Files
base-infra/roles/k8s-setup/tasks/_concourse.yml
Felix Nehrke 91f81b8726 Add concourse as the foundational CI tool to k8s-cluster
This change allows to add a concourse-server to the kubernetes cluster.
2025-11-28 00:28:25 +01:00

46 lines
1.5 KiB
YAML

- name: Ensure concourse namespace
kubernetes.core.k8s:
state: "{{ concourse_state }}"
definition:
apiVersion: v1
kind: Namespace
metadata:
name: "{{ concourse_namespace }}"
labels:
name: "{{ concourse_namespace }}"
- name: Deploy concourse {{ concourse_chart_version }}
kubernetes.core.helm:
name: concourse
chart_ref: concourse
chart_version: "{{ concourse_chart_version }}"
chart_repo_url: https://concourse-charts.storage.googleapis.com/
release_namespace: "{{ concourse_namespace }}"
release_state: "{{ concourse_state }}"
values:
concourse:
web:
kubernetes:
keepNamespaces: False
externalUrl: "https://{{ concourse_host }}"
enableResourceCausality: True
secrets:
localUsers: "{{ concourse_local_users.items() | map('join', ':') | join(',') }}"
worker:
replicas: "{{ concourse_worker_replicas }}"
web:
env:
- name: CONCOURSE_MAIN_TEAM_LOCAL_USER
value: "{{ concourse_local_users.keys() | join(',') }}"
ingress:
enabled: True
annotations:
cert-manager.io/cluster-issuer: "{{ concourse_certificate_issuer }}"
traefik.ingress.kubernetes.io/router.middlewares: default-redirect-https@kubernetescrd
hosts:
- "{{ concourse_host }}"
tls:
- hosts:
- "{{ concourse_host }}"
secretName: concourse-tls