From cfc9f2db200cf589675c0df7895a4cd70cf872ee Mon Sep 17 00:00:00 2001
From: Automated pipeline <email@nowhere.com>
Date: Mon, 28 Jul 2025 09:04:31 +0000
Subject: [PATCH] Automated upload for edp.buildth.ing

---
 .../stacks/forgejo/forgejo-server/values.yaml | 28 ++++++++++++-------
 .../victoria-k8s-stack/manifests/alerts.yaml  | 18 ++++++++++++
 2 files changed, 36 insertions(+), 10 deletions(-)
 create mode 100644 otc/edp.buildth.ing/stacks/observability/victoria-k8s-stack/manifests/alerts.yaml

diff --git a/otc/edp.buildth.ing/stacks/forgejo/forgejo-server/values.yaml b/otc/edp.buildth.ing/stacks/forgejo/forgejo-server/values.yaml
index 26f3f4f..90c1149 100644
--- a/otc/edp.buildth.ing/stacks/forgejo/forgejo-server/values.yaml
+++ b/otc/edp.buildth.ing/stacks/forgejo/forgejo-server/values.yaml
@@ -39,6 +39,10 @@ extraVolumes:
       secretName: custom-database-certs
 
 gitea:
+  metrics:
+    enabled: true
+    serviceMonitor:
+      enabled: true
   additionalConfigFromEnvs:
     - name: FORGEJO__storage__MINIO_ACCESS_KEY_ID
       valueFrom:
@@ -85,11 +89,22 @@ gitea:
         secretKeyRef:
           name: postgres-forgejo-cloud-credentials
           key: password
+    # Either 'elasticsearch' or 'bleve' (go in memory search engine)
+    - name: FORGEJO__indexer__ISSUE_INDEXER_TYPE
+      valueFrom:
+        secretKeyRef:
+          name: elasticsearch-cloud-credentials
+          key: type
     - name: FORGEJO__indexer__ISSUE_INDEXER_CONN_STR
       valueFrom:
         secretKeyRef:
           name: elasticsearch-cloud-credentials
           key: connection-string
+    - name: FORGEJO__indexer__ISSUE_INDEXER_ENABLED
+      valueFrom:
+        secretKeyRef:
+          name: elasticsearch-cloud-credentials
+          key: enabled
     - name: FORGEJO__mailer__PASSWD
       valueFrom:
         secretKeyRef:
@@ -102,18 +117,11 @@ gitea:
   config:
     APP_NAME: 'EDP'
     APP_SLOGAN: 'Build your thing in minutes'
-    indexer:
-      ISSUE_INDEXER_ENABLED: true
-      ISSUE_INDEXER_TYPE: elasticsearch
-      # TODO next
-      REPO_INDEXER_ENABLED: false
-      # REPO_INDEXER_TYPE: meilisearch # not yet working
-
     storage:
       MINIO_ENDPOINT: obs.eu-de.otc.t-systems.com:443
       STORAGE_TYPE: minio
       MINIO_LOCATION: eu-de
-      MINIO_BUCKET: edp-forgejo-edp
+      MINIO_BUCKET: "edp-forgejo-edp"
       MINIO_USE_SSL: true
 
     queue:
@@ -155,14 +163,14 @@ service:
     nodePort: 32222
     externalTrafficPolicy: Cluster
     annotations:
-      kubernetes.io/elb.id: 4a8b3649-08a8-4da4-8d3d-5aed3781cf94
+      kubernetes.io/elb.id: 4a8b3649-08a8-4da4-8d3d-5aed3781cf94  
 
 image:
   pullPolicy: "IfNotPresent"
   # Overrides the image tag whose default is the chart appVersion.
   #tag: "8.0.3"
   # Adds -rootless suffix to image name
-  #rootless: true
+  # rootless: true
   fullOverride: forgejo.edf-bootstrap.cx.fg1.ffm.osc.live/devfw-cicd/edp-forgejo:v1.1.0-edp-v11.0.3
 
 forgejo:
diff --git a/otc/edp.buildth.ing/stacks/observability/victoria-k8s-stack/manifests/alerts.yaml b/otc/edp.buildth.ing/stacks/observability/victoria-k8s-stack/manifests/alerts.yaml
new file mode 100644
index 0000000..f884bd9
--- /dev/null
+++ b/otc/edp.buildth.ing/stacks/observability/victoria-k8s-stack/manifests/alerts.yaml
@@ -0,0 +1,18 @@
+apiVersion: operator.victoriametrics.com/v1beta1
+kind: VMRule
+metadata:
+  name: forgejo-alerts
+  namespace: observability
+spec:
+  groups:
+    - name: forgejo
+      rules:
+        - alert: forgejo down
+          expr: sum by(cluster_environment) (up{pod=~"forgejo-server-.*"}) < 1
+          for: 30s
+          labels:
+            severity: major
+            job:  "{{ $labels.job }}"
+          annotations:
+            value: "{{ $value }}"
+            description: 'forgejo is down in cluster environment {{ $labels.cluster_environment }}'