Simplify Harbor to standard deployment pattern
- ExternalSecret now pulls only HARBOR_ADMIN_PASSWORD from 1Password - Removed database, redis, core, jobservice, registry secret references - Harbor Helm chart auto-generates all internal secrets (standard pattern) - Reduces complexity and aligns with Harbor best practices This change removes dependency on 5 1Password fields that should be deleted: - database-password - redis-password - core-secret - jobservice-secret - registry-password Only harbor-admin-password field needed in 1Password item 'the-seas'
This commit is contained in:
@@ -36,10 +36,7 @@ database:
|
||||
image:
|
||||
repository: docker.io/goharbor/harbor-db
|
||||
tag: "v2.15.1"
|
||||
# Password from ExternalSecret
|
||||
password: ""
|
||||
existingSecret: "harbor-credentials"
|
||||
existingSecretKey: "DATABASE_PASSWORD"
|
||||
# Password auto-generated by Harbor Helm chart
|
||||
resources:
|
||||
requests:
|
||||
memory: 1Gi
|
||||
@@ -60,10 +57,7 @@ redis:
|
||||
image:
|
||||
repository: docker.io/goharbor/redis-photon
|
||||
tag: "v2.15.1"
|
||||
# Password from ExternalSecret
|
||||
jobservicePassword: ""
|
||||
existingSecret: "harbor-credentials"
|
||||
existingSecretKey: "REDIS_PASSWORD"
|
||||
# Password auto-generated by Harbor Helm chart
|
||||
resources:
|
||||
requests:
|
||||
memory: 256Mi
|
||||
@@ -130,9 +124,7 @@ core:
|
||||
repository: docker.io/goharbor/harbor-core
|
||||
tag: "v2.15.1"
|
||||
replicas: 1
|
||||
# Core secret from ExternalSecret
|
||||
secret: ""
|
||||
existingSecret: "harbor-credentials"
|
||||
# Core secret auto-generated by Harbor Helm chart
|
||||
# Enable HTTP/2 for better performance
|
||||
configureUserSettings: |-
|
||||
http2_push_preload on;
|
||||
@@ -152,10 +144,7 @@ jobservice:
|
||||
repository: docker.io/goharbor/harbor-jobservice
|
||||
tag: "v2.15.1"
|
||||
replicas: 1
|
||||
# Job service secret from ExternalSecret
|
||||
secret: ""
|
||||
existingSecret: "harbor-credentials"
|
||||
existingSecretKey: "JOBSERVICE_SECRET"
|
||||
# Job service secret auto-generated by Harbor Helm chart
|
||||
resources:
|
||||
requests:
|
||||
memory: 512Mi
|
||||
@@ -172,11 +161,7 @@ registry:
|
||||
repository: docker.io/goharbor/registry-photon
|
||||
tag: "v2.15.1"
|
||||
replicas: 1
|
||||
# Registry credentials from ExternalSecret
|
||||
credentials:
|
||||
username: "harbor_registry_user"
|
||||
password: ""
|
||||
existingSecret: "harbor-credentials"
|
||||
# Registry credentials auto-generated by Harbor Helm chart
|
||||
resources:
|
||||
requests:
|
||||
memory: 1Gi
|
||||
|
||||
Reference in New Issue
Block a user