jaggar/iac-cljs-configs
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Swap to our template design

Browse Source
This commit is contained in:
GigiaJ
2025-10-14 04:59:43 -05:00
parent 7a13836b34
commit 37120dd7f6
1 changed files with 33 additions and 45 deletions
Download Patch File Download Diff File Expand all files Collapse all files

70
iac/src/main/k8s/add_ons/image_registry/harbor.cljs
View File

@@ -28,51 +28,39 @@
"csi.storage.k8s.io/controller-publish-secret-name" "wasabi-csi-secrets"
"csi.storage.k8s.io/controller-publish-secret-namespace" "kube-system"}}
:ingress-opts {:service-name "harbor-portal"}
:ingress-opts {:spec {:ingressClassName "caddy"
:rules [{:host 'host
:http {:paths '(make-paths
{:paths ["/" "/c"]
:backend {:name (str app-name "-portal")
:port {:number image-port}}}
{:paths ["/api" "/v2" "/chartrepo" "/service"]
:backend {:name (str app-name "-core")
:port {:number image-port}}})}}]}}
:chart-opts {:fetchOpts {:repo "https://helm.goharbor.io"}
:transformations (fn [args _opts]
:values {:externalURL '(str "https://" host)
:expose {:ingress {:enabled true}
:tls {:enabled true}}
:harborAdminPassword 'admin-password
:secretKey 'secret-key
:database {:enabled true
:internal {:password 'db-password}}
:postgresql {:auth {:postgresPassword 'db-password}}
:persistence {:enabled true
:resourcePolicy "keep"}
:registry {:storage {:type "s3"
:s3 {:region 'region
:bucket 'bucket
:accessKey 's3-access-key
:secretKey 's3-secret-key
:regionendpoint 'region-endpoint}}}}
:transformations [(fn [args _opts]
(let [kind (get-in args [:resource :kind])]
(if (some #{kind} ["StatefulSet" "PersistentVolumeClaim" "Ingress"])
(update-in args [:resource :metadata :annotations]
#(assoc (or % {}) "pulumi.com/skipAwait" "true"))
args)))
:helm-values-fn (make-transformer
(fn [{:keys [app-name secrets]}]
(let [{:keys [host secret-key admin-password db-password region bucket s3-access-key s3-secret-key region-endpoint]} secrets]
[[["externalURL"] (str "https://" host)]
[["expose" "ingress" "enabled"] false]
[["expose" "tls" "enabled"] false]
[["harborAdminPassword"] admin-password]
[["secretKey"] secret-key]
[["database" "enabled"] true]
[["database" "internal" "password"] db-password]
[["persistence" "enabled"] true]
[["persistence" "resourcePolicy"] "keep"]
[["registry" "storage" "type" "s3"]]
[["registry" "storage" "s3" "region" region]]
[["registry" "storage" "s3" "bucket" bucket]]
[["registry" "storage" "s3" "accessKey" s3-access-key]]
[["registry" "storage" "s3" "secretKey" s3-secret-key]]
[["registry" "storage" "s3" "regionendpoint" region-endpoint]]
args)))]
}})
;;[["persistence" "persistentVolumeClaim" "registry" "storageClass"] "harbor"]
;;[["persistence" "persistentVolumeClaim" "database" "storageClass"] "harbor"]
;;[["persistence" "persistentVolumeClaim" "jobservice" "storageClass"] "harbor"]
;;[["persistence" "persistentVolumeClaim" "redis" "storageClass"] "harbor"]
])))}})
(def ingress-options
{:function-keys [:host :service-name :image-port]
:ingress-rules [{:host 'host
:http {:paths [{:path "/"
:pathType "Prefix"
:backend {:service {:name (str 'service-name "-core")
:port {:number 'image-port}}}}]}}
{:host 'host
:http {:paths [{:path "/api"
:pathType "Prefix"
:backend {:service {:name (str 'service-name "-portal")
:port {:number 'image-port}}}}]}}]})