95ae6919b0
- Add Harbor v2.15.1 (chart 1.19.1) deployment to wave 7 - Service name: the-seas (EPCOT: The Seas with Nemo & Friends) - Architecture: Embedded PostgreSQL, embedded Redis, single instance - Storage: NFS via nfs-emporium StorageClass (130Gi total) - Expose via Gateway API with dual DNS names - Primary: the-seas.local.mk-labs.cloud - Alternate: harbor.local.mk-labs.cloud - ExternalSecret for 1Password integration (6 secrets) - All image tags pinned to 2.15.1 - Resource requests/limits configured for homelab - Multi-source ArgoCD application pattern - TLS certificates via cert-manager (Let's Encrypt) - Metrics and Trivy scanning enabled Components: - Portal, Core, Registry, JobService (1 replica each) - Embedded PostgreSQL and Redis - NGINX reverse proxy - Trivy vulnerability scanner - Prometheus metrics exporter Refs: /mnt/mk-labs-pka/tony-stark-inbox/harbor-phase1-deployment.md
33 lines
936 B
YAML
33 lines
936 B
YAML
# ------------------------------------------------------------------------------
|
|
# HTTPRoute — Harbor (Alternate) via Cilium Gateway
|
|
# Alternate DNS: harbor.local.mk-labs.cloud
|
|
# ------------------------------------------------------------------------------
|
|
apiVersion: gateway.networking.k8s.io/v1
|
|
kind: HTTPRoute
|
|
metadata:
|
|
name: harbor-alt
|
|
namespace: the-seas
|
|
annotations:
|
|
external-dns.alpha.kubernetes.io/hostname: harbor.local.mk-labs.cloud
|
|
external-dns.alpha.kubernetes.io/target: "10.1.71.90"
|
|
spec:
|
|
parentRefs:
|
|
- group: gateway.networking.k8s.io
|
|
kind: Gateway
|
|
name: fastpass-gateway
|
|
namespace: gateway
|
|
sectionName: https
|
|
hostnames:
|
|
- harbor.local.mk-labs.cloud
|
|
rules:
|
|
- matches:
|
|
- path:
|
|
type: PathPrefix
|
|
value: /
|
|
backendRefs:
|
|
- group: ""
|
|
kind: Service
|
|
name: the-seas
|
|
port: 80
|
|
weight: 1
|