fix

share/gitea-tekton-org/auto-ci.tf

@@ -90,6 +90,12 @@ resource "kubectl_manifest" "ci-trigger-push" {
                     resources:
                       requests:
                         storage: 1Gi
+              - name: sslcertdir
+                secret:
+                  secretName: gitea
+                  items:
+                  - key: "ca.crt"
+                    path: "ca.crt"
               - name: ssh
                 secret:
                   secretName: ssh-credentials

share/gitea-tekton-org/gitea_hook.tf

@@ -61,12 +61,21 @@ resource "restapi_object" "ci-token" {
   })
 }
 
+data "kubernetes_secret_v1" "gitea-cert" {
+  metadata {
+    name = "gitea-cert"
+    namespace = "${var.domain}-ci"
+  }
+}
+
+
 resource "kubernetes_secret_v1" "ci-user-token-secret" {
   metadata {
     name = "gitea"
     namespace = "${var.namespace}"
   }
   data = {
+    "ca.crt" = lookup(data.kubernetes_secret_v1.gitea-cert.data, "ca.crt", lookup(data.kubernetes_secret_v1.gitea-cert.data, "tls.crt", ""))
     url = "gitea-http.${var.domain}-ci.svc:3000"
     token = jsondecode(resource.restapi_object.ci-token.create_response).sha1
   }

share/gitea-tekton-org/tekton.dev_v1_Pipeline_auto-ci-push.yaml

@@ -6,6 +6,7 @@ spec:
   workspaces:
   - name: source
   - name: ssh
+  - name: sslcertdir
   params:
   - name: artifactory-url
     default: docker.io
@@ -221,3 +222,4 @@ spec:
         value: $(tasks.detect-stages.results.images-name)
     workspaces:
     - name: source
+    - name: sslcertdir