modified: deploy/app/helm-values.yaml

deploy/app/helm-values.yaml

@@ -15,6 +15,7 @@ image:
   # This ensures the container includes OpenSSH and can expose the SSH port.
   repository: gitea/gitea
   pullPolicy: Always
+  tag: 1
 # dependency: 
 # https://github.com/bitnami/charts/blob/main/bitnami/valkey-cluster/Chart.yaml
 valkey-cluster:
@@ -51,7 +52,7 @@ valkey:
     # this would provide no benefit and would cause Helm upgrades to fail due
     # to RBAC restrictions. 
     create: false 
-    name: ""
+    name: "default"
 
   primary:
     pdb:
@@ -93,6 +94,16 @@ postgresql:
         database: "???"
         username: "???"
 
+  serviceAccount:
+    # serviceAccount resources are owned and managed by the Infrastructure layer.
+    # The CI/CD ServiceAccount used for application deployments does not have
+    # permissions to create or modify serviceAccounts, by design.
+    # In this setup postgresql does not require its own ServiceAccount, so enabling
+    # this would provide no benefit and would cause Helm upgrades to fail due
+    # to RBAC restrictions. 
+    create: false
+
+
   primary:
     networkPolicy:
      # Disable NetworkPolicy creation in the Bitnami PostgreSQL subchart.
@@ -121,14 +132,6 @@ postgresql:
       # infrastructure layer, keeping a clean separation of responsibilities.
       create: false 
 
-    serviceAccount:
-      # serviceAccount resources are owned and managed by the Infrastructure layer.
-      # The CI/CD ServiceAccount used for application deployments does not have
-      # permissions to create or modify serviceAccounts, by design.
-      # In this setup postgresql does not require its own ServiceAccount, so enabling
-      # this would provide no benefit and would cause Helm upgrades to fail due
-      # to RBAC restrictions. 
-      create: false
 
     persistence:
       size: 10Gi
@@ -143,7 +146,6 @@ service:
     type: LoadBalancer
     enabled: true
     port: 2222
-    loadBalancerIP: 
     externalTrafficPolicy: Local
   http:
     clusterIP: ""   # empty string → Kubernetes assigns a routable ClusterIP