|
@@ -9,9 +9,11 @@ Harbor is an open source trusted cloud-native registry to store, sign, and scan
|
|
|
## TL;DR
|
|
|
|
|
|
```console
|
|
|
-helm install my-release oci://registry-1.docker.io/bitnamicharts/harbor
|
|
|
+helm install my-release oci://REGISTRY_NAME/REPOSITORY_NAME/harbor
|
|
|
```
|
|
|
|
|
|
+> Note: You need to substitute the placeholders `REGISTRY_NAME` and `REPOSITORY_NAME` with a reference to your Helm chart registry and repository. For example, in the case of Bitnami, you need to use `REGISTRY_NAME=registry-1.docker.io` and `REPOSITORY_NAME=bitnamicharts`.
|
|
|
+
|
|
|
## Introduction
|
|
|
|
|
|
This [Helm](https://github.com/kubernetes/helm) chart installs [Harbor](https://github.com/goharbor/harbor) in a Kubernetes cluster. Welcome to [contribute](https://github.com/bitnami/charts/blob/main/CONTRIBUTING.md) to Helm Chart for Harbor.
|
|
@@ -44,9 +46,11 @@ Looking to use Harbor in production? Try [VMware Application Catalog](https://bi
|
|
|
To install the chart with the release name `my-release`:
|
|
|
|
|
|
```console
|
|
|
-helm install my-release oci://registry-1.docker.io/bitnamicharts/harbor
|
|
|
+helm install my-release oci://REGISTRY_NAME/REPOSITORY_NAME/harbor
|
|
|
```
|
|
|
|
|
|
+> Note: You need to substitute the placeholders `REGISTRY_NAME` and `REPOSITORY_NAME` with a reference to your Helm chart registry and repository. For example, in the case of Bitnami, you need to use `REGISTRY_NAME=registry-1.docker.io` and `REPOSITORY_NAME=bitnamicharts`.
|
|
|
+
|
|
|
## Uninstalling the Chart
|
|
|
|
|
|
To uninstall/delete the `my-release` deployment:
|
|
@@ -246,328 +250,328 @@ Additionally, if `persistence.resourcePolicy` is set to `keep`, you should manua
|
|
|
|
|
|
### Volume Permissions parameters
|
|
|
|
|
|
-| Name | Description | Value |
|
|
|
-| ------------------------------------------------------ | --------------------------------------------------------------------------------------------------------------------------------- | ------------------ |
|
|
|
-| `volumePermissions.enabled` | Enable init container that changes the owner and group of the persistent volume | `false` |
|
|
|
-| `volumePermissions.image.registry` | Init container volume-permissions image registry | `docker.io` |
|
|
|
-| `volumePermissions.image.repository` | Init container volume-permissions image repository | `bitnami/os-shell` |
|
|
|
-| `volumePermissions.image.tag` | Init container volume-permissions image tag (immutable tags are recommended) | `11-debian-11-r90` |
|
|
|
-| `volumePermissions.image.digest` | Init container volume-permissions image digest in the way sha256:aa.... Please note this parameter, if set, will override the tag | `""` |
|
|
|
-| `volumePermissions.image.pullPolicy` | Init container volume-permissions image pull policy | `IfNotPresent` |
|
|
|
-| `volumePermissions.image.pullSecrets` | Init container volume-permissions image pull secrets | `[]` |
|
|
|
-| `volumePermissions.resources.limits` | Init container volume-permissions resource limits | `{}` |
|
|
|
-| `volumePermissions.resources.requests` | Init container volume-permissions resource requests | `{}` |
|
|
|
-| `volumePermissions.containerSecurityContext.enabled` | Enable init container Security Context | `true` |
|
|
|
-| `volumePermissions.containerSecurityContext.runAsUser` | User ID for the init container | `0` |
|
|
|
+| Name | Description | Value |
|
|
|
+| ------------------------------------------------------ | --------------------------------------------------------------------------------------------------------------------------------- | -------------------------- |
|
|
|
+| `volumePermissions.enabled` | Enable init container that changes the owner and group of the persistent volume | `false` |
|
|
|
+| `volumePermissions.image.registry` | Init container volume-permissions image registry | `REGISTRY_NAME` |
|
|
|
+| `volumePermissions.image.repository` | Init container volume-permissions image repository | `REPOSITORY_NAME/os-shell` |
|
|
|
+| `volumePermissions.image.tag` | Init container volume-permissions image tag (immutable tags are recommended) | `11-debian-11-r90` |
|
|
|
+| `volumePermissions.image.digest` | Init container volume-permissions image digest in the way sha256:aa.... Please note this parameter, if set, will override the tag | `""` |
|
|
|
+| `volumePermissions.image.pullPolicy` | Init container volume-permissions image pull policy | `IfNotPresent` |
|
|
|
+| `volumePermissions.image.pullSecrets` | Init container volume-permissions image pull secrets | `[]` |
|
|
|
+| `volumePermissions.resources.limits` | Init container volume-permissions resource limits | `{}` |
|
|
|
+| `volumePermissions.resources.requests` | Init container volume-permissions resource requests | `{}` |
|
|
|
+| `volumePermissions.containerSecurityContext.enabled` | Enable init container Security Context | `true` |
|
|
|
+| `volumePermissions.containerSecurityContext.runAsUser` | User ID for the init container | `0` |
|
|
|
|
|
|
### NGINX Parameters
|
|
|
|
|
|
-| Name | Description | Value |
|
|
|
-| --------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------ | ---------------------- |
|
|
|
-| `nginx.image.registry` | NGINX image registry | `docker.io` |
|
|
|
-| `nginx.image.repository` | NGINX image repository | `bitnami/nginx` |
|
|
|
-| `nginx.image.tag` | NGINX image tag (immutable tags are recommended) | `1.25.2-debian-11-r47` |
|
|
|
-| `nginx.image.digest` | NGINX image digest in the way sha256:aa.... Please note this parameter, if set, will override the tag | `""` |
|
|
|
-| `nginx.image.pullPolicy` | NGINX image pull policy | `IfNotPresent` |
|
|
|
-| `nginx.image.pullSecrets` | NGINX image pull secrets | `[]` |
|
|
|
-| `nginx.image.debug` | Enable NGINX image debug mode | `false` |
|
|
|
-| `nginx.tls.enabled` | Enable TLS termination | `true` |
|
|
|
-| `nginx.tls.existingSecret` | Existing secret name containing your own TLS certificates. | `""` |
|
|
|
-| `nginx.tls.commonName` | The common name used to generate the self-signed TLS certificates | `core.harbor.domain` |
|
|
|
-| `nginx.behindReverseProxy` | If NGINX is behind another reverse proxy, set to true | `false` |
|
|
|
-| `nginx.command` | Override default container command (useful when using custom images) | `[]` |
|
|
|
-| `nginx.args` | Override default container args (useful when using custom images) | `[]` |
|
|
|
-| `nginx.extraEnvVars` | Array with extra environment variables to add NGINX pods | `[]` |
|
|
|
-| `nginx.extraEnvVarsCM` | ConfigMap containing extra environment variables for NGINX pods | `""` |
|
|
|
-| `nginx.extraEnvVarsSecret` | Secret containing extra environment variables (in case of sensitive data) for NGINX pods | `""` |
|
|
|
-| `nginx.containerPorts.http` | NGINX HTTP container port | `8080` |
|
|
|
-| `nginx.containerPorts.https` | NGINX HTTPS container port | `8443` |
|
|
|
-| `nginx.replicaCount` | Number of NGINX replicas | `1` |
|
|
|
-| `nginx.livenessProbe.enabled` | Enable livenessProbe on NGINX containers | `true` |
|
|
|
-| `nginx.livenessProbe.initialDelaySeconds` | Initial delay seconds for livenessProbe | `20` |
|
|
|
-| `nginx.livenessProbe.periodSeconds` | Period seconds for livenessProbe | `10` |
|
|
|
-| `nginx.livenessProbe.timeoutSeconds` | Timeout seconds for livenessProbe | `5` |
|
|
|
-| `nginx.livenessProbe.failureThreshold` | Failure threshold for livenessProbe | `6` |
|
|
|
-| `nginx.livenessProbe.successThreshold` | Success threshold for livenessProbe | `1` |
|
|
|
-| `nginx.readinessProbe.enabled` | Enable readinessProbe on NGINX containers | `true` |
|
|
|
-| `nginx.readinessProbe.initialDelaySeconds` | Initial delay seconds for readinessProbe | `20` |
|
|
|
-| `nginx.readinessProbe.periodSeconds` | Period seconds for readinessProbe | `10` |
|
|
|
-| `nginx.readinessProbe.timeoutSeconds` | Timeout seconds for readinessProbe | `5` |
|
|
|
-| `nginx.readinessProbe.failureThreshold` | Failure threshold for readinessProbe | `6` |
|
|
|
-| `nginx.readinessProbe.successThreshold` | Success threshold for readinessProbe | `1` |
|
|
|
-| `nginx.startupProbe.enabled` | Enable startupProbe on NGINX containers | `false` |
|
|
|
-| `nginx.startupProbe.initialDelaySeconds` | Initial delay seconds for startupProbe | `10` |
|
|
|
-| `nginx.startupProbe.periodSeconds` | Period seconds for startupProbe | `10` |
|
|
|
-| `nginx.startupProbe.timeoutSeconds` | Timeout seconds for startupProbe | `1` |
|
|
|
-| `nginx.startupProbe.failureThreshold` | Failure threshold for startupProbe | `15` |
|
|
|
-| `nginx.startupProbe.successThreshold` | Success threshold for startupProbe | `1` |
|
|
|
-| `nginx.customLivenessProbe` | Custom livenessProbe that overrides the default one | `{}` |
|
|
|
-| `nginx.customReadinessProbe` | Custom readinessProbe that overrides the default one | `{}` |
|
|
|
-| `nginx.customStartupProbe` | Custom startupProbe that overrides the default one | `{}` |
|
|
|
-| `nginx.resources.limits` | The resources limits for the NGINX containers | `{}` |
|
|
|
-| `nginx.resources.requests` | The requested resources for the NGINX containers | `{}` |
|
|
|
-| `nginx.podSecurityContext.enabled` | Enabled NGINX pods' Security Context | `true` |
|
|
|
-| `nginx.podSecurityContext.fsGroup` | Set NGINX pod's Security Context fsGroup | `1001` |
|
|
|
-| `nginx.containerSecurityContext.enabled` | Enabled NGINX containers' Security Context | `true` |
|
|
|
-| `nginx.containerSecurityContext.runAsUser` | Set NGINX containers' Security Context runAsUser | `1001` |
|
|
|
-| `nginx.containerSecurityContext.runAsNonRoot` | Set NGINX containers' Security Context runAsNonRoot | `true` |
|
|
|
-| `nginx.updateStrategy.type` | NGINX deployment strategy type - only really applicable for deployments with RWO PVs attached | `RollingUpdate` |
|
|
|
-| `nginx.lifecycleHooks` | LifecycleHook for the NGINX container(s) to automate configuration before or after startup | `{}` |
|
|
|
-| `nginx.hostAliases` | NGINX pods host aliases | `[]` |
|
|
|
-| `nginx.podLabels` | Add additional labels to the NGINX pods (evaluated as a template) | `{}` |
|
|
|
-| `nginx.podAnnotations` | Annotations to add to the NGINX pods (evaluated as a template) | `{}` |
|
|
|
-| `nginx.podAffinityPreset` | NGINX Pod affinity preset. Ignored if `affinity` is set. Allowed values: `soft` or `hard` | `""` |
|
|
|
-| `nginx.podAntiAffinityPreset` | NGINX Pod anti-affinity preset. Ignored if `affinity` is set. Allowed values: `soft` or `hard` | `soft` |
|
|
|
-| `nginx.nodeAffinityPreset.type` | NGINX Node affinity preset type. Ignored if `affinity` is set. Allowed values: `soft` or `hard` | `""` |
|
|
|
-| `nginx.nodeAffinityPreset.key` | NGINX Node label key to match Ignored if `affinity` is set. | `""` |
|
|
|
-| `nginx.nodeAffinityPreset.values` | NGINX Node label values to match. Ignored if `affinity` is set. | `[]` |
|
|
|
-| `nginx.affinity` | NGINX Affinity for pod assignment | `{}` |
|
|
|
-| `nginx.nodeSelector` | NGINX Node labels for pod assignment | `{}` |
