zlopez/ansible
1
0
Fork 0
forked from infra/ansible
Code Pull requests Activity

forgejo: debugging oauth-proxy

Browse source 
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
This commit is contained in:
David Kirwan 2026-06-03 15:10:47 +01:00
commit 743f69c8a8
Signed by untrusted user: dkirwan
GPG key ID: A5893AB6474AC37D
2 changed files with 5 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

6
roles/openshift-apps/forgejo/tasks/main.yaml
View file

@ -68,9 +68,9 @@
- name: Deploy Forgejo via Helm
ansible.builtin.include_tasks: call-helm.yaml
#- name: Point forgejo-http Service at oauth-proxy sidecar (staging)
# ansible.builtin.include_tasks: patch-forgejo-http-service-oauth-proxy.yaml
# when: env == "staging"
- name: Point forgejo-http Service at oauth-proxy sidecar (staging)
ansible.builtin.include_tasks: patch-forgejo-http-service-oauth-proxy.yaml
when: env == "staging"
- name: Load forgejo runners
ansible.builtin.include_tasks: load-forgejo-runners.yaml

2
roles/openshift-apps/forgejo/templates/values.yaml.j2
View file

@ -347,6 +347,8 @@ extraContainers:
containerPort: {{ forgejo_metrics_oauth_proxy_port }}
args:
- --http-address=:{{ forgejo_metrics_oauth_proxy_port }}
# Disable default :443 listener; edge-terminated Route provides TLS.
- --https-address=
- --provider=openshift
- --openshift-service-account=forgejo-http
- --upstream=http://127.0.0.1:3000/