jaggar/iac-cljs-configs
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Correct harbor imlementation at long last

Browse Source
This commit is contained in:
GigiaJ
2025-10-19 01:42:18 -05:00
parent 400f427dad
commit 60bb099761
1 changed files with 48 additions and 40 deletions
Download Patch File Download Diff File Expand all files Collapse all files

88
iac/src/main/k8s/add_ons/image_registry/harbor.cljs
View File

@@ -1,12 +1,56 @@
(ns k8s.add-ons.image-registry.harbor (ns k8s.add-ons.image-registry.harbor)
(:require [utils.k8s :refer [make-transformer]]))
(def config (def config
{:stack [:storage-class :vault-secrets :chart :ingress] {:stack [:storage-class :vault-secrets :chart]
:app-namespace "harbor" :app-namespace "harbor"
:app-name "harbor" :app-name "harbor"
:image-port 80 :image-port 80
:vault-load-yaml false :vault-load-yaml false
:chart-opts {:fetchOpts {:repo "https://helm.goharbor.io"}
:values {:externalURL '(str "https://" host)
:expose {:type "ingress"
:tls {:enabled false}
:ingress {:className "caddy"
:hosts {:core 'host}}}
:harborAdminPassword 'admin-password
:secretKey 'secret-key
:database {:enabled true
:internal {:password 'db-password}}
:postgresql {:auth {:postgresPassword 'db-password}}
:persistence {:enabled true
:resourcePolicy "keep"
:imageChartStorage {:type "s3"
:redirect {:disable true}
:delete {:enabled true}
:disableredirect true
:s3 {:region 'region
:bucket 'bucket
:secure false
:v4auth true
:accesskey 's3-access-key
:secretkey 's3-secret-key
:regionendpoint 'region-endpoint}}}
:core {:secret 'core-secret
:xsrfKey 'core-xrsf-key
:tokenKey 'core-token-key
:tokenCert 'core-token-cert}
:jobservice {:secret 'jobservice-secret}
:registry {:secret 'registry-secret
:s3 {:region 'region
:bucket 'bucket
:secure false
:forcepathstyle true
:accesskey 's3-access-key
:secretkey 's3-secret-key
:regionendpoint 'region-endpoint}
:upload_purging {:enabled true}
:logLevel "debug"}}
:transformations [(fn [args _opts]
(let [kind (get-in args [:resource :kind])]
(if (some #{kind} ["StatefulSet" "PersistentVolumeClaim" "Ingress"])
(update-in args [:resource :metadata :annotations]
#(assoc (or % {}) "pulumi.com/skipAwait" "true"))
args)))]}
:storage-class-opts {:provisioner "ru.yandex.s3.csi" :storage-class-opts {:provisioner "ru.yandex.s3.csi"
:parameters {"mounter" "geesefs" :parameters {"mounter" "geesefs"
"bucket" "pulumi-harbor" "bucket" "pulumi-harbor"
@@ -26,41 +70,5 @@
"csi.storage.k8s.io/node-stage-secret-name" "wasabi-csi-secrets" "csi.storage.k8s.io/node-stage-secret-name" "wasabi-csi-secrets"
"csi.storage.k8s.io/node-stage-secret-namespace" "kube-system" "csi.storage.k8s.io/node-stage-secret-namespace" "kube-system"
"csi.storage.k8s.io/controller-publish-secret-name" "wasabi-csi-secrets" "csi.storage.k8s.io/controller-publish-secret-name" "wasabi-csi-secrets"
"csi.storage.k8s.io/controller-publish-secret-namespace" "kube-system"}} "csi.storage.k8s.io/controller-publish-secret-namespace" "kube-system"}}})
:ingress-opts {:spec {:ingressClassName "caddy"
:rules [{:host 'host
:http {:paths '(make-paths
{:paths ["/" "/c"]
:backend {:name (str app-name "-portal")
:port {:number image-port}}}
{:paths ["/api" "/v2" "/chartrepo" "/service"]
:backend {:name (str app-name "-core")
:port {:number image-port}}})}}]}}
:chart-opts {:fetchOpts {:repo "https://helm.goharbor.io"}
:values {:externalURL '(str "https://" host)
:expose {:ingress {:enabled true}
:tls {:enabled true}}
:harborAdminPassword 'admin-password
:secretKey 'secret-key
:database {:enabled true
:internal {:password 'db-password}}
:postgresql {:auth {:postgresPassword 'db-password}}
:persistence {:enabled true
:resourcePolicy "keep"}
:registry {:storage {:type "s3"
:s3 {:region 'region
:bucket 'bucket
:accessKey 's3-access-key
:secretKey 's3-secret-key
:regionendpoint 'region-endpoint}}}}
:transformations [(fn [args _opts]
(let [kind (get-in args [:resource :kind])]
(if (some #{kind} ["StatefulSet" "PersistentVolumeClaim" "Ingress"])
(update-in args [:resource :metadata :annotations]
#(assoc (or % {}) "pulumi.com/skipAwait" "true"))
args)))]
}})