|
|
|
-| `nginx.tolerations` | NGINX Tolerations for pod assignment | `[]` |
|
|
|
-| `nginx.topologySpreadConstraints` | Topology Spread Constraints for pod assignment spread across your cluster among failure-domains. Evaluated as a template | `[]` |
|
|
|
-| `nginx.priorityClassName` | Priority Class Name | `""` |
|
|
|
-| `nginx.schedulerName` | Use an alternate scheduler, e.g. "stork". | `""` |
|
|
|
-| `nginx.sidecars` | Add additional sidecar containers to the NGINX pods | `[]` |
|
|
|
-| `nginx.initContainers` | Add additional init containers to the NGINX pods | `[]` |
|
|
|
-| `nginx.extraVolumeMounts` | Optionally specify extra list of additional volumeMounts for the NGINX pods | `[]` |
|
|
|
-| `nginx.extraVolumes` | Optionally specify extra list of additional volumes for the NGINX pods | `[]` |
|
|
|
+| Name | Description | Value |
|
|
|
+| --------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------ | ----------------------- |
|
|
|
+| `nginx.image.registry` | NGINX image registry | `REGISTRY_NAME` |
|
|
|
+| `nginx.image.repository` | NGINX image repository | `REPOSITORY_NAME/nginx` |
|
|
|
+| `nginx.image.tag` | NGINX image tag (immutable tags are recommended) | `1.25.2-debian-11-r47` |
|
|
|
+| `nginx.image.digest` | NGINX image digest in the way sha256:aa.... Please note this parameter, if set, will override the tag | `""` |
|
|
|
+| `nginx.image.pullPolicy` | NGINX image pull policy | `IfNotPresent` |
|
|
|
+| `nginx.image.pullSecrets` | NGINX image pull secrets | `[]` |
|
|
|
+| `nginx.image.debug` | Enable NGINX image debug mode | `false` |
|
|
|
+| `nginx.tls.enabled` | Enable TLS termination | `true` |
|
|
|
+| `nginx.tls.existingSecret` | Existing secret name containing your own TLS certificates. | `""` |
|
|
|
+| `nginx.tls.commonName` | The common name used to generate the self-signed TLS certificates | `core.harbor.domain` |
|
|
|
+| `nginx.behindReverseProxy` | If NGINX is behind another reverse proxy, set to true | `false` |
|
|
|
+| `nginx.command` | Override default container command (useful when using custom images) | `[]` |
|
|
|
+| `nginx.args` | Override default container args (useful when using custom images) | `[]` |
|
|
|
+| `nginx.extraEnvVars` | Array with extra environment variables to add NGINX pods | `[]` |
|
|
|
+| `nginx.extraEnvVarsCM` | ConfigMap containing extra environment variables for NGINX pods | `""` |
|
|
|
+| `nginx.extraEnvVarsSecret` | Secret containing extra environment variables (in case of sensitive data) for NGINX pods | `""` |
|
|
|
+| `nginx.containerPorts.http` | NGINX HTTP container port | `8080` |
|
|
|
+| `nginx.containerPorts.https` | NGINX HTTPS container port | `8443` |
|
|
|
+| `nginx.replicaCount` | Number of NGINX replicas | `1` |
|
|
|
+| `nginx.livenessProbe.enabled` | Enable livenessProbe on NGINX containers | `true` |
|
|
|
+| `nginx.livenessProbe.initialDelaySeconds` | Initial delay seconds for livenessProbe | `20` |
|
|
|
+| `nginx.livenessProbe.periodSeconds` | Period seconds for livenessProbe | `10` |
|
|
|
+| `nginx.livenessProbe.timeoutSeconds` | Timeout seconds for livenessProbe | `5` |
|
|
|
+| `nginx.livenessProbe.failureThreshold` | Failure threshold for livenessProbe | `6` |
|
|
|
+| `nginx.livenessProbe.successThreshold` | Success threshold for livenessProbe | `1` |
|
|
|
+| `nginx.readinessProbe.enabled` | Enable readinessProbe on NGINX containers | `true` |
|
|
|
+| `nginx.readinessProbe.initialDelaySeconds` | Initial delay seconds for readinessProbe | `20` |
|
|
|
+| `nginx.readinessProbe.periodSeconds` | Period seconds for readinessProbe | `10` |
|
|
|
+| `nginx.readinessProbe.timeoutSeconds` | Timeout seconds for readinessProbe | `5` |
|
|
|
+| `nginx.readinessProbe.failureThreshold` | Failure threshold for readinessProbe | `6` |
|
|
|
+| `nginx.readinessProbe.successThreshold` | Success threshold for readinessProbe | `1` |
|
|
|
+| `nginx.startupProbe.enabled` | Enable startupProbe on NGINX containers | `false` |
|
|
|
+| `nginx.startupProbe.initialDelaySeconds` | Initial delay seconds for startupProbe | `10` |
|
|
|
+| `nginx.startupProbe.periodSeconds` | Period seconds for startupProbe | `10` |
|
|
|
+| `nginx.startupProbe.timeoutSeconds` | Timeout seconds for startupProbe | `1` |
|
|
|
+| `nginx.startupProbe.failureThreshold` | Failure threshold for startupProbe | `15` |
|
|
|
+| `nginx.startupProbe.successThreshold` | Success threshold for startupProbe | `1` |
|
|
|
+| `nginx.customLivenessProbe` | Custom livenessProbe that overrides the default one | `{}` |
|
|
|
+| `nginx.customReadinessProbe` | Custom readinessProbe that overrides the default one | `{}` |
|
|
|
+| `nginx.customStartupProbe` | Custom startupProbe that overrides the default one | `{}` |
|
|
|
+| `nginx.resources.limits` | The resources limits for the NGINX containers | `{}` |
|
|
|
+| `nginx.resources.requests` | The requested resources for the NGINX containers | `{}` |
|
|
|
+| `nginx.podSecurityContext.enabled` | Enabled NGINX pods' Security Context | `true` |
|
|
|
+| `nginx.podSecurityContext.fsGroup` | Set NGINX pod's Security Context fsGroup | `1001` |
|
|
|
+| `nginx.containerSecurityContext.enabled` | Enabled NGINX containers' Security Context | `true` |
|
|
|
+| `nginx.containerSecurityContext.runAsUser` | Set NGINX containers' Security Context runAsUser | `1001` |
|
|
|
+| `nginx.containerSecurityContext.runAsNonRoot` | Set NGINX containers' Security Context runAsNonRoot | `true` |
|
|
|
+| `nginx.updateStrategy.type` | NGINX deployment strategy type - only really applicable for deployments with RWO PVs attached | `RollingUpdate` |
|
|
|
+| `nginx.lifecycleHooks` | LifecycleHook for the NGINX container(s) to automate configuration before or after startup | `{}` |
|
|
|
+| `nginx.hostAliases` | NGINX pods host aliases | `[]` |
|
|
|
+| `nginx.podLabels` | Add additional labels to the NGINX pods (evaluated as a template) | `{}` |
|
|
|
+| `nginx.podAnnotations` | Annotations to add to the NGINX pods (evaluated as a template) | `{}` |
|
|
|
+| `nginx.podAffinityPreset` | NGINX Pod affinity preset. Ignored if `affinity` is set. Allowed values: `soft` or `hard` | `""` |
|
|
|
+| `nginx.podAntiAffinityPreset` | NGINX Pod anti-affinity preset. Ignored if `affinity` is set. Allowed values: `soft` or `hard` | `soft` |
|
|
|
+| `nginx.nodeAffinityPreset.type` | NGINX Node affinity preset type. Ignored if `affinity` is set. Allowed values: `soft` or `hard` | `""` |
|
|
|
+| `nginx.nodeAffinityPreset.key` | NGINX Node label key to match Ignored if `affinity` is set. | `""` |
|
|
|
+| `nginx.nodeAffinityPreset.values` | NGINX Node label values to match. Ignored if `affinity` is set. | `[]` |
|
|
|
+| `nginx.affinity` | NGINX Affinity for pod assignment | `{}` |
|
|
|
+| `nginx.nodeSelector` | NGINX Node labels for pod assignment | `{}` |
|
|
|
+| `nginx.tolerations` | NGINX Tolerations for pod assignment | `[]` |
|
|
|
+| `nginx.topologySpreadConstraints` | Topology Spread Constraints for pod assignment spread across your cluster among failure-domains. Evaluated as a template | `[]` |
|
|
|
+| `nginx.priorityClassName` | Priority Class Name | `""` |
|
|
|
+| `nginx.schedulerName` | Use an alternate scheduler, e.g. "stork". | `""` |
|
|
|
+| `nginx.sidecars` | Add additional sidecar containers to the NGINX pods | `[]` |
|
|
|
+| `nginx.initContainers` | Add additional init containers to the NGINX pods | `[]` |
|
|
|
+| `nginx.extraVolumeMounts` | Optionally specify extra list of additional volumeMounts for the NGINX pods | `[]` |
|
|
|
+| `nginx.extraVolumes` | Optionally specify extra list of additional volumes for the NGINX pods | `[]` |
|
|
|
|
|
|
### Harbor Portal Parameters
|
|
|
|
|
|
-| Name | Description | Value |
|
|
|
-| ---------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------ | ----------------------- |
|
|
|
-| `portal.image.registry` | Harbor Portal image registry | `docker.io` |
|
|
|
-| `portal.image.repository` | Harbor Portal image repository | `bitnami/harbor-portal` |
|
|
|
-| `portal.image.tag` | Harbor Portal image tag (immutable tags are recommended) | `2.9.0-debian-11-r37` |
|
|
|
-| `portal.image.digest` | Harbor Portal image digest in the way sha256:aa.... Please note this parameter, if set, will override the tag | `""` |
|
|
|
-| `portal.image.pullPolicy` | Harbor Portal image pull policy | `IfNotPresent` |
|
|
|
-| `portal.image.pullSecrets` | Harbor Portal image pull secrets | `[]` |
|
|
|
-| `portal.image.debug` | Enable Harbor Portal image debug mode | `false` |
|
|
|
-| `portal.tls.existingSecret` | Name of an existing secret with the certificates for internal TLS access | `""` |
|
|
|
-| `portal.command` | Override default container command (useful when using custom images) | `[]` |
|
|
|
-| `portal.args` | Override default container args (useful when using custom images) | `[]` |
|
|
|
-| `portal.extraEnvVars` | Array with extra environment variables to add Harbor Portal pods | `[]` |
|
|
|
-| `portal.extraEnvVarsCM` | ConfigMap containing extra environment variables for Harbor Portal pods | `""` |
|
|
|
-| `portal.extraEnvVarsSecret` | Secret containing extra environment variables (in case of sensitive data) for Harbor Portal pods | `""` |
|
|
|
-| `portal.containerPorts.http` | Harbor Portal HTTP container port | `8080` |
|
|
|
-| `portal.containerPorts.https` | Harbor Portal HTTPS container port | `8443` |
|
|
|
-| `portal.replicaCount` | Number of Harbor Portal replicas | `1` |
|
|
|
-| `portal.livenessProbe.enabled` | Enable livenessProbe on Harbor Portal containers | `true` |
|
|
|
-| `portal.livenessProbe.initialDelaySeconds` | Initial delay seconds for livenessProbe | `20` |
|
|
|
-| `portal.livenessProbe.periodSeconds` | Period seconds for livenessProbe | `10` |
|
|
|
-| `portal.livenessProbe.timeoutSeconds` | Timeout seconds for livenessProbe | `5` |
|
|
|
-| `portal.livenessProbe.failureThreshold` | Failure threshold for livenessProbe | `6` |
|
|
|
-| `portal.livenessProbe.successThreshold` | Success threshold for livenessProbe | `1` |
|
|
|
-| `portal.readinessProbe.enabled` | Enable readinessProbe on Harbor Portal containers | `true` |
|
|
|
-| `portal.readinessProbe.initialDelaySeconds` | Initial delay seconds for readinessProbe | `20` |
|
|
|
-| `portal.readinessProbe.periodSeconds` | Period seconds for readinessProbe | `10` |
|
|
|
-| `portal.readinessProbe.timeoutSeconds` | Timeout seconds for readinessProbe | `5` |
|
|
|
-| `portal.readinessProbe.failureThreshold` | Failure threshold for readinessProbe | `6` |
|
|
|
-| `portal.readinessProbe.successThreshold` | Success threshold for readinessProbe | `1` |
|
|
|
-| `portal.startupProbe.enabled` | Enable startupProbe on Harbor Portal containers | `false` |
|
|
|
-| `portal.startupProbe.initialDelaySeconds` | Initial delay seconds for startupProbe | `5` |
|
|
|
-| `portal.startupProbe.periodSeconds` | Period seconds for startupProbe | `10` |
|
|
|
-| `portal.startupProbe.timeoutSeconds` | Timeout seconds for startupProbe | `1` |
|
|
|
