cambio a helm

deployments/core.yaml

@@ -1,30 +0,0 @@
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: harbor-core
-  namespace: harbor
-spec:
-  replicas: 1
-  selector:
-    matchLabels:
-      app: harbor-core
-  template:
-    metadata:
-      labels:
-        app: harbor-core
-    spec:
-      containers:
-        - name: core
-          image: goharbor/harbor-core:v2.10.0
-          env:
-            - name: CORE_SECRET
-              value: "notasecret"
-          ports:
-            - containerPort: 8080
-          volumeMounts:
-            - name: core-data
-              mountPath: /data
-      volumes:
-        - name: core-data
-          persistentVolumeClaim:
-            claimName: core-pvc

deployments/database.yaml

@@ -1,27 +0,0 @@
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: harbor-database
-  namespace: harbor
-spec:
-  replicas: 1
-  selector:
-    matchLabels:
-      app: harbor-database
-  template:
-    metadata:
-      labels:
-        app: harbor-database
-    spec:
-      containers:
-        - name: database
-          image: goharbor/harbor-db:v2.10.0
-          ports:
-            - containerPort: 5432
-          volumeMounts:
-            - name: db-data
-              mountPath: /var/lib/postgresql/data
-      volumes:
-        - name: db-data
-          persistentVolumeClaim:
-            claimName: database-pvc

deployments/jobservice.yaml

@@ -1,28 +0,0 @@
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: harbor-jobservice
-  namespace: harbor
-spec:
-  replicas: 1
-  selector:
-    matchLabels:
-      app: harbor-jobservice
-  template:
-    metadata:
-      labels:
-        app: harbor-jobservice
-    spec:
-      containers:
-        - name: jobservice
-          image: goharbor/harbor-jobservice:v2.10.0
-          ports:
-            - containerPort: 8080
-          volumeMounts:
-            - name: jobservice-data
-              mountPath: /var/jobservice
-      volumes:
-        - name: jobservice-data
-          persistentVolumeClaim:
-            claimName: jobservice-pvc
-

deployments/portal.yaml

@@ -1,20 +0,0 @@
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: harbor-portal
-  namespace: harbor
-spec:
-  replicas: 1
-  selector:
-    matchLabels:
-      app: harbor-portal
-  template:
-    metadata:
-      labels:
-        app: harbor-portal
-    spec:
-      containers:
-        - name: portal
-          image: goharbor/harbor-portal:v2.10.0
-          ports:
-            - containerPort: 8080

deployments/registry.yaml

@@ -1,27 +0,0 @@
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: harbor-registry
-  namespace: harbor
-spec:
-  replicas: 1
-  selector:
-    matchLabels:
-      app: harbor-registry
-  template:
-    metadata:
-      labels:
-        app: harbor-registry
-    spec:
-      containers:
-        - name: registry
-          image: goharbor/registry-photon:v2.10.0
-          ports:
-            - containerPort: 5000
-          volumeMounts:
-            - name: registry-data
-              mountPath: /storage
-      volumes:
-        - name: registry-data
-          persistentVolumeClaim:
-            claimName: registry-pvc

ingress/ingress.yaml

@@ -1,26 +0,0 @@
-apiVersion: networking.k8s.io/v1
-kind: Ingress
-metadata:
-  name: harbor-ingress
-  namespace: harbor
-  annotations:
-    cert-manager.io/cluster-issuer: "letsencrypt-prod"
-    nginx.ingress.kubernetes.io/ssl-redirect: "true"
-    nginx.ingress.kubernetes.io/backend-protocol: "HTTP"
-spec:
-  ingressClassName: nginx
-  tls:
-    - hosts:
-        - harbor.manabo.org
-      secretName: harbor-tls
-  rules:
-    - host: harbor.manabo.org
-      http:
-        paths:
-          - path: /
-            pathType: Prefix
-            backend:
-              service:
-                name: harbor-portal
-                port:
-                  number: 8080

kustomization.yaml

@@ -1,23 +0,0 @@
-apiVersion: kustomize.config.k8s.io/v1beta1
-kind: Kustomization
-
-namespace: harbor
-
-resources:
-  - namespace.yaml
-  - deployments/core.yaml
-  - deployments/portal.yaml
-  - deployments/registry.yaml
-  - deployments/jobservice.yaml
-  - deployments/database.yaml
-  - services/core.yaml
-  - services/portal.yaml
-  - services/registry.yaml
-  - services/jobservice.yaml
-  - services/database.yaml
-  - pvc/core-pvc.yaml
-  - pvc/portal-pvc.yaml
-  - pvc/registry-pvc.yaml
-  - pvc/jobservice-pvc.yaml
-  - pvc/database-pvc.yaml
-  - ingress/ingress.yaml

