76 lines
2.0 KiB
YAML
76 lines
2.0 KiB
YAML
apiVersion: argoproj.io/v1alpha1
|
||
kind: Application
|
||
metadata:
|
||
name: harbor
|
||
namespace: argocd
|
||
spec:
|
||
project: harbor
|
||
destination:
|
||
server: https://kubernetes.default.svc
|
||
namespace: harbor
|
||
source:
|
||
repoURL: https://helm.goharbor.io
|
||
chart: harbor
|
||
targetRevision: 1.18.0 # pin a tested chart release
|
||
helm:
|
||
# Option A — keep a small inline overlay here:
|
||
values: |
|
||
expose:
|
||
type: ingress
|
||
ingress:
|
||
hosts:
|
||
core: harbor.noxxos.nl
|
||
externalURL: https://harbor.noxxos.nl
|
||
|
||
# Single-writer PVCs: roll pods with Recreate to avoid multi-writer needs
|
||
updateStrategy:
|
||
type: Recreate
|
||
|
||
# --- all persistence via PVCs (no S3/GCS/etc.) ---
|
||
persistence:
|
||
enabled: true
|
||
imageChartStorage:
|
||
type: filesystem # <- store images/charts on PVC
|
||
persistentVolumeClaim:
|
||
registry:
|
||
storageClass: rbd-slow
|
||
accessMode: ReadWriteOnce
|
||
size: 100Gi
|
||
database:
|
||
storageClass: rbd-slow
|
||
accessMode: ReadWriteOnce
|
||
size: 10Gi
|
||
redis:
|
||
storageClass: rbd-slow
|
||
accessMode: ReadWriteOnce
|
||
size: 2Gi
|
||
jobservice:
|
||
jobLog:
|
||
storageClass: rbd-slow
|
||
accessMode: ReadWriteOnce
|
||
size: 2Gi
|
||
trivy:
|
||
storageClass: rbd-slow
|
||
accessMode: ReadWriteOnce
|
||
size: 10Gi
|
||
|
||
# Keep replicas at 1 for components that write to RWO PVCs
|
||
core:
|
||
replicas: 1
|
||
registry:
|
||
replicas: 1
|
||
portal:
|
||
replicas: 1
|
||
jobservice:
|
||
replicas: 1
|
||
trivy:
|
||
replicas: 1
|
||
|
||
# Make Harbor idempotent under GitOps (don’t rely on randoms):
|
||
harborAdminPassword: harboradmin
|
||
syncPolicy:
|
||
automated:
|
||
prune: true
|
||
selfHeal: true
|
||
syncOptions:
|
||
- CreateNamespace=true |