-| `portal.startupProbe.failureThreshold` | Failure threshold for startupProbe | `15` |
|
|
|
-| `portal.startupProbe.successThreshold` | Success threshold for startupProbe | `1` |
|
|
|
-| `portal.customLivenessProbe` | Custom livenessProbe that overrides the default one | `{}` |
|
|
|
-| `portal.customReadinessProbe` | Custom readinessProbe that overrides the default one | `{}` |
|
|
|
-| `portal.customStartupProbe` | Custom startupProbe that overrides the default one | `{}` |
|
|
|
-| `portal.resources.limits` | The resources limits for the Harbor Portal containers | `{}` |
|
|
|
-| `portal.resources.requests` | The requested resources for the Harbor Portal containers | `{}` |
|
|
|
-| `portal.podSecurityContext.enabled` | Enabled Harbor Portal pods' Security Context | `true` |
|
|
|
-| `portal.podSecurityContext.fsGroup` | Set Harbor Portal pod's Security Context fsGroup | `1001` |
|
|
|
-| `portal.containerSecurityContext.enabled` | Enabled Harbor Portal containers' Security Context | `true` |
|
|
|
-| `portal.containerSecurityContext.runAsUser` | Set Harbor Portal containers' Security Context runAsUser | `1001` |
|
|
|
-| `portal.containerSecurityContext.runAsNonRoot` | Set Harbor Portal containers' Security Context runAsNonRoot | `true` |
|
|
|
-| `portal.updateStrategy.type` | Harbor Portal deployment strategy type - only really applicable for deployments with RWO PVs attached | `RollingUpdate` |
|
|
|
-| `portal.lifecycleHooks` | LifecycleHook for the Harbor Portal container(s) to automate configuration before or after startup | `{}` |
|
|
|
-| `portal.hostAliases` | Harbor Portal pods host aliases | `[]` |
|
|
|
-| `portal.podLabels` | Add additional labels to the Harbor Portal pods (evaluated as a template) | `{}` |
|
|
|
-| `portal.podAnnotations` | Annotations to add to the Harbor Portal pods (evaluated as a template) | `{}` |
|
|
|
-| `portal.podAffinityPreset` | Harbor Portal Pod affinity preset. Ignored if `portal.affinity` is set. Allowed values: `soft` or `hard` | `""` |
|
|
|
-| `portal.podAntiAffinityPreset` | Harbor Portal Pod anti-affinity preset. Ignored if `portal.affinity` is set. Allowed values: `soft` or `hard` | `soft` |
|
|
|
-| `portal.nodeAffinityPreset.type` | Harbor Portal Node affinity preset type. Ignored if `portal.affinity` is set. Allowed values: `soft` or `hard` | `""` |
|
|
|
-| `portal.nodeAffinityPreset.key` | Harbor Portal Node label key to match Ignored if `portal.affinity` is set. | `""` |
|
|
|
-| `portal.nodeAffinityPreset.values` | Harbor Portal Node label values to match. Ignored if `portal.affinity` is set. | `[]` |
|
|
|
-| `portal.affinity` | Harbor Portal Affinity for pod assignment | `{}` |
|
|
|
-| `portal.nodeSelector` | Harbor Portal Node labels for pod assignment | `{}` |
|
|
|
-| `portal.tolerations` | Harbor Portal Tolerations for pod assignment | `[]` |
|
|
|
-| `portal.topologySpreadConstraints` | Topology Spread Constraints for pod assignment spread across your cluster among failure-domains. Evaluated as a template | `[]` |
|
|
|
-| `portal.priorityClassName` | Priority Class Name | `""` |
|
|
|
-| `portal.schedulerName` | Use an alternate scheduler, e.g. "stork". | `""` |
|
|
|
-| `portal.sidecars` | Add additional sidecar containers to the Harbor Portal pods | `[]` |
|
|
|
-| `portal.initContainers` | Add additional init containers to the Harbor Portal pods | `[]` |
|
|
|
-| `portal.extraVolumeMounts` | Optionally specify extra list of additional volumeMounts for the Harbor Portal pods | `[]` |
|
|
|
-| `portal.extraVolumes` | Optionally specify extra list of additional volumes for the Harbor Portal pods | `[]` |
|
|
|
-| `portal.automountServiceAccountToken` | Automount service account token | `false` |
|
|
|
-| `portal.service.ports.http` | Harbor Portal HTTP service port | `80` |
|
|
|
-| `portal.service.ports.https` | Harbor Portal HTTPS service port | `443` |
|
|
|
+| Name | Description | Value |
|
|
|
+| ---------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------ | ------------------------------- |
|
|
|
+| `portal.image.registry` | Harbor Portal image registry | `REGISTRY_NAME` |
|
|
|
+| `portal.image.repository` | Harbor Portal image repository | `REPOSITORY_NAME/harbor-portal` |
|
|
|
+| `portal.image.tag` | Harbor Portal image tag (immutable tags are recommended) | `2.9.0-debian-11-r37` |
|
|
|
+| `portal.image.digest` | Harbor Portal image digest in the way sha256:aa.... Please note this parameter, if set, will override the tag | `""` |
|
|
|
+| `portal.image.pullPolicy` | Harbor Portal image pull policy | `IfNotPresent` |
|
|
|
+| `portal.image.pullSecrets` | Harbor Portal image pull secrets | `[]` |
|
|
|
+| `portal.image.debug` | Enable Harbor Portal image debug mode | `false` |
|
|
|
+| `portal.tls.existingSecret` | Name of an existing secret with the certificates for internal TLS access | `""` |
|
|
|
+| `portal.command` | Override default container command (useful when using custom images) | `[]` |
|
|
|
+| `portal.args` | Override default container args (useful when using custom images) | `[]` |
|
|
|
+| `portal.extraEnvVars` | Array with extra environment variables to add Harbor Portal pods | `[]` |
|
|
|
+| `portal.extraEnvVarsCM` | ConfigMap containing extra environment variables for Harbor Portal pods | `""` |
|
|
|
+| `portal.extraEnvVarsSecret` | Secret containing extra environment variables (in case of sensitive data) for Harbor Portal pods | `""` |
|
|
|
+| `portal.containerPorts.http` | Harbor Portal HTTP container port | `8080` |
|
|
|
+| `portal.containerPorts.https` | Harbor Portal HTTPS container port | `8443` |
|
|
|
+| `portal.replicaCount` | Number of Harbor Portal replicas | `1` |
|
|
|
+| `portal.livenessProbe.enabled` | Enable livenessProbe on Harbor Portal containers | `true` |
|
|
|
+| `portal.livenessProbe.initialDelaySeconds` | Initial delay seconds for livenessProbe | `20` |
|
|
|
+| `portal.livenessProbe.periodSeconds` | Period seconds for livenessProbe | `10` |
|
|
|
+| `portal.livenessProbe.timeoutSeconds` | Timeout seconds for livenessProbe | `5` |
|
|
|
+| `portal.livenessProbe.failureThreshold` | Failure threshold for livenessProbe | `6` |
|
|
|
+| `portal.livenessProbe.successThreshold` | Success threshold for livenessProbe | `1` |
|
|
|
+| `portal.readinessProbe.enabled` | Enable readinessProbe on Harbor Portal containers | `true` |
|
|
|
+| `portal.readinessProbe.initialDelaySeconds` | Initial delay seconds for readinessProbe | `20` |
|
|
|
+| `portal.readinessProbe.periodSeconds` | Period seconds for readinessProbe | `10` |
|
|
|
+| `portal.readinessProbe.timeoutSeconds` | Timeout seconds for readinessProbe | `5` |
|
|
|
+| `portal.readinessProbe.failureThreshold` | Failure threshold for readinessProbe | `6` |
|
|
|
+| `portal.readinessProbe.successThreshold` | Success threshold for readinessProbe | `1` |
|
|
|
+| `portal.startupProbe.enabled` | Enable startupProbe on Harbor Portal containers | `false` |
|
|
|
+| `portal.startupProbe.initialDelaySeconds` | Initial delay seconds for startupProbe | `5` |
|
|
|
+| `portal.startupProbe.periodSeconds` | Period seconds for startupProbe | `10` |
|
|
|
+| `portal.startupProbe.timeoutSeconds` | Timeout seconds for startupProbe | `1` |
|
|
|
+| `portal.startupProbe.failureThreshold` | Failure threshold for startupProbe | `15` |
|
|
|
+| `portal.startupProbe.successThreshold` | Success threshold for startupProbe | `1` |
|
|
|
+| `portal.customLivenessProbe` | Custom livenessProbe that overrides the default one | `{}` |
|
|
|
+| `portal.customReadinessProbe` | Custom readinessProbe that overrides the default one | `{}` |
|
|
|
+| `portal.customStartupProbe` | Custom startupProbe that overrides the default one | `{}` |
|
|
|
+| `portal.resources.limits` | The resources limits for the Harbor Portal containers | `{}` |
|
|
|
+| `portal.resources.requests` | The requested resources for the Harbor Portal containers | `{}` |
|
|
|
+| `portal.podSecurityContext.enabled` | Enabled Harbor Portal pods' Security Context | `true` |
|
|
|
+| `portal.podSecurityContext.fsGroup` | Set Harbor Portal pod's Security Context fsGroup | `1001` |
|
|
|
+| `portal.containerSecurityContext.enabled` | Enabled Harbor Portal containers' Security Context | `true` |
|
|
|
+| `portal.containerSecurityContext.runAsUser` | Set Harbor Portal containers' Security Context runAsUser | `1001` |
|
|
|
+| `portal.containerSecurityContext.runAsNonRoot` | Set Harbor Portal containers' Security Context runAsNonRoot | `true` |
|
|
|
+| `portal.updateStrategy.type` | Harbor Portal deployment strategy type - only really applicable for deployments with RWO PVs attached | `RollingUpdate` |
|
|
|
+| `portal.lifecycleHooks` | LifecycleHook for the Harbor Portal container(s) to automate configuration before or after startup | `{}` |
|
|
|
+| `portal.hostAliases` | Harbor Portal pods host aliases | `[]` |
|
|
|
+| `portal.podLabels` | Add additional labels to the Harbor Portal pods (evaluated as a template) | `{}` |
|
|
|
+| `portal.podAnnotations` | Annotations to add to the Harbor Portal pods (evaluated as a template) | `{}` |
|
|
|
+| `portal.podAffinityPreset` | Harbor Portal Pod affinity preset. Ignored if `portal.affinity` is set. Allowed values: `soft` or `hard` | `""` |
|
|
|
+| `portal.podAntiAffinityPreset` | Harbor Portal Pod anti-affinity preset. Ignored if `portal.affinity` is set. Allowed values: `soft` or `hard` | `soft` |
|
|
|
+| `portal.nodeAffinityPreset.type` | Harbor Portal Node affinity preset type. Ignored if `portal.affinity` is set. Allowed values: `soft` or `hard` | `""` |
|
|
|
+| `portal.nodeAffinityPreset.key` | Harbor Portal Node label key to match Ignored if `portal.affinity` is set. | `""` |
|
|
|
+| `portal.nodeAffinityPreset.values` | Harbor Portal Node label values to match. Ignored if `portal.affinity` is set. | `[]` |
|
|
|
+| `portal.affinity` | Harbor Portal Affinity for pod assignment | `{}` |
|
|
|
+| `portal.nodeSelector` | Harbor Portal Node labels for pod assignment | `{}` |
|
|
|
+| `portal.tolerations` | Harbor Portal Tolerations for pod assignment | `[]` |
|
|
|
+| `portal.topologySpreadConstraints` | Topology Spread Constraints for pod assignment spread across your cluster among failure-domains. Evaluated as a template | `[]` |
|
|
|
+| `portal.priorityClassName` | Priority Class Name | `""` |
|
|
|
+| `portal.schedulerName` | Use an alternate scheduler, e.g. "stork". | `""` |
|
|
|
+| `portal.sidecars` | Add additional sidecar containers to the Harbor Portal pods | `[]` |
|
|
|
+| `portal.initContainers` | Add additional init containers to the Harbor Portal pods | `[]` |
|
|
|
+| `portal.extraVolumeMounts` | Optionally specify extra list of additional volumeMounts for the Harbor Portal pods | `[]` |
|
|
|
+| `portal.extraVolumes` | Optionally specify extra list of additional volumes for the Harbor Portal pods | `[]` |
|
|
|
+| `portal.automountServiceAccountToken` | Automount service account token | `false` |
|
|
|
+| `portal.service.ports.http` | Harbor Portal HTTP service port | `80` |
|
|
|
+| `portal.service.ports.https` | Harbor Portal HTTPS service port | `443` |
|
|
|
|
|
|
### Harbor Core Parameters
|
|
|
|
|
|
-| Name | Description | Value |
|
|
|
-| -------------------------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | --------------------- |
|
|
|
-| `core.image.registry` | Harbor Core image registry | `docker.io` |
|
|
|
-| `core.image.repository` | Harbor Core image repository | `bitnami/harbor-core` |
|
|
|
-| `core.image.tag` | Harbor Core image tag (immutable tags are recommended) | `2.9.0-debian-11-r24` |
|
|
|
-| `core.image.digest` | Harbor Core image digest in the way sha256:aa.... Please note this parameter, if set, will override the tag | `""` |
|
|
|
-| `core.image.pullPolicy` | Harbor Core image pull policy | `IfNotPresent` |
|
|
|
-| `core.image.pullSecrets` | Harbor Core image pull secrets | `[]` |
|
|
|
-| `core.image.debug` | Enable Harbor Core image debug mode | `false` |
|
|
|
-| `core.sessionLifetime` | Explicitly set a session timeout (in seconds) overriding the backend default. | `""` |
|
|
|
-| `core.uaaSecret` | If using external UAA auth which has a self signed cert, you can provide a pre-created secret containing it under the key `ca.crt`. | `""` |
|
|
|
-| `core.secretKey` | The key used for encryption. Must be a string of 16 chars | `""` |
|
|
|
-| `core.secret` | Secret used when the core server communicates with other components. If a secret key is not specified, Helm will generate one. Must be a string of 16 chars. | `""` |
|
|
|
-| `core.tokenKey` | Key of the certificate used for token encryption/decryption. | `""` |
|
|
|
-| `core.tokenCert` | Certificate used for token encryption/decryption. | `""` |
|
|
|
-| `core.secretName` | Fill the name of a kubernetes secret if you want to use your own TLS certificate and private key for token encryption/decryption. The secret must contain two keys named: `tls.crt` - the certificate and `tls.key` - the private key. The default key pair will be used if it isn't set | `""` |
|
|
|
-| `core.existingSecret` | Existing secret for core | `""` |
|
|
|
-| `core.existingEnvVarsSecret` | Existing secret for core envvars | `""` |
|
|
|
-| `core.csrfKey` | The CSRF key. Will be generated automatically if it isn't specified | `""` |
|
|
|
-| `core.tls.existingSecret` | Name of an existing secret with the certificates for internal TLS access | `""` |
|
|
|
-| `core.command` | Override default container command (useful when using custom images) | `[]` |
|
|
|
-| `core.args` | Override default container args (useful when using custom images) | `[]` |
|
|
|
-| `core.extraEnvVars` | Array with extra environment variables to add Harbor Core pods | `[]` |
|
|
|
-| `core.extraEnvVarsCM` | ConfigMap containing extra environment variables for Harbor Core pods | `""` |
|
|
|
-| `core.extraEnvVarsSecret` | Secret containing extra environment variables (in case of sensitive data) for Harbor Core pods | `""` |
|
|
|
-| `core.configOverwriteJson` | String containing a JSON with configuration overrides | `""` |
|
|
|
-| `core.configOverwriteJsonSecret` | Secret containing the JSON configuration overrides | `""` |
|
|
|
-| `core.containerPorts.http` | Harbor Core HTTP container port | `8080` |
|
|
|
-| `core.containerPorts.https` | Harbor Core HTTPS container port | `8443` |
|
|
|
-| `core.containerPorts.metrics` | Harbor Core metrics container port | `8001` |
|
|
|
-| `core.replicaCount` | Number of Harbor Core replicas | `1` |
|
|
|
-| `core.livenessProbe.enabled` | Enable livenessProbe on Harbor Core containers | `true` |
|
|
|
-| `core.livenessProbe.initialDelaySeconds` | Initial delay seconds for livenessProbe | `20` |
|
|
|
-| `core.livenessProbe.periodSeconds` | Period seconds for livenessProbe | `10` |
|
|
|
-| `core.livenessProbe.timeoutSeconds` | Timeout seconds for livenessProbe | `5` |
|
|
|
-| `core.livenessProbe.failureThreshold` | Failure threshold for livenessProbe | `6` |
|
|
|
-| `core.livenessProbe.successThreshold` | Success threshold for livenessProbe | `1` |
|
|
|
-| `core.readinessProbe.enabled` | Enable readinessProbe on Harbor Core containers | `true` |
|
|
|
-| `core.readinessProbe.initialDelaySeconds` | Initial delay seconds for readinessProbe | `20` |
|
|
|
-| `core.readinessProbe.periodSeconds` | Period seconds for readinessProbe | `10` |
|
|
|
-| `core.readinessProbe.timeoutSeconds` | Timeout seconds for readinessProbe | `5` |
|
|
|
-| `core.readinessProbe.failureThreshold` | Failure threshold for readinessProbe | `6` |
|
|
|
-| `core.readinessProbe.successThreshold` | Success threshold for readinessProbe | `1` |
|
|
|
-| `core.startupProbe.enabled` | Enable startupProbe on Harbor Core containers | `false` |
|
|
|
-| `core.startupProbe.initialDelaySeconds` | Initial delay seconds for startupProbe | `5` |
|
|
|
-| `core.startupProbe.periodSeconds` | Period seconds for startupProbe | `10` |
|
|
|
-| `core.startupProbe.timeoutSeconds` | Timeout seconds for startupProbe | `1` |
|
|
|
-| `core.startupProbe.failureThreshold` | Failure threshold for startupProbe | `15` |
|
|
|
-| `core.startupProbe.successThreshold` | Success threshold for startupProbe | `1` |
|
|
|
-| `core.customLivenessProbe` | Custom livenessProbe that overrides the default one | `{}` |
|
|
|
-| `core.customReadinessProbe` | Custom readinessProbe that overrides the default one | `{}` |
|
|
|
-| `core.customStartupProbe` | Custom startupProbe that overrides the default one | `{}` |
|
|
|
-| `core.resources.limits` | The resources limits for the Harbor Core containers | `{}` |
|
|
|
-| `core.resources.requests` | The requested resources for the Harbor Core containers | `{}` |
|
|
|
-| `core.podSecurityContext.enabled` | Enabled Harbor Core pods' Security Context | `true` |
|
|
|
-| `core.podSecurityContext.fsGroup` | Set Harbor Core pod's Security Context fsGroup | `1001` |
|
|
|
-| `core.containerSecurityContext.enabled` | Enabled Harbor Core containers' Security Context | `true` |
|
|
|
-| `core.containerSecurityContext.runAsUser` | Set Harbor Core containers' Security Context runAsUser | `1001` |
|
|
|
-| `core.containerSecurityContext.runAsNonRoot` | Set Harbor Core containers' Security Context runAsNonRoot | `true` |
|
|
|
-| `core.updateStrategy.type` | Harbor Core deployment strategy type - only really applicable for deployments with RWO PVs attached | `RollingUpdate` |
|
|
|
-| `core.lifecycleHooks` | LifecycleHook for the Harbor Core container(s) to automate configuration before or after startup | `{}` |
|
|
|
-| `core.hostAliases` | Harbor Core pods host aliases | `[]` |
|
|
|
-| `core.podLabels` | Add additional labels to the Harbor Core pods (evaluated as a template) | `{}` |
|
|
|
-| `core.podAnnotations` | Annotations to add to the Harbor Core pods (evaluated as a template) | `{}` |
|
|
|
-| `core.podAffinityPreset` | Harbor Core Pod affinity preset. Ignored if `core.affinity` is set. Allowed values: `soft` or `hard` | `""` |
|
|
|
-| `core.podAntiAffinityPreset` | Harbor Core Pod anti-affinity preset. Ignored if `core.affinity` is set. Allowed values: `soft` or `hard` | `soft` |
|
|
|
-| `core.nodeAffinityPreset.type` | Harbor Core Node affinity preset type. Ignored if `core.affinity` is set. Allowed values: `soft` or `hard` | `""` |
|
|
|
-| `core.nodeAffinityPreset.key` | Harbor Core Node label key to match Ignored if `core.affinity` is set. | `""` |
|
|
|
-| `core.nodeAffinityPreset.values` | Harbor Core Node label values to match. Ignored if `core.affinity` is set. | `[]` |
|
|
|
-| `core.affinity` | Harbor Core Affinity for pod assignment | `{}` |
|
|
|
-| `core.nodeSelector` | Harbor Core Node labels for pod assignment | `{}` |
|
|
|
-| `core.tolerations` | Harbor Core Tolerations for pod assignment | `[]` |
|
|
|
-| `core.topologySpreadConstraints` | Topology Spread Constraints for pod assignment spread across your cluster among failure-domains. Evaluated as a template | `[]` |
|
|
|
-| `core.priorityClassName` | Priority Class Name | `""` |
|
|
|
-| `core.schedulerName` | Use an alternate scheduler, e.g. "stork". | `""` |
|
|
|
-| `core.sidecars` | Add additional sidecar containers to the Harbor Core pods | `[]` |
|
|
|
-| `core.initContainers` | Add additional init containers to the Harbor Core pods | `[]` |
|
|
|
-| `core.extraVolumeMounts` | Optionally specify extra list of additional volumeMounts for the Harbor Core pods | `[]` |
|
|
|
-| `core.extraVolumes` | Optionally specify extra list of additional volumes for the Harbor Core pods | `[]` |
|
|
|
-| `core.automountServiceAccountToken` | Automount service account token | `false` |
|
|
|
-| `core.service.ports.http` | Harbor Core HTTP service port | `80` |
|
|
|
-| `core.service.ports.https` | Harbor Core HTTPS service port | `443` |
|
|
|
-| `core.service.ports.metrics` | Harbor Core metrics service port | `8001` |
|
|
|
+| Name | Description | Value |
|
|
|
+| -------------------------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ----------------------------- |
|
|
|
+| `core.image.registry` | Harbor Core image registry | `REGISTRY_NAME` |
|
|
|
+| `core.image.repository` | Harbor Core image repository | `REPOSITORY_NAME/harbor-core` |
|
|
|
+| `core.image.tag` | Harbor Core image tag (immutable tags are recommended) | `2.9.0-debian-11-r24` |
|
|
|
+| `core.image.digest` | Harbor Core image digest in the way sha256:aa.... Please note this parameter, if set, will override the tag | `""` |
|
|
|
+| `core.image.pullPolicy` | Harbor Core image pull policy | `IfNotPresent` |
|
|
|
+| `core.image.pullSecrets` | Harbor Core image pull secrets | `[]` |
|
|
|
+| `core.image.debug` | Enable Harbor Core image debug mode | `false` |
|
|
|
+| `core.sessionLifetime` | Explicitly set a session timeout (in seconds) overriding the backend default. | `""` |
|
|
|
+| `core.uaaSecret` | If using external UAA auth which has a self signed cert, you can provide a pre-created secret containing it under the key `ca.crt`. | `""` |
|
|
|
+| `core.secretKey` | The key used for encryption. Must be a string of 16 chars | `""` |
|
|
|
+| `core.secret` | Secret used when the core server communicates with other components. If a secret key is not specified, Helm will generate one. Must be a string of 16 chars. | `""` |
|
|
|
+| `core.tokenKey` | Key of the certificate used for token encryption/decryption. | `""` |
|
|
|
+| `core.tokenCert` | Certificate used for token encryption/decryption. | `""` |
|
|
|
+| `core.secretName` | Fill the name of a kubernetes secret if you want to use your own TLS certificate and private key for token encryption/decryption. The secret must contain two keys named: `tls.crt` - the certificate and `tls.key` - the private key. The default key pair will be used if it isn't set | `""` |
|
|
|
+| `core.existingSecret` | Existing secret for core | `""` |
|
|
|
+| `core.existingEnvVarsSecret` | Existing secret for core envvars | `""` |
|
|
|
+| `core.csrfKey` | The CSRF key. Will be generated automatically if it isn't specified | `""` |
|
|
|
+| `core.tls.existingSecret` | Name of an existing secret with the certificates for internal TLS access | `""` |