namespace.yaml

@@ -1,4 +0,0 @@
-apiVersion: v1
-kind: Namespace
-metadata:
-  name: harbor

pvc/core-pvc.yaml

@@ -1,12 +0,0 @@
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  name: core-pvc
-  namespace: harbor
-spec:
-  accessModes:
-    - ReadWriteOnce
-  storageClassName: nfs-manabo
-  resources:
-    requests:
-      storage: 1Gi

pvc/database-pvc.yaml

@@ -1,12 +0,0 @@
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  name: database-pvc
-  namespace: harbor
-spec:
-  accessModes:
-    - ReadWriteOnce
-  storageClassName: nfs-manabo
-  resources:
-    requests:
-      storage: 1Gi

pvc/jobservice-pvc.yaml

@@ -1,12 +0,0 @@
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  name: jobservice-pvc
-  namespace: harbor
-spec:
-  accessModes:
-    - ReadWriteOnce
-  storageClassName: nfs-manabo
-  resources:
-    requests:
-      storage: 1Gi

pvc/portal-pvc.yaml

@@ -1,12 +0,0 @@
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  name: portal-pvc
-  namespace: harbor
-spec:
-  accessModes:
-    - ReadWriteOnce
-  storageClassName: nfs-manabo
-  resources:
-    requests:
-      storage: 500Mi

pvc/registry-pvc.yaml

@@ -1,12 +0,0 @@
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  name: registry-pvc
-  namespace: harbor
-spec:
-  accessModes:
-    - ReadWriteOnce
-  storageClassName: nfs-manabo
-  resources:
-    requests:
-      storage: 10Gi

services/core.yaml

@@ -1,13 +0,0 @@
-apiVersion: v1
-kind: Service
-metadata:
-  name: harbor-core
-  namespace: harbor
-spec:
-  selector:
-    app: harbor-core
-  ports:
-    - protocol: TCP
-      port: 80
-      targetPort: 8080
-  type: ClusterIP

services/database.yaml

@@ -1,13 +0,0 @@
-apiVersion: v1
-kind: Service
-metadata:
-  name: harbor-database
-  namespace: harbor
-spec:
-  selector:
-    app: harbor-database
-  ports:
-    - protocol: TCP
-      port: 5432
-      targetPort: 5432
-  type: ClusterIP

services/jobservice.yaml

@@ -1,13 +0,0 @@
-apiVersion: v1
-kind: Service
-metadata:
-  name: harbor-jobservice
-  namespace: harbor
-spec:
-  selector:
-    app: harbor-jobservice
-  ports:
-    - protocol: TCP
-      port: 8080
-      targetPort: 8080
-  type: ClusterIP

services/portal.yaml

@@ -1,13 +0,0 @@
-apiVersion: v1
-kind: Service
-metadata:
-  name: harbor-portal
-  namespace: harbor
-spec:
-  selector:
-    app: harbor-portal
-  ports:
-    - protocol: TCP
-      port: 8080
-      targetPort: 8080
-  type: ClusterIP

services/registry.yaml

@@ -1,13 +0,0 @@
-apiVersion: v1
-kind: Service
-metadata:
-  name: harbor-registry
-  namespace: harbor
-spec:
-  selector:
-    app: harbor-registry
-  ports:
-    - protocol: TCP
-      port: 5000
-      targetPort: 5000
-  type: ClusterIP

values.yaml

@@ -0,0 +1,50 @@
+expose:
+  type: ingress
+  tls:
+    enabled: true
+    certSource: auto
+  ingress:
+    ingressClassName: nginx
+    annotations:
+      cert-manager.io/cluster-issuer: "letsencrypt-prod"
+    hosts:
+      core: harbor.manabo.org
+      notary: notary.harbor.manabo.org
+
+externalURL: https://harbor.manabo.org
+
+persistence:
+  enabled: true
+  resourcePolicy: "keep"
+  persistentVolumeClaim:
+    registry:
+      storageClass: "nfs-manabo"
+    chartmuseum:
+      storageClass: "nfs-manabo"
+    jobservice:
+      storageClass: "nfs-manabo"
+    database:
+      storageClass: "nfs-manabo"
+    redis:
+      storageClass: "nfs-manabo"
+    trivy:
+      storageClass: "nfs-manabo"
+
+harborAdminPassword: Harbor12345
+
+portal:
+  replicaCount: 1
+
+core:
+  replicaCount: 1
+
+registry:
+  replicaCount: 1
+
+database:
+  type: internal
+  internal:
+    password: "root123"
+
+redis:
+  type: internal