
            storage: 300Gi
---
apiVersion: v1
kind: Service
metadata:
  name: gitlab-ce
  namespace: tools
  labels:
    app: gitlab-ce
spec:
  selector:
    app: gitlab-ce
  ports:
  - name: gitlab-ce
    port: 80
    protocol: TCP
---
apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
  annotations:
    nginx.ingress.kubernetes.io/client-max-body-size: 1024m
    nginx.ingress.kubernetes.io/proxy-body-size: 1024m
    nginx.ingress.kubernetes.io/proxy-connect-timeout: '300'
    nginx.ingress.kubernetes.io/proxy-read-timeout: '300'
    nginx.ingress.kubernetes.io/proxy-send-timeout: '300'
    nginx.ingress.kubernetes.io/ssl-redirect: 'true'
  name: gitlab-test.uenpay.com-ingress
  namespace: tools
spec:
  ingressClassName: nginx
  rules:
    - host: gitlab-test.uenpay.com
      http:
        paths:
          - backend:
              service:
                name: gitlab-ce
                port:
                  number: 80
            path: /
            pathType: Prefix
  tls:
    - hosts:
        - gitlab-test.uenpay.com
      secretName: uenpay.com