|
|
|
+| `core.command` | Override default container command (useful when using custom images) | `[]` |
|
|
|
+| `core.args` | Override default container args (useful when using custom images) | `[]` |
|
|
|
+| `core.extraEnvVars` | Array with extra environment variables to add Harbor Core pods | `[]` |
|
|
|
+| `core.extraEnvVarsCM` | ConfigMap containing extra environment variables for Harbor Core pods | `""` |
|
|
|
+| `core.extraEnvVarsSecret` | Secret containing extra environment variables (in case of sensitive data) for Harbor Core pods | `""` |
|
|
|
+| `core.configOverwriteJson` | String containing a JSON with configuration overrides | `""` |
|
|
|
+| `core.configOverwriteJsonSecret` | Secret containing the JSON configuration overrides | `""` |
|
|
|
+| `core.containerPorts.http` | Harbor Core HTTP container port | `8080` |
|
|
|
+| `core.containerPorts.https` | Harbor Core HTTPS container port | `8443` |
|
|
|
+| `core.containerPorts.metrics` | Harbor Core metrics container port | `8001` |
|
|
|
+| `core.replicaCount` | Number of Harbor Core replicas | `1` |
|
|
|
+| `core.livenessProbe.enabled` | Enable livenessProbe on Harbor Core containers | `true` |
|
|
|
+| `core.livenessProbe.initialDelaySeconds` | Initial delay seconds for livenessProbe | `20` |
|
|
|
+| `core.livenessProbe.periodSeconds` | Period seconds for livenessProbe | `10` |
|
|
|
+| `core.livenessProbe.timeoutSeconds` | Timeout seconds for livenessProbe | `5` |
|
|
|
+| `core.livenessProbe.failureThreshold` | Failure threshold for livenessProbe | `6` |
|
|
|
+| `core.livenessProbe.successThreshold` | Success threshold for livenessProbe | `1` |
|
|
|
+| `core.readinessProbe.enabled` | Enable readinessProbe on Harbor Core containers | `true` |
|
|
|
+| `core.readinessProbe.initialDelaySeconds` | Initial delay seconds for readinessProbe | `20` |
|
|
|
+| `core.readinessProbe.periodSeconds` | Period seconds for readinessProbe | `10` |
|
|
|
+| `core.readinessProbe.timeoutSeconds` | Timeout seconds for readinessProbe | `5` |
|
|
|
+| `core.readinessProbe.failureThreshold` | Failure threshold for readinessProbe | `6` |
|
|
|
+| `core.readinessProbe.successThreshold` | Success threshold for readinessProbe | `1` |
|
|
|
+| `core.startupProbe.enabled` | Enable startupProbe on Harbor Core containers | `false` |
|
|
|
+| `core.startupProbe.initialDelaySeconds` | Initial delay seconds for startupProbe | `5` |
|
|
|
+| `core.startupProbe.periodSeconds` | Period seconds for startupProbe | `10` |
|
|
|
+| `core.startupProbe.timeoutSeconds` | Timeout seconds for startupProbe | `1` |
|
|
|
+| `core.startupProbe.failureThreshold` | Failure threshold for startupProbe | `15` |
|
|
|
+| `core.startupProbe.successThreshold` | Success threshold for startupProbe | `1` |
|
|
|
+| `core.customLivenessProbe` | Custom livenessProbe that overrides the default one | `{}` |
|
|
|
+| `core.customReadinessProbe` | Custom readinessProbe that overrides the default one | `{}` |
|
|
|
+| `core.customStartupProbe` | Custom startupProbe that overrides the default one | `{}` |
|
|
|
+| `core.resources.limits` | The resources limits for the Harbor Core containers | `{}` |
|
|
|
+| `core.resources.requests` | The requested resources for the Harbor Core containers | `{}` |
|
|
|
+| `core.podSecurityContext.enabled` | Enabled Harbor Core pods' Security Context | `true` |
|
|
|
+| `core.podSecurityContext.fsGroup` | Set Harbor Core pod's Security Context fsGroup | `1001` |
|
|
|
+| `core.containerSecurityContext.enabled` | Enabled Harbor Core containers' Security Context | `true` |
|
|
|
+| `core.containerSecurityContext.runAsUser` | Set Harbor Core containers' Security Context runAsUser | `1001` |
|
|
|
+| `core.containerSecurityContext.runAsNonRoot` | Set Harbor Core containers' Security Context runAsNonRoot | `true` |
|
|
|
+| `core.updateStrategy.type` | Harbor Core deployment strategy type - only really applicable for deployments with RWO PVs attached | `RollingUpdate` |
|
|
|
+| `core.lifecycleHooks` | LifecycleHook for the Harbor Core container(s) to automate configuration before or after startup | `{}` |
|
|
|
+| `core.hostAliases` | Harbor Core pods host aliases | `[]` |
|
|
|
+| `core.podLabels` | Add additional labels to the Harbor Core pods (evaluated as a template) | `{}` |
|
|
|
+| `core.podAnnotations` | Annotations to add to the Harbor Core pods (evaluated as a template) | `{}` |
|
|
|
+| `core.podAffinityPreset` | Harbor Core Pod affinity preset. Ignored if `core.affinity` is set. Allowed values: `soft` or `hard` | `""` |
|
|
|
+| `core.podAntiAffinityPreset` | Harbor Core Pod anti-affinity preset. Ignored if `core.affinity` is set. Allowed values: `soft` or `hard` | `soft` |
|
|
|
+| `core.nodeAffinityPreset.type` | Harbor Core Node affinity preset type. Ignored if `core.affinity` is set. Allowed values: `soft` or `hard` | `""` |
|
|
|
+| `core.nodeAffinityPreset.key` | Harbor Core Node label key to match Ignored if `core.affinity` is set. | `""` |
|
|
|
+| `core.nodeAffinityPreset.values` | Harbor Core Node label values to match. Ignored if `core.affinity` is set. | `[]` |
|
|
|
+| `core.affinity` | Harbor Core Affinity for pod assignment | `{}` |
|
|
|
+| `core.nodeSelector` | Harbor Core Node labels for pod assignment | `{}` |
|
|
|
+| `core.tolerations` | Harbor Core Tolerations for pod assignment | `[]` |
|
|
|
+| `core.topologySpreadConstraints` | Topology Spread Constraints for pod assignment spread across your cluster among failure-domains. Evaluated as a template | `[]` |
|
|
|
+| `core.priorityClassName` | Priority Class Name | `""` |
|
|
|
+| `core.schedulerName` | Use an alternate scheduler, e.g. "stork". | `""` |
|
|
|
+| `core.sidecars` | Add additional sidecar containers to the Harbor Core pods | `[]` |
|
|
|
+| `core.initContainers` | Add additional init containers to the Harbor Core pods | `[]` |
|
|
|
+| `core.extraVolumeMounts` | Optionally specify extra list of additional volumeMounts for the Harbor Core pods | `[]` |
|
|
|
+| `core.extraVolumes` | Optionally specify extra list of additional volumes for the Harbor Core pods | `[]` |
|
|
|
+| `core.automountServiceAccountToken` | Automount service account token | `false` |
|
|
|
+| `core.service.ports.http` | Harbor Core HTTP service port | `80` |
|
|
|
+| `core.service.ports.https` | Harbor Core HTTPS service port | `443` |
|
|
|
+| `core.service.ports.metrics` | Harbor Core metrics service port | `8001` |
|
|
|
|
|
|
### Harbor Jobservice Parameters
|
|
|
|
|
|
-| Name | Description | Value |
|
|
|
-| -------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------ | ------------------------------ |
|
|
|
-| `jobservice.image.registry` | Harbor Jobservice image registry | `docker.io` |
|
|
|
-| `jobservice.image.repository` | Harbor Jobservice image repository | `bitnami/harbor-jobservice` |
|
|
|
-| `jobservice.image.tag` | Harbor Jobservice image tag (immutable tags are recommended) | `2.9.0-debian-11-r26` |
|
|
|
-| `jobservice.image.digest` | Harbor Jobservice image digest in the way sha256:aa.... Please note this parameter, if set, will override the tag | `""` |
|
|
|
-| `jobservice.image.pullPolicy` | Harbor Jobservice image pull policy | `IfNotPresent` |
|
|
|
-| `jobservice.image.pullSecrets` | Harbor Jobservice image pull secrets | `[]` |
|
|
|
-| `jobservice.image.debug` | Enable Harbor Jobservice image debug mode | `false` |
|
|
|
-| `jobservice.maxJobWorkers` | The max job workers | `10` |
|
|
|
-| `jobservice.redisNamespace` | Redis namespace for jobservice | `harbor_job_service_namespace` |
|
|
|
-| `jobservice.jobLogger` | The logger for jobs: `file`, `database` or `stdout` | `file` |
|
|
|
-| `jobservice.secret` | Secret used when the job service communicates with other components. If a secret key is not specified, Helm will generate one. Must be a string of 16 chars. | `""` |
|
|
|
-| `jobservice.existingSecret` | Existing secret for jobservice | `""` |
|
|
|
-| `jobservice.tls.existingSecret` | Name of an existing secret with the certificates for internal TLS access | `""` |
|
|
|
-| `jobservice.command` | Override default container command (useful when using custom images) | `[]` |
|
|
|
-| `jobservice.args` | Override default container args (useful when using custom images) | `[]` |
|
|
|
-| `jobservice.extraEnvVars` | Array with extra environment variables to add Harbor Jobservice pods | `[]` |
|
|
|
-| `jobservice.extraEnvVarsCM` | ConfigMap containing extra environment variables for Harbor Jobservice pods | `""` |
|
|
|
-| `jobservice.extraEnvVarsSecret` | Secret containing extra environment variables (in case of sensitive data) for Harbor Jobservice pods | `""` |
|
|
|
-| `jobservice.containerPorts.http` | Harbor Jobservice HTTP container port | `8080` |
|
|
|
-| `jobservice.containerPorts.https` | Harbor Jobservice HTTPS container port | `8443` |
|
|
|
-| `jobservice.containerPorts.metrics` | Harbor Jobservice metrics container port | `8001` |
|
|
|
-| `jobservice.replicaCount` | Number of Harbor Jobservice replicas | `1` |
|
|
|
-| `jobservice.livenessProbe.enabled` | Enable livenessProbe on Harbor Jobservice containers | `true` |
|
|
|
-| `jobservice.livenessProbe.initialDelaySeconds` | Initial delay seconds for livenessProbe | `20` |
|
|
|
-| `jobservice.livenessProbe.periodSeconds` | Period seconds for livenessProbe | `10` |
|
|
|
-| `jobservice.livenessProbe.timeoutSeconds` | Timeout seconds for livenessProbe | `5` |
|
|
|
-| `jobservice.livenessProbe.failureThreshold` | Failure threshold for livenessProbe | `6` |
|
|
|
-| `jobservice.livenessProbe.successThreshold` | Success threshold for livenessProbe | `1` |
|
|
|
-| `jobservice.readinessProbe.enabled` | Enable readinessProbe on Harbor Jobservice containers | `true` |
|
|
|
-| `jobservice.readinessProbe.initialDelaySeconds` | Initial delay seconds for readinessProbe | `20` |
|
|
|
-| `jobservice.readinessProbe.periodSeconds` | Period seconds for readinessProbe | `10` |
|
|
|
-| `jobservice.readinessProbe.timeoutSeconds` | Timeout seconds for readinessProbe | `5` |
|
|
|
-| `jobservice.readinessProbe.failureThreshold` | Failure threshold for readinessProbe | `6` |
|
|
|
-| `jobservice.readinessProbe.successThreshold` | Success threshold for readinessProbe | `1` |
|
|
|
-| `jobservice.startupProbe.enabled` | Enable startupProbe on Harbor Jobservice containers | `false` |
|
|
|
-| `jobservice.startupProbe.initialDelaySeconds` | Initial delay seconds for startupProbe | `5` |
|
|
|
-| `jobservice.startupProbe.periodSeconds` | Period seconds for startupProbe | `10` |
|
|
|
-| `jobservice.startupProbe.timeoutSeconds` | Timeout seconds for startupProbe | `1` |
|
|
|
-| `jobservice.startupProbe.failureThreshold` | Failure threshold for startupProbe | `15` |
|
|
|
-| `jobservice.startupProbe.successThreshold` | Success threshold for startupProbe | `1` |
|
|
|
-| `jobservice.customLivenessProbe` | Custom livenessProbe that overrides the default one | `{}` |
|
|
|
