A lowly tech priest's attempt to please Mars
feat: add harbor
+165
+64
kubernetes/apps/storage/harbor/helmrelease.yaml
+64
kubernetes/apps/storage/harbor/helmrelease.yaml
···
1
+
# yaml-language-server: $schema=https://github.com/fluxcd-community/flux2-schemas/raw/refs/heads/main/all.json
2
+
apiVersion: helm.toolkit.fluxcd.io/v2
3
+
kind: HelmRelease
4
+
metadata:
5
+
name: harbor
6
+
spec:
7
+
interval: 30m
8
+
chartRef:
9
+
kind: HelmChart
10
+
name: harbor
11
+
12
+
maxHistory: 3
13
+
14
+
install:
15
+
disableWait: true
16
+
remediation:
17
+
retries: 3
18
+
19
+
upgrade:
20
+
disableWait: true
21
+
cleanupOnFail: true
22
+
remediation:
23
+
retries: 3
24
+
25
+
uninstall:
26
+
keepHistory: false
27
+
28
+
values:
29
+
externalURL: "https://harbor.${SECRET_HOST}"
30
+
expose:
31
+
type: route
32
+
tls:
33
+
enabled: false
34
+
route:
35
+
annotations:
36
+
route.proteus/redirect-http: 'true'
37
+
parentRefs:
38
+
- name: ingress-gateway
39
+
namespace: ingress
40
+
sectionName: https
41
+
hosts:
42
+
- "harbor.${SECRET_HOST}"
43
+
44
+
persistence:
45
+
persistentVolumeClaim:
46
+
registry:
47
+
size: 5Gi
48
+
accessMode: ReadWriteMany
49
+
jobservice:
50
+
jobLog:
51
+
size: 1Gi
52
+
accessMode: ReadWriteMany
53
+
database:
54
+
size: 1Gi
55
+
accessMode: ReadWriteOnce
56
+
redis:
57
+
size: 1Gi
58
+
accessMode: ReadWriteOnce
59
+
trivy:
60
+
size: 5Gi
61
+
accessMode: ReadWriteOnce
62
+
63
+
existingSecretAdminPassword: harbor-password
64
+
existingSecretSecretKey: harbor-secret-key
+21
kubernetes/apps/storage/harbor/helmrepo.yaml
+21
kubernetes/apps/storage/harbor/helmrepo.yaml
···
1
+
# yaml-language-server: $schema=https://github.com/fluxcd-community/flux2-schemas/raw/refs/heads/main/all.json
2
+
apiVersion: source.toolkit.fluxcd.io/v1
3
+
kind: HelmRepository
4
+
metadata:
5
+
name: harbor
6
+
spec:
7
+
interval: 2h
8
+
url: https://helm.goharbor.io
9
+
---
10
+
# yaml-language-server: $schema=https://github.com/fluxcd-community/flux2-schemas/raw/refs/heads/main/all.json
11
+
apiVersion: source.toolkit.fluxcd.io/v1
12
+
kind: HelmChart
13
+
metadata:
14
+
name: harbor
15
+
spec:
16
+
sourceRef:
17
+
kind: HelmRepository
18
+
name: harbor
19
+
chart: harbor
20
+
version: v1.18.0
21
+
interval: 2h
+4
kubernetes/apps/storage/harbor/namespace.yaml
+4
kubernetes/apps/storage/harbor/namespace.yaml
+61
kubernetes/apps/storage/harbor/secrets.yaml
+61
kubernetes/apps/storage/harbor/secrets.yaml
···
1
+
apiVersion: v1
2
+
kind: Secret
3
+
metadata:
4
+
name: harbor-password
5
+
stringData:
6
+
HARBOR_ADMIN_PASSWORD: ENC[AES256_GCM,data:J4Aua4fY9cJ8wD6RiGajT3ORym/X6GkipvEnfJqRURQ=,iv:DnkEYHp/tsR5BggcA5JfDgatSJDf0JJhIJ+A9LobMKk=,tag:Cxu2GVcBj1LcxOGjQMP1xg==,type:str]
7
+
sops:
8
+
age:
9
+
- recipient: age13u6nqs8jgp268mya8rht9gyhu86cc53j74f5va65077rsrvkr9gsjeqk88
10
+
enc: |
11
+
-----BEGIN AGE ENCRYPTED FILE-----
12
+
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBuYTVEZHlXZ3JEUU9XVzE3
13
+
YmdwNldxRGxySmk5NGJqVDBXNmQ3aXY0YlJjCmZ4V2MrbkxtbXB0Q1o5UXpweEg0
14
+
bytkNHVtdEIyUjdlaU5qMFlZVW5VaTgKLS0tIDhvdGtQcG81OHZMQ0JOWWM0RW9v
15
+
UEtTanF5RjJIVGVKUU5iUEcvSm1Pa1kKkWXqD3cD2fdgdzlIpZ9OMxuW7oiVphEH
16
+
YFX8+GCDwWROGuHt2arzwlUeVNJYoP3YOMCHl0eYSmRd5U0U+RXF8w==
17
+
-----END AGE ENCRYPTED FILE-----
