harbor-helm

Files (1)

• SKILL.md

SKILL.md (first lines)

# Harbor Helm Chart

Source: `https://helm.goharbor.io`. Latest chart version: **1.19.1** (app version 2.15.1). Images: all v2.15.1 (core, portal, jobservice, registry, trivy, nginx, log, database, redis, exporter).

## Quick Install

```bash
helm repo add harbor https://helm.goharbor.io
helm repo update

helm install harbor harbor/harbor \
  --namespace harbor \
  --create-namespace \
  --set expose.tls.auto.commonName=harbor.example.com \
  --set externalURL=https://harbor.example.com \
  --set harborAdminPassword=admin123
```

## Values Overview

### Expose / Ingress

| Parameter | Default | Description |
|-----------|---------|-------------|
| `expose.type` | `ingress` | `ingress`, `clusterIP`, `nodePort`, `loadBalancer` |
| `expose.tls.auto.commonName` | — | Auto-generate cert for this hostname |
| `expose.tls.secretName` | — | Use existing TLS secret |
| `expose.tls.certSource` | `auto` | `auto`, `secret`, `none` |
| `expose.ingress.hosts.core` | `core.harbor.domain` | Core ingress host |
| `expose.ingress.hosts.notary` | `notary.harbor.domain` | Notary ingress host |
| `expose.ingress.className` | — | Ingress class name |
| `expose.ingress.annotations` | `{}` | Ingress annotations |

### External URL

| Parameter | Default | Description |
|-----------|---------|-------------|
| `externalURL` | `https://core.harbor.domain` | Full URL users access Harbor at |

### Auth

| Parameter | Default | Description |
|-----------|---------|-------------|
| `harborAdminPassword` | `Harbor12345` | Initial admin password |
| `database.internal` | `true` | Use internal PostgreSQL |
| `database.type` | `postgresql` | `postgresql` or `external` |

### External Database

```yaml
database:
  type: external
  external:
    host: postgres.example.com
    port: 5432
    username: harbor
    password: secret
    database: harbor
    sslmode: require
    maxIdleConns: 100
    maxOpenConns: 900
```

### External Redis

```yaml
redis:
  type: external
  external:
    addr: redis.example.com:6379
    password: secret
    sentinelMaster: mymaster  # if using sentinel
```

### Storage

| Component | Default PVC | Parameter |
|-----------|-------------|-----------|
| Registry | `200Gi` | `persistence.persistentVolumeClaim.registry.size` |
| Jobservice | `1Gi` | `persistence.persistentVolumeClaim.jobservice.size` |
| Database | `1Gi` | `persistence.persistentVolumeClaim.database.size` |
| Redis | `1Gi` | `persistence.persistentVolumeClaim.redis.size` |
| Trivy | `5Gi` | `persistence.persistentVolumeClaim.trivy.size` |

Object storage (S3-compatible) for registry:

```yaml
persistence:
  imageChartStorage:
    type: s3
    s3:
      region: us-east-1
      bucket: harbor-registry
      accesskey: AKIA...
      secretkey: ...
      rootdirectory: /registry
```

### Trivy Scanner

| Parameter | Default | Description |
|-----------|---------|-------------|
| `trivy.enabled` | `true` | Enable Trivy vulnerability scanner |
| `trivy.image.repository` | `goharbor/trivy-adapter` | Scanner image |
| `trivy.image.tag` | `v0.35.1` | Adapter version (Harbor 2.15.x) |
| `trivy.gitHubToken` | — | GitHub token for Trivy DB download (avoid rate limits) |
| `trivy.skipUpdate` | `false` | Skip Trivy DB update on startup |
| `trivy.offlineScan` | `false` | Disable vulnerability DB updates |

### Components

| Parameter | Description |
|-----------|-------------|
| `portal.enabled` | Enable Harbor web UI (core depends on it) |
| `core.replicas` | Core API replicas |
| `jobservice.replicas` | Job service replicas |
| `registry.replicas` | Registry replicas |
| `exporter.enabled` | Enable Prometheus metrics exporter |
| `chartmuseum.enabled` | Enable Helm Chart Museum |

From Aidas-dev/k8s-agent-skills, MIT.

More from Aidas-dev/k8s-agent-skills