feat(k3s): 密码切换为密钥 & 相关服务升级

apps/infra/gitops/gitea/helmchart.yaml

@@ -67,17 +67,13 @@ spec:
           HOST: cnpg17-cluster-sh-rw.infra-data:5432
           NAME: gitea
           USER: app
-          PASSWD: HueUoQx05DM0ICBPu1GrmBvBXE6NO3poKE6yPqokPv3dPpWvWRLAr3RXSpaL3AZd
           SSL_MODE: disable
         session:
           PROVIDER: redis
-          PROVIDER_CONFIG: redis://:[email protected]:6379/0
         cache:
           ADAPTER: redis
-          HOST: redis://:[email protected]:6379/0?pool_size=100&idle_timeout=180s
         queue:
           TYPE: redis
-          CONN_STR: redis://:[email protected]:6379/0
         repository:
           DEFAULT_REPO_UNITS: repo.code,repo.releases,repo.issues,repo.pulls
         actions:
@@ -99,6 +95,23 @@ spec:
         ui:
           THEMES: gitea-auto, gitea-light, gitea-dark, github-auto, github-light, github-dark, github-soft-dark
           DEFAULT_THEME: github-auto
+      additionalConfigFromEnvs:
+        - name: GITEA__DATABASE__PASSWD
+          valueFrom:
+            secretKeyRef:
+              name: cnpg17-cluster-sh-app
+              key: password
+        - name: REDIS_PASSWORD
+          valueFrom:
+            secretKeyRef:
+              name: valkey-cluster-sh
+              key: valkey-password
+        - name: GITEA__SESSION__PROVIDER_CONFIG
+          value: "redis://:$(REDIS_PASSWORD)@valkey-cluster-sh-headless.infra-data:6379/0?pool_size=100&idle_timeout=180s"
+        - name: GITEA__CACHE__HOST
+          value: "redis://:$(REDIS_PASSWORD)@valkey-cluster-sh-headless.infra-data:6379/0?pool_size=100&idle_timeout=180s"
+        - name: GITEA__QUEUE__CONN_STR
+          value: "redis://:$(REDIS_PASSWORD)@valkey-cluster-sh-headless.infra-data:6379/0?pool_size=100&idle_timeout=180s"    
     valkey-cluster:
       enabled: false
     extraVolumes: