feat: update gitea to v1.21.10

Makefile

@@ -10,6 +10,9 @@ lint--kubescore:
 lint--tflint:
 	tflint --recursive
 
+lint--scripts:
+	shellcheck scripts/**.sh
+
 lint:
 	make lint--pre-commit
 	make lint--kubeconform

ansible/gitea/roles/gitea/vars/main.yml

@@ -1,5 +1,5 @@
 ---
-gitea_version: 1.21.9
+gitea_version: 1.21.10
 gitea_jwt_secret: "{{ lookup('env', 'GITEA_JWT_SECRET') }}"
 gitea_internal_token: "{{ lookup('env', 'GITEA_INTERNAL_TOKEN') }}"
 gitea_secret_key: "{{ lookup('env', 'GITEA_SECRET_KEY') }}"

k8s/argo-apps/fireflyiii.yaml

@@ -0,0 +1,27 @@
+apiVersion: argoproj.io/v1alpha1
+kind: Application
+metadata:
+  name: firefly
+  namespace: argocd
+spec:
+  destination:
+    name: ''
+    namespace: 'apps-roboces'
+    server: "https://kubernetes.default.svc"
+  project: roboces
+  sources:
+    - chart: firefly-iii-stack
+      repoURL: https://firefly-iii.github.io/kubernetes
+      targetRevision: 0.7.2
+      helm:
+        valuesObject:
+          firefly-db:
+            enabled: false
+          config:
+            existingSecret: firefly
+            env:
+              TZ: Europe/Madrid
+              APP_URL: https://moneis.roboces.dev
+          service:
+            type: LoadBalancer
+            port: 8889

k8s/services/argo/project-roboces.yaml

@@ -8,6 +8,6 @@ spec:
   destinations:
     - namespace: apps-roboces
       server: https://kubernetes.default.svc
-
   sourceRepos:
     - https://git.roboces.dev/catalin/fukuops.git
+    - https://firefly-iii.github.io/kubernetes

scripts/encode-secrets.sh

@@ -0,0 +1,49 @@
+#!/usr/bin/env bash
+
+me=$(basename "$0")
+usage="Usage: $me [FILE]
+
+Given a secrets YAML manifest, convert each secret value to base64
+"
+
+if [ $# -ne 1 ]; then
+    echo "$usage"
+    exit 1
+fi
+
+if ! [ -x "$(command -v yq)" ]; then
+    echo 'Error: yq is not installed.' >&2
+    exit 1
+fi
+
+file=$1
+if [ ! -f "$file" ]; then
+    echo "No such file: $file"
+    exit 1
+fi
+
+# Read the YAML file
+map=$(yq eval '.' "$file")
+
+# Check if 'data' key exists
+if ! yq eval '.data' "$file" > /dev/null 2>&1; then
+    echo "The YAML file does not contain a 'data' key"
+    exit 1
+fi
+
+# Get the 'data' object
+data=$(yq eval '.data' "$file")
+
+# For each key in the 'data' object
+while IFS= read -r key; do
+    # Base64 encode the value
+    value=$(echo -n "$(yq eval ".${key}" <<< "$data")" | base64)
+    # Update the 'data' object with the new value
+    data=$(yq eval ".${key} = \"${value}\"" <<< "$data")
+done <<< "$(yq eval '.data | keys | .[]' <<< "$map")"
+
+# Update the YAML with the new 'data' object
+map=$(yq eval ".data = \"${data}\"" <<< "$map")
+
+# Print the new YAML
+echo "$map"