1
#registry-PV
2
apiVersion: v1
3
kind: PersistentVolume
4
metadata:
5
  name: harbor-registry
6
  labels:
7
    app: harbor-registry
8
spec:
9
  capacity:
10
    storage: 100Gi
11
  accessModes:
12
    - ReadWriteOnce
13
  persistentVolumeReclaimPolicy: Retain
14
  storageClassName: "hub"
15
  mountOptions:
16
    - hard
17
    - nfsvers=4.1
18
  nfs:
19
    path: /nfs/harbor/registry
20
    server: 192.168.2.11
21
---
22
#harbor-chartmuseum-pv
23
apiVersion: v1
24
kind: PersistentVolume
25
metadata:
26
  name: harbor-chartmuseum
27
  labels:
28
    app: harbor-chartmuseum
29
spec:
30
  capacity:
31
    storage: 5Gi
32
  accessModes:
33
    - ReadWriteOnce
34
  persistentVolumeReclaimPolicy: Retain
35
  storageClassName: "hub"
36
  mountOptions:
37
    - hard
38
    - nfsvers=4.1
39
  nfs:
40
    path: /nfs/harbor/chartmuseum
41
    server: 192.168.2.11
42
---
43
#harbor-jobservice-pv
44
apiVersion: v1
45
kind: PersistentVolume
46
metadata:
47
  name: harbor-jobservice
48
  labels:
49
    app: harbor-jobservice
50
spec:
51
  capacity:
52
    storage: 5Gi
53
  accessModes:
54
    - ReadWriteOnce
55
  persistentVolumeReclaimPolicy: Retain
56
  storageClassName: "hub"
57
  mountOptions:
58
    - hard
59
    - nfsvers=4.1
60
  nfs:
61
    path: /nfs/harbor/jobservice
62
    server: 192.168.2.11
63
---
64
#harbor-database-pv
65
apiVersion: v1
66
kind: PersistentVolume
67
metadata:
68
  name: harbor-database
69
  labels:
70
    app: harbor-database
71
spec:
72
  capacity:
73
    storage: 5Gi
74
  accessModes:
75
    - ReadWriteOnce
76
  persistentVolumeReclaimPolicy: Retain
77
  storageClassName: "hub"
78
  mountOptions:
79
    - hard
80
    - nfsvers=4.1
81
  nfs:
82
    path: /nfs/harbor/database
83
    server: 192.168.2.11
84
---
85
#harbor-redis-pv
86
apiVersion: v1
87
kind: PersistentVolume
88
metadata:
89
  name: harbor-redis
90
  labels:
91
    app: harbor-redis
92
spec:
93
  capacity:
94
    storage: 5Gi
95
  accessModes:
96
    - ReadWriteOnce
97
  persistentVolumeReclaimPolicy: Retain
98
  storageClassName: "hub"
99
  mountOptions:
100
    - hard
101
    - nfsvers=4.1
102
  nfs:
103
    path: /nfs/harbor/redis
104
    server: 192.168.2.11
105
---
106
#harbor-trivy-pv
107
apiVersion: v1
108
kind: PersistentVolume
109
metadata:
110
  name: harbor-trivy
111
  labels:
112
    app: harbor-trivy
113
spec:
114
  capacity:
115
    storage: 5Gi
116
  accessModes:
117
    - ReadWriteOnce
118
  persistentVolumeReclaimPolicy: Retain
119
  storageClassName: "hub"
120
  mountOptions:
121
    - hard
122
    - nfsvers=4.1
123
  nfs:
124
    path: /nfs/harbor/trivy
125
    server: 192.168.2.11

1
#harbor-registry-pvc
2
kind: PersistentVolumeClaim
3
apiVersion: v1
4
metadata:
5
  name: harbor-registry
6
spec:
7
  accessModes:
8
    - ReadWriteOnce
9
  storageClassName: "hub"
10
  resources:
11
    requests:
12
      storage: 100Gi
13
  selector:
14
    matchLabels:
15
      app: harbor-registry
16
---
17
#harbor-chartmuseum-pvc
18
kind: PersistentVolumeClaim
19
apiVersion: v1
20
metadata:
21
  name: harbor-chartmuseum
22
spec:
23
  accessModes:
24
    - ReadWriteOnce
25
  storageClassName: "hub"
26
  resources:
27
    requests:
28
      storage: 5Gi
29
  selector:
30
    matchLabels:
31
      app: harbor-chartmuseum
32
---
33
#harbor-jobservice-pvc
34
kind: PersistentVolumeClaim
35
apiVersion: v1
36
metadata:
37
  name: harbor-jobservice
38
spec:
39
  accessModes:
40
    - ReadWriteOnce
41
  storageClassName: "hub"
42
  resources:
43
    requests:
44
      storage: 5Gi
45
  selector:
46
    matchLabels:
47
      app: harbor-jobservice
48
---
49
#harbor-database-pvc
50
kind: PersistentVolumeClaim
51
apiVersion: v1
52
metadata:
53
  name: harbor-database
54
spec:
55
  accessModes:
56
    - ReadWriteOnce
57
  storageClassName: "hub"
58
  resources:
59
    requests:
60
      storage: 5Gi
61
  selector:
62
    matchLabels:
63
      app: harbor-database
64
---
65
#harbor-redis-pvc
66
kind: PersistentVolumeClaim
67
apiVersion: v1
68
metadata:
69
  name: harbor-redis
70
spec:
71
  accessModes:
72
    - ReadWriteOnce
73
  storageClassName: "hub"
74
  resources:
75
    requests:
76
      storage: 5Gi
77
  selector:
78
    matchLabels:
79
      app: harbor-redis
80
---
81
#harbor-trivy-pvc
82
kind: PersistentVolumeClaim
83
apiVersion: v1
84
metadata:
85
  name: harbor-trivy
86
spec:
87
  accessModes:
88
    - ReadWriteOnce
89
  storageClassName: "hub"
90
  resources:
91
    requests:
92
      storage: 5Gi
93
  selector:
94
    matchLabels:
95
      app: harbor-trivy

