manifests/bin/deploy.sh

@@ -54,7 +54,7 @@ kcreatesec gitea-secrets \
     --from-literal=secret_key="$(kgseckey gitea-secrets secret_key || openssl rand -hex 32)"  \
     --from-literal=internal_token="$(kgseckey gitea-secrets internal_token || openssl rand -hex 32)"
 
-kcreatecm gitea-config \
+kcreatecm gitea \
     --from-file=app.ini=<(envsubst "$(env | xargs printf '$%s ')" < app.ini)
 
 kapply common/job.yaml \

manifests/common/app.yaml

@@ -68,16 +68,14 @@ spec:
             - name: config
               mountPath: /etc/gitea/app.ini
               subPath: app.ini
-              readOnly: true
             - name: secrets
               mountPath: /etc/gitea/secrets/
-              readOnly: true
       securityContext:
         fsGroup: 1000
       volumes:
         - name: config
           configMap:
-            name: gitea-config
+            name: gitea
         - name: secrets
           secret:
             secretName: gitea-secrets

manifests/common/job.yaml

@@ -21,14 +21,12 @@ spec:
             - name: config
               mountPath: /etc/gitea/app.ini
               subPath: app.ini
-              readOnly: true
             - name: secrets
               mountPath: /etc/gitea/secrets/
-              readOnly: true
       volumes:
         - name: config
           configMap:
-            name: gitea-config
+            name: gitea
         - name: secrets
           secret:
             secretName: gitea-secrets