GHP publish

roles/pypiserver/defaults/main.yaml

@@ -0,0 +1,53 @@
+pypiserver_enabled: true
+pypiserver_publish: false
+pypiserver_default_values:
+  ## If you want more than 1 replica you will have to use a ReadWriteMany volume
+  replicaCount: 1
+  image:
+    repository: pypiserver/pypiserver
+    tag: v1.3.2
+    pullPolicy: IfNotPresent
+    pullSecrets: []
+  pypiserver:
+    # for a list of options see: https://github.com/pypiserver/pypiserver
+    extraArgs: []
+      # - --disable-fallback
+      # - --log-conf=/path/to/file
+  auth:
+    ## comma-separated list of (case-insensitive) actions to authenticate
+    ## Use '.' or '' for empty. Requires to have set the password (option below).
+    ## Available actions are update, download and list
+    actions: update
+    ## Map of username / encoded passwords that will be put to the htpasswd file
+    ## use `htpasswd -n -b username password` to generate them
+    credentials:
+      pypiserver_admin: "{{ pypiserver_admin_htpasswd_hash }}"
+  ingress:
+    enabled: true
+    labels: {}
+    annotations: 
+      kubernetes.io/ingress.class: "{{ external_ingress_class if registry_publish else internal_ingress_class }}"
+      cert-manager.io/cluster-issuer: "letsencrypt-prod"
+      cert-manager.io/acme-dns01-provider: "rfc2136"
+      cert-manager.io/acme-challenge-type: "dns01"
+      nginx.ingress.kubernetes.io/proxy-body-size: "0"
+      nginx.ingress.kubernetes.io/proxy-read-timeout: "600"
+      nginx.ingress.kubernetes.io/proxy-send-timeout: "600"
+    path: "/"
+    hosts: 
+      - pip.{{ domain }}
+    tls: 
+     - secretName: pip.{{ domain }}-tls
+       hosts:
+         - pip.{{ domain }}
+  persistence:
+    enabled: true
+    storageClass: "{{ pypiserver_storage | default('nfs-hdd') }}"
+    size: "{{ pypiserver_size | default('20Gi') }}"
+    accessMode: "{{ pypiserver_storage_mode | default('ReadWriteMany') }}"
+    mountPropagation: None
+  securityContext:
+    enabled: true
+    runAsUser: 0
+    runAsGroup: 0
+    fsGroup: 1000