2025-12-15 22:05:40 -03:00
|
|
|
# services/harbor/helmrelease.yaml
|
|
|
|
|
apiVersion: helm.toolkit.fluxcd.io/v2beta2
|
|
|
|
|
kind: HelmRelease
|
|
|
|
|
metadata:
|
|
|
|
|
name: harbor
|
|
|
|
|
namespace: harbor
|
|
|
|
|
spec:
|
|
|
|
|
interval: 10m
|
|
|
|
|
chart:
|
|
|
|
|
spec:
|
|
|
|
|
chart: harbor
|
|
|
|
|
version: 1.18.1
|
|
|
|
|
sourceRef:
|
|
|
|
|
kind: HelmRepository
|
|
|
|
|
name: harbor
|
|
|
|
|
namespace: flux-system
|
|
|
|
|
values:
|
|
|
|
|
externalURL: https://registry.bstein.dev
|
|
|
|
|
expose:
|
|
|
|
|
type: ingress
|
|
|
|
|
tls:
|
|
|
|
|
enabled: true
|
|
|
|
|
certSource: secret
|
|
|
|
|
secret:
|
|
|
|
|
secretName: registry-bstein-dev-tls
|
|
|
|
|
ingress:
|
|
|
|
|
className: traefik
|
|
|
|
|
annotations:
|
|
|
|
|
cert-manager.io/cluster-issuer: letsencrypt
|
|
|
|
|
traefik.ingress.kubernetes.io/router.entrypoints: websecure
|
|
|
|
|
traefik.ingress.kubernetes.io/router.tls: "true"
|
|
|
|
|
hosts:
|
|
|
|
|
core: registry.bstein.dev
|
|
|
|
|
persistence:
|
|
|
|
|
enabled: true
|
|
|
|
|
resourcePolicy: keep
|
|
|
|
|
persistentVolumeClaim:
|
|
|
|
|
registry:
|
|
|
|
|
existingClaim: harbor-registry
|
|
|
|
|
accessMode: ReadWriteOnce
|
|
|
|
|
size: 50Gi
|
|
|
|
|
jobservice:
|
|
|
|
|
jobLog:
|
|
|
|
|
existingClaim: harbor-jobservice-logs
|
|
|
|
|
accessMode: ReadWriteOnce
|
|
|
|
|
size: 5Gi
|
|
|
|
|
imageChartStorage:
|
|
|
|
|
type: filesystem
|
|
|
|
|
filesystem:
|
|
|
|
|
rootdirectory: /storage
|
|
|
|
|
database:
|
|
|
|
|
type: external
|
|
|
|
|
external:
|
|
|
|
|
host: postgres-service.postgres.svc.cluster.local
|
|
|
|
|
port: "5432"
|
|
|
|
|
username: harbor
|
|
|
|
|
coreDatabase: harbor
|
|
|
|
|
existingSecret: harbor-db
|
|
|
|
|
sslmode: disable
|
|
|
|
|
redis:
|
|
|
|
|
type: internal
|
|
|
|
|
trivy:
|
|
|
|
|
enabled: false
|
|
|
|
|
metrics:
|
|
|
|
|
enabled: false
|
|
|
|
|
cache:
|
|
|
|
|
enabled: false
|
|
|
|
|
existingSecretAdminPassword: harbor-core
|
2025-12-15 22:08:52 -03:00
|
|
|
existingSecretAdminPasswordKey: harbor_admin_password
|
|
|
|
|
existingSecretSecretKey: harbor-core
|
|
|
|
|
core:
|
|
|
|
|
existingSecret: harbor-core
|
|
|
|
|
existingXsrfSecret: harbor-core
|
|
|
|
|
existingXsrfSecretKey: CSRF_KEY
|
2025-12-15 22:05:40 -03:00
|
|
|
updateStrategy:
|
|
|
|
|
type: Recreate
|
