Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix(harbor): adjust ingress #4283

Merged
merged 1 commit into from
Jan 8, 2025
Merged

fix(harbor): adjust ingress #4283

merged 1 commit into from
Jan 8, 2025

Conversation

tyriis
Copy link
Owner

@tyriis tyriis commented Jan 8, 2025

No description provided.

Copy link

sonarqubecloud bot commented Jan 8, 2025

@tyriis-automation
Copy link
Contributor

--- kubernetes/kube-nas/apps/oci-registry/harbor/app Kustomization: flux-system/harbor HelmRelease: oci-registry/harbor

+++ kubernetes/kube-nas/apps/oci-registry/harbor/app Kustomization: flux-system/harbor HelmRelease: oci-registry/harbor

@@ -37,12 +37,18 @@

       type: external
     existingSecretAdminPassword: harbor-credentials
     existingSecretAdminPasswordKey: password
     existingSecretSecretKey: harbor-encryption
     expose:
       ingress:
+        annotations:
+          cert-manager.io/cluster-issuer: letsencrypt-production
+          kubernetes.io/tls-acme: 'true'
+          nginx.ingress.kubernetes.io/force-ssl-redirect: 'true'
+          nginx.ingress.kubernetes.io/ssl-redirect: 'true'
+        className: nginx
         hosts:
           core: harbor.tyriis.dev
       tls:
         certSource: secret
         enabled: true
         secret:

@tyriis-automation
Copy link
Contributor

--- HelmRelease: oci-registry/harbor Deployment: oci-registry/harbor-core

+++ HelmRelease: oci-registry/harbor Deployment: oci-registry/harbor-core

@@ -33,14 +33,14 @@

         app.kubernetes.io/managed-by: Helm
         app.kubernetes.io/part-of: harbor
         component: core
         app.kubernetes.io/component: core
       annotations:
         checksum/configmap: 038aeed3331cd4d52742307fc90d898739c229be2483479771737578b33908fa
-        checksum/secret: d4bc3bd9431ef01e487cda463e8aa2fec40ba2c2a71553a59334b2276ed882d7
-        checksum/secret-jobservice: b47bdc9df490e2a73e961233ef2d08d58bbdd91a78d053f76764c6de8597356a
+        checksum/secret: 9e4886c120cf749db1fd51d55035b97c3539f3fd8cce7d2069069378d21a20ef
+        checksum/secret-jobservice: b779e7421cc95226449a83637690afb784b052295ff6e29d343f50764a47e4dd
     spec:
       securityContext:
         runAsUser: 10000
         fsGroup: 10000
       automountServiceAccountToken: false
       terminationGracePeriodSeconds: 120
--- HelmRelease: oci-registry/harbor Deployment: oci-registry/harbor-jobservice

+++ HelmRelease: oci-registry/harbor Deployment: oci-registry/harbor-jobservice

@@ -36,14 +36,14 @@

         app.kubernetes.io/part-of: harbor
         component: jobservice
         app.kubernetes.io/component: jobservice
       annotations:
         checksum/configmap: 8918cdb8a1cd5261277e33ee0a045a20d2c90c26e036c4a5892153966c69e54f
         checksum/configmap-env: 61dd20c735de9b9b000709202e23a75d7990a858cc2e57a7f02dca00dbb13549
-        checksum/secret: de021d55c06dbf77d9c4657e56466ef0c31f5734fbbbcea7b19fe880ba8068e0
-        checksum/secret-core: a6c819e56852fe054dbf6efcbfbcd93f376397fbc9eede68b7aff664c05ad4ed
+        checksum/secret: 1df26e6e845386432c5781fdcd3b500c0522215531903e900255d68e55ffeaf5
+        checksum/secret-core: 181825bb3ca4d233fe18e551d6e434d7f88e1f3ed1b3b86f2cd8ef67c9c30369
     spec:
       securityContext:
         runAsUser: 10000
         fsGroup: 10000
       automountServiceAccountToken: false
       terminationGracePeriodSeconds: 120
--- HelmRelease: oci-registry/harbor Deployment: oci-registry/harbor-registry

+++ HelmRelease: oci-registry/harbor Deployment: oci-registry/harbor-registry

@@ -35,15 +35,15 @@

         app.kubernetes.io/managed-by: Helm
         app.kubernetes.io/part-of: harbor
         component: registry
         app.kubernetes.io/component: registry
       annotations:
         checksum/configmap: de6405d5ff14b63d09f30521c288521b5479fdab9168476108c22d766a699f4b
-        checksum/secret: abf73e4f5ca2ec90c18c9377a30d5544a7a143f5cab998c7337bda3799d2bfbf
-        checksum/secret-jobservice: 01d8deb78d4911a61743bb7c02d9983173794db0a652a93f69df1cb4f9c8c785
-        checksum/secret-core: cc30b6f25021573a024b55ae5402b1c0efc54677d90e38ea368ab7238bb0f871
+        checksum/secret: 21db6699d13dd450bbf78b4cef45f85ff07e7c7649744e9490e64b5ac7bfcbef
+        checksum/secret-jobservice: f755b9304746d7752733cfe75d538b95c6137a761e6a8332c66a967acce62f77
+        checksum/secret-core: 8f1515c45142cc4de12acdc4677236c230581ae02e4f591d94860d41290a0d14
     spec:
       securityContext:
         runAsUser: 10000
         fsGroup: 10000
         fsGroupChangePolicy: OnRootMismatch
       automountServiceAccountToken: false
--- HelmRelease: oci-registry/harbor Ingress: oci-registry/harbor-ingress

+++ HelmRelease: oci-registry/harbor Ingress: oci-registry/harbor-ingress

@@ -10,17 +10,21 @@

     app: harbor
     app.kubernetes.io/instance: harbor
     app.kubernetes.io/name: harbor
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/part-of: harbor
   annotations:
+    cert-manager.io/cluster-issuer: letsencrypt-production
     ingress.kubernetes.io/proxy-body-size: '0'
     ingress.kubernetes.io/ssl-redirect: 'true'
+    kubernetes.io/tls-acme: 'true'
+    nginx.ingress.kubernetes.io/force-ssl-redirect: 'true'
     nginx.ingress.kubernetes.io/proxy-body-size: '0'
     nginx.ingress.kubernetes.io/ssl-redirect: 'true'
 spec:
+  ingressClassName: nginx
   tls:
   - secretName: harbor-tls
     hosts:
     - harbor.tyriis.dev
   rules:
   - http:

@tyriis-automation
Copy link
Contributor

🦙 MegaLinter status: ✅ SUCCESS

Descriptor Linter Files Fixed Errors Elapsed time
✅ EDITORCONFIG editorconfig-checker 1 0 0.02s
✅ REPOSITORY gitleaks yes no 3.95s
✅ YAML prettier 1 0 0.43s
✅ YAML yamllint 1 0 0.47s

See detailed report in MegaLinter reports
Set VALIDATE_ALL_CODEBASE: true in mega-linter.yml to validate all sources, not only the diff

MegaLinter is graciously provided by OX Security

@tyriis tyriis merged commit ef75714 into main Jan 8, 2025
16 checks passed
@tyriis tyriis deleted the bugfix/harbor-ingress branch January 8, 2025 17:36
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant