Compare commits
No commits in common. "dba7cf00a4554439ebc69ac2f39d262dc46694a7" and "aa2bb09873a627f1a311f81408a54d262cf8f3f7" have entirely different histories.
dba7cf00a4
...
aa2bb09873
@ -1,18 +0,0 @@
|
|||||||
# clusters/atlas/flux-system/applications/harbor/kustomization.yaml
|
|
||||||
apiVersion: kustomize.toolkit.fluxcd.io/v1
|
|
||||||
kind: Kustomization
|
|
||||||
metadata:
|
|
||||||
name: harbor
|
|
||||||
namespace: flux-system
|
|
||||||
spec:
|
|
||||||
interval: 10m
|
|
||||||
path: ./services/harbor
|
|
||||||
targetNamespace: harbor
|
|
||||||
prune: false
|
|
||||||
sourceRef:
|
|
||||||
kind: GitRepository
|
|
||||||
name: flux-system
|
|
||||||
namespace: flux-system
|
|
||||||
wait: true
|
|
||||||
dependsOn:
|
|
||||||
- name: core
|
|
||||||
@ -10,7 +10,6 @@ resources:
|
|||||||
- monerod/kustomization.yaml
|
- monerod/kustomization.yaml
|
||||||
- pegasus/kustomization.yaml
|
- pegasus/kustomization.yaml
|
||||||
- pegasus/image-automation.yaml
|
- pegasus/image-automation.yaml
|
||||||
- harbor/kustomization.yaml
|
|
||||||
- jellyfin/kustomization.yaml
|
- jellyfin/kustomization.yaml
|
||||||
- xmr-miner/kustomization.yaml
|
- xmr-miner/kustomization.yaml
|
||||||
- sui-metrics/kustomization.yaml
|
- sui-metrics/kustomization.yaml
|
||||||
|
|||||||
@ -1,9 +0,0 @@
|
|||||||
# infrastructure/sources/helm/harbor.yaml
|
|
||||||
apiVersion: source.toolkit.fluxcd.io/v1beta2
|
|
||||||
kind: HelmRepository
|
|
||||||
metadata:
|
|
||||||
name: harbor
|
|
||||||
namespace: flux-system
|
|
||||||
spec:
|
|
||||||
interval: 10m
|
|
||||||
url: https://helm.goharbor.io
|
|
||||||
@ -7,6 +7,5 @@ resources:
|
|||||||
- jetstack.yaml
|
- jetstack.yaml
|
||||||
- jenkins.yaml
|
- jenkins.yaml
|
||||||
- mailu.yaml
|
- mailu.yaml
|
||||||
- harbor.yaml
|
|
||||||
- prometheus.yaml
|
- prometheus.yaml
|
||||||
- victoria-metrics.yaml
|
- victoria-metrics.yaml
|
||||||
|
|||||||
@ -1,12 +0,0 @@
|
|||||||
# services/harbor/certificate.yaml
|
|
||||||
apiVersion: cert-manager.io/v1
|
|
||||||
kind: Certificate
|
|
||||||
metadata:
|
|
||||||
name: registry-bstein-dev
|
|
||||||
namespace: harbor
|
|
||||||
spec:
|
|
||||||
secretName: registry-bstein-dev-tls
|
|
||||||
dnsNames: [ "registry.bstein.dev" ]
|
|
||||||
issuerRef:
|
|
||||||
name: letsencrypt
|
|
||||||
kind: ClusterIssuer
|
|
||||||
@ -1,71 +0,0 @@
|
|||||||
# services/harbor/helmrelease.yaml
|
|
||||||
apiVersion: helm.toolkit.fluxcd.io/v2beta2
|
|
||||||
kind: HelmRelease
|
|
||||||
metadata:
|
|
||||||
name: harbor
|
|
||||||
namespace: harbor
|
|
||||||
spec:
|
|
||||||
interval: 10m
|
|
||||||
chart:
|
|
||||||
spec:
|
|
||||||
chart: harbor
|
|
||||||
version: 1.18.1
|
|
||||||
sourceRef:
|
|
||||||
kind: HelmRepository
|
|
||||||
name: harbor
|
|
||||||
namespace: flux-system
|
|
||||||
values:
|
|
||||||
externalURL: https://registry.bstein.dev
|