18
+
- recipient: age16tv9zf54wf4txwjx39wz9phw7zggtxe7k0p2lkhtx59u4he72erq4d9xh9
19
+
enc: |
20
+
-----BEGIN AGE ENCRYPTED FILE-----
21
+
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBFaXNSOFBRak5jU3FCbkdK
22
+
a3lLb3RZNVIyTU1xU2IwcjMzalIwMmRUdEQ0CmVFWTcweG9ObTJOVEVzckZzcnhi
23
+
NVdtcCtETHhmUkJQZEN6YkUwdlZKSUUKLS0tIEFKUnQxZWFpanJTbERTY3V2MXN5
24
+
dXhidDNLanBjVnZWYzVBL0h6QU5BamsKFih9U/2CITMHvdFgXroot4axQCkT5u6q
25
+
M+8+lM6iI18eMZrdNrwBgZ8+DuSv4RaMD8RwcC6fo0gSmYf5gXovow==
26
+
-----END AGE ENCRYPTED FILE-----
27
+
lastmodified: "2025-11-10T21:48:12Z"
28
+
mac: ENC[AES256_GCM,data:fZP8h5nihPms/3M4PvaJfPW5lIVrG47+91n0kZpHFAaTYeU1IXFjz81Xkeesx7UA/4T02EQa7t0HAGW00+qXBBpYsVn3cOdmIGboD+5Bbd19jxbCgCg65WYax7qCVR/xUaZngKxFUchgHTnQAD2Nq9yRh90MYiu+IA1mn9cJwrg=,iv:INVY4GVHFiaEf1fzH9YVOjrjkH8lzfn/bJNBl0b/2Dw=,tag:DKBcCHt0ciHNnR8F/mFJew==,type:str]
29
+
encrypted_regex: ^(data|stringData)$
30
+
version: 3.11.0
31
+
---
32
+
apiVersion: v1
33
+
kind: Secret
34
+
metadata:
35
+
name: harbor-secret-key
36
+
stringData:
37
+
secretKey: ENC[AES256_GCM,data:rYfbzF3tCmbrnRgDvfbK2Q==,iv:9nGkg1ynX6AhMN4utbYlBBZJTCPNkc6OlYFhgLO9GWs=,tag:NSlRd9WutFWg1t3n6XgTSQ==,type:str]
38
+
sops:
39
+
age:
40
+
- recipient: age13u6nqs8jgp268mya8rht9gyhu86cc53j74f5va65077rsrvkr9gsjeqk88
41
+
enc: |
42
+
-----BEGIN AGE ENCRYPTED FILE-----
43
+
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBuYTVEZHlXZ3JEUU9XVzE3
44
+
YmdwNldxRGxySmk5NGJqVDBXNmQ3aXY0YlJjCmZ4V2MrbkxtbXB0Q1o5UXpweEg0
45
+
bytkNHVtdEIyUjdlaU5qMFlZVW5VaTgKLS0tIDhvdGtQcG81OHZMQ0JOWWM0RW9v
46
+
UEtTanF5RjJIVGVKUU5iUEcvSm1Pa1kKkWXqD3cD2fdgdzlIpZ9OMxuW7oiVphEH
47
+
YFX8+GCDwWROGuHt2arzwlUeVNJYoP3YOMCHl0eYSmRd5U0U+RXF8w==
48
+
-----END AGE ENCRYPTED FILE-----
49
+
- recipient: age16tv9zf54wf4txwjx39wz9phw7zggtxe7k0p2lkhtx59u4he72erq4d9xh9
50
+
enc: |
51
+
-----BEGIN AGE ENCRYPTED FILE-----
52
+
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBFaXNSOFBRak5jU3FCbkdK
53
+
a3lLb3RZNVIyTU1xU2IwcjMzalIwMmRUdEQ0CmVFWTcweG9ObTJOVEVzckZzcnhi
54
+
NVdtcCtETHhmUkJQZEN6YkUwdlZKSUUKLS0tIEFKUnQxZWFpanJTbERTY3V2MXN5
55
+
dXhidDNLanBjVnZWYzVBL0h6QU5BamsKFih9U/2CITMHvdFgXroot4axQCkT5u6q
56
+
M+8+lM6iI18eMZrdNrwBgZ8+DuSv4RaMD8RwcC6fo0gSmYf5gXovow==
57
+
-----END AGE ENCRYPTED FILE-----
58
+
lastmodified: "2025-11-10T21:48:12Z"
59
+
mac: ENC[AES256_GCM,data:fZP8h5nihPms/3M4PvaJfPW5lIVrG47+91n0kZpHFAaTYeU1IXFjz81Xkeesx7UA/4T02EQa7t0HAGW00+qXBBpYsVn3cOdmIGboD+5Bbd19jxbCgCg65WYax7qCVR/xUaZngKxFUchgHTnQAD2Nq9yRh90MYiu+IA1mn9cJwrg=,iv:INVY4GVHFiaEf1fzH9YVOjrjkH8lzfn/bJNBl0b/2Dw=,tag:DKBcCHt0ciHNnR8F/mFJew==,type:str]
60
+
encrypted_regex: ^(data|stringData)$
61
+
version: 3.11.0
+15
kubernetes/apps/storage/ks.yaml
+15
kubernetes/apps/storage/ks.yaml
···
60
60
sourceRef:
61
61
kind: GitRepository
62
62
name: flux-system
63
+
---
64
+
# yaml-language-server: $schema=https://github.com/fluxcd-community/flux2-schemas/raw/refs/heads/main/all.json
65
+
apiVersion: kustomize.toolkit.fluxcd.io/v1
66
+
kind: Kustomization
67
+
metadata:
68
+
name: apps-storage-harbor
69
+
namespace: flux-system
70
+
spec:
71
+
interval: 10m
72
+
path: ./kubernetes/apps/storage/harbor
73
+
targetNamespace: harbor
74
+
prune: true
75
+
sourceRef:
76
+
kind: GitRepository
77
+
name: flux-system