keyhan
ec72ee4fca
Route k3s registry mirrors through harbor-core ClusterIP with hostname-only auth keys, use HTTP EXT_ENDPOINT so OAuth tokens work on port 80, extend deploy readiness timeout, and harden Kaniko build/dockerfile fallbacks. Co-authored-by: Cursor <cursoragent@cursor.com>
76 lines
1.6 KiB
YAML
76 lines
1.6 KiB
YAML
## Harbor values to REPLACE registry.abrban.com
|
|
## Ingress controller on this cluster is Traefik (k3s).
|
|
##
|
|
## Install:
|
|
## helm upgrade --install harbor harbor/harbor -n cloudhost -f backend/helm/cloudhost-harbor/values-registry.abrban.com.yaml
|
|
##
|
|
externalURL: http://registry.abrban.com
|
|
|
|
proxy:
|
|
# Values are injected by install script from `cloudhost/registry-egress-proxy`.
|
|
httpProxy: ""
|
|
httpsProxy: ""
|
|
noProxy: ""
|
|
|
|
expose:
|
|
type: ingress
|
|
tls:
|
|
enabled: true
|
|
certSource: secret
|
|
secret:
|
|
secretName: abrban-wildcard-tls
|
|
ingress:
|
|
className: traefik
|
|
hosts:
|
|
core: registry.abrban.com
|
|
annotations:
|
|
traefik.ingress.kubernetes.io/router.entrypoints: websecure
|
|
# Increase timeouts for large pushes (skopeo/registry blobs)
|
|
traefik.ingress.kubernetes.io/router.tls: "true"
|
|
|
|
# Disable components we don't need for now to reduce resources
|
|
trivy:
|
|
enabled: false
|
|
notary:
|
|
enabled: false
|
|
chartmuseum:
|
|
enabled: false
|
|
|
|
# Single-node staging: keep resource usage modest
|
|
core:
|
|
replicas: 1
|
|
jobservice:
|
|
replicas: 1
|
|
registry:
|
|
replicas: 1
|
|
|
|
persistence:
|
|
enabled: true
|
|
persistentVolumeClaim:
|
|
# Use existing default storage (local-path) until Ceph is ready.
|
|
# After Ceph, switch to rook-ceph-block for Harbor's PVCs.
|
|
registry:
|
|
storageClass: local-path
|
|
size: 50Gi
|
|
jobservice:
|
|
storageClass: local-path
|
|
size: 5Gi
|
|
database:
|
|
storageClass: local-path
|
|
size: 10Gi
|
|
redis:
|
|
storageClass: local-path
|
|
size: 5Gi
|
|
|
|
database:
|
|
type: internal
|
|
|
|
redis:
|
|
type: internal
|
|
|
|
portal:
|
|
replicas: 1
|
|
|
|
# We will create proxy-cache projects after install (todo: configure-proxy-cache)
|
|
|