70 lines
1.6 KiB
YAML
70 lines
1.6 KiB
YAML
|
|
apiVersion: helm.toolkit.fluxcd.io/v2
|
||
|
|
kind: HelmRelease
|
||
|
|
metadata:
|
||
|
|
name: harbor
|
||
|
|
namespace: flux-system
|
||
|
|
spec:
|
||
|
|
interval: 15m
|
||
|
|
targetNamespace: harbor
|
||
|
|
install:
|
||
|
|
createNamespace: false
|
||
|
|
chart:
|
||
|
|
spec:
|
||
|
|
chart: harbor
|
||
|
|
version: 1.17.1
|
||
|
|
sourceRef:
|
||
|
|
kind: HelmRepository
|
||
|
|
name: harbor
|
||
|
|
namespace: flux-system
|
||
|
|
values:
|
||
|
|
expose:
|
||
|
|
type: ingress
|
||
|
|
ingress:
|
||
|
|
className: traefik
|
||
|
|
hosts:
|
||
|
|
core: registry.bstein.dev
|
||
|
|
annotations:
|
||
|
|
cert-manager.io/cluster-issuer: letsencrypt-production
|
||
|
|
tls:
|
||
|
|
enabled: true
|
||
|
|
certSource: secret
|
||
|
|
secret:
|
||
|
|
secretName: harbor-tls
|
||
|
|
externalURL: https://registry.bstein.dev
|
||
|
|
notary:
|
||
|
|
enabled: false
|
||
|
|
harborAdminPassword: "ENCRYPT-ME-WITH-SOPS"
|
||
|
|
database:
|
||
|
|
type: external
|
||
|
|
external:
|
||
|
|
host: postgres-service.postgres.svc.cluster.local
|
||
|
|
port: 5432
|
||
|
|
username: harbor
|
||
|
|
password: "ENCRYPT-ME-WITH-SOPS"
|
||
|
|
sslmode: disable
|
||
|
|
coreDatabase: harbor
|
||
|
|
redis:
|
||
|
|
type: internal
|
||
|
|
persistence:
|
||
|
|
persistentVolumeClaim:
|
||
|
|
registry:
|
||
|
|
storageClass: astreae
|
||
|
|
accessMode: ReadWriteOnce
|
||
|
|
size: 100Gi
|
||
|
|
jobservice:
|
||
|
|
storageClass: astreae
|
||
|
|
accessMode: ReadWriteOnce
|
||
|
|
size: 5Gi
|
||
|
|
redis:
|
||
|
|
storageClass: astreae
|
||
|
|
accessMode: ReadWriteOnce
|
||
|
|
size: 2Gi
|
||
|
|
trivy:
|
||
|
|
storageClass: astreae
|
||
|
|
accessMode: ReadWriteOnce
|
||
|
|
size: 5Gi
|
||
|
|
chartmuseum:
|
||
|
|
enabled: false
|
||
|
|
trivy:
|
||
|
|
enabled: true
|