Primer commit

deployments/core.yaml

@@ -0,0 +1,30 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: harbor-core
+  namespace: harbor
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: harbor-core
+  template:
+    metadata:
+      labels:
+        app: harbor-core
+    spec:
+      containers:
+        - name: core
+          image: goharbor/harbor-core:v2.10.0
+          env:
+            - name: CORE_SECRET
+              value: "notasecret"
+          ports:
+            - containerPort: 8080
+          volumeMounts:
+            - name: core-data
+              mountPath: /data
+      volumes:
+        - name: core-data
+          persistentVolumeClaim:
+            claimName: core-pvc

deployments/database.yaml

@@ -0,0 +1,27 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: harbor-database
+  namespace: harbor
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: harbor-database
+  template:
+    metadata:
+      labels:
+        app: harbor-database
+    spec:
+      containers:
+        - name: database
+          image: goharbor/harbor-db:v2.10.0
+          ports:
+            - containerPort: 5432
+          volumeMounts:
+            - name: db-data
+              mountPath: /var/lib/postgresql/data
+      volumes:
+        - name: db-data
+          persistentVolumeClaim:
+            claimName: database-pvc

deployments/jobservice.yaml

@@ -0,0 +1,28 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: harbor-jobservice
+  namespace: harbor
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: harbor-jobservice
+  template:
+    metadata:
+      labels:
+        app: harbor-jobservice
+    spec:
+      containers:
+        - name: jobservice
+          image: goharbor/harbor-jobservice:v2.10.0
+          ports:
+            - containerPort: 8080
+          volumeMounts:
+            - name: jobservice-data
+              mountPath: /var/jobservice
+      volumes:
+        - name: jobservice-data
+          persistentVolumeClaim:
+            claimName: jobservice-pvc
+

deployments/portal.yaml

@@ -0,0 +1,20 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: harbor-portal
+  namespace: harbor
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: harbor-portal
+  template:
+    metadata:
+      labels:
+        app: harbor-portal
+    spec:
+      containers:
+        - name: portal
+          image: goharbor/harbor-portal:v2.10.0
+          ports:
+            - containerPort: 8080

deployments/registry.yaml

@@ -0,0 +1,27 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: harbor-registry
+  namespace: harbor
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: harbor-registry
+  template:
+    metadata:
+      labels:
+        app: harbor-registry
+    spec:
+      containers:
+        - name: registry
+          image: goharbor/registry-photon:v2.10.0
+          ports:
+            - containerPort: 5000
+          volumeMounts:
+            - name: registry-data
+              mountPath: /storage
+      volumes:
+        - name: registry-data
+          persistentVolumeClaim:
+            claimName: registry-pvc

ingress/ingress.yaml

@@ -0,0 +1,26 @@
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: harbor-ingress
+  namespace: harbor
+  annotations:
+    cert-manager.io/cluster-issuer: "letsencrypt-prod"
+    nginx.ingress.kubernetes.io/ssl-redirect: "true"
+    nginx.ingress.kubernetes.io/backend-protocol: "HTTP"
+spec:
+  ingressClassName: nginx
+  tls:
+    - hosts:
+        - harbor.manabo.org
+      secretName: harbor-tls
+  rules:
+    - host: harbor.manabo.org
+      http:
+        paths:
+          - path: /
+            pathType: Prefix
+            backend:
+              service:
+                name: harbor-portal
+                port:
+                  number: 8080

kustomization.yaml

@@ -0,0 +1,23 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+
+namespace: harbor
+
+resources:
+  - namespace.yaml
+  - deployments/core.yaml
+  - deployments/portal.yaml
+  - deployments/registry.yaml
+  - deployments/jobservice.yaml
+  - deployments/database.yaml
+  - services/core.yaml
+  - services/portal.yaml
+  - services/registry.yaml
+  - services/jobservice.yaml
+  - services/database.yaml
+  - pvc/core-pvc.yaml
+  - pvc/portal-pvc.yaml
+  - pvc/registry-pvc.yaml
+  - pvc/jobservice-pvc.yaml
+  - pvc/database-pvc.yaml
+  - ingress/ingress.yaml

namespace.yaml

@@ -0,0 +1,4 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: harbor

pvc/core-pvc.yaml

@@ -0,0 +1,12 @@
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: core-pvc
+  namespace: harbor
+spec:
+  accessModes:
+    - ReadWriteOnce
+  storageClassName: nfs-manabo
+  resources:
+    requests:
+      storage: 1Gi

pvc/database-pvc.yaml

@@ -0,0 +1,12 @@
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: database-pvc
+  namespace: harbor
+spec:
+  accessModes:
+    - ReadWriteOnce
+  storageClassName: nfs-manabo
+  resources:
+    requests:
+      storage: 1Gi

pvc/jobservice-pvc.yaml

@@ -0,0 +1,12 @@
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: jobservice-pvc
+  namespace: harbor
+spec:
+  accessModes:
+    - ReadWriteOnce
+  storageClassName: nfs-manabo
+  resources:
+    requests:
+      storage: 1Gi

pvc/portal-pvc.yaml

@@ -0,0 +1,12 @@
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: portal-pvc
+  namespace: harbor
+spec:
+  accessModes:
+    - ReadWriteOnce
+  storageClassName: nfs-manabo
+  resources:
+    requests:
+      storage: 500Mi

pvc/registry-pvc.yaml

@@ -0,0 +1,12 @@
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: registry-pvc
+  namespace: harbor
+spec:
+  accessModes:
+    - ReadWriteOnce
+  storageClassName: nfs-manabo
+  resources:
+    requests:
+      storage: 10Gi

services/core.yaml

@@ -0,0 +1,13 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: harbor-core
+  namespace: harbor
+spec:
+  selector:
+    app: harbor-core
+  ports:
+    - protocol: TCP
+      port: 80
+      targetPort: 8080
+  type: ClusterIP

services/database.yaml

@@ -0,0 +1,13 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: harbor-database
+  namespace: harbor
+spec:
+  selector:
+    app: harbor-database
+  ports:
+    - protocol: TCP
+      port: 5432
+      targetPort: 5432
+  type: ClusterIP

services/jobservice.yaml

@@ -0,0 +1,13 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: harbor-jobservice
+  namespace: harbor
+spec:
+  selector:
+    app: harbor-jobservice
+  ports:
+    - protocol: TCP
+      port: 8080
+      targetPort: 8080
+  type: ClusterIP

services/portal.yaml

@@ -0,0 +1,13 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: harbor-portal
+  namespace: harbor
+spec:
+  selector:
+    app: harbor-portal
+  ports:
+    - protocol: TCP
+      port: 8080
+      targetPort: 8080
+  type: ClusterIP

services/registry.yaml

@@ -0,0 +1,13 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: harbor-registry
+  namespace: harbor
+spec:
+  selector:
+    app: harbor-registry
+  ports:
+    - protocol: TCP
+      port: 5000
+      targetPort: 5000
+  type: ClusterIP