-| `jobservice.customReadinessProbe` | Custom readinessProbe that overrides the default one | `{}` |
|
|
|
-| `jobservice.customStartupProbe` | Custom startupProbe that overrides the default one | `{}` |
|
|
|
-| `jobservice.resources.limits` | The resources limits for the Harbor Jobservice containers | `{}` |
|
|
|
-| `jobservice.resources.requests` | The requested resources for the Harbor Jobservice containers | `{}` |
|
|
|
-| `jobservice.podSecurityContext.enabled` | Enabled Harbor Jobservice pods' Security Context | `true` |
|
|
|
-| `jobservice.podSecurityContext.fsGroup` | Set Harbor Jobservice pod's Security Context fsGroup | `1001` |
|
|
|
-| `jobservice.containerSecurityContext.enabled` | Enabled Harbor Jobservice containers' Security Context | `true` |
|
|
|
-| `jobservice.containerSecurityContext.runAsUser` | Set Harbor Jobservice containers' Security Context runAsUser | `1001` |
|
|
|
-| `jobservice.containerSecurityContext.runAsNonRoot` | Set Harbor Jobservice containers' Security Context runAsNonRoot | `true` |
|
|
|
-| `jobservice.updateStrategy.type` | Harbor Jobservice deployment strategy type - only really applicable for deployments with RWO PVs attached | `RollingUpdate` |
|
|
|
-| `jobservice.lifecycleHooks` | LifecycleHook for the Harbor Jobservice container(s) to automate configuration before or after startup | `{}` |
|
|
|
-| `jobservice.hostAliases` | Harbor Jobservice pods host aliases | `[]` |
|
|
|
-| `jobservice.podLabels` | Add additional labels to the Harbor Jobservice pods (evaluated as a template) | `{}` |
|
|
|
-| `jobservice.podAnnotations` | Annotations to add to the Harbor Jobservice pods (evaluated as a template) | `{}` |
|
|
|
-| `jobservice.podAffinityPreset` | Harbor Jobservice Pod affinity preset. Ignored if `jobservice.affinity` is set. Allowed values: `soft` or `hard` | `""` |
|
|
|
-| `jobservice.podAntiAffinityPreset` | Harbor Jobservice Pod anti-affinity preset. Ignored if `jobservice.affinity` is set. Allowed values: `soft` or `hard` | `soft` |
|
|
|
-| `jobservice.nodeAffinityPreset.type` | Harbor Jobservice Node affinity preset type. Ignored if `jobservice.affinity` is set. Allowed values: `soft` or `hard` | `""` |
|
|
|
-| `jobservice.nodeAffinityPreset.key` | Harbor Jobservice Node label key to match Ignored if `jobservice.affinity` is set. | `""` |
|
|
|
-| `jobservice.nodeAffinityPreset.values` | Harbor Jobservice Node label values to match. Ignored if `jobservice.affinity` is set. | `[]` |
|
|
|
-| `jobservice.affinity` | Harbor Jobservice Affinity for pod assignment | `{}` |
|
|
|
-| `jobservice.nodeSelector` | Harbor Jobservice Node labels for pod assignment | `{}` |
|
|
|
-| `jobservice.tolerations` | Harbor Jobservice Tolerations for pod assignment | `[]` |
|
|
|
-| `jobservice.topologySpreadConstraints` | Topology Spread Constraints for pod assignment spread across your cluster among failure-domains. Evaluated as a template | `[]` |
|
|
|
-| `jobservice.priorityClassName` | Priority Class Name | `""` |
|
|
|
-| `jobservice.schedulerName` | Use an alternate scheduler, e.g. "stork". | `""` |
|
|
|
-| `jobservice.sidecars` | Add additional sidecar containers to the Harbor Jobservice pods | `[]` |
|
|
|
-| `jobservice.initContainers` | Add additional init containers to the Harbor Jobservice pods | `[]` |
|
|
|
-| `jobservice.extraVolumeMounts` | Optionally specify extra list of additional volumeMounts for the Harbor Jobservice pods | `[]` |
|
|
|
-| `jobservice.extraVolumes` | Optionally specify extra list of additional volumes for the Harbor Jobservice pods | `[]` |
|
|
|
-| `jobservice.automountServiceAccountToken` | Automount service account token | `false` |
|
|
|
-| `jobservice.service.ports.http` | Harbor Jobservice HTTP service port | `80` |
|
|
|
-| `jobservice.service.ports.https` | Harbor Jobservice HTTPS service port | `443` |
|
|
|
-| `jobservice.service.ports.metrics` | Harbor Jobservice HTTPS service port | `8001` |
|
|
|
+| Name | Description | Value |
|
|
|
+| -------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------ | ----------------------------------- |
|
|
|
+| `jobservice.image.registry` | Harbor Jobservice image registry | `REGISTRY_NAME` |
|
|
|
+| `jobservice.image.repository` | Harbor Jobservice image repository | `REPOSITORY_NAME/harbor-jobservice` |
|
|
|
+| `jobservice.image.tag` | Harbor Jobservice image tag (immutable tags are recommended) | `2.9.0-debian-11-r26` |
|
|
|
+| `jobservice.image.digest` | Harbor Jobservice image digest in the way sha256:aa.... Please note this parameter, if set, will override the tag | `""` |
|
|
|
+| `jobservice.image.pullPolicy` | Harbor Jobservice image pull policy | `IfNotPresent` |
|
|
|
+| `jobservice.image.pullSecrets` | Harbor Jobservice image pull secrets | `[]` |
|
|
|
+| `jobservice.image.debug` | Enable Harbor Jobservice image debug mode | `false` |
|
|
|
+| `jobservice.maxJobWorkers` | The max job workers | `10` |
|
|
|
+| `jobservice.redisNamespace` | Redis namespace for jobservice | `harbor_job_service_namespace` |
|
|
|
+| `jobservice.jobLogger` | The logger for jobs: `file`, `database` or `stdout` | `file` |
|
|
|
+| `jobservice.secret` | Secret used when the job service communicates with other components. If a secret key is not specified, Helm will generate one. Must be a string of 16 chars. | `""` |
|
|
|
+| `jobservice.existingSecret` | Existing secret for jobservice | `""` |
|
|
|
+| `jobservice.tls.existingSecret` | Name of an existing secret with the certificates for internal TLS access | `""` |
|
|
|
+| `jobservice.command` | Override default container command (useful when using custom images) | `[]` |
|
|
|
+| `jobservice.args` | Override default container args (useful when using custom images) | `[]` |
|
|
|
+| `jobservice.extraEnvVars` | Array with extra environment variables to add Harbor Jobservice pods | `[]` |
|
|
|
+| `jobservice.extraEnvVarsCM` | ConfigMap containing extra environment variables for Harbor Jobservice pods | `""` |
|
|
|
+| `jobservice.extraEnvVarsSecret` | Secret containing extra environment variables (in case of sensitive data) for Harbor Jobservice pods | `""` |
|
|
|
+| `jobservice.containerPorts.http` | Harbor Jobservice HTTP container port | `8080` |
|
|
|
+| `jobservice.containerPorts.https` | Harbor Jobservice HTTPS container port | `8443` |
|
|
|
+| `jobservice.containerPorts.metrics` | Harbor Jobservice metrics container port | `8001` |
|
|
|
+| `jobservice.replicaCount` | Number of Harbor Jobservice replicas | `1` |
|
|
|
+| `jobservice.livenessProbe.enabled` | Enable livenessProbe on Harbor Jobservice containers | `true` |
|
|
|
+| `jobservice.livenessProbe.initialDelaySeconds` | Initial delay seconds for livenessProbe | `20` |
|
|
|
+| `jobservice.livenessProbe.periodSeconds` | Period seconds for livenessProbe | `10` |
|
|
|
+| `jobservice.livenessProbe.timeoutSeconds` | Timeout seconds for livenessProbe | `5` |
|
|
|
+| `jobservice.livenessProbe.failureThreshold` | Failure threshold for livenessProbe | `6` |
|
|
|
+| `jobservice.livenessProbe.successThreshold` | Success threshold for livenessProbe | `1` |
|
|
|
+| `jobservice.readinessProbe.enabled` | Enable readinessProbe on Harbor Jobservice containers | `true` |
|
|
|
+| `jobservice.readinessProbe.initialDelaySeconds` | Initial delay seconds for readinessProbe | `20` |
|
|
|
+| `jobservice.readinessProbe.periodSeconds` | Period seconds for readinessProbe | `10` |
|
|
|
+| `jobservice.readinessProbe.timeoutSeconds` | Timeout seconds for readinessProbe | `5` |
|
|
|
+| `jobservice.readinessProbe.failureThreshold` | Failure threshold for readinessProbe | `6` |
|
|
|
+| `jobservice.readinessProbe.successThreshold` | Success threshold for readinessProbe | `1` |
|
|
|
+| `jobservice.startupProbe.enabled` | Enable startupProbe on Harbor Jobservice containers | `false` |
|
|
|
+| `jobservice.startupProbe.initialDelaySeconds` | Initial delay seconds for startupProbe | `5` |
|
|
|
+| `jobservice.startupProbe.periodSeconds` | Period seconds for startupProbe | `10` |
|
|
|
+| `jobservice.startupProbe.timeoutSeconds` | Timeout seconds for startupProbe | `1` |
|
|
|
+| `jobservice.startupProbe.failureThreshold` | Failure threshold for startupProbe | `15` |
|
|
|
+| `jobservice.startupProbe.successThreshold` | Success threshold for startupProbe | `1` |
|
|
|
+| `jobservice.customLivenessProbe` | Custom livenessProbe that overrides the default one | `{}` |
|
|
|
+| `jobservice.customReadinessProbe` | Custom readinessProbe that overrides the default one | `{}` |
|
|
|
+| `jobservice.customStartupProbe` | Custom startupProbe that overrides the default one | `{}` |
|
|
|
+| `jobservice.resources.limits` | The resources limits for the Harbor Jobservice containers | `{}` |
|
|
|
+| `jobservice.resources.requests` | The requested resources for the Harbor Jobservice containers | `{}` |
|
|
|
+| `jobservice.podSecurityContext.enabled` | Enabled Harbor Jobservice pods' Security Context | `true` |
|
|
|
+| `jobservice.podSecurityContext.fsGroup` | Set Harbor Jobservice pod's Security Context fsGroup | `1001` |
|
|
|
+| `jobservice.containerSecurityContext.enabled` | Enabled Harbor Jobservice containers' Security Context | `true` |
|
|
|
+| `jobservice.containerSecurityContext.runAsUser` | Set Harbor Jobservice containers' Security Context runAsUser | `1001` |
|
|
|
+| `jobservice.containerSecurityContext.runAsNonRoot` | Set Harbor Jobservice containers' Security Context runAsNonRoot | `true` |
|
|
|
+| `jobservice.updateStrategy.type` | Harbor Jobservice deployment strategy type - only really applicable for deployments with RWO PVs attached | `RollingUpdate` |
|
|
|
+| `jobservice.lifecycleHooks` | LifecycleHook for the Harbor Jobservice container(s) to automate configuration before or after startup | `{}` |
|
|
|
+| `jobservice.hostAliases` | Harbor Jobservice pods host aliases | `[]` |
|
|
|
+| `jobservice.podLabels` | Add additional labels to the Harbor Jobservice pods (evaluated as a template) | `{}` |
|
|
|
+| `jobservice.podAnnotations` | Annotations to add to the Harbor Jobservice pods (evaluated as a template) | `{}` |
|
|
|
+| `jobservice.podAffinityPreset` | Harbor Jobservice Pod affinity preset. Ignored if `jobservice.affinity` is set. Allowed values: `soft` or `hard` | `""` |
|
|
|
+| `jobservice.podAntiAffinityPreset` | Harbor Jobservice Pod anti-affinity preset. Ignored if `jobservice.affinity` is set. Allowed values: `soft` or `hard` | `soft` |
|
|
|
+| `jobservice.nodeAffinityPreset.type` | Harbor Jobservice Node affinity preset type. Ignored if `jobservice.affinity` is set. Allowed values: `soft` or `hard` | `""` |
|
|
|
+| `jobservice.nodeAffinityPreset.key` | Harbor Jobservice Node label key to match Ignored if `jobservice.affinity` is set. | `""` |
|
|
|
+| `jobservice.nodeAffinityPreset.values` | Harbor Jobservice Node label values to match. Ignored if `jobservice.affinity` is set. | `[]` |
|
|
|
+| `jobservice.affinity` | Harbor Jobservice Affinity for pod assignment | `{}` |
|
|
|
+| `jobservice.nodeSelector` | Harbor Jobservice Node labels for pod assignment | `{}` |