1
#Ingress 网关入口配置
2
expose:
3
  type: ingress
4
  tls:
5
    ### 是否启用 https 协议，如果不想启用 HTTPS，则可以设置为 false
6
    enabled: true
7
    ### 指定使用 sectet 挂载证书模式，且使用上面创建的 secret 资源
8
    certSource: secret
9
    secret:
10
      secretName: "hub-mydlq-tls"
11
      notarySecretName: "hub-mydlq-tls"
12
  ingress:
13
    hosts:
14
      ### 配置 Harbor 的访问域名，需要注意的是配置 notary 域名要和 core 处第一个单词外，其余保持一致
15
      core: hub.mydlq.club
16
      notary: notary.mydlq.club
17
    controller: default
18
    annotations:
19
      ingress.kubernetes.io/ssl-redirect: "true"
20
      ingress.kubernetes.io/proxy-body-size: "0"
21
      #### 如果是 traefik ingress，则按下面配置：
22
      kubernetes.io/ingress.class: "traefik"
23
      traefik.ingress.kubernetes.io/router.tls: 'true'
24
      traefik.ingress.kubernetes.io/router.entrypoints: websecure
25
      #### 如果是 nginx ingress，则按下面配置：
26
      #nginx.ingress.kubernetes.io/ssl-redirect: "true"
27
      #nginx.ingress.kubernetes.io/proxy-body-size: "0"
28
  ## 如果不想使用 Ingress 方式，则可以配置下面参数，配置为 NodePort
29
  #clusterIP:
30
  #  name: harbor
31
  #  ports:
32
  #    httpPort: 80
33
  #    httpsPort: 443
34
  #    notaryPort: 4443
35
  #nodePort:
36
  #  name: harbor
37
  #  ports:
38
  #    http:
39
  #      port: 80
40
  #      nodePort: 30011
41
  #    https:
42
  #      port: 443
43
  #      nodePort: 30012
44
  #    notary:
45
  #      port: 4443
46
  #      nodePort: 30013
47

48
## 如果Harbor部署在代理后，将其设置为代理的URL，这个值一般要和上面的 Ingress 配置的地址保存一致
49
externalURL: https://hub.mydlq.club
50

51
### Harbor 各个组件的持久化配置，并设置各个组件 existingClaim 参数为上面创建的对应 PVC 名称
52
persistence:
53
  enabled: true
54
  ### 存储保留策略，当PVC、PV删除后，是否保留存储数据
55
  resourcePolicy: "keep"
56
  persistentVolumeClaim:
57
    registry:
58
      existingClaim: "harbor-registry"
59
      size: 100Gi
60
    chartmuseum:
61
      existingClaim: "harbor-chartmuseum"
62
      size: 5Gi
63
    jobservice:
64
      existingClaim: "harbor-jobservice"
65
      size: 5Gi
66
    database:
67
      existingClaim: "harbor-database"
68
      size: 5Gi
69
    redis:
70
      existingClaim: "harbor-redis"
71
      size: 5Gi
72
    trivy:
73
      existingClaim: "harbor-trivy"
74
      size: 5Gi
75

76
### 默认用户名 admin 的密码配置，注意：密码中一定要包含大小写字母与数字
77
harborAdminPassword: "Mydlq123456"
78

79
### 设置日志级别
80
logLevel: info
81

82
#各个组件 CPU & Memory 资源相关配置
83
nginx:
84
  resources:
85
    requests:
86
      memory: 256Mi
87
      cpu: 500m
88
portal:
89
  resources:
90
    requests:
91
      memory: 256Mi
92
      cpu: 500m
93
core:
94
  resources:
95
    requests:
96
      memory: 256Mi
97
      cpu: 1000m
98
jobservice:
99
  resources:
100
    requests:
101
      memory: 256Mi
102
      cpu: 500m
103
registry:
104
  registry:
105
    resources:
106
      requests:
107
        memory: 256Mi
108
        cpu: 500m
109
  controller:
110
    resources:
111
      requests:
112
        memory: 256Mi
113
        cpu: 500m
114
clair:
115
  clair:
116
    resources:
117
      requests:
118
        memory: 256Mi
119
        cpu: 500m
120
  adapter:
121
    resources:
122
      requests:
123
        memory: 256Mi
124
        cpu: 500m
125
notary:
126
  server:
127
    resources:
128
      requests:
129
        memory: 256Mi
130
        cpu: 500m
131
  signer:
132
    resources:
133
      requests:
134
        memory: 256Mi
135
        cpu: 500m
136
database:
137
  internal:
138
    resources:
139
      requests:
140
        memory: 256Mi
141
        cpu: 500m
142
redis:
143
  internal:
144
    resources:
145
      requests:
146
        memory: 256Mi
147
        cpu: 500m
148
trivy:
149
  enabled: true
150
  resources:
151
    requests:
152
      cpu: 200m
153
      memory: 512Mi
154
    limits:
155
      cpu: 1000m
156
      memory: 1024Mi
157

158
#开启 chartmuseum，使 Harbor 能够存储 Helm 的 chart
159
chartmuseum:
160
  enabled: true
161
  resources:
162
    requests:
163
     memory: 256Mi
164
     cpu: 500m