|
||||||
expose:
|
|
||||||
type: ingress
|
|
||||||
tls:
|
|
||||||
enabled: true
|
|
||||||
certSource: secret
|
|
||||||
secret:
|
|
||||||
secretName: registry-bstein-dev-tls
|
|
||||||
ingress:
|
|
||||||
className: traefik
|
|
||||||
annotations:
|
|
||||||
cert-manager.io/cluster-issuer: letsencrypt
|
|
||||||
traefik.ingress.kubernetes.io/router.entrypoints: websecure
|
|
||||||
traefik.ingress.kubernetes.io/router.tls: "true"
|
|
||||||
hosts:
|
|
||||||
core: registry.bstein.dev
|
|
||||||
persistence:
|
|
||||||
enabled: true
|
|
||||||
resourcePolicy: keep
|
|
||||||
persistentVolumeClaim:
|
|
||||||
registry:
|
|
||||||
existingClaim: harbor-registry
|
|
||||||
accessMode: ReadWriteOnce
|
|
||||||
size: 50Gi
|
|
||||||
jobservice:
|
|
||||||
jobLog:
|
|
||||||
existingClaim: harbor-jobservice-logs
|
|
||||||
accessMode: ReadWriteOnce
|
|
||||||
size: 5Gi
|
|
||||||
imageChartStorage:
|
|
||||||
type: filesystem
|
|
||||||
filesystem:
|
|
||||||
rootdirectory: /storage
|
|
||||||
database:
|
|
||||||
type: external
|
|
||||||
external:
|
|
||||||
host: postgres-service.postgres.svc.cluster.local
|
|
||||||
port: "5432"
|
|
||||||
username: harbor
|
|
||||||
coreDatabase: harbor
|
|
||||||
existingSecret: harbor-db
|
|
||||||
sslmode: disable
|
|
||||||
redis:
|
|
||||||
type: internal
|
|
||||||
trivy:
|
|
||||||
enabled: false
|
|
||||||
metrics:
|
|
||||||
enabled: false
|
|
||||||
cache:
|
|
||||||
enabled: false
|
|
||||||
existingSecretAdminPassword: harbor-core
|
|
||||||
existingSecretAdminPasswordKey: HARBOR_ADMIN_PASSWORD
|
|
||||||
updateStrategy:
|
|
||||||
type: Recreate
|
|
||||||
@ -1,9 +0,0 @@
|
|||||||
# services/harbor/kustomization.yaml
|
|
||||||
apiVersion: kustomize.config.k8s.io/v1beta1
|
|
||||||
kind: Kustomization
|
|
||||||
namespace: harbor
|
|
||||||
resources:
|
|
||||||
- namespace.yaml
|
|
||||||
- pvc.yaml
|
|
||||||
- certificate.yaml
|
|
||||||
- helmrelease.yaml
|
|
||||||
@ -1,5 +0,0 @@
|
|||||||
# services/harbor/namespace.yaml
|
|
||||||
apiVersion: v1
|
|
||||||
kind: Namespace
|
|
||||||
metadata:
|
|
||||||
name: harbor
|
|
||||||
@ -1,24 +0,0 @@
|
|||||||
# services/harbor/pvc.yaml
|
|
||||||
apiVersion: v1
|
|
||||||
kind: PersistentVolumeClaim
|
|
||||||
metadata:
|
|
||||||
name: harbor-registry
|
|
||||||
namespace: harbor
|
|
||||||
spec:
|
|
||||||
accessModes: [ "ReadWriteOnce" ]
|
|
||||||
resources:
|
|
||||||
requests:
|
|
||||||
storage: 50Gi
|
|
||||||
storageClassName: asteria
|
|
||||||
---
|
|
||||||
apiVersion: v1
|
|
||||||
kind: PersistentVolumeClaim
|
|
||||||
metadata:
|
|
||||||
name: harbor-jobservice-logs
|
|
||||||
namespace: harbor
|
|
||||||
spec:
|
|
||||||
accessModes: [ "ReadWriteOnce" ]
|
|
||||||
resources:
|
|
||||||
requests:
|
|
||||||
storage: 5Gi
|
|
||||||
storageClassName: asteria
|
|
||||||
Loading…
x
Reference in New Issue
Block a user