|
|
|
+| `jobservice.tolerations` | Harbor Jobservice Tolerations for pod assignment | `[]` |
|
|
|
+| `jobservice.topologySpreadConstraints` | Topology Spread Constraints for pod assignment spread across your cluster among failure-domains. Evaluated as a template | `[]` |
|
|
|
+| `jobservice.priorityClassName` | Priority Class Name | `""` |
|
|
|
+| `jobservice.schedulerName` | Use an alternate scheduler, e.g. "stork". | `""` |
|
|
|
+| `jobservice.sidecars` | Add additional sidecar containers to the Harbor Jobservice pods | `[]` |
|
|
|
+| `jobservice.initContainers` | Add additional init containers to the Harbor Jobservice pods | `[]` |
|
|
|
+| `jobservice.extraVolumeMounts` | Optionally specify extra list of additional volumeMounts for the Harbor Jobservice pods | `[]` |
|
|
|
+| `jobservice.extraVolumes` | Optionally specify extra list of additional volumes for the Harbor Jobservice pods | `[]` |
|
|
|
+| `jobservice.automountServiceAccountToken` | Automount service account token | `false` |
|
|
|
+| `jobservice.service.ports.http` | Harbor Jobservice HTTP service port | `80` |
|
|
|
+| `jobservice.service.ports.https` | Harbor Jobservice HTTPS service port | `443` |
|
|
|
+| `jobservice.service.ports.metrics` | Harbor Jobservice HTTPS service port | `8001` |
|
|
|
|
|
|
### Harbor Registry Parameters
|
|
|
|
|
@@ -609,8 +613,8 @@ Additionally, if `persistence.resourcePolicy` is set to `keep`, you should manua
|
|
|
| `registry.initContainers` | Add additional init containers to the Harbor Registry pods | `[]` |
|
|
|
| `registry.extraVolumes` | Optionally specify extra list of additional volumes for the Harbor Registry pods | `[]` |
|
|
|
| `registry.automountServiceAccountToken` | Automount service account token | `false` |
|
|
|
-| `registry.server.image.registry` | Harbor Registry image registry | `docker.io` |
|
|
|
-| `registry.server.image.repository` | Harbor Registry image repository | `bitnami/harbor-registry` |
|
|
|
+| `registry.server.image.registry` | Harbor Registry image registry | `REGISTRY_NAME` |
|
|
|
+| `registry.server.image.repository` | Harbor Registry image repository | `REPOSITORY_NAME/harbor-registry` |
|
|
|
| `registry.server.image.tag` | Harbor Registry image tag (immutable tags are recommended) | `2.9.0-debian-11-r36` |
|
|
|
| `registry.server.image.digest` | Harbor Registry image digest in the way sha256:aa.... Please note this parameter, if set, will override the tag | `""` |
|
|
|
| `registry.server.image.pullPolicy` | Harbor Registry image pull policy | `IfNotPresent` |
|
|
@@ -656,8 +660,8 @@ Additionally, if `persistence.resourcePolicy` is set to `keep`, you should manua
|
|
|
| `registry.server.service.ports.http` | Harbor Registry HTTP service port | `5000` |
|
|
|
| `registry.server.service.ports.https` | Harbor Registry HTTPS service port | `5443` |
|
|
|
| `registry.server.service.ports.metrics` | Harbor Registry metrics service port | `8001` |
|
|
|
-| `registry.controller.image.registry` | Harbor Registryctl image registry | `docker.io` |
|
|
|
-| `registry.controller.image.repository` | Harbor Registryctl image repository | `bitnami/harbor-registryctl` |
|
|
|
+| `registry.controller.image.registry` | Harbor Registryctl image registry | `REGISTRY_NAME` |
|
|
|
+| `registry.controller.image.repository` | Harbor Registryctl image repository | `REPOSITORY_NAME/harbor-registryctl` |
|
|
|
| `registry.controller.image.tag` | Harbor Registryctl image tag (immutable tags are recommended) | `2.9.0-debian-11-r24` |
|
|
|
| `registry.controller.image.digest` | Harbor Registryctl image digest in the way sha256:aa.... Please note this parameter, if set, will override the tag | `""` |
|
|
|
| `registry.controller.image.pullPolicy` | Harbor Registryctl image pull policy | `IfNotPresent` |
|
|
@@ -705,8 +709,8 @@ Additionally, if `persistence.resourcePolicy` is set to `keep`, you should manua
|
|
|
|
|
|
| Name | Description | Value |
|
|
|
| --------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------ | -------------------------------------- |
|
|
|
-| `trivy.image.registry` | Harbor Adapter Trivy image registry | `docker.io` |
|
|
|
-| `trivy.image.repository` | Harbor Adapter Trivy image repository | `bitnami/harbor-adapter-trivy` |
|
|
|
+| `trivy.image.registry` | Harbor Adapter Trivy image registry | `REGISTRY_NAME` |
|
|
|
+| `trivy.image.repository` | Harbor Adapter Trivy image repository | `REPOSITORY_NAME/harbor-adapter-trivy` |
|
|
|
| `trivy.image.tag` | Harbor Adapter Trivy image tag (immutable tags are recommended) | `2.9.0-debian-11-r27` |
|
|
|
| `trivy.image.digest` | Harbor Adapter Trivy image digest in the way sha256:aa.... Please note this parameter, if set, will override the tag | `""` |
|
|
|
| `trivy.image.pullPolicy` | Harbor Adapter Trivy image pull policy | `IfNotPresent` |
|
|
@@ -784,73 +788,73 @@ Additionally, if `persistence.resourcePolicy` is set to `keep`, you should manua
|
|
|
|
|
|
### Harbor Exporter Parameters
|
|
|
|
|
|
-| Name | Description | Value |
|
|
|
-| ------------------------------------------------ | ----------------------------------------------------------------------------------------------------------------------------------------------- | ------------------------- |
|
|
|
-| `exporter.image.registry` | Harbor Exporter image registry | `docker.io` |
|
|
|
-| `exporter.image.repository` | Harbor Exporter image repository | `bitnami/harbor-exporter` |
|
|
|
-| `exporter.image.tag` | Harbor Exporter image tag | `2.9.0-debian-11-r24` |
|
|
|
-| `exporter.image.digest` | Harbor Exporter image image digest in the way sha256:aa.... Please note this parameter, if set, will override the tag | `""` |
|
|
|
-| `exporter.image.pullPolicy` | Harbor exporter image pull policy | `IfNotPresent` |
|
|
|
-| `exporter.image.pullSecrets` | Specify docker-registry secret names as an array | `[]` |
|
|
|
-| `exporter.image.debug` | Specify if debug logs should be enabled | `false` |
|
|
|
-| `exporter.command` | Override default container command (useful when using custom images) | `[]` |
|
|
|
-| `exporter.args` | Override default container args (useful when using custom images) | `[]` |
|
|
|
-| `exporter.extraEnvVars` | Array containing extra env vars | `[]` |
|
|
|
-| `exporter.extraEnvVarsCM` | ConfigMap containing extra env vars | `""` |
|
|
|
-| `exporter.extraEnvVarsSecret` | Secret containing extra env vars (in case of sensitive data) | `""` |
|
|
|
-| `exporter.containerPorts.metrics` | Harbor Exporter HTTP container port | `8001` |
|
|
|
-| `exporter.replicaCount` | The replica count | `1` |
|
|
|
-| `exporter.livenessProbe.enabled` | Enable livenessProbe | `true` |
|
|
|
-| `exporter.livenessProbe.initialDelaySeconds` | Initial delay seconds for livenessProbe | `20` |
|
|
|
-| `exporter.livenessProbe.periodSeconds` | Period seconds for livenessProbe | `10` |
|
|
|
-| `exporter.livenessProbe.timeoutSeconds` | Timeout seconds for livenessProbe | `5` |
|
|
|
-| `exporter.livenessProbe.failureThreshold` | Failure threshold for livenessProbe | `6` |
|
|
|
-| `exporter.livenessProbe.successThreshold` | Success threshold for livenessProbe | `1` |
|
|
|
-| `exporter.readinessProbe.enabled` | Enable readinessProbe | `true` |
|
|
|
-| `exporter.readinessProbe.initialDelaySeconds` | Initial delay seconds for readinessProbe | `20` |
|
|
|
-| `exporter.readinessProbe.periodSeconds` | Period seconds for readinessProbe | `10` |
|
|
|
-| `exporter.readinessProbe.timeoutSeconds` | Timeout seconds for readinessProbe | `5` |
|
|
|
-| `exporter.readinessProbe.failureThreshold` | Failure threshold for readinessProbe | `6` |
|
|
|
-| `exporter.readinessProbe.successThreshold` | Success threshold for readinessProbe | `1` |
|
|
|
-| `exporter.startupProbe.enabled` | Enable startupProbe on Harbor Exporter containers | `false` |
|
|
|
-| `exporter.startupProbe.initialDelaySeconds` | Initial delay seconds for startupProbe | `5` |
|
|
|
-| `exporter.startupProbe.periodSeconds` | Period seconds for startupProbe | `10` |
|
|
|
-| `exporter.startupProbe.timeoutSeconds` | Timeout seconds for startupProbe | `1` |
|
|
|
-| `exporter.startupProbe.failureThreshold` | Failure threshold for startupProbe | `15` |
|
|
|
-| `exporter.startupProbe.successThreshold` | Success threshold for startupProbe | `1` |
|
|
|
-| `exporter.customLivenessProbe` | Custom livenessProbe that overrides the default one | `{}` |
|
|
|
-| `exporter.customReadinessProbe` | Custom readinessProbe that overrides the default one | `{}` |
|
|
|
-| `exporter.customStartupProbe` | Custom startupProbe that overrides the default one | `{}` |
|
|
|
-| `exporter.resources.limits` | The resources limits for the Harbor Exporter containers | `{}` |
|
|
|
-| `exporter.resources.requests` | The requested resources for the Harbor Exporter containers | `{}` |
|
|
|
-| `exporter.podSecurityContext.enabled` | Enabled Exporter pods' Security Context | `true` |
|
|
|
-| `exporter.podSecurityContext.fsGroup` | Set Exporter pod's Security Context fsGroup | `1001` |
|
|
|
-| `exporter.containerSecurityContext.enabled` | Enabled Exporter containers' Security Context | `true` |
|
|
|
-| `exporter.containerSecurityContext.runAsUser` | Set Exporter containers' Security Context runAsUser | `1001` |
|
|
|
-| `exporter.containerSecurityContext.runAsNonRoot` | Set Exporter containers' Security Context runAsNonRoot | `true` |
|
|
|
-| `exporter.updateStrategy.type` | The update strategy for deployments with persistent volumes: RollingUpdate or Recreate. Set it as Recreate when RWM for volumes isn't supported | `RollingUpdate` |
|
|
|
-| `exporter.lifecycleHooks` | LifecycleHook to set additional configuration at startup, e.g. LDAP settings via REST API. Evaluated as a template | `{}` |
|
|
|
-| `exporter.hostAliases` | Exporter pods host aliases | `[]` |
|
|
|
-| `exporter.podLabels` | Add additional labels to the pod (evaluated as a template) | `{}` |
|
|
|
-| `exporter.podAnnotations` | Annotations to add to the exporter pod | `{}` |
|
|
|
-| `exporter.podAffinityPreset` | Harbor Exporter Pod affinity preset. Ignored if `affinity` is set. Allowed values: `soft` or `hard` | `""` |
|
|
|
-| `exporter.podAntiAffinityPreset` | Harbor Exporter Pod anti-affinity preset. Ignored if `affinity` is set. Allowed values: `soft` or `hard` | `soft` |
|
|
|
-| `exporter.nodeAffinityPreset.type` | Harbor Exporter Node affinity preset type. Ignored if `exporter.affinity` is set. Allowed values: `soft` or `hard` | `""` |
|
|
|
-| `exporter.nodeAffinityPreset.key` | Harbor Exporter Node label key to match Ignored if `exporter.affinity` is set. | `""` |
|
|
|
-| `exporter.nodeAffinityPreset.values` | Harbor Exporter Node label values to match. Ignored if `exporter.affinity` is set. | `[]` |
|
|
|
-| `exporter.affinity` | Harbor Exporter Affinity for pod assignment | `{}` |
|
|
|
-| `exporter.priorityClassName` | Exporter pods Priority Class Name | `""` |
|
|
|
-| `exporter.schedulerName` | Name of the k8s scheduler (other than default) | `""` |
|
|
|
-| `exporter.serviceAccountName` | Name of the serviceAccountName for Harbor Exporter pods | `""` |
|
|
|
-| `exporter.nodeSelector` | Harbor Exporter Node labels for pod assignment | `{}` |
|
|
|
-| `exporter.tolerations` | Harbor Exporter Tolerations for pod assignment | `[]` |
|
|
|
-| `exporter.topologySpreadConstraints` | Topology Spread Constraints for pod assignment spread across your cluster among failure-domains. Evaluated as a template | `[]` |
|
|
|
-| `exporter.initContainers` | Add additional init containers to the pod (evaluated as a template) | `[]` |
|
|
|
-| `exporter.extraVolumeMounts` | | `[]` |
|
|
|
-| `exporter.extraVolumes` | | `[]` |
|
|
|
-| `exporter.sidecars` | Attach additional containers to the pod (evaluated as a template) | `[]` |
|
|
|
-| `exporter.automountServiceAccountToken` | Automount service account token | `false` |
|
|
|
-| `exporter.service.ports.metrics` | Exporter HTTP service port | `8001` |
|
|
|
+| Name | Description | Value |
|
|
|
+| ------------------------------------------------ | ----------------------------------------------------------------------------------------------------------------------------------------------- | --------------------------------- |
|
|
|
+| `exporter.image.registry` | Harbor Exporter image registry | `REGISTRY_NAME` |
|
|
|
+| `exporter.image.repository` | Harbor Exporter image repository | `REPOSITORY_NAME/harbor-exporter` |
|
|
|
+| `exporter.image.tag` | Harbor Exporter image tag | `2.9.0-debian-11-r24` |
|
|
|
+| `exporter.image.digest` | Harbor Exporter image image digest in the way sha256:aa.... Please note this parameter, if set, will override the tag | `""` |
|
|
|
+| `exporter.image.pullPolicy` | Harbor exporter image pull policy | `IfNotPresent` |
|
|
|
+| `exporter.image.pullSecrets` | Specify docker-registry secret names as an array | `[]` |
|
|
|
+| `exporter.image.debug` | Specify if debug logs should be enabled | `false` |
|
|
|
+| `exporter.command` | Override default container command (useful when using custom images) | `[]` |
|
|
|
+| `exporter.args` | Override default container args (useful when using custom images) | `[]` |
|
|
|
+| `exporter.extraEnvVars` | Array containing extra env vars | `[]` |
|
|
|
+| `exporter.extraEnvVarsCM` | ConfigMap containing extra env vars | `""` |
|
|
|
+| `exporter.extraEnvVarsSecret` | Secret containing extra env vars (in case of sensitive data) | `""` |
|
|
|
+| `exporter.containerPorts.metrics` | Harbor Exporter HTTP container port | `8001` |
|
|
|
+| `exporter.replicaCount` | The replica count | `1` |
|
|
|
+| `exporter.livenessProbe.enabled` | Enable livenessProbe | `true` |
|
|
|
+| `exporter.livenessProbe.initialDelaySeconds` | Initial delay seconds for livenessProbe | `20` |
|
|
|
+| `exporter.livenessProbe.periodSeconds` | Period seconds for livenessProbe | `10` |
|
|
|
+| `exporter.livenessProbe.timeoutSeconds` | Timeout seconds for livenessProbe | `5` |
|
|
|
+| `exporter.livenessProbe.failureThreshold` | Failure threshold for livenessProbe | `6` |
|
|
|
+| `exporter.livenessProbe.successThreshold` | Success threshold for livenessProbe | `1` |
|
|
|
+| `exporter.readinessProbe.enabled` | Enable readinessProbe | `true` |
|
|
|
+| `exporter.readinessProbe.initialDelaySeconds` | Initial delay seconds for readinessProbe | `20` |
|
|
|
+| `exporter.readinessProbe.periodSeconds` | Period seconds for readinessProbe | `10` |
|
|
|
+| `exporter.readinessProbe.timeoutSeconds` | Timeout seconds for readinessProbe | `5` |
|
|
|
+| `exporter.readinessProbe.failureThreshold` | Failure threshold for readinessProbe | `6` |
|
|
|
+| `exporter.readinessProbe.successThreshold` | Success threshold for readinessProbe | `1` |
|
|
|
+| `exporter.startupProbe.enabled` | Enable startupProbe on Harbor Exporter containers | `false` |
|
|
|
+| `exporter.startupProbe.initialDelaySeconds` | Initial delay seconds for startupProbe | `5` |
|
|
|
+| `exporter.startupProbe.periodSeconds` | Period seconds for startupProbe | `10` |
|
|
|
+| `exporter.startupProbe.timeoutSeconds` | Timeout seconds for startupProbe | `1` |
|
|
|
+| `exporter.startupProbe.failureThreshold` | Failure threshold for startupProbe | `15` |
|
|
|
+| `exporter.startupProbe.successThreshold` | Success threshold for startupProbe | `1` |
|
|
|
+| `exporter.customLivenessProbe` | Custom livenessProbe that overrides the default one | `{}` |
|
|
|
+| `exporter.customReadinessProbe` | Custom readinessProbe that overrides the default one | `{}` |
|
|
|
+| `exporter.customStartupProbe` | Custom startupProbe that overrides the default one | `{}` |
|
|
|
+| `exporter.resources.limits` | The resources limits for the Harbor Exporter containers | `{}` |
|
|
|
+| `exporter.resources.requests` | The requested resources for the Harbor Exporter containers | `{}` |
|
|
|
+| `exporter.podSecurityContext.enabled` | Enabled Exporter pods' Security Context | `true` |
|
|
|
+| `exporter.podSecurityContext.fsGroup` | Set Exporter pod's Security Context fsGroup | `1001` |
|
|
|
+| `exporter.containerSecurityContext.enabled` | Enabled Exporter containers' Security Context | `true` |
|
|
|
+| `exporter.containerSecurityContext.runAsUser` | Set Exporter containers' Security Context runAsUser | `1001` |
|
|
|
+| `exporter.containerSecurityContext.runAsNonRoot` | Set Exporter containers' Security Context runAsNonRoot | `true` |
|
|
|
+| `exporter.updateStrategy.type` | The update strategy for deployments with persistent volumes: RollingUpdate or Recreate. Set it as Recreate when RWM for volumes isn't supported | `RollingUpdate` |
|
|
|
+| `exporter.lifecycleHooks` | LifecycleHook to set additional configuration at startup, e.g. LDAP settings via REST API. Evaluated as a template | `{}` |
|
|
|
+| `exporter.hostAliases` | Exporter pods host aliases | `[]` |
|
|
|
+| `exporter.podLabels` | Add additional labels to the pod (evaluated as a template) | `{}` |
|
|
|
+| `exporter.podAnnotations` | Annotations to add to the exporter pod | `{}` |
|
|
|
+| `exporter.podAffinityPreset` | Harbor Exporter Pod affinity preset. Ignored if `affinity` is set. Allowed values: `soft` or `hard` | `""` |
|
|
|
+| `exporter.podAntiAffinityPreset` | Harbor Exporter Pod anti-affinity preset. Ignored if `affinity` is set. Allowed values: `soft` or `hard` | `soft` |
|
|
|
+| `exporter.nodeAffinityPreset.type` | Harbor Exporter Node affinity preset type. Ignored if `exporter.affinity` is set. Allowed values: `soft` or `hard` | `""` |
|
|
|
+| `exporter.nodeAffinityPreset.key` | Harbor Exporter Node label key to match Ignored if `exporter.affinity` is set. | `""` |
|
|
|
+| `exporter.nodeAffinityPreset.values` | Harbor Exporter Node label values to match. Ignored if `exporter.affinity` is set. | `[]` |
|
|
|
+| `exporter.affinity` | Harbor Exporter Affinity for pod assignment | `{}` |
|
|
|
+| `exporter.priorityClassName` | Exporter pods Priority Class Name | `""` |
|
|
|
+| `exporter.schedulerName` | Name of the k8s scheduler (other than default) | `""` |
|
|
|
+| `exporter.serviceAccountName` | Name of the serviceAccountName for Harbor Exporter pods | `""` |
|
|
|
+| `exporter.nodeSelector` | Harbor Exporter Node labels for pod assignment | `{}` |
|
|
|
+| `exporter.tolerations` | Harbor Exporter Tolerations for pod assignment | `[]` |
|
|
|
+| `exporter.topologySpreadConstraints` | Topology Spread Constraints for pod assignment spread across your cluster among failure-domains. Evaluated as a template | `[]` |
|
|
|
+| `exporter.initContainers` | Add additional init containers to the pod (evaluated as a template) | `[]` |
|
|
|
+| `exporter.extraVolumeMounts` | | `[]` |
|
|
|
+| `exporter.extraVolumes` | | `[]` |
|
|
|
+| `exporter.sidecars` | Attach additional containers to the pod (evaluated as a template) | `[]` |
|
|
|
+| `exporter.automountServiceAccountToken` | Automount service account token | `false` |
|
|
|
+| `exporter.service.ports.metrics` | Exporter HTTP service port | `8001` |
|
|
|
|
|
|
### PostgreSQL Parameters
|
|
|
|
|
@@ -864,8 +868,8 @@ Additionally, if `persistence.resourcePolicy` is set to `keep`, you should manua
|
|
|
| `postgresql.primary.extendedConfiguration` | Extended PostgreSQL Primary configuration (appended to main or default configuration) | `max_connections = 1024
|
|
|
` |
|
|
|
| `postgresql.primary.initdb.scripts` | Initdb scripts to create Harbor databases | `{}` |
|
|
|
-| `postgresql.image.registry` | PostgreSQL image registry | `docker.io` |
|
|
|
-| `postgresql.image.repository` | PostgreSQL image repository | `bitnami/postgresql` |
|
|
|
+| `postgresql.image.registry` | PostgreSQL image registry | `REGISTRY_NAME` |
|
|
|
+| `postgresql.image.repository` | PostgreSQL image repository | `REPOSITORY_NAME/postgresql` |
|
|
|
| `postgresql.image.tag` | PostgreSQL image tag (immutable tags are recommended) | `13.12.0-debian-11-r57` |
|
|
|
| `postgresql.image.digest` | PostgreSQL image digest in the way sha256:aa.... Please note this parameter, if set, will override the tag | `""` |
|
|
|
| `externalDatabase.host` | Database host | `localhost` |
|
|
@@ -920,9 +924,11 @@ Specify each parameter using the `--set key=value[,key=value]` argument to `helm
|
|
|
```console
|
|
|
helm install my-release \
|
|
|
--set adminPassword=password \
|
|
|
- oci://registry-1.docker.io/bitnamicharts/harbor
|
|
|
+ oci://REGISTRY_NAME/REPOSITORY_NAME/harbor
|
|
|
```
|
|
|
|
|
|
+> Note: You need to substitute the placeholders `REGISTRY_NAME` and `REPOSITORY_NAME` with a reference to your Helm chart registry and repository. For example, in the case of Bitnami, you need to use `REGISTRY_NAME=registry-1.docker.io` and `REPOSITORY_NAME=bitnamicharts`.
|
|
|
+
|
|
|
The above command sets the Harbor administrator account password to `password`.
|
|
|
|
|
|
> NOTE: Once this chart is deployed, it is not possible to change the application's access credentials, such as usernames or passwords, using Helm. To change these application credentials after deployment, delete any persistent volumes (PVs) used by the chart and re-deploy it, or use the application's built-in administrative tools if available.
|
|
@@ -930,9 +936,11 @@ The above command sets the Harbor administrator account password to `password`.
|
|
|
Alternatively, a YAML file that specifies the values for the above parameters can be provided while installing the chart. For example,
|
|
|
|
|
|
```console
|
|
|
-helm install my-release -f values.yaml oci://registry-1.docker.io/bitnamicharts/harbor
|
|
|
+helm install my-release -f values.yaml oci://REGISTRY_NAME/REPOSITORY_NAME/harbor
|
|
|
```
|
|
|
|
|
|
+> Note: You need to substitute the placeholders `REGISTRY_NAME` and `REPOSITORY_NAME` with a reference to your Helm chart registry and repository. For example, in the case of Bitnami, you need to use `REGISTRY_NAME=registry-1.docker.io` and `REPOSITORY_NAME=bitnamicharts`.
|
|
|
+
|
|
|
## Configuration and installation details
|
|
|
|
|
|
### [Rolling VS Immutable tags](https://docs.bitnami.com/containers/how-to/understand-rolling-tags-containers/)
|